# changelog

author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-24
changelog:
  - kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
    an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
    interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-23
changelog:
  - backport changes from 1.6.3 which allow callers of the the sendto-kdc
    functions to override the failover behavior on a per-response basis, and
    default to failing over on service-unavailable errors (#230384)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-22
changelog:
  - add patch to fall back to TCP kpasswd servers for kdc-unreachable,
    can't-resolve-server, and response-too-big errors (#392631)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-21
changelog:
  - add conditional logic to allow building only the krb5-server-ldap subpackage
    (#427790)
  - use the right sequence numbers when generating password-set/change requests
    for kpasswd servers after the first one (#427789)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-20
changelog:
  - allocate space for the relative path including the nul-terminator (Jose
    Plans, #426085)
  - fix a couple of spots where a file context wouldn't be freed


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-19
changelog:
  - backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
    structure the same way we would one which was allocated by the calling
    application, to restore kinit's traditional behavior of doing a password
    change right when it detects an expired password (#413051)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-18
changelog:
  - fix syntax error in kadmin init script (#373011,#381011)
  - turn off content/size/date verification on krb5.conf (#329771)
  - fix storage of delegated krb5 credentials when they've been wrapped up in
    spnego (#319351)
  - return a delegated credential handle even if the application didn't pass a
    location to store the flags which would be used to indicate that credentials
    were delegated (#314651)
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated (#309951)
  - signal PAM when we're changing an expired password that it's an expired
    password, so that when cracklib flags a password as being weak it's treated
    as an error even if we're running as root (#308131)
  - set the key expiration time in an AS-REP using the sooner of the client's
    entry's key expiration time and the entry's expiration time, instead of
    just the entry's expiration time (#250257)
  - in ftp, don't lose track of a client socket when a server-side error
    causes a download to fail (#248618)
  - in ftp, fix runique when mget is used (#247633)
  - add the snippet documenting the kdc_tcp_ports option to kdc.conf's man
    page, using text taken from the administrator's guide (#282191)
  - in kpasswd, when reading the client's principal name from the ccache fails
    for any reason, fall back to the user's name (#248631)
  - init script cleanups (Michal Marciniszyn, #242500)
  - tweak the telnet man page to refer to the telnet rlogin escape character
    as such instead of rereferring to it simly as the escape character or the
    telnet escape character (#247741)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17
changelog:
  - ftpd: also do PAM session and credential management when ftp clients use
    strong authentication (#286291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-14
changelog:
  - make krb5-workstation depend on the PAM configuration file used by login.krb5
  - fix omission of kadmin log file when labeling (#253558)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-13
changelog:
  - add preliminary patch to fix buffer overflow in rpcsec_gss implementation
    in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
    pointer in kadmind (#250976, CVE-2007-4000)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-11
changelog:
  - login: change to the user's home directory after dropping privileges,
    not before (#248050)
  - turn off the ldap features


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-10
changelog:
  - add a patch to allow applications to try to use a key with kvno=0, if
    found, in place of the "right" version for a request (Luke Howard, #230379)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-9
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798) (#239073)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-19
changelog:
  - refrain from killing any lingering members of our child's process group when
    logging that the child process has exited (Jose Plans, #143289)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to /var/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-12.1
changelog:
  - fixed segfault issues in modrdn (#606375)
  - added patch handling null char in TLS to compat package
    (#606375, patch backported by Jan Vcelak <jvcelak@redhat.com>)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-6
changelog:
  - fixed possible double free() in rwm overlay (#495628)
  - updated slapd man page and slapcat usage string (#468206)
  - updated default config for slapd - deleted syncprov module (#466937)
  - fixed migration tools autofs generated format (#460331)
  - fixed migration tools numbers detection in /etc/shadow (#113857)
  - fixed migration tools base ldif (#104585)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-5
changelog:
  - implementation of limit adjustment before starting slapd (#527313)
  - init script no longer executes script in /tmp (#483356)
  - slapd not starting with ldap:/// every time (#481003)
  - delay between TERM and KILL when shutting down slapd (#452064)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-4
changelog:
  - fixed compat libs linking (#503734)
  - activated lightweight dispatcher feature (#507276)
  - detection of timeout after failed result (#495701)


author: Jan Safranek <jsafranek@redhat.com> 2.3.43-1
changelog:
  - rebase to openldap-2.3.43 (#454994)
  - apply latest db-4 patches (#454857)
  - package openldap overlays, including smbk5pwd (#329441 #248549 #370411
    - check for TLS_CACERT file permissions in /etc/init.d/ldap (#356401)
  - rework the database upgrade logic, it should dump/restore the BDB
    database only when really needed (#436046)
  - introduce NETWORK_TIMEOUT in ldap.conf file to configure timeout of
    connect() operation (#459132)
  - allow to set SLURPD_KRB5CCNAME in /etc/sysconfig/ldap to set KRB5CCNAME
    of the slurpd process (#428638)


author: Jan Safranek <jsafranek@redhat.com> 2.3.27-6
changelog:
  - Include sals patch to close #230395
  - Include manual bind timeout patch to close #230388
  - Include patch to allow write access to ldap socket to close #237417
  - Fix the upgrade logic so database is not deleted on upgrade (#240834)
  - Fix the memory leak on ACL rules (#241636)
  - Fix initscript return codes (#242665)


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-5
changelog:
  - Include the -getdn patch to close
    bz#214768: CVE-2006-5779 Specially crafted authcid makes OpenLDAP fail an assertion
    Resolves: rhbz#214768


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of /usr/sbin/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add /etc/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under %{_libdir}/tls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on %{ix86} boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    %{evolution_connector_prefix} (/usr/lib64/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/lib64 instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be 
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Tomas Mraz <tmraz@redhat.com> - 0.6.5-14.4
changelog:
  - fix non-exact policy matching (#606904)
  - make pfkey socket buffer size configurable (#607361)
  - use separate pfkey socket for sadb dumps (#590783)
  - do not delete phase 2 SAs when phase 1 delete notification is received (#599115)


author: Tomas Mraz <tmraz@redhat.com> - 0.6.5-11
changelog:
  - fix cleanup of IPSEC SAs in SADB (#231604)
  - fix segfault in timer (#378551)
  - handle new interfaces immediately (#247301)
  - eliminate debug logging overhead when log level is lower (#248567)
  - use the adminsock_path as specified on the command line (#247294)
  - link only necessary libraries (#458631)
  - make racoon PIE executable (#210023)
  - fix for DoS through various memory leaks (CVE-2008-3651 #456660,
    CVE-2008-3652 #458846)


author: Steve Grubb <sgrubb@redhat.com> - 0.6.5-8
changelog:
  - Upstream fix for Racoon DOS, informational delete must be encrypted
  - Resolves: rhbz#235388 - CVE-2007-1841 ipsec-tools racoon DoS


author: Steve Grubb <sgrubb@redhat.com> - 0.6.5-6.3
changelog:
  - Resolves: #234491 kernel sends ACQUIRES that racoon is not catching
  - Resolves: #218386 labeled ipsec does not work over loopback


author: Harald Hoyer <harald@redhat.com> - 0.6.5-4
changelog:
  - backport of important 0.6.6 fixes:
    - sets NAT-T ports to 0 if no NAT encapsulation
    - fixed memory leak


author: Dan Walsh <dwalsh@redhat.com> - 0.6.5-1
changelog:
  - Update to latest upstream version
  - Add MLS Patch to allow use of labeled networks
  - Patch provided by Joy Latten <latten@austin.ibm.com>


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-23.2
changelog:
  - The server's "by client-id" and "by hardware address" hash table lists
    are now sorted according to the preference to re-allocate that lease to
    returning clients.  This should eliminate pool starvation problems
    arising when "INIT" clients were given new leases rather than presently
    active ones. (RHBZ #627572)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-23.1
changelog:
  - A partner-down failover server no longer emits 'peer holds all free leases'
    if it is able to newly-allocate one of the peer's leases. (RHBZ #621838)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-23
changelog:
  - fix dhclient to not renew it's lease too often when gets very short lease from server (#498658)
  - fix dhclient-script to not restart ntpd when not necessary (#532136)
  - fix dhcrelay initscript to restart dhcrelay properly (#555672)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-22
changelog:
  - Memory leak in the load_balance_mine() function is fixed. This would leak ~20-30 octets
    per DHCPDISCOVER packet while failover was in use and in normal state.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-21
changelog:
  - Display usage if init scripts get 'try-restart' or 'reload' args,
    set exit code to 3
    Resolves: rhbz#491868


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-20
changelog:
  - Restrict interface names given on the dhcpd command line to length
    IFNAMSIZ or shorter
    Resolves: rhbz#441524


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-19
changelog:
  - Do not restart ntpd service unless necessary
    Resolves: rhbz#450301
  - Carry over relay agent options when client enters INIT or REBIND
    Resolves: rhbz#450545
  - Honor PEERNIS and PEERNTP variables completely in dhclient-script
    Resolves: rhbz#471543


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-14
changelog:
  - Display dhcpd error messages for 'service dhcpd configtest'
    Resolves: rhbz#447003
  - Parse dates and times correctly in lease files on 64-bit systems
    Resolves: rhbz#448615


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-12
changelog:
  - Avoid printing two OK/FAILURE messages when the stop() function runs
    in the dhcpd and dhcrelay init scripts
    Resolves: rhbz#439800


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-9
changelog:
  - Updated dhcpd init script to conform to script guidelines
    Resolves: rhbz#237978
  - Updated dhcrelay init script to conform to script guidelines
    Resolves: rhbz#237980


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-4
changelog:
  - Updated Xen partial checksums patch using PACKET_AUXDATA
  - Resolves: rhbz#221964
  - Related: rhbz#219681


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-3
changelog:
  - Skip checksum check on local packets so dhcpd runs correctly in Xen
    guests
  - Resolves: rhbz#221964
  - Related: rhbz#219681


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-1
changelog:
  - Rebase dhcp package (#218083)
  - Roll md5 patch in to libdhcp4client patch since it's related
  - Do not overwrite /etc/ntp/step-tickers (#217663)
  - Resolves: rhbz#217663
  - Build the MD5 functions we link against.
  - Set permission of libdhcp4client.so.1 to 0755 (#215910)
  - Do not link res_query.o in to libdhcp4client (#215501)
  - Enable relinquish_timeouts() and cancel_all_timeouts() even when
    DEBUG_MEMORY_LEAKAGE_ON_EXIT is not defined
  - Add prototypes for b64_pton() and b64_ntop in dst/
  - Move variable declarations and labels around in the fix-warnings patch
  - Expand the list of objects needed for libdhcp4client (#215328)
  - Use libres.a in libdhcp4client since it gives correct minires objects
  - Remove the dhcp options table in C, Perl, Python, and text format (these
    were reference files added to /usr/share/doc)
  - Remove struct universe *universe from envadd_state in the client patch
  - Add struct universe *universe to envadd_state in the enoi patch
  - Add example dbusified dhclient-script in the enoi patch
  - Change the way libdhcp4client is compiled (patch main source, create new
    Makefile rather than copy and patch code after main patches)
  - Fix up problems generating compiler warnings
  - Use 'gcc' for making dependencies
  - Pass -fPIC instead of -fpie/-fPIE in compiler flags
  - Combine the extended new option info changes in to one patch file (makes
    it easier for outside projects that want to use dhcdbd and NetworkManager)
  - Upgrade to ISC dhcp-3.0.5
  - Put typedef for dhcp_state_e before it's used in libdhcp_control.h (#212612)
  - Remove dhcpctl.3 from minires/Makefile.dist because it's in dhcpctl
  - Remove findptrsize.c and just set compiler flag for ppc64 and s390x
  - Remove NODEBUGINFO junk from the spec file as well as old/unused code
  - Rolled all 68 patches in to one patch since more than half of them get
    overridden by later patches anyway.
  - Send usage() screen in dhclient to stdout rather than the syslog (#210524)
  - Resolves: rhbz#218083


author: Peter Jones <pjones@redhat.com> - 12:3.0.4-15
changelog:
  - Make timeout dispatch code not recurse while traversing a linked
    list, so it doesn't try to free an entries that have been removed.
    (bz #195723)
  - Don't patch in a makefile, do it in the spec.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-14
changelog:
  - fix bug 191461: preserve ntp.conf local clock fudge statements
  - fix bug 193047: both dhcp and dhclient need to ship common
                    man-pages: dhcp-options(5) dhcp-eval(5)


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-10
changelog:
  - fix bug 193047: allow $METRIC to be specified for dhclient routes
  - add a '-R <request option list>' dhclient argument


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-8.1
changelog:
  - fix a libdhcp4client memory leak (1 strdup) and 
    fill in client->packet.siaddr before bind_lease() for pump
    nextServer option.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Fix bug 191470: prevent dhcpd writing 8 byte dhcp-lease-time 
                    option in packets on 64-bit platforms


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Add the libdhcp4client library package for use by the new libdhcp 
    package, which enables dhclient to be invoked by programs in a 
    single process from the library. The normal dhclient code is
    unmodified by this.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-1
changelog:
  - Upgrade to upstream version 3.0.4, released Friday 2006-05-05 .
  - Add new dhclient command line arguments:
    -H <host-name> : parse as dhclient.conf 'send host-name "<host-name>";'
    -F <fqdn>      : parse as dhclient.conf 'send fqdn.fqdn "<fqdn>";'
    -T <timeout>   : parse as dhclient.conf 'timeout <timeout>;'


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-26
changelog:
  - fix bug 181908: enable dhclient to operate on IBM zSeries z/OS linux guests:
    o add -I <dhcp-client-identifier> dhclient command line option
    o add -B "always broadcast" dhclient command line option
    o add 'bootp-broadcast-always;' dhclient.conf statement


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-22
changelog:
  - fix bug 181482: resolv.conf not updated on RENEW :
    since dhcp-3.0.1rc12-RHScript.patch: "$new_domain_servers" should have
    been "$new_domain_name_servers" :-(


author: Dan Williams <dcbw@redhat.com> - 11:3.0.3-21
changelog:
  - Fix dhclient-script to use /bin/dbus-send now that all dbus related
      binaries are in /bin rather than /usr/bin


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-20
changelog:
  - fix bug 177845: allow client ip-address as default router 
  - fix bug 176615: fix DDNS update when Windows-NT client sends 
  	          host-name with trailing nul


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-12
changelog:
  - fix bug 173619: dhclient-script should reconfig on RENEW if 
                    subnet-mask, broadcast-address, mtu, routers, etc.
  		  have changed
  - apply upstream improvements to trailing nul options fix of bug 160655


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-11
changelog:
  - Rebuild for FC-5
  - fix bug 167028 - test IBM's unicast bootp patch (from xma@us.ibm.com)
  - fix bug 171312 - silence chkconfig error message if ypbind not installed
  - fix dhcpd.init when -cf arg given to dhcpd
  - make dhcpd init touch /var/lib/dhcpd/dhcpd.leases, not /var/lib/dhcp/dhcpd.leases


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-10
changelog:
  - Allow dhclient route metrics to be specified with DHCP options:
    The dhcp-options(5) man-page states:
    'option routers ... Routers should be listed in order of preference' 
    and
    'option static-routes ... are listed in descending order of priority' .
    No preference / priority could be set with previous dhclient-script .
    Now, dhclient-script provides: 
    Default Gateway (option 'routers') metrics:
      Instead of allowing only one default gateway, if more than one router 
      is specified in the routers option, routers following the first router
      will have a 'metric' of their position in the list (1,...N>1).
    Option static-routes metrics:
      If a target appears in the list more than once, routes for duplicate
      targets will have successively greater metrics, starting at 1.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-8
changelog:
  - further fix for bug 160655 / ISC bug 15293 - upstream patch:
    do NOT always strip trailing nulls in the dhcpd server
  - handle static-routes option properly in dhclient-script :
    trailing 0 octets in the 'target' IP specify the class -
    ie '172.16.0.0 w.x.y.z' specifies '172.16/16 via w.x.y.z'.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-7
changelog:
  - fix bug 169164: separate /var/lib/{dhcpd,dhclient} directories
  - fix bug 167292: update failover port info in dhcpd.conf.5; give
                    failover ports default values in server/confpars.c


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-6
changelog:
  - fix bug 167273: time-offset should not set timezone by default
                    tzdata's Etc/* files are named with reverse sign
                    for hours west - ie. 'GMT+5' is GMT offset -18000seconds.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-4
changelog:
  - fix bug 166926: make dhclient-script handle interface-mtu option
    make dhclient-script support /etc/dhclient{,-$IF}-{up,down}-hooks scripts
    to allow easy customization to support other non-default DHCP options -
    documented in 'man 8 dhclient-script' .
  - handle the 'time-offset' DHCP option, requested by default.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-3
changelog:
  - fix bug 160655: strip trailing '\0' bytes from text options before append
  - fix gcc4 compiler warnings ; now compiles with -Werror
  - add RPM_OPT_FLAGS to link as suggested in gcc man-page on '-pie' option
  - change ISC version string to 'V3.0.3-RedHat' at request of ISC


author: Jason Vas Dias <jvdias@redhat.com> 11:3.0.3-1
changelog:
  - Upgrade to upstream version 3.0.3 
  - Don't apply the 'default boot file server' patch: legacy
    dhcp behaviour broke RFC 2131, which requires that the siaddr
    field only be non-zero if the next-server or tftp-server-name
    options are specified.
  - Try removing the 1-5 second wait on dhclient startup altogether.
  - fix bug 163367: supply default configuration file for dhcpd


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.3rc1-1
changelog:
  - Upgrade to upstream version 3.0.3rc1
  - fix bug 163203: silence ISC blurb on configtest 
  - fix default 'boot file server' value (packet->siaddr):
    In dhcp-3.0.2(-), this was defaulted to the server address;
    now it defaults to 0.0.0.0 (a rather silly default!) and 
    must be specified with the 'next-server' option ( not the tftp-boot-server option ?!?)
    which causes PXE boot clients to fail to load anything after the boot file.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-14
changelog:
  - Fix bug 159929: prevent dhclient flooding network on repeated DHCPDECLINE
  - dhclient fast startup: 
     remove dhclient's  random 1-5 second delay on startup if only
     configuring one interface 
     remove dhclient_script's "sleep 1" on PREINIT
  - fix new gcc-4.0.0-11 compiler warnings for binding_state_t


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-11
changelog:
  - as pointed out by Peter Jones, dhclient-script spews
  - 'chkconfig: Usage' if run in init state 1 (runlevel returns "unknown".)
  - this is now corrected.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-9
changelog:
  - bugs 153244 & 155143 are now fixed with SELinux policy; 
    autotrans now works for dhcpc_t, so restorecons are not required,
    and dhclient runs OK under dhcpc_t with SELinux enforcing.
  - fix bug 155506: 'predhclien' typo (emacs!).


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-8
changelog:
  - Fix bugs 153244 & 155143: 
        o restore dhclient-script 'restorecon's
        o give dhclient and dhclient-script an exec context of 
          'system_u:object_r:sbin_t' that allows them to run
          domainname / hostname and to update configuration files
          in dhclient post script.       
  - Prevent dhclient emitting verbose ISC 'blurb' on error exit in -q mode


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-7
changelog:
  - Add '-x' "extended option environment" dhclient argument:
  -  When -x option given to dhclient:
  -    dhclient enables arbitrary option processing by writing information
  -    about user or vendor defined option space options to environment.
  -
  - fix bug 153244: dhclient should not use restorecon
  - fix bug 151023: dhclient no 'headers & libraries' 
  - fix bug 149780: add 'DHCLIENT_IGNORE_GATEWAY' variable
  - remove all usage of /sbin/route from dhclient-script


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-8
changelog:
  - Add better execshield security link options
  - fix dhcpd.init when no /etc/dhcpd.conf exists and -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-4
changelog:
  - make dhclient-script TIMEOUT mode do exactly the same configuration
  - as BOUND / RENEW / REBIND / REBOOT if router ping succeeds


author: Jason Vas Dias <jvdias@redhat.com> 3.0.2rc3-4
changelog:
  - fix bug 147926: dhclient-script should do restorecon for modified conf files
  - optimize execshield protection


author: Jason Vas Dias <jvdias@redhat.com> 8.3.0.4rc3-3
changelog:
  - fix bug 147375: dhcpd heap corruption on 32-bit 'subnet' masks
  - fix bug 147502: dhclient should honor GATEWAYDEV and GATEWAY settings            
  - fix bug 146600: dhclient's timeout mode ping should use -I
  - fix bug 146524: dhcpd.init should discard dhcpd's initial output message
  - fix bug 147739: dhcpd.init configtest should honor -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-17
changelog:
  - fix bug 144250: gcc-3.4.3-11 is broken :
  - log_error ("Lease with bogus binding state: %d size: %d",
  -			   comp -> binding_state,
  -			   sizeof(comp->binding_state));
  - prints:    'Lease with bogus binding state: 257 1'    !
  - compiling with gcc33 (compat-gcc-8-3.3.4.2 fixes for now).


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-16
changelog:
  - fix bug 143704: dhclient -r does not work if lease held by
  - dhclient run from ifup . dhclient will now look for the pid
  - files created by ifup .


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-14
changelog:
  - NTP: fix bug 139715: merge in new ntp servers only rather than replace
  - all the ntp configuration files; restart ntpd if configuration changed.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-12
changelog:
  - fix bug 138181 & bug 139468: do not attempt to listen/send on
  -     unconfigured  loopback, point-to-point or non-broadcast 
  -     interfaces (don't generate annoying log messages)
  - fix bug 138869: dhclient-script: check if '$new_routers' is
  -     empty before doing 'set $new_routers;...;ping ... $1'


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-11
changelog:
  - dhcp-3.0.2b1 came out today. A diff of the 'ack_lease' function
  - Dave Hankins and I patched exposed a missing '!' on an if clause
  - that got dropped with the 'new-host' patch. Replacing the '!' .
  - Also found one missing host_dereference.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-10
changelog:
  - clean-up last patch: new-host.patch adds host_reference(host)
  - without host_dereference(host) before returns in ack_lease
  - (dhcp-3.0.1-host_dereference.patch)


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-9
changelog:
  - Fix bug 133522:
  - PXE Boot clients with static leases not given 'file' option
  - 104 by server - PXE booting was disabled for 'fixed-address'
  - clients.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-8
changelog:
  - Fix bug 131212: 
  - If "deny booting" is defined for some group of hosts,
  - then after one of those hosts is denied booting, all
  - hosts are denied booting, because of a pointer not being
  - cleared in the lease record. 
  - An upstream patch was obtained which will be in dhcp-3.0.2 .


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-7
changelog:
  - Forward DNS update by client was disabled by a bug that I
  - found in code where 'client->sent_options' was being 
  - freed too early.
  - Re-enabled it after contacting upstream maintainer
  - who confirmed that this was a bug (bug #130069) -
  - submitted patch dhcp-3.0.1.preserve-sent-options.patch.
  - Upstream maintainer informs me this patch will be in dhcp-3.0.2 .


author: Dan Walsh <dwalsh@redhat.com> 1:3.0.1rc14-1
changelog:
  - User kernelversion instead of uname-r
  - Update to latest package from ISC
  - Remove inherit-leases patch for now.


author: Elliot Lee <sopwith@redhat.com> 3.0pl1-8
changelog:
  - More #68650 (modify requested options)
  - Fix #71453 (dhcpctl man page) and #71474 (include libdst.a) and


author: David Sainty <saint@redhat.com> 3.0pl1-1
changelog:
  - Change to dhclient, dhcp, dhcp-devel packaging
  - Move to 3.0pl1, do not strip binaries
  - Drop in sysconfig-enabled dhclient-script


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix booting of JavaStations
    (reported by Pete Zaitcev <zaitcev@metabyte.com>).
  - fix SIGBUS crashes on SPARC (apparently gcc is too clever).


author: Erik Troan <ewt@redhat.com>
changelog:
  - applied patch from Chris Evans which makes the server a bit more paranoid
    about dhcp requests coming in from the wire


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated to build in a buildroot properly
  - don't package up the client, as it doens't work very well <sigh>


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - removed the actual inet.d links (chkconfig takes care of this for us)
    and made the %postun section handle upgrades.


author: Jindrich Novy <jnovy@redhat.com> 3.0-33.8.el5.1
changelog:
  - fix CVE-2010-0739 CVE-2010-0829 CVE-2007-5936 CVE-2007-5937
  CVE-2009-0146 CVE-2009-0195 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799
  CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182
  CVE-2009-1183 CVE-2009-0791 CVE-2009-3608 CVE-2009-3609
  Resolves: #577328


author: Jindrich Novy <jnovy@redhat.com> 3.0-33.5
changelog:
  - add -fno-strict-aliasing to CFLAGS to avoid possible crashes
    (https://errata.devel.redhat.com/rpmdiff/show/37854.?result_id=376725)
  Related: #458828, #446811, #364341, #450755


author: Jindrich Novy <jnovy@redhat.com> 3.0-33.4
changelog:
  - add obsolete for tetex-lineno (#458828)
  - add tex(..) virtual provides (#446811)
  - fix tetex verify errors (#364341)
  - include lamstex fonts (#450755)
  Resolves: #458828, #446811, #364341, #450755


author: MATSUURA Takanori <t-matsuu@estyle.ne.jp> 3.0-28.1.fc6
changelog:
  - fix platex2e_inputs macro
  - fix dupulicated entry of %{_datadir}/texmf/(p)xdvi/XDvi
  - announce update pxdvi to 22.84.10-j1.33


author: Jindrich Novy <jnovy@redhat.com> 3.0-22
changelog:
  - don't package documentation for removed preview package (#189753)
  - enhance Japanese support, thanks to Matsuura Takanori:
    - modify vfontmap (#178411)
    - update ptex-src to 3.1.9, ptex-texmf to 2.4, pdvips to 5.95a-p1.7a,
      pxdvi to 22.84.9 j1.31, and mendexk to 2.6d
    - package pxdvi config files as %config


author: Jindrich Novy <jnovy@redhat.com> 3.0-15
changelog:
  - apply the latest patch to fix new xpdf flaws found since the latest
    update, thanks to Ludwig Nussel and others (#177912)


author: Jindrich Novy <jnovy@redhat.com> 3.0-14
changelog:
  - apply additional patch to fix xpdf flaws from Ludwig Nussel
    (CVE-2005-3191, CVE-2005-3192 and CVE-2005-3193) (#177128)
  - /usr/share/texmf/doc is now owned by tetex package (#177065)
  - update searching order for kpathsea (local texmf tree is 
    searched first)


author: Jindrich Novy <jnovy@redhat.com> 3.0-12
changelog:
  - apply more complete fix for CVE-2005-3193 (#175110) suggested by
    security response team, taken from xpdf


author: Jindrich Novy <jnovy@redhat.com> 3.0-9
changelog:
  - always cleanup temporary directories for texconfig, updmap and fmtutil
    scripts - Michal Jaegermann (#172534)
  - remove .la files (#172619)


author: Jindrich Novy <jnovy@redhat.com> 3.0-8
changelog:
  - fix obsolete option passed to sort in texconfig - Michal Jaegermann (#172337)
  - additional fix to xdvi -> keep position with navigation using
    delete as well (#168124)


author: Jindrich Novy <jnovy@redhat.com> 3.0-7
changelog:
  - remove preview-latex files as they are incomplete and without
    documentation, preview-latex is now part of AUCTeX (#168859)
  - fix xdvi -> navigation with a spacebar does not keep position (#168124)


author: Jindrich Novy <jnovy@redhat.com> 3.0-6
changelog:
  - fix detectection of X resource file for pxdvi (#164960)
  - update to mendexk 2.6c (announced by MATSUURA Takanori)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add obsoletes for tetex-beamer, tetex-pgf, tetex-xcolor
    to avoid conflicts with Extras (#160754)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - remove dependency on w3c-libwww
  - don't use uninitialized tmp_size (#157178)
  - add a possibility to define default paper in spec


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add Requires: fonts-japanese >= 0.20050222-2 to xdvi
    subpackage when Japanese is enabled
  - switch from /usr/share/fonts/ja to /usr/share/fonts/japanese (#155880)


author: MATSUURA Takanori <t-matsuu@estyle.ne.jp>
changelog:
  - use htt as input method for pxdvi
  - update pxdvi to 22.84.9 j1.22
  - fix pxdvi installation
  - update to ptex-src-3.1.8.1, dvips-jpatch-p1.7, mensexk-2.6a
  - delete japanese.map, now included in dvipsk-jpatch-p1.7


author: Jindrich Novy <jnovy@redhat.com> 3.0-3
changelog:
  - repack sources from gz -> bz2 (reduces srpm size of about 10M)
  - add $RPM_OPT_FLAGS to CFLAGS
  - replace obsolete --with-x-toolkit with --with-mf-x-toolkit and 
    --with-xdvi-x-toolkit


author: Jindrich Novy <jnovy@redhat.com> 3.0-2
changelog:
  - update dvipsk-5.95a-p1.6a.tar.gz and dvipsk-jpatch-p1.6a1-pdvips.patch
    because of portability problems (#148947)


author: Jindrich Novy <jnovy@redhat.com> 3.0-1
changelog:
  - drop CAN-2004-1125 patch, applied upstream
  - drop CAN-2004-0064 patch, CAN-2004-0888 fixed sufficiently upstream
  - drop xaw3d (use Motif intead), nostrip, old (>65 limitation in latex.ltx),
    xdvik-xdvi-resources
  - keep marvosym-rightarrow patch (not fixed yet)
  - update Source0, Source1, drop Source13 (varioref fixed)
  - sync with spec for 3.0 suggested by MATSUURA Takanori (#147668)
  - don't ship log files in /usr/share/texmf-var/web2c/*.log


author: MATSUURA Takanori <t-matsuu@estyle.ne.jp> - 2.99.11.20050131-0.0.1
changelog:
  - update to 2.99.11-20050131b
  - update Japanese support (Japanese -> UTF-8 conversion, cleanup of patches, spec update)
  - add support for firefox, mozilla, htmlview (first), w3m browsers for xdvik (browser patch)
  - suggest to drop CAN*, xaw3d, nostrip (fixed), old, xdvik-xdvi-resources, marvosym-rightarrow
  - suggest separation of latex2html and texi2html (new packages) from tetex package
  - delete support for latex2html, texi2html from spec
  - fix %post phase in latex subpackage


author: Jindrich Novy <jnovy@redhat.com> 2.0.2-26
changelog:
  - Convert archives to bz2 to save some space
  - Update to ptex-src-3.1.4, ptex-texmf-2.2, mendexk to 2.5a, pdvipsk to 5.94a-1.6a
    (bug #138444)


author: MATSUURA Takanori <t-matsuu@estyle.ne.jp>
changelog:
  - Announced updates of pTeX to 3.1.4 (ptex-src-3.1.4, ptex-texmf-2.2),
    mendexk to 2.5a, pdvipsk to 5.94a-1.6a
  - Fix spec:
    + Install documents in ptex-texmf, ptex-src, pdvips, and pxdvi properly
    + Delete ptex-3.1.2-prerq patch and fix preparation of ptex stuff
    + latex2html is now non-JA-patched version. JA-patched latex2html is
      renamed to jlatex2html. recommended by the author of JA patch.


author: Jindrich Novy <jnovy@redhat.com> 2.0.2-23
changelog:
  - Fix xdviprint temp file creation from PID and replace it by mktemp (bug #137748)
  - Uncomment lines in xdviprint to fix bug #131915
  - Fix badscript patch


author: Jindrich Novy <jnovy@redhat.com> 2.0.2-22
changelog:
  - Add xpdf overflow security patch (CESA-2004-007)
  - Convert Japanese files Changes.txt, README.txt to unified encoding
    iso-2022-jp and rename them to *.jis to let it be apparent (bug #136276)


author: Leonard den Ottolander <leonard * den ottolander nl>
changelog:
  - Move some font utilities, font sources and other relevant files to
    tetex-fonts.
  - Clean up inter-dependencies (bug #11721).


author: Tim Waugh <twaugh@redhat.com> 2.0.2-8
changelog:
  - Fix pdvips (bug #101951).  Patch from MATSUURA Takanori.
  - Fix pxdvi (bug #101954).  Patch from MATSUURA Takanori.
  - Build requires autoconf213 (bug #101338).


author: Tim Waugh <twaugh@redhat.com> 2.0.2-4
changelog:
  - Allow build directory to contain '_'.
  - Ship l2hconf.pm (bug #87900).
  - Updated pxdvi patch (bug #89478).  No longer need crash, 58256 patches.
  - Use Xaw3d (bug #86561).


author: Tim Waugh <twaugh@redhat.com> 2.0.2-3
changelog:
  - Use _smp_mflags, except for pTeX.
  - Add japanese.map back in, and integrate it into pdvips/config/*.map.
  - Make updmap use 'mktemp -d'.
  - Fix pdvips config file search path in texmf.cnf.


author: Tim Waugh <twaugh@redhat.com> 2.0.2-2
changelog:
  - Updated latex2html.
  - Renumber sources and patches.
  - Make dvipdft use 'mktemp -d', and don't use tmpnam() in dvipdfm.
  - Apply badscriptj patch again.
  - Don't need extra texconfig init now.
  - Clean up %prep section.
  - No longer need protos patch.
  - Make marvosym-rightarrow.patch apply with -p1.
  - Updated ptex.
  - Adapted dvipsk-jdvips, pxdvi, prerq patches.
  - Dropped japanese-psfonts patch; no longer seems to apply.
  - No longer need xdvik-dot, ptex-target patches.
  - No need to update ConTeXt, epsf.tex, pdftex.def, epstopdf, fancybox.sty.
  - Remove dvi-to-ps.fpi, testpage.dvi.
  - Don't strip binaries in 'make install'.
  - Ported badscript patch, adding xdvizilla fix.


author: Tim Waugh <twaugh@redhat.com> 2.0.2-1
changelog:
  - 2.0.2.
  - No longer need dvips security, R0 patches.
  - Disable Japanese support for now.
  - Don't patch language.dat (need a better way of doing that anyway).
  - Don't update pdftex.
  - No longer need teTeX-texmf-pdftex.diff, arch, tektronix, acrobat-subr,
    xaw3d, thumbpdf, images, man-typo, thumbpdf, bison patches.
  - Don't apply badscript patch for now (needs adapting).
  - Port texdoc-defaults, fmtutil patches.
  - No longer need to update texinfo.tex or marvosym.sty.
  - Avoid using subshells in %build.
  - Don't run updmap (no longer needed?).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-65
changelog:
  - Don't ship printconf test page for DVI.
  - Don't ship readlink(1), now that it's in the coreutils package (bug #84200).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-61
changelog:
  - Use Guiseppe Ghibò's texmf-gg archive version 1.0.3k/1.0.2k.
  - No longer need cx, Z patches.
  - Remove backup file.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-59
changelog:
  - Revert 'dvips assumes -R' for now (dvips-secure, dvips-output).
  - Fix bison error.
  - Own more directories (bug #73978).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-58
changelog:
  - Tweak file list counts.
  - Don't install files not packaged.
  - Own another directory (bug #73978).
  - Fix 'dvips -R0' (bug #71650).
  - Send dvips output to default location (bug #71650).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-52
changelog:
  - Remove --insecure option from dvips since -R0 already does it.
  - Fix another pxdvi crash (bug #63996).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-49
changelog:
  - Make dvips assume -R by default.
  - Don't make dvilj package any more.  Use dvips and ghostscript instead
    (bug #65391).
  - Don't require gimp-print to build (any more).
  - File list tweaking.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-48
changelog:
  - Change tetex-doc group to Documentation (bug #63049).
  - Fix some man pages (bug #63537, bug #63538).
  - Increase memory limit for xmltex (bug #64752).
  - pdftex: thumbpdf patch.
  - Updated pdftex.def (bug #63712).
  - Updated epstopdf (bug #65021).
  - Updated fancybox.sty (bug #65394).
  - Add ghostscript, gimp-print to tetex-latex build requires list
    (shouldn't need to list gimp-print explicitly really).
  - Add netpbm-progs to tetex-latex build requires and requires lists.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-47
changelog:
  - Apply changes from Tom Moertel <tom@moertel.com> (bug #63257):
    - Added patch that works around font (printing) bug in Acrobat Reader 5.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-46
changelog:
  - Fix bug #62285.
  - Don't strip binaries explicitly (bug #62568).
  - Only ship xdvipaper.dvips in one package (bug #62754).
  - Adjust file list counts.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-43
changelog:
  - Run 'texconfig init' in an appropriate %post script (bug #59950).
  - Don't ship CVS internal files (bug #60055).
  - Try to fix up pdftex.map a little (bug #60164).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-42
changelog:
  - Updated ConTeXt to more useful/stable version 2002-01-28 (bug #59390).
  - Unset HOME before building (bug #59932).
  - Use generalized latex2html build-or-not macros (bug #59940).
  - Adjust file list counts for sanity check.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-41
changelog:
  - Filter out bad requires (bug #59819).
  - Put pstoimg and texexpand in tetex-latex where they belong.
  - Adjust file list counts for sanity check accordingly.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-40
changelog:
  - Mark XDvi noreplace (bug #59636).
  - Set xdvi wwwBrowser resource to mozilla instead of netscape (bug #59636).
  - Mark files in /usr/share/texmf/tex/generic/config/ %config(noreplace)
    (bug #59615).
  - New pdfetex now also generated from pdftex 0.14h source (bug #59390).
  - Adjust file list counts for sanity check.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-39
changelog:
  - Updated marvosym.sty (bug #58025).
  - Updated latex2html (bug #58199).
  - Ship xdviprint and xdvipaper.dvips (bug #58256).
  - Fix latex2html not to use DB_File.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-37
changelog:
  - Update texdoc default helper applications (bug #55874).
  - Make pxdvi generate fonts when they're missing (bug #55883).
  - Mention 'texconfig' in main package %description.
  - Mark dvips config.* noreplace.
  - Mark pdvips config files %config(noreplace).
  - Sanity check the file lists.
  - Set TEXMFLOCAL.
  - Fix comment in tetex.cron (bug #56115).
  - Adjust unused font removal time to 180 days (bug #56115).
  - Add comment in texmf.cnf about how to use HOMETEXMF (bug #57063).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-36
changelog:
  - Rebuild in sane build environment (bug #54961).
  - Enable HOMETEXMF (bug #55286).
  - More texmf.cnf modifications for xmltex.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-31
changelog:
  - Choose a package for files owned by multiple packages (bug #51584).
  - Updated pTeX to 2.1.11, using patch from MATSUURA Takanori (bug #51817).
  - Updated pdftex to 0.14h (bug #48261, bug #46067, bug #52902).
  - Run texconfig init again at the end of installation, to take account of
    things installed by hand (like pdftex).
  - Don't run reautoconf; it shouldn't be needed anyway.
  - Fix build problems arising when Japanese is disabled.


author: Tim Powers <timp@redhat.com> 1.0.7-30
changelog:
  - rebuild to see if that tempfile in /usr/bin doesn't go away (possible build anomoly that can't be reproduced)


author: Tim Waugh <twaugh@redhat.com> 1.0.7-28
changelog:
  - Don't ship backup file texmf.cnf.pdvips (bug #52174).
  - Actually ship the patched texmf.cnf file (bug #48842).
  - Japanese xdvik patch version 1.04.
  - Build Japanese-patched xdvik as 'pxdvik' bug (bug #52089).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-27
changelog:
  - updmap is a config file (bug #50854).
  - Use a different config.ps for pdvips (bug #48842).
  - Run updmap in dvips/config and pdvips/config (bug #37513).
  - Put pdvips-specific settings in texmf.cnf (various, incl. bug #48842).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-26
changelog:
  - Don't put texi2html.html in /usr/html (bug #50643).
  - Newer Japanese dvipsk patch (bug #46785).
  - Build Japanese-patched dvipsk as 'pdvips' like SuSE (bug #46785).
  - Don't apply patch 46, and hopefully fix bug #48842.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-22
changelog:
  - XDvi resources: mfmode back to cx (bug #44182).
  - Patch from Oliver Paukstadt <oliver.paukstadt@millenux.com>:
    - ported to IBM zSeries (s390x, 64 bit)


author: Tim Waugh <twaugh@redhat.com> 1.0.7-17
changelog:
  - More backup files not to ship (bug #35801).
  - Remove the ^Z from picins.sty (bug #36497).
  - Run updmap to get psfonts.map updated (bugs #17333, #37513).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-16
changelog:
  - Updated texinfo translation files (bug #8682).
  - Make tetex-dvips require psutils (bug #13216).
  - Don't ship backup file from cx patch.
  - Make japanese.map work (bug #32134).
  - Make xdvi prettier (bug #17415).
  - Fix PDF images (bug #32703).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Turn on Japanese changes (bug #26249).
  - Japanese support clashed with xaw3d patch; fixed up.
  - Replace dvi-to-ps (rhs-printfilters) with mf40-tetex_filters
    (printconf).  Create testpage.dvi (from tex/latex/base/testpage.tex).
  - Default to lj instead of cx in gray.mf and black.mf (bug #25988).
  - Build requires VFlib2-devel.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Update tetex-dvilj description.
  - Patch latex2html to support tabularx environments better (bug #24852).
  - Make xdvi work with files that end in '.' (bug #11478).
  - Mark ls-R as %ghost (bug #12275).
  - Build requires w3c-libwww-devel.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - sync with Mandrake version.
  - Revert gcc296 patch, no longer needed.
  - Enable i18n hyphenation for several languages (#11570,#17040).
  - jadetex hash is now 50000 (#9092)
  - create symlinks for Euler fonts (#9782).
  - correct comment tetex.cron (#10022).
  - unset TEXINPUTS in %build/%install (#10412).
  - use Xaw3d rather than Xaw (#17415).
  - insert thumbnails into pdflatex correctly (#19278).
  - update to texi2html-1.64 (#20604).
  - add latex2html (but not on ia64) (#16966).
  - hacks to avoid accidental version clash with system libraries (#21263).
  - rebuild with gcc-2.96-69 so that latex.fmt is built (#22838).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - merge japanese changes (disabled for now, per msw@redhat.com).
  - add support for Icelandic (Richard Allen <ra@hp.is>).


author: Giuseppe Ghibò <ghibo@mandrakesoft.com> 1.0.7-7mdk
changelog:
  - updated the LaTeX hyperref package to version 6.70f for getting jadetex
    working.
  - added support for spanish, portuguese and sweden pattern hyphenation in the
    default LaTeX format files (hope trie values are enough...).


author: Giuseppe Ghibò <ghibo@mandrakesoft.com> 1.0.7-5mdk
changelog:
  - changed arrays texmf.cnf the array value for jadetex, pdfjadetex, according to  the Christoph, Rahtz, Pepping's "Installing JadeTeX" document.


author: Giuseppe Ghibò <ghibo@mandrakesoft.com>
changelog:
  - updated to version 1.0.7.
  - merged k6 and arm patches into teTeX-1.0-arch.patch
  - sligtly increased internal array main_memory, so that latex
    doesn't have problems with big macro packages such as pstricks
    or Xy-TeX.
  - integrate teTeX-1.0-tektrokix.patch (fixes a typo) from Jeff
    Johnson <jbj@redhat.com>.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - build for Red Hat 6.2 (and sync with Mandrake tetex-1.0.6-6mdk).
  - always apply AMD K6 patch; won't hurt, and removes platform dependency.
  - spelling correction (#7085).


author: Giuseppe Ghibò <ghibo@linux-mandrake.com>
changelog:
  - fine tuning subpackage package list.
  - added teTeX dependence to package xdvi (it cannot works without fonts).


author: Giuseppe Ghibò <ghibo@linux-mandrake.com>
changelog:
  - cleaned %clean. Now spec file support buildroot.
  - added support for 'resolution' in dvi-to-ps.fpi as well as
    the config.generic file.
  - fixed a problem in manpage links (reported by Dusan
    Gabrijelcic <dusan@kamra.e5.ijs.si>).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.0.6.
  - merge in Giuseppe Ghibò changes from mandrake package.
  - dvi-to-ps.fpi: read postcript configuration settings (#3379).


author: Giuseppe Ghibò <ghibo@caesar.polito.it>
changelog:
  - fixed new bugs reported by Thomas Esser (included
    patch 1.0.5-1.0.6-pre).
  - added amstex, bamstex and bplain to the list of format files to build.


author: Giuseppe Ghibò <ghibo@caesar.polito.it>
changelog:
  - fixed and removed unneeded things in teTeX-1.0-texmfcnf.patch,
    according to Thomas Esser suggestions.


author: Giuseppe Ghibò <ghibo@caesar.polito.it>
changelog:
  - upgraded to teTeX 1.0 final.
  - removed texmf.cnf external config file, and provided
    as patch.
  - removed ``texconfig init'' (now it's included into 'make install').
  - moved texmf unpacking to buildroot before 'make install'.
  - added italian hyphenation.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 1.0.1.
  - add buildroot translated texmfmain for install (#1719)
  - mark /usr/share/texmf/xdvi/XDvi as %config (#1067)
  - generate texmf.cnf and then merge in old conventions


author: Kayvan A. Sylvan <kayvan@sylvan.com>
changelog:
  - upgraded snapshot
  - Fixed PATH setting for ``texconfig init''. As it was, you could
    not build a working teTeX on a machine with tetex installed.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - I think I have got the buildroot problems right this time
  - auto rebuild in the new build environment (release 15)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - slight changes in the packaging (unpack texmf directly into the buildroot
    and build it there)
  - added texmfsrc source tarball to comply with the license


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - add patch to make it compile on the arm (RmS)
  - build for glibc 2.1
  - use tar hack instead of the cp -a to overcome cp's brokeness re: symlinks
    handling


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - requires ed
  - Fixed obsoletes line
  - credted the doc subpackage
  - fully buildroot
  - require dialog in the main package
  - add support for wmconfig in for the xdvi package


author: Otto Hammersmith <otto@redhat.com>
changelog:
  - added install-info support (dvips, fontname and kpathsea)
  - combined the two changelogs in the spec file.


author: Michael Fulbright <msf@redhat.com>
changelog:
  - Upgraded to tetex-lib to 0.4pl8 and fixed cron tmpwatch entry to not
    delete /var/lib/texmf/fonts and /var/lib/texmf/texfonts


author: Michael Fulbright <msf@redhat.com>
changelog:
  - Upgraded to 0.4pl6, and fixed file permissions on /var/lib/texmf/texfonts
    so normal users could create fonts on demand.


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.15
changelog:
  - Renumber patches on spec file to avoid patch number conflicts between
    userspace & kernel patches
  - kvm-qcow2-Fix-access-after-end-of-array.patch [bz#612508]
  - kvm-qcow2-Don-t-ignore-immediate-read-write-failures.patch [bz#612508]
  - kvm-qcow2-Return-0-errno-in-write_l2_entries.patch [bz#612508]
  - kvm-qcow2-Fix-error-return-code-in-qcow2_alloc_cluster_l.patch [bz#612508]
  - kvm-qcow2-Return-0-errno-in-write_l1_entry.patch [bz#612508]
  - kvm-qcow2-Return-0-errno-in-l2_allocate.patch [bz#612508]
  - kvm-qcow2-Allow-qcow2_get_cluster_offset-to-return-error.patch [bz#612508]
  - kvm-qcow2-Change-l2_load-to-return-0-errno.patch [bz#612508]
  - kvm-qcow2-Return-right-error-code-in-write_refcount_bloc.patch [bz#612508]
  - kvm-qcow2-Fix-corruption-after-error-in-update_refcount.patch [bz#612508]
  - kvm-qcow2-Clear-L2-table-cache-after-write-error.patch [bz#612508]
  - kvm-qcow2-Fix-error-handling-in-l2_allocate.patch [bz#612508]
  - kvm-qcow2-Restore-L1-entry-on-l2_allocate-failure.patch [bz#612508]
  - kvm-qcow2-Allow-get_refcount-to-return-errors.patch [bz#612508]
  - kvm-qcow2-Allow-alloc_clusters_noref-to-return-errors.patch [bz#612508]
  - kvm-qcow2-Return-real-error-code-in-load_refcount_block.patch [bz#612508]
  - kvm-block-Add-bdrv_-p-write_sync.patch [bz#612507]
  - kvm-qcow2-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#612507]
  - Resolves: bz#612507
    (qcow2 image corruption when using cache=writeback)
  - Resolves: bz#612508
    (Backport qcow2 fixes to RHEL 5)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.14
changelog:
  - Updated kversion to 2.6.18-194.8.1.el5 to match build root
  - kvm-kernel-KVM-Keep-slot-ID-in-memory-slot-structure.patch [bz#610341]
  - kvm-kernel-KVM-Prevent-internal-slots-from-being-COWed.patch [bz#610341]
  - kvm-virtio-net-truncating-packet.patch [bz#610343]
  - kvm-raw-posix-Use-pread-pwrite-instead-of-lseek-read-wri.patch [bz#610344]
  - kvm-block-Cache-total_sectors-to-reduce-bdrv_getlength-c.patch [bz#610344]
  - Resolves: bz#610341
    (fork causes trouble for vcpu threads)
  - Resolves: bz#610343
    (Virtio: Transfer file caused guest in same vlan abnormally quit)
  - Resolves: bz#610344
    (Excessive lseek() causes severe performance issues with vm disk images over NFS)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.13
changelog:
  - kvm-virtio-blk.c-avoid-zero-every-request-structure.patch [bz#604159]
  - Resolves: bz#604159
    (virtio-blk: Avoid zeroing every request structure)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.12
changelog:
  - kvm-qcow2-Export-synchronous-qcow_read-write-to-avoid-br.patch [bz#604188]
  - Resolves: bz#604188
    (Guest suffers kernel panic when save snapshot then restart guest)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.11
changelog:
  - kvm-qcow2-Fix-corruption-after-refblock-allocation.patch [bz#602363]
  - Resolves: bz#602363
    (qcow2 corruption bug in refcount table growth)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.10
changelog:
  - Updated kversion to 2.6.18-194.3.1.el5 to match build root
  - kvm-kernel-KVM-MMU-bail-out-pagewalk-on-kvm_read_guest-error.patch [bz#596381]
  - kvm-kernel-KVM-Fix-wallclock-version-writing-race.patch [bz#596625]
  - kvm-qemu-img-rebase-Fix-output-image-corruption.patch [bz#596378]
  - Resolves: bz#596381
    (kvm spinning updating a guest pte, unkillable)
  - Resolves: bz#596625
    (race condition in pvclock wallclock calculation)
  - Resolves: bz#596378
    (After re-base snapshot, the file in the snapshot disappeared)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.9
changelog:
  - Remove bios-nohotplug.bin from package
  - Related: bz#579737
    (QEMU: Too many devices are available for unplug in Windows XP (and we don't support that))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.8
changelog:
  - kvm-Revert-fix-wrong-acpi-mapping-rhel5.x-kvm-userspace.patch [bz#581758]
    - Patch causes issues (see bz#581758 comment 8)
  - Related: bz#581758
    (Win7/32 stuck on 100% CPU (in testing VDI driver unclassified WHQL tests))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.7
changelog:
  - kvm-qcow2-Remove-abort-on-free_clusters-failure.patch [bz#583947 bz#586246]
  - Resolves: bz#583947
    (Guest aborted when make guest stop on write error)
  - Resolves: bz#586246
    (Guest aborted when make guest stop on write error)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.6
changelog:
  - kvm-avoid-leaving-orphaned-swapcache-in-ksm.patch [bz#581764]
  - Resolves: bz#581764
    (memory reported as used (by SwapCache and by Cache) though no process holds it.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.5
changelog:
  - kvm-qcow2-Factor-next_refcount_table_size-out.patch [bz#581766]
  - kvm-qcow2-Rewrite-alloc_refcount_block-grow_refcount_tab.patch [bz#581766]
  - kvm-qcow2-More-checks-for-qemu-img-check.patch [bz#581766]
  - Resolves: bz#581766
    (qcow2 corruption with I/O error during refcount block allocation)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.4
changelog:
  - kvm-fix-wrong-acpi-mapping-rhel5.x-kvm-userspace.patch [bz#581758]
  - Resolves: bz#581758
    (Win7/32 stuck on 100% CPU (in testing VDI driver unclassified WHQL tests))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.3
changelog:
  - kvm-kernel-account-only-for-IRQ-injected-into-vcpu0.patch [bz#577266]
  - kvm-kernel-Backport-KVM-fix-irq_source_id-size-verification.patch [bz#579863]
  - Resolves: bz#577266
    (Time drift in win2k3-64bit and win2k8-64bit smp guest)
  - Resolves: bz#579863
    (SR-IOV -- Guest exit and host hang on if boot VM with 8 VFs assigned)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.2
changelog:
  - kvm-kernel-KVM-x86-disable-paravirt-mmu-reporting.patch [bz#578579]
  - Resolves: bz#578579
    (Linux pvmmu guests (FC11, FC12, etc) crash on boot on AMD hosts with NPT disabled)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.1
changelog:
  - Updated kversion to 2.6.18-194.el5 to match build root
  - kvm-Build-an-additional-bios-without-hotplug-support.patch [bz#579737]
  - Resolves: bz#579737
    (QEMU: Too many devices are available for unplug in Windows XP (and we don't support that))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5
changelog:
  - kvm-Fix-Windows-guests-SVVP-tests.patch [bz#495844]
  - Resolves: bz#495844
    (KVM SVVP: "Signed Driver check" failure - on the disabled vCPUs (that the VM's BIOS doesn't hide))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-163.el5
changelog:
  - kvm-kernel-avoid-collision-between-out-of-sync-ksm-and-pci-pass.patch [bz#566385]
  - Resolves: bz#566385
    (KVM host panic due to fault in paging64_sync_page() / panic occurs in connection with PCI passthru devices)


author: Glauber Costa <glommer@redhat.com> - kvm-83-162.el5
changelog:
  - kvm-qemu-img-rebase-Add-f-option.patch [bz#569762]
  - kvm-mark-PCI-IRQs-as-edge-triggered-in-mptables.patch [bz#536749]
  - Resolves: bz#536749
    (can not boot rhel3.9 with if=virtio)
  - Resolves: bz#569762
    ('qemu-img re-base' broken on block devices)
  - Moved kver to 2.6.18-191.el5 to match build root


author: Glauber Costa <glommer@redhat.com> - kvm-83-161.el5
changelog:
  - kvm-qemu-img-Fix-segfault-during-rebase.patch [bz#563141]
  - Resolves: bz#563141
    (qemu-img re-base subcommand got Segmentation fault)
  - Moved kver to 2.6.18-190.el5 to match build root


author: Glauber Costa <glommer@redhat.com> - kvm-83-160.el5
changelog:
  - kvm-qxl-defer-vga-updates-in-case-commands-ring-is-full-.patch [bz#544785]
  - Resolves: bz#544785
    (QEMU process can become non-responsive in case command are not pull from qxl vga ring)


author: Glauber Costa <glommer@redhat.com> - kvm-83-159.el5
changelog:
  - Applied patch to spec file [bz#533453]
  - Updated kversion to 2.6.18-189.el5 to match build root
  - Resolves: bz#533453
    (kvm kmod package should require a compatible kernel version)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-158.el5
changelog:
  - Updated kversion to 2.6.18-187.el5 to match build root
  - kvm-kernel-KVM-Don-t-check-access-permission-when-loading-segme.patch [bz#563465]
  - kvm-kernel-KVM-Disable-move-to-segment-registers-and-jump-far-i.patch [bz#563465]
  - kvm-kernel-KVM-VMX-Check-cpl-before-emulating-debug-register-ac.patch [bz#563517]
  - Resolves: bz#563465
    (EMBARGOED CVE-2010-0419 kvm: emulator privilege escalation segment selector check [rhel-5.5])
  - Resolves: bz#563517
    (KVM: Check cpl before emulating debug register access [rhel-5.5])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-157.el5
changelog:
  - kvm-CVE-2010-0297-usb-linux.c-fix-buffer-overflow.patch [bz#560770]
  - Resolves: bz#560770
    (CVE-2010-0297 kvm-userspace-rhel5: usb-linux.c: fix buffer overflow [rhel-5.5])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-156.el5
changelog:
  - kvm-kernel-KVM-PIT-control-word-is-write-only.patch [bz#553126]
  - kvm-kernel-KVM-introduce-kvm_read_guest_virt-kvm_write_guest_vi.patch [bz#559095]
  - kvm-kernel-KVM-remove-the-vmap-usage.patch [bz#559095]
  - kvm-kernel-KVM-Use-kvm_-read-write-_guest_virt-to-read-and-writ.patch [bz#559095]
  - kvm-kernel-KVM-fix-memory-access-during-x86-emulation.patch [bz#559095]
  - kvm-kernel-Check-IOPL-level-during-io-instruction-emulation.patch [bz#560698]
  - kvm-kernel-Fix-popf-emulation.patch [bz#560698]
  - kvm-kernel-Check-CPL-level-during-privilege-instruction-emulati.patch [bz#560698]
  - Resolves: bz#553126
    (CVE-2010-0309 kvm: cat /dev/port in guest cause the host hang [rhel-5.5])
  - Resolves: bz#559095
    (EMBARGOED CVE-2010-0298 kvm: emulator privilege escalation [rhel-5.5])
  - Resolves: bz#560698
    (EMBARGOED CVE-2010-0306 kvm: emulator privilege escalation IOPL/CPL level check [rhel-5.5])


author: Glauber Costa <glommer@redhat.com> - kvm-83-155.el5
changelog:
  - kvm-virtio-blk-Fix-reads-turned-into-writes-after-read-e.patch [bz#552487]
  - kvm-virtio-blk-Handle-bdrv_aio_read-write-NULL-return.patch [bz#552487]
  - Resolves: bz#552487
    (Guest image corruption after RHEV-H update to 5.4-2.1.3.el5_4rhev2_1)
  - Moved kver to 2.6.18-186.el5 to match build root


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-154.el5
changelog:
  - kvm-qemu-img-Fix-qemu-img-with-backing-file.patch [bz#558195]
  - kvm-qemu-add-routines-for-atomic-16-bit-accesses.patch [bz#525323]
  - kvm-qemu-virtio-atomic-access-for-index-values.patch [bz#525323]
  - kvm-fix-ide-versioning.patch [bz#559163]
  - kvm-cpu-CPU_SAVE_VERSION-is-9-know.patch [bz#559163]
  - Resolves: bz#525323
    (QEMU terminates without warning with virtio-net and SMP enabled)
  - Resolves: bz#558195
    (kvm: NFS : kvm-qemu-img convert failure on RAW/Sparse template with COW/Sparse snapshot)
  - Resolves: bz#559163
    (migration failed host 5.5 with -M rhel5.5.0 to host 5.5 with -M rhel5.5.0.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-153.el5
changelog:
  - kvm-qcow2-Fix-error-handling-in-qcow2_grow_l1_table.patch [bz#537077]
  - kvm-qcow2-Fix-error-handling-in-qcow_save_vmstate.patch [bz#537077]
  - kvm-qcow2-Return-0-errno-in-get_cluster_table.patch [bz#537077]
  - kvm-qcow2-Return-0-errno-in-qcow2_alloc_cluster_offset.patch [bz#537077]
  - kvm-block-Return-original-error-codes-in-bdrv_pread-writ.patch [bz#537077]
  - kvm-qcow2-Fix-error-handling-in-grow_refcount_table.patch [bz#537077]
  - kvm-qcow2-Improve-error-handling-in-update_refcount.patch [bz#537077]
  - kvm-qcow2-Allow-updating-no-refcounts.patch [bz#537077]
  - kvm-qcow2-Don-t-ignore-update_refcount-return-value.patch [bz#537077]
  - kvm-qcow2-Don-t-ignore-qcow2_alloc_clusters-return-value.patch [bz#537077]
  - Resolves: bz#537077
    (error codes aren't always propagated up through the block layer (e.g. -ENOSPC))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-152.el5
changelog:
  - kvm-Revert-Queue-notify-support-for-virtio-block-device.patch [bz#552250]
    (Reverts kvm-Queue-notify-support-for-virtio-block-device.patch)
  - Related: bz#552250
    (Windows virtio block driver performs poorly on small size requests)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-151.el5
changelog:
  - kvm-Fix-cpu-versioning.patch [bz#557327]
  - kvm-reduce-number-of-reinjects-on-ACK.patch [bz#556455]
  - Resolves: bz#556455
    (KVM: WIN7-32bit blue screen (IMAGE_NAME:  ntkrnlmp.exe).)
  - Resolves: bz#557327
    (migration failed with -M rhel5.4.4 between host 5.5 and host 5.4.4)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-150.el5
changelog:
  - kvm-vnc-more-keypad-fixing.patch [bz#497507]
  - kvm-qxl-add-netbooks-common-resolutions.-Rhel-5.5-552240.patch [bz#552240]
  - kvm-block-raw-posix-Abort-on-pread-beyond-end-of-file.patch [bz#515655]
  - Resolves: bz#497507
    (Numeric keypad cannot be used in qemu monitor when using vnc to connect guest.)
  - Resolves: bz#515655
    (Add result test to prevent Infinite loop in raw_pread, reading too large offset)
  - Resolves: bz#552240
    (Spice (QXL) - please add 1024x576 resolution to the driver (netbooks))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-149.el5
changelog:
  - kvm-qemu-qxl-fix-unsafe-rom-data-handling-bug-537888.patch [bz#537888]
  - kvm-qxl-fix-qxl-backwards-migration-to-version-3.patch [bz#537888]
  - kvm-Allow-export-of-sse4.1-sse4.2-cpuid-flags-to-guest.-.patch [bz#518090]
  - Resolves: bz#518090
    ([RFE] KVM should be able to export advanced cpu flags to the guest)
  - Resolves: bz#537888
    (fix unsafe device data handling)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-148.el5
changelog:
  - Updated kversion to 2.6.18-185.el5 to match build root
  - Require qspice-libs to make sure the right libspice.so.0 file is installed
  - Related: bz#555657


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-147.el5
changelog:
  - kvm-block-Introduce-BDRV_O_NO_BACKING.patch [bz#530134]
  - kvm-qemu-img-rebase.patch [bz#530134]
  - kvm-vnc-improve-capslock-handling.patch [bz#517814]
  - kvm-block-Add-bdrv_change_backing_file.patch [bz#530134]
  - kvm-qemu-img-Automatically-detect-block-devices.patch [bz#537655]
  - Resolves: bz#517814
    (Caps Lock the key's appearance  of guest is not synchronous as host's --view kvm with vnc)
  - Resolves: bz#530134
    (RFE - In-place backing file format change)
  - Resolves: bz#537655
    (qemu-img: error creating a new preallocated volume image on FCP storage)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-146.el5
changelog:
  - Require compatible etherboot-zroms-kvm package
  - Resolves: bz#550053
    (require newer etherboot package that is compatible with new pxe ROM paths)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-145.el5
changelog:
  - kvm-fix-barriers-support-during-migration.patch [bz#549938]
  - kvm-Add-machine-name-alias-support.patch [bz#553187]
  - kvm-make-pc-an-alias-of-rhel5.4.0.patch [bz#553187]
  - kvm-Introduce-rhel5.4.4-machine-type.patch [bz#553187]
  - Resolves: bz#549938
    (Maintain barrier state after migration)
  - Resolves: bz#553187
    (Add rhel-5.4.4 support to rhel5.5.0)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-144.el5
changelog:
  - kvm-kernel-KVM-x86-Add-KVM_GET-SET_VCPU_EVENTS.patch [bz#541084]
  - Resolves: bz#541084
    (KVM: x86: Add KVM_GET/SET_VCPU_EVENTS)
  - kvm-x86-Add-support-for-VCPU-event-states.patch [bz#541084]
  - kvm-BZ550265-compute-checksum-for-roms-bigger-than-a-seg.patch [bz#550265]
  - kvm-Fix-a-race-in-the-device-that-cuased-guest-stack-on-.patch [bz#503759]
  - kvm-Queue-notify-support-for-virtio-block-device.patch [bz#552250]
  - kvm-The-driver-device-pair-does-not-have-a-reset-option-.patch [bz#550755]
  - kvm-The-driver-device-pair-does-not-have-a-reset-option-2.patch [bz#550755]
  - Resolves: bz#503759
    (hypercall device - Vm becomes non responsive on Sysmark benchmark (when more than 7 vm's running simultaneously))
  - Resolves: bz#541084
    (KVM: x86: Add KVM_GET/SET_VCPU_EVENTS)
  - Resolves: bz#550265
    (gPXE fails to PXE boot on e1000 virtual NIC)
  - Resolves: bz#550755
    (Hypercall driver doesn't reset device on power-down)
  - Resolves: bz#552250
    (Windows virtio block driver performs poorly on small size requests. In addition, cpu usage on the quest side is very high while handling write requests.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-143.el5
changelog:
  - kvm-Documentation-Fix-description-of-cache-option-for-dr.patch [bz#545194]
  - kvm-monitor-allow-device-to-be-ejected-if-no-disk-is-ins.patch [bz#539250]
  - Resolves: bz#539250
    (Cannot eject cd-rom when configured to host cd-rom)
  - Resolves: bz#545194
    (Discrepancy between man page and source code for qcow2 with regards to default value used when no explicit caching is specified)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-142.el5
changelog:
  - Updated kversion to 2.6.18-183.el5 to match build root
  - kvm-removing-debugging-printf-leftover.patch [bz#530533]
  - kvm-enable_write_cache-is-one-bool-no-need-for-32bits.patch [bz#549938]
  - kvm-virtio_blk-save-if-cache-was-enabled.patch [bz#549938]
  - kvm-ide-propagate-version_id-to-all-save-load-functions.patch [bz#549938]
  - kvm-ide-save-if-cache-was-enabled.patch [bz#549938]
  - kvm-savevm-add-version_id-to-all-savevm-functions.patch [bz#541731]
  - kvm-We-need-current-machine-defined-sooner.patch [bz#541731]
  - kvm-Add-support-for-DeviceVersion-to-machine-type.patch [bz#541731]
  - kvm-Introduce-rhel5.4.0-machine-type.patch [bz#541731]
  - kvm-Introduce-rhel-5.5.0-machine-type.patch [bz#541731]
  - kvm-cpu-for-x86-don-t-save-new-fields-if-version-8.patch [bz#541731]
  - kvm-RHEL5.4-needs-cpu-at-version-7.patch [bz#541731]
  - kvm-RHEL-5.4.0-don-t-have-kvmclock.patch [bz#541731]
  - kvm-RHEL5.4-needs-ide-at-device-version-3.patch [bz#541731]
  - kvm-RHEL5.4-needs-virtio-blk-at-device-version-2.patch [bz#541731]
  - kvm-make-5.4.0-machine-the-default.patch [bz#541731]
  - Resolves: bz#530533
    (debug message is displayed when save VM state into a compressed file)
  - Resolves: bz#541731
    (kvm: migration: mechanism to make older savevm versions to be emitted on some cases)
  - Resolves: bz#549938
    (Maintain barrier state after migration)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-140.el5
changelog:
  - kvm-kernel-KVM-MMU-remove-prefault-from-invlpg-handler.patch [bz#531887]
  - Resolves: bz#531887
    (BSOD BAD_POOL_HEADER STOP 0x19 during boot of Windows Server 2008 R2 installer)
  - kvm-Make-SMBIOS-pass-MS-SVVP-test.patch [bz#537178]
  - kvm-bz-545136-whitelist-host-virtio-networking-features.patch [bz#545136]
  - kvm-fix-rtc-td-hack-on-host-without-high-res-timers.patch [bz#543137]
  - kvm-v2-RHEL5-BZ543979-get-roms-more-room.-Glauber-Costa.patch [bz#543979]
  - Resolves: bz#537178
    (Need to generate SMBIOS table 4 data for windows guests)
  - Resolves: bz#543137
    (time drift in win2k364 KVM guest)
  - Resolves: bz#543979
    (gPXE fails to PXE boot on e1000 virtual NIC)
  - Resolves: bz#545136
    (whitelist host virtio networking features)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-139.el5
changelog:
  - Updated kversion to 2.6.18-182.el5 to match build root
  - Require etherboot directly, to make sure it is installed by default
  - Resolves: bz#546019


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-138.el5
changelog:
  - Updated kversion to 2.6.18-181.el5 to match build root
  - Use the new gpxe/etherboot configurable pxe-zroms-qemu system
  - Resolves: bz#546019


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-137.el5
changelog:
  - Updated kversion to 2.6.18-176.el5 to match build root
  - kvm-kernel-KVM-x86-make-double-triple-fault-promotion-generic-t.patch [bz#532086]
  - kvm-kernel-KVM-x86-raise-TSS-exception-for-NULL-CS-and-SS-segme.patch [bz#532086]
  - kvm-kernel-KVM-x86-emulator-limit-instructions-to-15-bytes.patch [bz#541165]
  - Resolves: bz#532086
    (Rhev-Block driver causes  'unhandled vm exit' with 32bit win2k3r2sp2 Guest VM  on restart)
  - Resolves: bz#541165
    (CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes [rhel-5.5])

  - kvm-qcow2-Store-exact-backing-format-length.patch [bz#540893]
  - kvm-qcow-qcow2-Add-bdrv_aio_flush.patch [bz#542923]
  - Resolves: bz#540893
    (qemu-img: snapshot info error)
  - Resolves: bz#542923
    (Get segmentation fault when running with ide block on kvm-83-136.el5)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-136.el5
changelog:
  - Update kversion to 2.6.18-175.el5 to match build root
  - kvm-block-use-fdatasync-instead-of-fsync-if-possible.patch [bz#537646]
  - kvm-block-add-aio_flush-operation.patch [bz#537646]
  - kvm-ide-use-bdrv_aio_flush.patch [bz#537646]
  - kvm-virtio-blk-add-volatile-writecache-feature.patch [bz#537646]
  - kvm-qcow2-Fix-grow_refcount_table-error-handling.patch [bz#537075]
  - kvm-virtio-blk-Stop-VM-on-read-errors.patch [bz#531827]
  - kvm-ide-Stop-VM-on-read-errors.patch [bz#531827 bz#531827 bz#533390]
  - kvm-slirp-Reassign-same-address-to-same-DHCP-client.patch [bz#531631]
  - kvm-block-add-enable_write_cache-flag.patch [bz#537646]
  - kvm-build-fix-add-pci_get_bus_and_slot-to-compat_apis.patch [bz#539589]
  - kvm-Fix-race-between-migration-and-cpu-main-loop.patch [bz#533090]
  - Resolves: bz#531631
    (Windows XP unattended install doesn't get an IP address after rebooting, if using -net user)
  - Resolves: bz#531827
    (O/S Filesystem Corruption with RHEL-5.4 on a RHEV Guest)
  - Resolves: bz#533090
    (Windows Server 2008 R2 shutdown hangs after restore from migration)
  - Resolves: bz#533390
    (RHEL5.4 VM image corruption with an IDE v-disk)
  - Resolves: bz#537075
    (qcow2: infinite recursion on grow_refcount_table() error handling)
  - Resolves: bz#537646
    (backports of qemu barrier support)
  - Resolves: bz#539589
    (kvm can't build against kernel-2.6.18-174.el5)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-135.el5
changelog:
  - kvm-kernel-531701-KERNEL-v2-allow-userspace-to-adjust-kvmclock-.patch [bz#531701]
  - kvm-531701-properly-save-kvm-system-time-msr-registers.patch [bz#531701]
  - kvm-BZ531701-get-and-set-clock-upon-migration.patch [bz#531701]
  - Resolves: bz#531701
    (pvclock msr values are not preserved across remote migration)

  - Filter out ksym dependencies only known non-whitelisted symbols [bz#533197]
  - Resolves: bz#533197


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-134.el5
changelog:
  - kvm-kernel-allow-to-address-up-to-48-bits-of-physical-memory-in.patch [bz#516545 bz#517223]
  - Resolves: bz#516545
    (qemu-kvm crashed when setting 32bitwin28k with 64G ram)
  - Related: bz#517223
    (BUG: warning at /builddir/build/BUILD/kvm-83-maint-snapshot-20090205/kernel-/x86/x86.c:240/kvm_queue_exception_e() (Tainted: G     ))

  - kvm-Add-smp_call_function_many-to-compat_apis.patch [bz#533059]
  - Resolves: bz#533059
    (kvm modules can't be built against latest kernel-devel package)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-133.el5
changelog:
  - Update kversion to 2.6.18-172.el5 to match build root
  - kvm-kernel-KVM-Timer-event-should-not-unconditionally-unhalt-vc.patch [bz#492663]
  - kvm-kernel-KVM-Fix-interrupt-unhalting-a-vcpu-when-it-shouldn-t.patch [bz#502086]
  - Resolves: bz#492663
    (KVM: Timer event should not unconditionally unhalt vcpu)
  - Resolves: bz#502086
    (KVM: Fix interrupt unhalting a vcpu when it shouldn't)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-132.el5
changelog:
  - kvm-keep-initrd-in-below-4g-area.patch [bz#529694]
  - Resolves: bz#529694
    (-initrd is broken with > 4GB guests)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-131.el5
changelog:
  - kvm-kernel-KVM-SVM-Reset-cr0-properly-on-vcpu-reset.patch [bz#525699]
  - Resolves: bz#525699
    (x86_64 guest hang when set guest's cpu1 online on AMD host)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-130.el5
changelog:
  - Update kversion to 2.6.18-168.el5 to match kernel-devel on build root
  - kvm-kernel-get_tss_base_addr-should-return-gpa_t-type.patch [bz#516762]
  - Resolves: bz#516762
    (qemu aborted when restart 32bitwin23k with more than 4G mem in intel host.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-129.el5
changelog:
  - kvm-Fix-VDI-audio-stop.patch [bz#520394]
  - Resolves: bz#520394
    (KVM : QEMU-Audio attempting to stop unactivated audio device (snd_playback_stop: ASSERT playback_channel->base.active failed).)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-128.el5
changelog:
  - kvm-fix-kvm_arch_save_regs-potential-stack-corruptio.patch [bz#528917]
  - Resolves: bz#528917
    (qemu-kvm : msrs[] array in kvm_arch_save_regs() too small / may cause stack corruption)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-127.el5
changelog:
  - kvm-RHEL-5.X-5.4.Z-Makefile-fix-ksm-dir-has-no-ARCH-pref.patch [bz#527722]
  - Resolves: bz#527722
    (Build tree for RHEL 5.X and RHEL 5.4.z contains build bugs)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-126.el5
changelog:
  - Add --disable-pcspk option to ./configure [bz#516672]
  - Resolves: bz#516672
    (Disable unused/unsupported features on qemu-kvm)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-125.el5
changelog:
  - kvm-kernel-KVM-VMX-Adjust-rflags-if-in-real-mode-emulation.patch [bz#517324]
  - kvm-kernel-KVM-When-switching-to-a-vm8086-task-load-segments-as.patch [bz#517324]
  - kvm-kernel-RHEL5.4-defined-this-constants-in-asm-msr.h.patch [bz#515749]
  - kvm-kernel-For-RHEl5.x-return-types-of-hrtimers-is-int.patch [bz#515749]
  - kvm-kernel-KVM-VMX-flush-TLB-with-INVEPT-on-cpu-migration.patch [bz#518081]
  - kvm-kernel-KVM-Fix-task-switch-back-link-handling-v2-including-.patch [bz#517324]
  - Resolves: bz#515749
    (Remove warnings from kvm compilation)
  - Resolves: bz#517324
    (KVM does not implement proper support for hardware task linking when using vm8086 mode)
  - Resolves: bz#518081
    (vmentry fails with ept misconfig)

  - kvm-test-access-remove-warning.patch [bz#515749]
  - kvm-test-emulator-remove-unused-variable.patch [bz#515749]
  - kvm-test-vmexit-remove-warning-undefined-printf.patch [bz#515749]
  - kvm-external-module-compat-bring-c89-prototypes-to-intel.patch [bz#515749]
  - Resolves: bz#515749
    (Remove warnings from kvm compilation)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-124.el5
changelog:
  - kvm-kernel-KVM-x86-verify-MTRR-PAT-validity.patch [bz#526837]
  - Resolves: bz#526837
    (KVM: x86: verify MTRR/PAT validity (upstream backport))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-123.el5
changelog:
  - kvm-Disable-help-for-vmware-vga-and-enable-nesting.patch [bz#516672]
  - kvm-Now-that-we-have-disable-bluetooth-disable-also-bt-c.patch [bz#516672]
  - kvm-migration_notify_register-is-only-used-by-spice.patch [bz#516672]
  - kvm-Fix-typo-should-have-been-from-the-beggining.patch [bz#516672]
  - kvm-Don-t-compile-drivers-that-are-not-used-in-a-pc.patch [bz#516672]
  - kvm-Add-option-to-disable-pcspk.patch [bz#516672]
  - kvm-usb_bluez-depends-of-bluez.patch [bz#516672]
  - Resolves: bz#516672
    (Disable unused/unsupported features on qemu-kvm)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-122.el5
changelog:
  - Update kversion to 2.6.18-164.2.1.el5 to match kernel-devel on build root
  - kvm-libkvm-Add-a-wrapper-for-an-ioctl-for-the-KVM_SE.patch [bz#508040]
  - kvm-Fetch-sub-leaf-cpuid-values-for-functions-4-0xb-0xd.patch [bz#508040]
  - kvm-Initialize-entire-cpuid2-structure.patch [bz#508040]
  - kvm-extend-smp-parsing-to-include-cores-and-threads-opti.patch [bz#508040]
  - kvm-push-CPUID-level-to-4-to-allow-Intel-multicore-decod.patch [bz#508040]
  - kvm-set-CPUID-bits-to-present-cores-and-threads-topology.patch [bz#508040]
  - kvm-allow-overriding-of-CPUID-level-on-command-line.patch [bz#508040]
  - kvm-force-enable-options.patch [bz#489900]
  - kvm-move-kvm-extra-features-detection-after-kvm-detectio.patch [bz#489900]
  - kvm-add-options-to-request-kvm-pit-and-device-assignment.patch [bz#489900]
  - Added configure options to make build dependency checks more reliable:
    --enable-kvm --enable-qxl --enable-spice --enable-gcrypt --enable-vnc-tls
    [bz#489900]
  - Resolves: bz#489900
    (kvm configure should abort if a required option failed)
  - Resolves: bz#508040
    (Windows XP not using all CPUS)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-121.el5
changelog:
  - Use rtl8029.zrom for ne2k_pci PXE booting (bz#526124)
  - Resolves: bz#526124
    (ne model failed to get ip address)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-120.el5
changelog:
  - kvm-Add-host_device-support-to-qemu-img.-Nolan-Leake.patch [bz#511072 bz#511072]
  - kvm-raw-posix-Handle-errors-in-raw_create.patch [bz#511072 bz#511072]
  - Resolves: bz#511072
    (KVM - qemu-img fail to copy a RAW format image over FCP storage)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-119.el5
changelog:
  - kvm-Use-kernel-s-smp_call_function_single-instead-of-emu.patch [bz#524970]
  - kvm-Properly-handle-pthread_cond_timedwait-timing-out.patch [bz#525114]
  - kvm-fix-segfault-in-setting-migration-speed.patch [bz#522887]
  - Resolves: bz#522887
    (Call to migrate_set_speed after a migrate_cancel causes segmentation fault in kvm)
  - Resolves: bz#524970
    (Guest single-cpu IPI leads to a global IPI on host)
  - Resolves: bz#525114
    (KVM QEMU:RHEL OS VM's became not-responding and stopped answering monitor Commands.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-118.el5
changelog:
  - kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch [bz#521829]
  - Resolves: bz#521829
    (QEMU crash (during virtio-net WHQL tests for Win2008 R2))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-117.el5
changelog:
  - kvm-kernel-KVM-VMX-Optimize-vmx_get_cpl.patch [bz#524126]
  - kvm-kernel-KVM-x86-Disallow-hypercalls-for-guest-callers-in-rin.patch [bz#524126]
  - kvm-kernel-KVM-VMX-Don-t-intercept-MSR_KERNEL_GS_BASE-v2.patch [bz#488130 bz#488130]
  - Resolves: bz#488130
    (KVM: VMX: Don't intercept MSR_KERNEL_GS_BASE (upstream patch))
  - Resolves: bz#524126
    (kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0 [rhel-5.5])

  - kvm-qcow2-Change-cluster-size-to-64k.patch [bz#502809]
  - kvm-Fix-for-Bug-510706-qemu-kvm-segfault-when-using-i825.patch [bz#510706]
  - Resolves: bz#502809
    ([FEAT] Change qcow2 cluster size to 64k)
  - Resolves: bz#510706
    (qemu-kvm segfault when using i82551 vnic)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-116.el5
changelog:
  - kvm-kernel-Revert-KVM-VMX-Don-t-intercept-MSR_KERNEL_GS_BASE.patch [bz#488130]
    kvm-kernel-KVM-VMX-Don-t-intercept-MSR_KERNEL_GS_BASE.patch was broken
  - Related: bz#488130
    (KVM: VMX: Don't intercept MSR_KERNEL_GS_BASE (upstream patch))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-115.el5
changelog:
  - kvm-kernel-KVM-VMX-Don-t-intercept-MSR_KERNEL_GS_BASE.patch [bz#488130]
  - Resolves: bz#488130
    (KVM: VMX: Don't intercept MSR_KERNEL_GS_BASE (upstream patch))
  - kvm-Use-quiet-command-to-get-a-cleaner-build-output.patch [bz#515749]
  - kvm-This-function-is-not-used-anymore.-It-is-opencoded-i.patch [bz#515749]
  - kvm-fds-variable-is-not-used.-Remaining-of-a-missmerge.patch [bz#515749]
  - kvm-use-proper-C89-declarations.patch [bz#515749]
  - kvm-pit-is-used-in-two-cases-not-easy-way-to-define-.patch [bz#515749]
  - kvm-In-qemu-all-buffers-are-uint8_t-not-char.patch [bz#515749]
  - kvm-kvm_allowed-is-exported-in-qemu-kvm.h-and-it-is-used.patch [bz#515749]
  - kvm-add-three-missing-static-modifiers-for-local-functio.patch [bz#515749]
  - kvm-put-declaration-of-enable_async_notification-in-a-pr.patch [bz#515749]
  - kvm-move-several-kvm-variables-after-qemu-kvm.h-include-.patch [bz#515749]
  - kvm-mark-static-do_block_set_watermark.patch [bz#515749]
  - kvm-txbufferaccu_offset-and-irq-fields-were-save-load-as.patch [bz#515749]
  - kvm-mp_state-is-treated-as-unsigned-int-uint32_t-for-sav.patch [bz#515749]
  - kvm-hp_reset-should-have-type-QEMUResetHandler.patch [bz#515749]
  - kvm-make-static-lsi_scsi_uninit.patch [bz#515749]
  - kvm-assigned_dev_data-was-not-used-anywhere.patch [bz#515749]
  - kvm-bios_enabled-is-load-saved-as-uint32_t-declare-it-as.patch [bz#515749]
  - kvm-remove-unused-variable.patch [bz#515749]
  - kvm-add-prototype-for-kvm_add_ioperm_data.patch [bz#515749]
  - kvm-removed-duplicated-re-declaration-of-kvm_context-2.patch [bz#515749]
  - kvm-make-static-update_vbios_real_tpr.patch [bz#515749]
  - kvm-fix-var-may-be-used-uninitialized.patch [bz#515749]
  - kvm-make-local-functions-static.patch [bz#515749]
  - kvm-remove-unused-variable-opt_rom_offset.patch [bz#515749]
  - kvm-removed-duplicated-re-declaration-of-kvm_context.patch [bz#515749]
  - kvm-perror-is-defined-in-stdio.h-that-got-included-indir.patch [bz#515749]
  - kvm-remove-unused-variable-cpu.patch [bz#515749]
  - kvm-nb_sectors-should-be-an-uint64_t.patch [bz#515749]
  - kvm-uhci_reset-should-have-QEMUResetHandler-type.patch [bz#515749]
  - kvm-initialize-blen-and-pa-variables-to-0.patch [bz#515749]
  - kvm-we-got-smp_cpus-declaration-through-sysemu.h.patch [bz#515749]
  - kvm-int-and-long-masked-as-pointers.-cast-to-avoid-warni.patch [bz#515749]
  - kvm-we-got-vm_running-declaration-through-sysemu.h.patch [bz#515749]
  - kvm-BZ503367-obey-S-on-migration.patch [bz#503367 bz#503367]
  - kvm-reason-paramenter-only-exist-in-newer-qemu-s-not-our.patch [bz#515749]
  - kvm-Fix-AltGr-and-dead-keys-with-VNC.patch [bz#521835]
  - kvm-time_t-is-a-long-in-x86_64.patch [bz#515749]
  - kvm-bugzilla-504237-changed-size-of-variables-to-uint64_.patch [bz#515749]
  - Resolves: bz#503367
    (After migration, paused VM is running on destination)
  - Resolves: bz#515749
    (Remove warnings from kvm compilation)
  - Resolves: bz#521835
    (German keymap using KVM+VNC missing some keys)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-114.el5
changelog:
  - kvm-kernel-reset-hflags-on-cpu-reset.patch [bz#502543 bz#521749]
  - Resolves: bz#502543
    (Windows 2008 R2 KVM guest can not restart when set it as multiple cpus)
  - Related: bz#521749
    (Guest Window2008-R2-datacenter installation is stopped at  step "Setup will continue after restarting your computer")


author: Eduardo Habkost <ehabkost@redhat.com> - 83-113.el5
changelog:
  - kvm-qcow2-Refactor-update_refcount.patch [bz#518169]
  - kvm-qcow2-Update-multiple-refcounts-at-once.patch [bz#518169]
  - kvm-Combined-patch-of-two-upstream-commits-the-second-fi.patch [bz#518169]
  - kvm-alloc_cluster_link_l2-Write-complete-sectors.patch [bz#518169]
  - kvm-update_refcount-Write-complete-sectors.patch [bz#518169]
  - Resolves: bz#518169
    (Bad qcow2 performance with cache=off)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-112.el5
changelog:
  - kvm-kernel-Fix-coalesced-interrupt-reporting-in-IOAPIC.patch [bz#521025]
  - Resolves: bz#521025
    (rtc-td-hack stopped working. Time drifts in windows)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-111.el5
changelog:
  - kvm-Fix-VM-state-change-handlers-running-out-of-order.patch [bz#514522]
  - kvm-Revert-Work-around-VM-state-change-handlers-running-.patch [bz#514522]
  - Resolves: bz#514522
    (QEMU: Fix VM change state issue on IO errors)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-110.el5
changelog:
  - Update kversion to 2.6.18-164.el5 to match kernel-devel on build root
  - kvm-kernel-Backport-44882eed2ebe7f75f8cdae5671ab1d6e0fa40dbc.patch [bz#515549]
  - kvm-kernel-kvm-fix-ack-not-being-delivered-when-msi-present.patch [bz#515549]
  - kvm-kernel-kvm-fix-build-with-defconfig.patch [bz#515549]
  - Resolves: bz#515549
    (upstream qemu issues on rhel 5.4)
  - kvm-Remove-initrd-warning-message.patch [bz#512672]
  - Resolves: bz#512672
    (Remove initrd warning message)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-109.el5
changelog:
  - kvm-kernel-add-nmi-support-to-svm.patch [bz#502543 bz#503322 bz#492290]
  - kvm-kernel-VMX-Fix-cr8-exiting-control-clobbering-by-EPT.patch [bz#520285]
  - Resolves: bz#492290
    (KVM: XP virtio-net tests fail with BSOD on AMD host (due to lack of NMI injection masking ability))
  - Resolves: bz#502543
    (Windows 2008 R2 KVM guest can not restart when set it as multiple cpus)
  - Resolves: bz#503322
    (NMI filtering for AMD (Windows 2008 R2 KVM guest can not restart when set it as multiple cpus))
  - Resolves: bz#520285
    (windows 64 bit does vmexit on each cr8 access.)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-108.el5
changelog:
  - kvm-kernel-KVM-MMU-make-__kvm_mmu_free_some_pages-handle-empty-.patch [bz#519397]
  - Resolves: bz#519397
    (KVM: MMU: make __kvm_mmu_free_some_pages handle empty list (upstream backport))


author: Eduardo Habkost <ehabkost@redhat.com> - 83-107.el5
changelog:
  - kvm-kernel-KVM-MMU-fix-bogus-alloc_mmu_pages-assignment.patch [bz#487857]
  - Resolves: bz#487857
    (The emulator hung after input "cpu_set 1 online" on qemuMonitor and select "System->Shutdown")


author: Eduardo Habkost <ehabkost@redhat.com> - 83-106.el5
changelog:
  - Update kversion to 2.6.18-162.el5
  - kvm-Initialize-PS2-keyboard-mouse-state-on-reset.patch [bz#515275]
  - Resolves: bz#515275
    (guest not accepting keystrokes or mouse clicks after reboot)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-105.el5
changelog:
  - kvm-kernel-KVM-MMU-handle-n_free_mmu_pages-n_alloc_mmu_pages-in.patch [bz#487857]
  - Resolves: bz#487857
    (The emulator hung after input "cpu_set 1 online" on qemuMonitor and select "System->Shutdown")


author: Eduardo Habkost <ehabkost@redhat.com> - 83-104.el5
changelog:
  - kvm-ide-calls-register_savevm-three-times-for-pci_ide_sa.patch [bz#514887]
  - Resolves: bz#514887
    (Mouse and keyboard of guest are unavailable after migration-[kvm-83-101.el5])


author: Alan Pevec <apevec@redhat.com> 83-103
changelog:
  - Update kversion to 2.6.18-160.el5
  - kvm-qemu-restore-bdrv-fat.patch [bz#514785]
  - Resolves: bz#514785
    (KVM: support for -fda fat:floppy was removed - needed for RHEVM)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-101.el5
changelog:
  - kvm-make-windows-notice-media-change.patch [bz#513991]
  - kvm-Work-around-VM-state-change-handlers-running-out-of-.patch [bz#511038]
  - Resolves: bz#511038
    (QEMU: crash because of calling stop twice (QXL assertion))
  - Resolves: bz#513991
    (Qemu: change CD right after eject does not work)
  - Disable nbd on configure [bz#512837]
  - Resolves: bz#512837
    (Disable unused/unsupported features on qemu-kvm)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-100.el5
changelog:
  - kvm-Compile-out-NBD-removal.patch [bz#512837]
  - Resolves: bz#512837
    (Disable unused/unsupported features on qemu-kvm)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-99.el5
changelog:
  - kvm-Reset-irq-line-on-qxl-and-vdi-on-guest-reset.patch [bz#514526]
  - kvm-fix-for-bug-508664-KVM-could-not-read-the-boot-disk.patch [bz#508664]
  - Resolves: bz#508664
    (KVM: "could not read the boot disk" error message after running "Sys Mark" benchmark on Windows Guest)
  - Resolves: bz#514526
    (Reset qxl, vdi irq line on guest reset)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-98.el5
changelog:
  - kvm-add-option-to-disable-smb-user-directories.patch [bz#512837]
  - kvm-add-option-to-disable-scsi.patch [bz#512837]
  - kvm-disable-isapc.patch [bz#512837]
  - kvm-add-option-to-disable-kvm-nested.patch [bz#512837]
  - kvm-add-option-to-disable-usb-mass-storage-devices.patch [bz#512837]
  - kvm-add-option-to-disable-usb-wacom-tablets.patch [bz#512837]
  - kvm-add-option-to-disable-usb-serial.patch [bz#512837]
  - kvm-add-option-to-disable-usb-net.patch [bz#512837]
  - kvm-add-option-to-disable-usb-bluez.patch [bz#512837]
  - kvm-change-qcow2-default-cache-mode-to-none.patch [bz#512837]
  - kvm-add-option-to-disable-all-cpu-s-model-different-from.patch [bz#512837]
  - kvm-add-option-to-disable-vmware-drivers.patch [bz#512837]
  - kvm-Enable-configure-out-cards-that-we-don-t-support.patch [bz#512837]
  - kvm-Be-able-to-compile-out-bluetooth.patch [bz#512837]
  - kvm-Disable-unsupported-block-formats.patch [bz#512837]
  - New options to configure to disable unsupported features:
    --disable-smb --disable-scsi --disable-isapc --disable-kvm-nested
    --disable-usb-msd --disable-usb-wacom --disable-usb-serial
    --disable-usb-net --disable-usb-bluez --disable-vmware
    --disable-x86-non-generic-cpus --disable-bluez --audio-card-list=ac97
    --disable-curses
    [bz#512837]
  - Resolves: bz#512837
    (Disable unused/unsupported features on qemu-kvm)
  - kvm-add-workaround-for-libvirt-bug.patch [bz#499405]
  - Resolves: bz#499405
    (KVM: add manufacturer and product name info to guest SMBIOS)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-97.el5
changelog:
  - kvm-kernel-KVM-Fix-dirty-bit-tracking-for-slots-with-large-page.patch [bz#512712]
  - kvm-kernel-Avoid-redelivery-of-edge-interrupt-before-next-edge.patch [bz#513946]
  - Resolves: bz#512712
    (Support huge pages in KVM)
  - Resolves: bz#513946
    (keyboard is slow in windows SMP guest.)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-96.el5
changelog:
  - kvm-kernel-KVM-take-mmu_lock-when-updating-a-deleted-slot.patch [bz#513098]
  - kvm-kernel-KVM-SVM-force-new-asid-on-vcpu-migration.patch [bz#513394]
  - Resolves: bz#513098
    (KVM: take mmu_lock when updating a deleted slot (upstream backport))
  - Resolves: bz#513394
    (KVM: SVM: force new asid on vcpu migration (upstream backport))
  - kvm-Fix-hdev_open-error.patch [bz#513252]
  - Resolves: bz#513252
    (Asignation instead of comparation inside if)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-95.el5
changelog:
  - kvm-enable-rtc-hack-by-default.patch [bz#512898]
  - Resolves: bz#512898
    (Enable rtd-hack by default)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-94.el5
changelog:
  - Update kversion to 2.6.18-159.el5
  - kvm-virtio_net-remove-the-tx-mitigation-timer.patch [bz#504647]
  - Resolves: bz#504647
    (Low UDP throughput from Linux KVM guest)
  - kvm-Use-pci_reset_function-in-RHEL5.4-so-FLR-done-proper.patch [bz#510806]
  - Resolves: bz#510806
    (KVM: invoke pci_reset_function() when PCI device assigned or deassigned to a guest)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-93.el5
changelog:
  - kvm-fix-for-bug-507942-bad-macaddr-of-e1000-in-Windows-2.patch [bz#507942]
  - kvm-Set-the-iothread-s-eventfd-pipe-descriptors-to-non-b.patch [bz#511199 bz#507659 bz#511031]
  - kvm-Disable-hpet-by-default-there-is-no-way-to-enable-it.patch [bz#512894]
  - Resolves: bz#507659
    - Migrate command not  end and vm  responseless on  Nahalem host
  - Resolves: bz#507942
    - QEMU: Windows 2003's built-in driver for e1000 does not work with QEMU's e1000  implementation
  - Resolves: bz#511199
    - KVM : Failed to migrate VM to a loaded Host
  - Resolves: bz#512894
    - Disable hpet by default
  - Related: bz#511031
    - qemu-kvm hang during migration when stress test is running in the guest


author: Eduardo Habkost <ehabkost@redhat.com> - 83-92.el5
changelog:
  - kvm-kernel-KVM-fix-missing-locking-in-alloc_mmu_pages.patch [bz#510770 bz#505629]
  - Resolves: bz#505629
    - KVM: MMU: protect kvm_mmu_change_mmu_pages with mmu_lock (upstream backport)
  - Resolves: bz#510770
    - BUG: soft lockup - CPU#4 stuck for 10s! on kksmd


author: Eduardo Habkost <ehabkost@redhat.com> - 83-91.el5
changelog:
  - kvm-kernel-MMU-limit-rmap-chain.patch [bz#508776]
  - kvm-kvmtrace-update-formats.patch [bz#508776]
  - Resolves: bz#508776 - KVM: MMU: limit rmap chain


author: Eduardo Habkost <ehabkost@redhat.com> - 83-90.el5
changelog:
  - Update kversion to 2.6.18-158.el5
  - kvm-net-add-net-tap-sndbuf-option-with-a-sensible-defaul.patch [bz#508861]
  - Resolves: bz#508861 - kvm: add tap send buffer limit to help UDP networking


author: Eduardo Habkost <ehabkost@redhat.com> - 83-89.el5
changelog:
  - kvm-kernel-KVM-Introduce-set-get-_interrupt_shadow.patch [bz#509208]
  - kvm-kernel-KVM-Deal-with-interrupt-shadow-state-for-emulated-in.patch [bz#509208]
  - Resolves: bz#509208 - KVM fixes to make gPXE boot ROMs work
  - kvm-Windows-virtio-driver-cannot-pass-WHQL-certification.patch [bz#497058]
  - Resolves: bz#497058 - Change virtio-blk pci dubclass to PCI_CLASS_STORAGE_SCSI


author: Eduardo Habkost <ehabkost@redhat.com> - 83-88.el5
changelog:
  - kvm-KSM-suspend-fix.patch [bz#505440]
  - Resolves: bz#505440 - Panic on suspend with KSM module loaded


author: Eduardo Habkost <ehabkost@redhat.com> - 83-87.el5
changelog:
  - kvm-kernel-KVM-limit-lapic-periodic-timer-frequency.patch [bz#510087]
  - Resolves: bz#510087 - KVM: limit lapic periodic timer frequency


author: Eduardo Habkost <ehabkost@redhat.com> - 83-86.el5
changelog:
  - kvm-fix-bug-506375.patch [bz#506375]
  - Resolves: bz#506375 - ksm latency issue when killing guests


author: Eduardo Habkost <ehabkost@redhat.com> - 83-85.el5
changelog:
  - Update kversion to 2.6.18-157.el5
  - kvm-kernel-KVM-SVM-Remove-port-80-passthrough-upstream-backport.patch [bz#507730]
  - kvm-kernel-KVM-protect-concurrent-make_all_cpus_request-upstrea.patch [bz#507733]
  - Resolves: bz#507730 - KVM: SVM: Remove port 80 passthrough (upstream backport)
  - Resolves: bz#507733 - KVM: protect concurrent make_all_cpus_request (upstream backport)
  - kvm-make-vnc-socket-non-blocking.patch [bz#507880]
  - kvm-provide-stop-reason-on-demand.patch [bz#505999]
  - kvm-Change-default-CPU-model-to-model-6-skype-fix-2.patch [bz#508623]
  - Resolves: bz#505999 - pause reason not stored by qemu
  - Resolves: bz#507880 - qemu hangs during VNC connection from RHEVM
  - Resolves: bz#508623 - Only 1 processor can be detected in "systeminfo" of win2k3 guest with -smp 2 and ACPI multiprocessor HAL.


author: Eduardo Habkost <ehabkost@redhat.com> - 83-84.el5
changelog:
  - kvm-net-avoid-leaking-VLANClientState-on-PCI-NIC-hot-rem.patch [bz#500977 bz#500978 bz#500980]
  - kvm-Fix-rtl8139-segfault-during-live-migrate-after-NIC-h.patch [bz#500978]
  - kvm-Fix-ne2k_pci-segfault-during-live-migrate-after-NIC-.patch [bz#500977]
  - kvm-Fix-eepro100-segfault-during-live-migrate-after-NIC-.patch [bz#500980]
  - Resolves: bz#500977 - ne2k-pci segfault during live migrate after NIC hot-unplug
  - Resolves: bz#500978 - Live migration fails after rtl8139 NIC hot-unplug
  - Resolves: bz#500980 - Live migrate fails after i82551 NIC hot-unplug


author: Eduardo Habkost <ehabkost@redhat.com> - 83-83.el5
changelog:
  - Update kversion to 2.6.18-156.el5
  - kvm-kernel-kvm-x86-ignore-reads-to-perfctr-msrs.patch [bz#482423]
  - Resolves: bz#482423 - Kaspersky AV crash the VM after installation
  - kvm-Revert-Disable-virtio-balloon-bz-500453.patch [bz#503790]
  - kvm-Remove-broken-command-line-option-balloon.patch [bz#503790]
  - kvm-New-command-line-option-balloon.patch [bz#503790]
  - Resolves: bz#503790 - virtio balloon: add a command-line option to disable it at runtime


author: Eduardo Habkost <ehabkost@redhat.com> - 83-82.el5
changelog:
  - kvm-bz-505090-Guess-host-device-type-from-requested-gues.patch [bz#505090]
  - kvm-vnc-rework-VncState-release-workflow.patch [bz#505641]
  - Resolves: bz#505090 - Virtual machine fails to start without cdom - qemu: could not open disk image /dev/sr0
  - Resolves: bz#505641 - Remote VNC client can cause any QEMU VNC server to crash with a double-free


author: Eduardo Habkost <ehabkost@redhat.com> - 83-81.el5
changelog:
  - Update kversion to 2.6.18-155.el5
  - kvm-enable-sysenter-on-32bit-guests-skype-fix.patch [bz#504628]
  - Resolves: bz#504628 - Skype crashes on VM.


author: Eduardo Habkost <ehabkost@redhat.com> - 83-80.el5
changelog:
  - kvm-Fix-vga_screen_dump_blank-PPM-generation-bz-500717.patch [bz#500717]
  - kvm-Add-qemu-img-check-subcommand.patch [bz#506017]
  - Resolves: bz#500717 - qemu-kvm can generate invalid screendumps during reboot
  - Resolves: bz#506017 - 'qemu-img check' subcommand is not backported


author: Eduardo Habkost <ehabkost@redhat.com> - 83-79.el5
changelog:
  - Update kversion to 2.6.18-154.el5
  - Related: bz#504237 - Pull RHEV bugfixes for RHEL
  - Related: bz#504713 - BIOS bug - processor goes missing with RHEL3U8 boot kernel


author: Eduardo Habkost <ehabkost@redhat.com> - 83-78.el5
changelog:
  - kvm-kernel-KVM-Make-paravirt-tlb-flush-also-reload-the-PAE-PDPT.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes for RHEL
  - kvm-bios-Fix-missing-DMI-table-entries.patch [bz#504713]
  - kvm-Correctly-assign-apic-ids-for-hotplugged-cpus.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes for RHEL
  - Resolves: bz#504713 - BIOS bug - processor goes missing with RHEL3U8 boot kernel


author: Eduardo Habkost <ehabkost@redhat.com> - 83-77.el5
changelog:
  - kvm-kernel-KVM-x86-Ignore-reads-to-K7-EVNTSEL-MSRs.patch [bz#504237]
  - kvm-kernel-KVM-MMU-protect-kvm_mmu_change_mmu_pages-with-mmu_lo.patch [bz#504237]
  - kvm-kernel-KVM-Fix-PDPTR-reloading-on-CR4-writes.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-76.el5
changelog:
  - kvm-Add-reset-to-e1000-nic.patch [bz#504237]
  - kvm-Add-reset-to-rtl8139-nic.patch [bz#504237]
  - kvm-Register-uhci_reset-callback.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-75.el5
changelog:
  - kvm-Add-rtc-reset-function.patch [bz#504237]
  - kvm-fix-unresigered-vbe-physical-mapping-as-reserved-mem.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-74.el5
changelog:
  - Remove /usr/bin/qemu-kvm and keep only /usr/libexec/qemu-kvm
  - Resolves: bz#503955 - Move qemu-kvm to /usr/libexec


author: Eduardo Habkost <ehabkost@redhat.com> - 83-73.el5
changelog:
  - kvm-vdi_port-call-disconnect-on-reset-504463.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-72.el5
changelog:
  - kvm-KSM-avoid-losing-but-no-mem-leak-rmap_items-inside-k.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-71.el5
changelog:
  - kvm-migrate_fd_close-delete-associated-io-handler-before.patch [bz#504237]
  - kvm-qemu-add-notify-command-line-option-to-enable-async-.patch [bz#504237]
  - kvm-migration-exec-notify-upon-successful-completion-of-.patch [bz#504237]
  - kvm-asynchronous-notifications-add-all-event-v3.patch [bz#504237]
  - kvm-exec-migration-handle-EINTR-in-popen_get_buffer-v3.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-70.el5
changelog:
  - kvm-kernel-fix-bug-between-mm_to_kvm-and-kvm_get_kvm-RHEL-5-bac.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-68.el5
changelog:
  - kvm-fix-qemu_aio_flush.patch [bz#504237]
  - kvm-spice-change-vendor-id-504190.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-67.el5
changelog:
  - kvm-doesn-t-build-on-newer-RHEL-5.4-kernels-because-.patch [bz#504047]
  - Resolves: bz#504047 - kvm doesn't build on newer RHEL-5.4 kernels because of get_user_pages_fast()


author: Eduardo Habkost <ehabkost@redhat.com> - 83-66.el5
changelog:
  - Move qemu-kvm to /usr/libexec, and make /usr/bin/qemu-kvm a symlink to it
  - Related: bz#503955
  - Resolves: bz#504237


author: Eduardo Habkost <ehabkost@redhat.com> - 83-65.el5
changelog:
  - kvm-kernel-Merge-kvm_ioapic_get_delivery_bitmask-into-kvm_get_i.patch [bz#504018]
  - Resolves: bz#504018 - kernel oops at kvm_get_intr_delivery_bitmask+0x4e/0x86
  - kvm-qxl-fix-message-flood-in-qxl_display_update-501190.patch [bz#504237]
  - kvm-fix-bigmem-offset-calculation-for-qxl.patch [bz#504237]
  - kvm-add-non-arbitrary-migration-stop-condition.patch [bz#504237]
  - kvm-set-migration-max-downtime.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-64.el5
changelog:
  - Update kversion to 2.6.18-152.el5
  - Related: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-63.el5
changelog:
  - kvm-kernel-KVM-x86-check-for-cr3-validity-in-mmu_alloc_roots.patch [bz#504237]
  - kvm-augment-info-migrate-with-page-status.patch [bz#504237]
  - kvm-introduce-set_rate_limit-function-for-QEMUFile.patch [bz#504237]
  - kvm-allow-changing-the-speed-of-a-running-migration.patch [bz#504237]
  - kvm-remove-duplicated-code.patch [bz#504237]
  - kvm-only-execute-lapic-load-when-cpu-is-already-initiali.patch [bz#504237]
  - kvm-make-sure-kvm_vpu_init-is-the-last-thing-called-in-c.patch [bz#504237]
  - kvm-Prevent-CD-ROM-media-eject-while-device-is-locked.patch [bz#504237]
  - kvm-KSM-sync-ksm-and-rhel-5.4-gup-fast.patch [bz#504237]
  - kvm-ksm-remove-kprobes-usage-for-rhel-5.4-v3.patch [bz#504237]
  - kvm-KSM-avoid-usage-of-free-slabed-memory.-triggered-wit.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-60.el5
changelog:
  - kvm-Disable-virtio-balloon-bz-500453.patch [bz#503811]
  - Resolves: bz#503811 - Pull disable-virtio-balloon patch from RHEV branch


author: Eduardo Habkost <ehabkost@redhat.com> - 83-59.el5
changelog:
  - kvm-kernel-KVM-Fix-NX-support-reporting.patch [bz#503793]
  - kvm-kernel-KVM-x86-check-for-cr3-validity-in-ioctl_set_sregs.patch [bz#503793]
  - kvm-Revert-qemu-fix-bad-physical-address-in-kvm_update_d.patch [bz#503793]
  - kvm-Enable-dirty-logging-for-all-regions-during-migratio.patch [bz#503793]
  - kvm-migrate.c-migrate_fd_put_buffer-Do-not-busyloop-stop.patch [bz#503793]
  - kvm-cirrus-fix-text-screen-corruption-on-reset.patch [bz#503793]
  - kvm-Support-multiple-VNC-clients-re-added.patch [bz#503793]
  - kvm-vnc-fix-multiple-connections-displaystate-initializa.patch [bz#503793]
  - kvm-vnc-Remove-checks-for-qemu_realloc-return-value.patch [bz#503793]
  - kvm-ksm-remove-full-swapping-support-for-kvm-mmu-pages-u.patch [bz#503793]
  - kvm-keypad-support.patch [bz#503793]
  - kvm-Call-missing-qemu_bh_delete-at-the-end-of-raw_aio_em.patch [bz#503793]
  - kvm-Add-qemu_send_raw-to-vlan.patch [bz#503793]
  - kvm-Minimal-ethernet-frame-length-is-64-bytes.patch [bz#503793]
  - kvm-Don-t-send-all-gratuitous-packets-at-once.patch [bz#503793]
  - kvm-fix-wrong-bios-pci-mapping-for-large-slots-Bug-49943.patch [bz#503793]
  - Resolves: bz#503793 - Pull RHEV bugfixes between kvm-83-52.el5ovirt and kvm-83-58.el5ovirt
  - Bump release number to make it higher than the latest .el5ovirt RPM


author: Eduardo Habkost <ehabkost@redhat.com> - 83-44.el5
changelog:
  - kvm-kernel-KVM-Ioctls-for-init-MSI-X-entry.patch [bz#498085]
  - kvm-kernel-KVM-Add-MSI-X-interrupt-injection-logic.patch [bz#498085]
  - kvm-kernel-KVM-Enable-MSI-X-for-KVM-assigned-device.patch [bz#498085]
  - kvm-kernel-KVM-Get-support-IRQ-routing-entry-counts.patch [bz#498085]
  - kvm-kernel-KVM-Device-assignment-framework-rework.patch [bz#498085]
  - kvm-kernel-KVM-Correct-deassign-device-ioctl-to-IOW.patch [bz#498085]
  - kvm-kernel-KVM-Wake-up-waitqueue-before-calling-get_cpu.patch [bz#498085]
  - kvm-kernel-KVM-use-smp_send_reschedule-in-kvm_vcpu_kick.patch [bz#498085]
  - kvm-kernel-KVM-protect-assigned-dev-workqueue-int-handler-and-i.patch [bz#498085]
  - kvm-libkvm-support-KVM_ASSIGN_DEV_IRQ-and-KVM_DEASSI.patch [bz#498085]
  - kvm-qemu-Replace-force-type-convert-with-container_o.patch [bz#498085]
  - kvm-qemu-Make-device-assignment-depend-on-libpci.patch [bz#498085]
  - kvm-qemu-Figure-out-device-capability.patch [bz#498085]
  - kvm-qemu-Support-for-device-capability.patch [bz#498085]
  - kvm-libkvm-user-interface-for-MSI-type-irq-routing.patch [bz#498085]
  - kvm-libkvm-allocate-unused-gsi-for-irq-routing.patch [bz#498085]
  - kvm-qemu-expose-MSI-capability-to-guest.patch [bz#498085]
  - kvm-qemu-Support-MSI-convert-to-INTx-in-device-assig.patch [bz#498085]
  - kvm-qemu-Add-MSI-X-related-macro-to-pci.c.patch [bz#498085]
  - kvm-libkvm-add-ioctl-wrappers-for-KVM_SET_MSIX_ENTRY.patch [bz#498085]
  - kvm-qemu-enable-MSI-X-capabilty-for-assigned-device.patch [bz#498085]
  - kvm-qemu-fix-interrupt-pin-0-assignment.patch [bz#498085]
  - kvm-qemu-Fill-config-with-correct-VID-DID.patch [bz#498085]
  - kvm-qemu-emulate-command-register-for-SRIOV-virtual-.patch [bz#498085]
  - kvm-qemu-Move-assigned-device-capability-init-earlie.patch [bz#498085]
  - kvm-qemu-improve-pci-host-device-address-parsing.patch [bz#498085]
  - kvm-qemu-don-t-check-per-vector-mask-bit-before-enab.patch [bz#498085]
  - kvm-qemu-Fix-wrong-counting-of-MSI-X-table-size.patch [bz#498085]
  - kvm-device-assignment-move-memset-to-after-mmap-failure-.patch [bz#498085]
  - kvm-Remove-MSI-masking-when-setting-initial-MSI-X-entrie.patch [bz#498085]
  - kvm-nr_cpu_ids-compat.patch [bz#498085]
  - kvm-smp_send_reschedule-compat.patch [bz#498085]
  - kvm-Adjust-kvm_smp_send_reschedule-availability.patch [bz#498085]
  - kvm-Adjust-nr_cpu_ids-check.patch [bz#498085]
  - Resolves: bz#498085 - kvm add guest MSI support


author: Eduardo Habkost <ehabkost@redhat.com> - 83-43.el5
changelog:
  - Update kversion to kernel-2.6.18-151.el5
  - Related: bz#498071 - kvm external module build fixes for RHEL 5.4
  - Related: bz#498084 - Add infrastructure needed for later adding guest MSI support


author: Eduardo Habkost <ehabkost@redhat.com> - 83-42.el5
changelog:
  - kvm-kernel-KVM-Add-support-to-disable-MSI-for-assigned-device.patch [bz#498084]
  - kvm-kernel-KVM-Userspace-controlled-irq-routing.patch [bz#498084]
  - kvm-kernel-KVM-Use-irq-routing-API-for-MSI.patch [bz#498084]
  - kvm-kernel-KVM-VMX-Use-kvm_mmu_page_fault-handle-EPT-violation-.patch [bz#498084]
  - kvm-kernel-KVM-Report-IRQ-injection-status-for-MSI-delivered-in.patch [bz#498084]
  - kvm-kernel-KVM-define-KVM_CAP_DEVICE_DEASSIGNMENT.patch [bz#498084]
  - kvm-kernel-KVM-fix-kvm_vm_ioctl_deassign_device.patch [bz#498084]
  - kvm-kernel-KVM-Split-IOAPIC-structure.patch [bz#498084]
  - kvm-kernel-KVM-Unify-the-delivery-of-IOAPIC-and-MSI-interrupts.patch [bz#498084]
  - kvm-kernel-KVM-Change-API-of-kvm_ioapic_get_delivery_bitmask.patch [bz#498084]
  - kvm-kernel-KVM-Update-intr-delivery-func-to-accept-unsigned-lon.patch [bz#498084]
  - kvm-kernel-KVM-bit-ops-for-deliver_bitmap.patch [bz#498084]
  - kvm-Fix-request_irq-for-2.6.19.patch [bz#498071]
  - kvm-Fix-kvm_request_irq-race.patch [bz#498071]
  - kvm-qemu-device-assignment-don-t-use-libkvm-s-privat.patch [bz#498084]
  - kvm-qemu-device-assignment-add-assigned_dev_update_i.patch [bz#498084]
  - kvm-qemu-device-assignment-fix-ROM-writing.patch [bz#498084]
  - kvm-libkvm-support-for-irq-routing.patch [bz#498084]
  - kvm-qemu-initialize-irq-routing-table.patch [bz#498084]
  - kvm-libkvm-Fix-return-of-kvm_commit_irq_routes.patch [bz#498084]
  - kvm-libkvm-add-deassign-ioctl.patch [bz#498084]
  - kvm-qemu-free-device-on-error-in-init_assigned_devic.patch [bz#498084]
  - kvm-qemu-wrap-assign_device-and-assign_irq.patch [bz#498084]
  - kvm-qemu-deassign-device-from-guest.patch [bz#498084]
  - kvm-qemu-fix-hot-remove-assigned-device.patch [bz#498084]
  - kvm-qemu-fix-build-breakage-on-non-device-deassignme.patch [bz#498084]
  - kvm-qemu-deassign-irq-for-INTx.patch [bz#498084]
  - Resolves: bz#498071 - kvm external module build fixes for RHEL 5.4
  - Resolves: bz#498084 - Add infrastructure needed for later adding guest MSI support


author: Eduardo Habkost <ehabkost@redhat.com> - 83-40.el5
changelog:
  - Enabling spice support, now that qspice-0.3.0 is available on the buildroot
  - Resolves: bz#497232 - kvm not linked against qspice library


author: Eduardo Habkost <ehabkost@redhat.com> - 83-39.el5
changelog:
  - kvm-Revert-external-module-don-t-redefined-get_user_page.patch [bz#501777]
    (Reverts kvm-external-module-don-t-redefined-get_user_pages_fast-.patch, that
    didn't solve the issue)
  - kvm-external-module-don-t-redefine-get_user_pages_fast-o.patch [bz#501777]
  - Resolves: bz#501777 - kvm doesn't build on newer RHEL-5.4 kernels because of get_user_pages_fast()


author: Eduardo Habkost <ehabkost@redhat.com> - 83-38.el5
changelog:
  - kvm-external-module-don-t-redefined-get_user_pages_fast-.patch [bz#501777]
  - Resolves: bz#501777 - kvm doesn't build on newer RHEL-5.4 kernels because of get_user_pages_fast()


author: Eduardo Habkost <ehabkost@redhat.com> - 83-37.el5
changelog:
  - kvm-external-module-Fix-build-for-VT-d-AMD-IOMMU.patch [bz#498071]
  - kvm-external-module-don-t-conflict-w-phys_addr_t.patch [bz#498071]
  - Related: bz#498071 - kvm external module build fixes for RHEL 5.4


author: Eduardo Habkost <ehabkost@redhat.com> - 83-36.el5
changelog:
  - kvm-qemu-Add-support-for-SMBIOS-command-line-options-Ale.patch [bz#501729 bz#501729]
  - kvm-Don-t-try-to-extract-protocol-from-absolute-filename.patch [bz#501729]
  - kvm-kvmtrace_format-read-usr-share-kvm-formats-by-defaul.patch [bz#501729]
  - kvm-e1000-Do-not-reinit-pci-config-space-to-0.patch [bz#501729]
  - kvm-Fix-cluster-freeing-in-qcow2.patch [bz#501729]
  - kvm-Revert-Fix-CVE-2008-0928-insufficient-block-device-a.patch [bz#501729]
  - kvm-Fix-CVE-2008-0928-insufficient-block-device-address-.patch [bz#501729]
  - kvm-don-t-use-a-32-bit-bit-type-as-offset-argument.patch [bz#501729]
  - kvm-Fix-oops-on-2.6.25-guest-Rusty-Russell.patch [bz#501729]
  - kvm-Fix-segfault-after-tap-host_net_remove.patch [bz#501729]
  - kvm-Fix-virtio-net-segfault-during-live-migrate-after-NI.patch [bz#501729]
  - kvm-Fix-e1000-segfault-during-live-migrate-after-NIC-hot.patch [bz#501729]
  - kvm-Backport-oom_check-from-upstream.patch [bz#501729]
  - kvm-qcow2-fix-image-creation-for-large-2TB-images-Chris-.patch [bz#501729]
  - kvm-Fix-live-migratation-failure-after-pcnet-NIC-hot-unp.patch [bz#501729]
  - kvm-Fix-qemu_realloc-with-size-0.patch [bz#501729]
  - Spec file sync: [bz#501729]
    - Package user/formats on /usr/share/kvm
    - Add spice sanity check (disabled because with_spice is 0)
  - Update kernel version requires to 2.6.18-149.el5
  - Resolves: bz#501729 - Pull RHEV bugfixes between kvm-83-42.el5ovirt and kvm-83-52.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-35.el5
changelog:
  - Spec changes that are needed with the patches recently added:
    - Package user/formats as %doc
    - Package /usr/bin/qemu-io on kvm-tools package
  - Related: bz#500263


author: Eduardo Habkost <ehabkost@redhat.com> - 83-34.el5
changelog:
  - kvm-kernel-KVM-Add-CONFIG_HAVE_KVM_IRQCHIP.patch [bz#500263]
  - kvm-kernel-KVM-Interrupt-mask-notifiers-for-ioapic.patch [bz#500263]
  - kvm-kernel-KVM-Reset-PIT-irq-injection-logic-when-the-PIT-IRQ-i.patch [bz#500263]
  - kvm-kernel-KVM-Fix-overlapping-check-for-memory-slots.patch [bz#500263]
  - kvm-kernel-KVM-MMU-Fix-off-by-one-calculating-large-page-count.patch [bz#500263]
  - kvm-kernel-KVM-MMU-disable-global-page-optimization.patch [bz#500263]
  - kvm-KSM-fix-bug-495714.patch [bz#500263]
  - kvm-fix-extboot-from-boot-with-cache-off.patch [bz#500263]
  - kvm-KSM-fix-bug-495912.patch [bz#500263]
  - kvm-KSM-fix-495350-effective-bug.patch [bz#500263]
  - kvm-ksm-fix-Bug-496668-stabilaty-issue.patch [bz#500263]
  - kvm-qemu-drop-packet-from-tap-device-if-all-NICs-are.patch [bz#500263]
  - kvm-fix-effective-bug-497042.patch [bz#500263]
  - kvm-qemu-fixup-4GB-memslot-large-page-alignment.patch [bz#500263]
  - kvm-Import-qemu-io-source-from-upstream.patch [bz#500263]
  - kvm-qemu-io-Comment-out-readv-writev-code.patch [bz#500263]
  - kvm-Add-qemu-io-to-Makefile-and-configure.patch [bz#500263]
  - kvm-Fix-migration-with-smp-Bz-485966.patch [bz#500263]
  - kvm-char-Fix-closing-of-various-char-devices-Jan-Kiszka.patch [bz#500263]
  - kvm-spice-improve-audio-quality-493279.patch [bz#500263]
  - kvm-spice-using-term_printf_async-for-vdi-log-messages-4.patch [bz#500263]
  - Update kernel version dependency to 2.6.18-141.el5
  - Resolves: bz#500263 - Import RHEV kvm fixes added between kvm-83-35.el5ovirt and kvm-83-42.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-33.el5
changelog:
  - kvm-qemu-tool-adding-an-empty-implementation-of-term_pr.patch [bz#497886]
  - kvm-block_set_watermark-use-term_printf_async-for-notif.patch [bz#497886]
  - kvm-Fix-at-least-one-cause-of-qcow2-corruption.-Nolan.patch [bz#497886]
  - kvm-Flush-all-pending-io-at-the-end-of-a-migration.patch [bz#497886]
  - kvm-make-BlockDriver-struct-opaque-and-global.patch [bz#497886]
  - kvm-Reopen-block-drivers-after-migration.patch [bz#497886]
  - kvm-qcow2-corruption-Fix-alloc_cluster_link_l2.patch [bz#497886]
  - kvm-Change-RTC-time-drift-IRQ-re-injection-logic.patch [bz#497886]
  - kvm-KSM-fix-bug-495348.patch [bz#497886]
  - kvm-KSM-fix-bug-495349-KSM-correctness-issue.patch [bz#497886]
  - kvm-KSM-fix-bug-495351-effective-issue.patch [bz#497886]
  - Resolves: bz#497886 - Import kvm fixes from RHEV branch


author: Eduardo Habkost <ehabkost@redhat.com> - 83-29.el5ovirt
changelog:
  - kvm-external-module-hrtimer_expires_remaining-was.patch [bz#493112]
  - kvm-Make-make-install-depend-on-bios-and-vgabios.patch [bz#493112]
  - Remove pre-built binaries from source tarball [bz#493112]
    - Rename kvm-remove-crypto.sh to kvm-strip-tarball.sh
  - Resolves: bz#493112 - Allow building KVM RHEV tree on newer kernels and on other distributions


author: Eduardo Habkost <ehabkost@redhat.com> - 83-28.el5ovirt
changelog:
  - kvm-Avoid-running-audio-ctl-s-when-vm-is-not-running.patch [bz#492204]
  - Resolves: bz#492204 - kvm: Avoid running audio ctl's when vm is not running


author: Eduardo Habkost <ehabkost@redhat.com> - 83-25.el5ovirt
changelog:
  - kvm-Revert-Introducing-qcow2-extensions-keep-backing.patch [bz#489964]
  - kvm-Revert-qemu-img-info-show-highest_alloc-and-num_f.patch [bz#489964]
  - kvm-Revert-qcow2-format-keep-num_free_bytes-and-sho.patch [bz#489964]
  - kvm-Revert-info-blockstats-show-highest_allocated-if-e.patch [bz#489964]
  - kvm-Revert-block-qcow2-export-highest_allocated-throug.patch [bz#489964]
  - kvm-Revert-block-qcow2-keep-highest-allocated-byte-Ur.patch [bz#489964]
  - kvm-Introducing-qcow2-extensions-Uri-Lublin.patch [bz#489964]
  - kvm-block-support-known-backing-format-for-image-create.patch [bz#489964]
  - kvm-block-qcow2-keep-backing-file-format-in-a-qcow2-ext.patch [bz#489964]
  - kvm-block-qcow2-keep-highest-allocated-offset.patch [bz#489964]
  - kvm-block-set-high-watermark-and-get-a-notification-whe.patch [bz#489964]
  - kvm-Show-drive-name-on-ENOSPC-notification.patch [bz#489964]
  - Resolves: bz#489964


author: Eduardo Habkost <ehabkost@redhat.com> - 83-23.el5ovirt
changelog:
  - kvm-kernel-Revert-Disable-kvmclock-by-default.patch [bz#492649]
  - Resolves: bz#492649
  - kvm-qemu-stop-start-cpus-before-after-devices.patch [bz#492355]
  - kvm-extboot-should-update-number-of-HDs-reported-by-BIOS.patch [bz#491861]
  - Resolves: bz#492355 bz#491861


author: Eduardo Habkost <ehabkost@redhat.com> - 83-22.el5ovirt
changelog:
  - kvm-qemu-fix-physical-memory-migration.patch [bz#492351]
  - kvm-host_device_remove-remove-incorrect-check-for-devic.patch [bz#491156]
  - kvm-e1000-Fix-RX-descriptor-low-threshold-interrupt-log.patch [bz#491930]
  - kvm-qemu-fix-bad-physical-address-in-kvm_update_dirty_p.patch [bz#492357]
  - kvm-vdi_port-fix-migration.patch [bz#492365]
  - kvm-external-module-do-not-hardcode-tsc_khz.patch [bz#488543]
  - kvm-kernel-Backport-fix-for-bz-482423-from-upstream.patch [bz#482423]
  - Resolves: bz#482423 bz#492351 bz#491156 bz#491930 bz#492357


author: Eduardo Habkost <ehabkost@redhat.com> - 83-21.el5ovirt
changelog:
  - Change license tag to GPLv2 [bz#490741]
  - Remove qspice-specific BuildRequires, now that qspice bz#489896 was fixed
    [bz#490956]
  - Build against kernel 2.6.18-128.1.1.el5
  - Resolves: bz#490741
  - Related: bz#490956


author: Eduardo Habkost <ehabkost@redhat.com> - 83-20.el5ovirt
changelog:
  - kvm-Parse-full-PCI-device-addresses-Markus-Armbruster.patch [bz#489992]
  - kvm-Backport-upstream-QEMU-PCI-hotplug-code.patch [bz#489992]
  - kvm-make-qemu_announce_self-handle-non-contiguous-net-ta.patch [bz#489992]
  - Resolves: bz#489992


author: Eduardo Habkost <ehabkost@redhat.com> - 83-19.el5ovirt
changelog:
  - kvm-kernel-Fix-BZ483561-dmesg-flooded-with-kvm-14619-cpu1-u.patch [bz#483561]
  - kvm-kernel-KVM-Fix-missing-smp-tlb-flush-in-invlpg.patch [bz#490469]
  - Resolves: bz#483561 bz#490469


author: Eduardo Habkost <ehabkost@redhat.com> - 83-17.el5ovirt
changelog:
  - Remove unneeded code from spec %install section
  - Rebuild against qspice-0.1.0-14.gitdd420d.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-16.el5ovirt
changelog:
  - Remove openssl BuildRequires. We are using libgcrypto for crypto code, now
  - kvm-kernel-Disable-kvmclock-by-default.patch [bz#469425][bz#488543]
  - Related: bz#469425 bz#488543


author: Eduardo Habkost <ehabkost@redhat.com> - 83-15.el5ovirt
changelog:
  - kvm-qemu-prevent-reset-of-vga-fb-mapping-in-case-of-isa.patch [bz#489348]
  - kvm-TPR-patching-instruction_is_ok-fix-virtual-addre.patch [bz#483494]


author: Eduardo Habkost <ehabkost@redhat.com> - 83-13.el5ovirt
changelog:
  - kvm-kernel-KVM-x86-release-time_page-on-vcpu-destruction.patch [bz#488725]
  - kvm-kernel-KVM-VMX-Update-necessary-state-when-guest-enters-l.patch [bz#488724]
  - kvm-kernel-KVM-is_long_mode-should-check-for-EFER.LMA.patch [bz#488724]
  - kvm-kernel-KVM-MMU-Fix-another-largepage-memory-leak.patch [bz#488725]
  - kvm-kernel-KVM-MMU-handle-compound-pages-in-kvm_is_mmio_pfn.patch [bz#488727]
  - kvm-bios-make-MMIO-address-page-aligned-in-guest.patch [bz#488732]
  - kvm-external-module-backward-compatibility-for-com.patch [bz#488727]
  - kvm-external-module-handle-compound_head-on-RHEL.patch [bz#488727]


author: Eduardo Habkost <ehabkost@redhat.com> - 83-12.el5ovirt
changelog:
  - kvm-Fix-cpu_physical_memory_rw-for-64-bit-I-O-accesses.patch [bz#488135]
  - kvm-block-qcow2-keep-highest-allocated-byte-Uri-Lublin.patch [bz#488250]
  - kvm-block-qcow2-export-highest_allocated-through-BlockD.patch [bz#488250]
  - kvm-info-blockstats-show-highest_allocated-if-exists-U.patch [bz#488250]
  - kvm-qcow2-format-keep-num_free_bytes-and-show-it-upo.patch [bz#488250]
  - kvm-qemu-img-info-show-highest_alloc-and-num_free_byte.patch [bz#488250]
  - kvm-Introducing-qcow2-extensions-keep-backing-file-for.patch [bz#484080]
  - kvm-qemu-img-adding-a-F-base_fmt-option-to-qemu-img.patch [bz#484080]
  - Renumbered kvm-kernel patches to allow space for more userspace patches


author: Eduardo Habkost <ehabkost@redhat.com>- 83-11.el5ovirt
changelog:
  - kvm-add-notification-for-vmstops.patch [bz#481863]
  - kvm-Change-default-werror-semantics-from-report-to-en.patch [bz#481863]


author: Eduardo Habkost <ehabkost@redhat.com> - 83-10.el5ovirt
changelog:
  - kvm-kernel-Report-IRQ-injection-status-to-userspace.patch [bz#487595]
  - kvm-handle-IRQ-status-injection-in-userspace.patch [bz#487595]
  - kvm-Allow-additions-of-ACPI-tables-from-command-line.patch [bz#488041]
  - kvm-cirrus-cleanup-reset-handler.patch [bz#488036]


author: Eduardo Habkost <ehabkost@redhat.com> - 83-9.el5ovirt
changelog:
  - kvm-external-module-compatibility-for-hrtimer_expi.patch [bz#485482]
  - kvm-kernel-KVM-x86-fix-LAPIC-pending-count-calculation.patch [bz#485482]
  - kvm-kernel-KVM-VMX-Flush-volatile-msrs-before-emulating-rdmsr.patch [bz#486583]


author: Eduardo Habkost <ehabkost@redhat.com> - 83-8.el5ovirt
changelog:
  - kvm-qemu-fix-double-removal-of-assigned-device.patch [bz#485318]
  - kvm-backport-kvm-qemu-fix-leak-of-ioperm-data.patch [bz#485318]
  - kvm-backport-kvm-qemu-remove-the-useless-parameter.patch [bz#485318]
  - kvm-qemu-use-fd-instead-of-QEMUFile-in-pre-VM-migrate-s.patch [bz#485752]
  - kvm-kernel-KVM-Fix-assigned-devices-circular-locking-dependenc.patch [bz#485483]
  - kvm-kernel-KVM-Fix-INTx-for-device-assignment.patch [bz#485484]
  - kvm-kernel-KVM-MMU-Map-device-MMIO-as-UC-in-EPT.patch [bz#485485]


author: Eduardo Habkost <ehabkost@redhat.com> - 83-7.el5ovirt
changelog:
  - bz#485291:
    - kvm-don-t-call-kvm_init_vcpu-twice.patch
    - kvm-Fix-GPE-registers-read-write-handling.patch
    - kvm-Fix-CPU-hotplug.patch
    - kvm-Use-reserved-STS-bits-from-PIIX4-chipset-to-avoid-cl.patch
    - kvm-PCI-hotplug-SCI-fix.patch


author: Eduardo Habkost <ehabkost@redhat.com> - 83-6.el5ovirt
changelog:
  - Fix for bz#484747 (Block device corruption on ENOSPC errors):
    - kvm-Stop-VM-on-ENOSPC-error-IDE.patch
    - kvm-Stop-VM-on-error-in-scsi-disk.patch
    - kvm-Stop-VM-on-error-in-virtio-blk.patch
    - kvm-kvm-qemu-Allow-calling-vm_stop-from-vcpu-thread.patch
  - Spice fix:
    - kvm-vdi_port-don-t-modifay-device-while-in-stop-state.patch
  - Fixes from upstream:
    - kvm-Don-t-notify-virtio-devices-before-S_DRIVER_OK.patch
    - kvm-kvm-qemu-Don-t-unregister-unassigned-PCI-BAR.patch
    - kvm-kvm-qemu-preallocate-mem-path-memory-by-default.patch
    - kvm-kvm-qemu-Remove-eflags-conversion-into-emulator-fo.patch
    - kvm-Always-return-latest-pmsts-instead-of-the-old-one.patch
    - kvm-kvm-qemu-make-mem-path-memory-allocation-depend.patch
    - kvm-Fix-SIGSEGV-crash-in-slirp-networking-code.patch
    - kvm-check-SCSI-read-write-requests-against-max-LBA.patch
    - kvm-qemu-vnc-reset-has_WMVi-when-new-client-connects.patch
    - kvm-fix-use-of-host-serial-port.patch


author: Eduardo Habkost <ehabkost@redhat.com> - 83-4.el5ovirt
changelog:
  - More changes due to rpmlint warnings:
    - Fix bogus qemu-img manpage permission
    - Capitalize package summaries
    - Mark udev rules file on /etc as %config on file list


author: Eduardo Habkost <ehabkost@redhat.com> - 83-3.el5ovirt
changelog:
  - Make rpmlint happy:
    - Versioned qemu-img provides
    - use %defattr on all %files sections
    - %define _use_internal_dependency_generator 0
    - don't mix tabs and spaces on scripts


author: Eduardo Habkost <ehabkost@redhat.com> - 83-1.el5ovirt
changelog:
  - Change to tarball+patches model instead of a snapshot of a private git tree.
    The resulting code is exactly the same from kvm-82.ovirt1.test19


author: Eduardo Habkost <ehabkost@redhat.com> - 82.ovirt1.test19-1
changelog:
  - kvm-82.ovirt1.test19:
    - Use libgcrypt for cryptography code instead of libcrypto
    - Fix ksm-mem.ko module loading
    - SCSI emulation fixes from Rik van Riel


author: Eduardo Habkost <ehabkost@redhat.com> - 82.ovirt1.test17-1
changelog:
  - kvm-82.ovirt1.test17:
    - Added hypercall-device-based vmchannel implementation
    - Removed network-interface-based vmchannel implementation
    - Removed cryptography code from KVM, replacing it with calls
      to libcrypto


author: Eduardo Habkost <ehabkost@redhat.com> - 82.ovirt1.test13-5.el5ovirt
changelog:
  - Try to fix kmod-kvm upgrades:
    - Remove Provides: kernel-modules (bz#474472)
    - don't run weak-modules --remove-modules on upgrades


author: Eduardo Habkost <ehabkost@redhat.com> - 82.ovirt1.test6-1.el5ovirt
changelog:
  - kvm-82.ovirt1.test6:
    - ksm compile fixes
    - simpler compat code
    - vnc disconnect notification patch


author: Eduardo Habkost <ehabkost@redhat.com> - 82.ovirt1.test1-2.el5ovirt
changelog:
  - Build with libspice support
  - Use pkgconfig for spice
  - Added BuildRequires to work around missing qspice-libs-devel requires
  - Build against kernel 2.6.18-128.el5


author: Eduardo Habkost <ehabkost@redhat.com> - 82-2.maint.snapshot.2009.01.05.el5ovirt
changelog:
  - Don't use prebuilt binaries (bz#474886):
    - Build bios from source instead of using the prebuilt binaries
    - Use the pxe images from the etherboot packag


author: Eduardo Habkost <ehabkost@redhat.com> -77-3.maint.snapshot.2008.11.11.ovirt
changelog:
  - Respin maint/2.6.28 snapshot, from 2008-11-11:
    - kernel:    e45948b071d8be59044ac232d99a2ca83fd93266
    - userspace: ccabb53f1a84f11896c840391f7ade3756214086


author: Eduardo Habkost <ehabkost@redhat.com> -77-2.maint.snapshot.2008.10.28.ovirt
changelog:
  - Rebase to kvm maint/2.6.28 snapshot from 2008-10-28:
    - kernel:    0d41e9e3f1c500a05716deaa927b56a15b133030
    - userspace: 7c29f61b152c036e9511941e4f0254f6de326052
  - Patches removed, as they (or their equivalent) are already upstream:
    - kvm-qemu-migration-nowait.patch
    - kvm-Test-for-EXT_CONFIG_KVM_TRACE-instead-of-CONFIG_KVM_.patch


author: Eduardo Habkost <ehabkost@redhat.com> -77-1.el5.ovirt
changelog:
  - Rebase to kvm-77
  - Remove wildcards from %files list
  - Remove another sparc bios file that is not needed


author: Eduardo Habkost <ehabkost@redhat.com> - 74.11.el5.ovirt
changelog:
  - Use RHEL kmod magic support to build modules, but with hacks
    to avoid the ksym dependencies and to make it work on brew


author: Eduardo Habkost <ehabkost@redhat.com> - 74.6.el5.ovirt
changelog:
  - Fix build with with_modules=0
  - Don't include qemu-img when built on Fedora
  - Put qemu-img on a kvm-qemu-img subpackage, with Provides: qemu-img


author: Eduardo Habkost <ehabkost@redhat.com> - 74.4.el5.ovirt
changelog:
  - Enable kvm_trace
  - Use "real" release number (74-4.el5.ovirt) instead of .testX release
    numbers. The package is on CVS, now


author: Eduardo Habkost <ehabkost@redhat.com> - 74-3.el5.test4
changelog:
  - Added depmod to kmod %post and %postun
  - Fix %if lines to make it possible to not build the kmod package
  - Make kvm-kmod depend on the kernel it was built to
  - Make kvm depend on kvm-kmod


author: Eduardo Habkost <ehabkost@redhat.com> - 74-3.el5.test2
changelog:
  - Package the kernel modules in a kvm-kmod package, hardcoded to build
    for 2.6.18-111.el5.extkvm_test12
  - Fix page_find() and page_find_alloc() range-checking for addresses
    larger than 32-bit
  - Remove i386 from ExclusiveArch, as we don't have i386 kernel packages
    built on the ovirt build target


author: Eduardo Habkost <ehabkost@redhat.com> - 74-2.el5.test1
changelog:
  - Added kvm-74-pxeboot-fix2.patch, Glauber's fix for the PXE boot triple fault
  - Don't remove qemu-img from the package


author: Glauber Costa <glommer@redhat.com> - 73-3.20080825
changelog:
  - Moved forward to yesterday's snapshot. It contains the remaining
    parts of mark's series of GSO patches. It sould be all back to normal
    when kvm-74 is released.


author: Glauber Costa <gcosta@redhat.com> - 73-1
changelog:
  - Update to kvm-73.
  - alsa enablement patch not needed anymore - removed.
  - Add conditional so we can use this same rpm for rhel.


author: Glauber Costa <gcosta@redhat.com> - 71-1
changelog:
  - Update to kvm-71
  - --enable-alsa is no more, and kvm-71 seem to have troubles yet to
    be sorted out upstream with parameter passing to qemu. So as a temporary
    quickfix, add kvm-71-alsa.patch to handle it.


author: Glauber Costa <gcosta@redhat.com> - 69-1
changelog:
  - Update to kvm-69
  - Removed Patch4 (Upstreamed)
  - Removed virtio-boot patch (Upstreamed)
  - Regenerated the other patches


author: Daniel P. Berrange <berrange@redhat.com> - 60-1.fc9
changelog:
  - Updated to kvm-60
  - Fix license tag to keep rpmlint quiet
  - Remove unused PPC, Sparc and PPC Video BIOS


author: Jeremy Katz <katzj@redhat.com> - 12-2
changelog:
  - include bios and keymaps in the kvm package since we need a slightly 
    different version for kvm now
  - include man page


author: Jeremy Katz <katzj@redhat.com> - 7-3
changelog:
  - remove the -devel subpackage since there's no shared lib upstream yet
  - direct download link for source


author: Tomas Bzatek <tbzatek@redhat.com> - 2.16.2-5.el5
changelog:
  - Fix daemon restart due to invalid utf-8 device file (#486286)
  - Fix Search stops upon encountering an unreadable directory (#432764)
  - Fix moving files between different NFS mounts (#438116)
  - Copy file when following symlink (#481593)
  - DAV: Handle filenames with reserved chars (#503112)


author: Alexander Larsson <alexl@redhat.com> - 2.16.0-2
changelog:
  - Backport fixes from cvs:
  -  Fix crash on shutdown (gnome bug 347470)
  -  Import gtk+ fixes to xdgmime


author: Alexander Larsson <alexl@redhat.com> 2.12.1.1-4
changelog:
  - Remove XFree86-devel buildreq, as it doesn't exist anymore.
    I don't think we actually require it.


author: John (J5) Palmieir <johnp@redhat.com> 2.12.0-2
changelog:
  - Backported patch to fix bug #167985 which corrects the size of a
    readlink buffer
  - Added a patch to fix bug #168743 which corrects the name of a
    data member from close to close_fn


author: David Zeuthen <davidz@redhat.com> 2.11.90-2
changelog:
  - Disable a few patches that are upstream/irrelavant
  - Add patch to detect mounts from drives we cannot poll


author: Matthias Clasen <mclasen@redhat.com> 2.11.90-1
changelog:
  - New upstream version
  - Remove patches and sources for the desktop method, since
    we don't have start-here in the UI anymore.


author: Alexander Larsson <alexl@redhat.com> - 2.8.1-6
changelog:
  - Add cvs-backport patch with various fixed from HEAD, including
    a partial fix for #134627
  - Removed the patches that are in the cvs-backport patch.


author: Ray Strode <rstrode@redhat.com> 2.8.1-3
changelog:
  - Swap if and else in egg_desktop_entries_get_locale_encoding
    to prevent allocating massive amounts of unneeded ram.


author: Mark McLoughlin <markmc@redhat.com> 2.8.1-2
changelog:
  - Remove menu-only-show-in patch - latest KDE packages don't use
    non-standard <OnlyShowIn> anymore


author: Mark McLoughlin <markmc@redhat.com> 2.7.90-1
changelog:
  - Update to 2.7.90
  - Remove cvs-backport patch
  - Add BuildRequires for krb5-devel, howl-devel and hal-devel
  - Fixup the schema-about and mozilla patches


author: Dan Williams <dcbw@redhat.com> 2.6.0-7
changelog:
  - Update to desktop-file-utils 0.6
  - Implement monitoring to detect addition/deletion of .desktop files
  - Fix RH #118553, crash when reading symlink that points to
      nothing in libmenu.so VFS backend


author: Dan Williams <dcbw@redhat.com> 2.5.90-2
changelog:
  - Add desktop-file-utils to build the new libmenu.so VFS backend
      for .menu files.  Its a hack for now, and will eventually
      be replaced by upstreaming the d-f-u code


author: Havoc Pennington <hp@redhat.com>
changelog:
  - it would help to *install* the stupid menu edit conf file
  - update the vfolder-hacks patch with some fixes


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Revert to George's vfolder backend from gnome-vfs-2.0.2 or so
  - put back libdesktop.so
  - don't build the new vfolder backend


author: Havoc Pennington <hp@redhat.com>
changelog:
  - add patch for OnlyShowIn support
  - use plain menu files for .vfolder-info-default
  - don't install unused vfolder-info files


author: Havoc Pennington <hp@redhat.com>
changelog:
  - require new gnome-mime-data in proper libdir
  - 2.0.4
  - drop most patches as they are now upstream or 
    don't apply to new vfolder code


author: Havoc Pennington <hp@redhat.com>
changelog:
  - rebuild cvs snap with changes merged upstream
  - fix a requires
  - fix up requires/buildrequires a bit


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Add pkgconfig and gnome-libs-devel build reqs.
  - Remove dependency on gnome-vfs-devel by doing some
  - CPPFLAGS and LDFLAGS magic


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Remove Distribution and Vendor
  - Make the config files noreplace
  - Move .so links to devel subpackage
  - langify
  - Add BuildRequires
  - Don't mess with /etc/ld.so.conf
  - Use %{_tmppath}
  - s/Copyright/License/


author: Martin Stransky <stransky@redhat.com> - 3.0.1-2
changelog:
  - Fixed #447535 - RHEL 5.2 beta / upstream Firefox 3 beta 5
    autoConfig broken
  - Fixed #445304 - HTML/index.html always redirects to en-US/index.html


author: Martin Stransky <stransky@redhat.com> - 3.0-0.beta2.9
changelog:
  - added pathes for Mozilla bugs 311008, 410852, 411037, 412519
  - fixed bookmarks
  - fixed homepage
  - disabled startup notification


author: Martin Stransky <stransky@redhat.com> - 1.5.0.12-4
changelog:
  - added patches for Mozilla bugs 199088,267833,309322,345305,361745,
    362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
    390078,393537,395942


author: Kai Engert <kengert@redhat.com> - 1.5.0.12-2
changelog:
  - Update to latest snapshot of Mozilla 1.8.0 branch
  - Include patches for Mozilla bugs 379245, 384925, 178993,
    381300 (+382686), 358594 (+380933), 382532 (+382503)


author: Christopher Aillon <caillon@redhat.com> 1.5.0.9-10
changelog:
  - Updated cursor position patch from tagoh to fix issue with "jumping"
    cursor when in a textfield with tabs.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.9-6
changelog:
  - Extract the source into a versioned directory to help with
    parallel compiles and -debuginfo packages


author: Christopher Aillon <caillon@redhat.com> 1.5.0.8-2
changelog:
  - Updated pango patches from behdad
  - Fix a leak in liveconnect
  - Fix a potential crash in CSS
  - Let Firefox handle gcc warnings; it weeds out frequent offenders.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.8-1
changelog:
  - Update to 1.5.0.8
  - Allow choosing of download directory
  - Take the user to the correct directory from the Download Manager.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.7-5
changelog:
  - Fix crash when changing gtk key theme
  - Fix gtkmozembed window visibility
  - Prevent UI freezes while changing GNOME theme
  - Remove verbiage about pango; no longer required by upstream.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.6-10
changelog:
  - Enable GCC visibility
  - export XLIB_SKIP_ARGB_VISUALS=1 as a temporary workaround to prevent
    a broken Adobe/Macromedia Flash Player plugin taking the X server.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.6-4
changelog:
  - Update NSS requires to workaround a bug introduced by NSS changes.
    https://bugzilla.mozilla.org/show_bug.cgi?id=294542
    https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=201922


author: Behdad Esfahbod <besfahbo@redhat.com>
changelog:
  - Add a better nopangoxft patch that doesn't depend on pangocairo
  - Add firefox-1.5-pango-mathml.patch (bug 150393)


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.4-4
changelog:
  - Ugh:
    - Mozilla the platform is deprecated
    - XULrunner has been promised for a while but is still not 1.0
    - Ship a firefox-devel for now as we need a devel platform.
    - The plan is to kill firefox-devel when xulrunner 1.0 ships. 
  - Clean up the files list a little bit.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.1-9
changelog:
  - Add a notice to the about dialog denoting this is a pango enabled build.
  - Tweak the user agent denoting this is a pango enabled build.


author: Christopher Aillon <caillon@redhat.com> - 1.5-3
changelog:
  - Once again, disable ppc64 because of a new issue.
    See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175944


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.0.beta1
changelog:
  - Update to 1.5 beta 1.
  - Add patch to svg rendering to adjust for cairo behavior.
  - Happy birthday, dad!


author: Christopher Aillon <caillon@redhat.com> 1.1-0.2.5.deerpark.alpha2
changelog:
  - Re-enable ppc now that its binutils are fixed.
  - Disable SVG and canvas again.  The in-tree copy does not build against new pango.
  - When clicking a link and going back via history, don't keep the link focused.


author: Christopher Aillon <caillon@redhat.com> 1.1-0.2.4.deerpark.alpha2
changelog:
  - Add patch from Christian Persch to make the file chooser modal
  - Change default behavior of opening links from external apps to: New Tab
  - New build options:
    --enable-svg
    --enable-canvas


author: Christopher Aillon <caillon@redhat.com> 1.1-0.0.1.deerpark.alpha2
changelog:
  - Update to Deer Park Alpha 2
    - STILL TODO:
      - This build is not localized yet.
      - Theme issues not yet resolved.
      - Building on ppc platforms is busted, disable them for now.
      - Forward port all remaining patches.


author: Kristian Høgsberg <krh@redhat.com> 0:1.0.4-5
changelog:
  - Add firefox-1.0-pango-cairo.patch to get rid of the last few Xft
    references, fixing the "no fonts" problem.
  - Copy over changes from FC4 branch.


author: Christopher Aillon <caillon@redhat.com> 0:1.0.4-4
changelog:
  - Only install searchplugins for en-US, since there isn't any way
    to dynamically select searchplugins per locale yet.


author: Christopher Aillon <caillon@redhat.com> 0:1.0.4-3
changelog:
  - Add support for locales:
      af-ZA, ast-ES, ca-AD, cs-CZ, cy-GB, da-DK, de-DE, el-GR,
      en-GB  es-AR, es-ES, eu-ES, fi-FI, fr-FR, ga-IE, he-IL,
      hu-HU, it-IT, ko-KR, ja-JP, ja-JPM, mk-MK, nb-NO, nl-NL,
      pa-IN, pl-PL, pt-BR, pt-PT, ro-RO, ru-RU, sk-SK, sl-SI,
      sq-AL, sv-SE, tr-TR, zh-CN, zh-TW


author: Christopher Aillon <caillon@redhat.com> 0:1.0.3-5
changelog:
  - Correctly position the IM candidate window for most locales
    Note: it is still incorrectly positioned for zh_TW after this fix
  - Add temporary workaround to not create files in the user's $HOME (#149664)


author: Christopher Aillon <caillon@redhat.com> 0:1.0.3-3
changelog:
  - Firefox script fixes to support multilib installs.
  - Add upstream patch to fix bidi justification of pango
  - Add patch to fix launching of helper applications


author: Christopher Aillon <caillon@redhat.com> 0:1.0.2-3
changelog:
  - Updated firefox icon (https://bugzilla.mozilla.org/show_bug.cgi?id=261679)
  - Fix for some more cursor issues in textareas (149991, 150002, 152089)


author: Christopher Aillon <caillon@redhat.com> 0:1.0.1-6
changelog:
  - Add patch to fix italic rendering errors with certain fonts (e.g. Tahoma)
  - Re-enable jsd since there is now a venkman version that works with Firefox.


author: Christopher Aillon <caillon@redhat.com> 0:1.0.1-3
changelog:
  - Remerge firefox-1.0-pango-selection.patch
  - Add execshield patches for ia64 and ppc
  - BuildRequires libgnome-devel, libgnomeui-devel


author: Christopher Aillon <caillon@redhat.com> 0:1.0.1-2
changelog:
  - Add upstream fix to reduce round trips to xserver during remote control
  - Add upstream fix to call g_set_application_name


author: Christopher Aillon <caillon@redhat.com> 0:1.0.1-1
changelog:
  - Update to 1.0.1 fixing several security flaws.
  - Temporarily disable langpacks to workaround startup issues (#145806)
  - Request the correct system colors from gtk (#143423)


author: Christopher Aillon <caillon@redhat.com> 0:1.0-7
changelog:
  - Make sure we get a URL passed in to firefox (#138861)
  - Mark some generated files as ghost (#136015)


author: Christopher Aillon <caillon@redhat.com> 0:1.0-6
changelog:
  - Don't have downloads "disappear" when downloading to desktop (#139015)
  - Add RPM version to the useragent
  - BuildRequires pango-devel


author: Christopher Aillon <caillon@redhat.com> 0:1.0-5
changelog:
  - Fix spacing in textareas when using pango for rendering
  - Enable pango rendering by default.
  - Enable smooth scrolling by default


author: Christopher Aillon <caillon@redhat.com> 0:1.0-4
changelog:
  - Add StartupWMClass patch from Damian Christey (#135830)
  - Use system colors by default (#137810)
  - Re-add s390(x)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.1-1.0PR1.20
changelog:
  - More file chooser fixes:
      Pop up a confirmation dialog before overwriting files (#134648)
      Allow saving as complete once again
  - Fix for upstream 263263.


author: Christopher Blizzard <blizzard@redhat.com> 0:0.10.1-1.0PR1.15
changelog:
  - Fix problem where default apps aren't showing up in the download
    dialog (#136261)
  - Fix default height being larger than the available area, cherry picked
    from upstream


author: Christopher Aillon <caillon@redhat.com> 0:0.10.1-1.0PR1.12
changelog:
  - Disable the default application checks. (#133713)
  - Disable the software update feature. (#136017)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.1-1.0PR1.9
changelog:
  - Fix compile issues (#134914)
  - Add patch to fix button focus issues (#133507)
  - Add patches to fix tab focus stealing issue (b.m.o #124750)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.0-1.0PR1.2
changelog:
  - Change the vendor to mozilla not fedora
  - Build with --disable-strip so debuginfo packages work (#133738)
  - Add pkgconfig patch (bmo #261090)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.0-1.0PR1.1
changelog:
  - Add a BR for desktop-file-utils
  - Update default configuration options to use the firefox mozconfig (#132916)
  - Use Red Hat bookmarks (#133262)
  - Update default homepage (#132721)
  - Fix JS math on AMD64 (#133226)
  - Build with MOZILLA_OFICIAL (#132917)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.0-1.0PR1.0
changelog:
  - Update to 1.0PR1
  - Update man page references to say Firefox instead of Firebird
  - Remove gcc34 and extensions patch; they are now upstream
  - Update desktop database
  - Minor tweaks to the .desktop file


author: Christopher Aillon <caillon@redhat.com> 0:0.9.3-8
changelog:
  - Fixup .desktop entry Name, GenericName, and Comment (#131602)
  - Add MimeType desktop entry (patch from jrb@redhat.com)
  - Build with --disable-xprint


author: Adrian Reber <adrian@lisas.de> 0:0.9.3-0.fdr.5
changelog:
  - remove ldconfig from scriptlets (bug #1846 comment #40)
  - reenabled mng support (bug #1971)
  - removed --enable-strip to let rpm to the stripping (bug #1971)
  - honor system settings in firefox.sh (bug #1971)
  - setting umask 022 in scriptlets (bug #1962)


author: Adrian Reber <adrian@lisas.de> 0:0.9.3-0.fdr.1
changelog:
  - updated to 0.9.3
  - removed following from .mozconfig:
      ac_add_options --with-system-mng
      ac_add_options --enable-xprint
      ac_add_options --disable-dtd-debug
      ac_add_options --disable-freetype2
      ac_add_options --enable-strip-libs
      ac_add_options --enable-reorder
      ac_add_options --enable-mathml
      ac_add_options --without-system-nspr


author: Adrian Reber <adrian@lisas.de> 0:0.9.2-0.fdr.5
changelog:
  - applied parts of the patch from Matthias Saou (bug #1846)
  - delete empty directories in %{ffdir}/chrome
  - more cosmetic changes to the spec file


author: Adrian Reber <adrian@lisas.de> 0:0.9-0.fdr.4
changelog:
  - remove extensions patch
  - add post hack to create extensions
  - enable negotiateauth extension
  - copy icon to browser/app/default.xpm
  - --enable-official-branding


author: Gene Czarcinski <gene@czarc.net>
changelog:
  - more x86_64 fixes
  - fix firefix-xremote-client for x86_64 (similar to what is done for
    firefox.sh.in)


author: Warren Togami <wtogami@redhat.com> 0:0.8-0.fdr.9
changelog:
  - xremote patch for thunderbird integration #1113
  - back out ugly hack from /usr/bin/firefox
  - correct default bookmarks


author: Adrian Reber <adrian@lisas.de> - 0:0.7-0.fdr.2
changelog:
  - s/0.6.1/0.7/
  - changed user-app-dir back to .phoenix as .mozilla-firebird
    is not working as expected
  - manpage now also available as MozillaFirebird.1


author: Adrian Reber <adrian@lisas.de> - 0:0.7-0.fdr.1
changelog:
  - updated to 0.7
  - provides webclient
  - run regxpcom and regchrome after installation and removal
  - added a man page from the debian package
  - changed user-app-dir from .phoenix to .mozilla-firebird


author: Adrian Reber <adrian@lisas.de> - 0:0.6.1-0.fdr.1
changelog:
  - updated to 0.6.1
  - changed buildrequires for XFree86-devel from 0:4.3.0 to 0:4.2.1 
    it should now also build on RH80


author: Adrian Reber <adrian@lisas.de> - 0:0.6-0.fdr.4.rh90
changelog:
  - renamed it again back to MozillaFirbird
  - added libmng-devel to BuildRequires
  - startup homepage is now www.fedora.us
  - improved the startup script to use the unix remote protocol 
    to open a new window


author: Adrian Reber <adrian@lisas.de> - 0:0.6-0.fdr.3.rh90
changelog:
  - new icon from http://iconpacks.mozdev.org/phoenix/iconshots/flame48true.png
  - now using gtk2 as toolkit
  - renamed again back to mozilla-firebird (I like it better)
  - Provides: MozillaFirebird for compatibility with previous releases
  - changed default bookmarks.html to contain links to www.fedora.us


author: Adrian Reber <adrian@lisas.de> - 0:0.6-0.fdr.2.rh90
changelog:
  - renamed package to MozillaFirebird and all files with the old name
  - enabled mng, mathml, xinerama support
  - now honouring RPM_OPT_FLAGS


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0:0.6-0.fdr.0.3.cvs20030402.rh90
changelog:
  - Changed Prereq to Requires.
  - Changed BuildRequires to gtk+-devel (instead of file).
  - Recompressed source with bzip2.
  - Removed post.


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0:0.6-0.fdr.0.2.cvs20030402.rh90
changelog:
  - Added desktop-file-utils to BuildRequires.
  - Changed category to X-Fedora-Extra.
  - Updated to CVS.


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0.6-0.fdr.0.1.cvs20030326.rh90
changelog:
  - Updated to latest CVS.
  - Changed release to 9 vs 8.1.
  - Added cvs script.
  - added encoding to desktop file.


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0.6-0.fdr.0.1.cvs20030323.rh81
changelog:
  - Updated to latest CVS.
  - added release specification XFree86-devel Build Requirement.
  - changed chmod to %attr


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.11
changelog:
  - Resolves: rhbz#623813 - NullPointerException on startup
  - Resolves: rhbz#623465 - Crash on startup using Catalina/localhost/context.xml
  - Still has startup issues (http404) on first request. The second request will
  - return http200


author: Monty <cmontgom@redhat.com> - 0.4.9-0.13.20080908
changelog:
  - Correct versioning typo in spec
  - Remove unused codecs from build (allowing a stright configure to succeed)


author: Monty <cmontgom@redhat.com> - 0.4.9-0.11-20080908
changelog:
  - Update to a new git snapshot: 7ae0395709bda753ff1fb8cecdc2fc77232cab56
  - Revert SVN date-- this is not the date of the local repo, it is the date
    of the matching upstream ABI.  Do not change it.


author: Monty <cmontgom@redhat.com> - 0.4.9-0.5.20080908
changelog:
  - Move to a stripped-down form of 0.4.9 maintained locally
  - Remove more mpeg-related code
  - Move libav->libqav namespace change from specfile to to source build system


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-29.el5
changelog:
  - CVE-2008-5302 - use latest patch without Cwd module
  - 507378 because of our paths we need to overload old Util.so in case customer installed
   Scalar::Util from cpan. In this case we marked new Util.so as .rpmnew.
  - Related: rhbz#591167
  - Resolves: rhbz#594406


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-28.el5
changelog:
  - CVE-2008-5302 perl: File::Path rmtree race condition (CVE-2005-0448) 
    reintroduced after upstream rebase to 5.8.8-1
  - CVE-2010-1168 perl Safe: Intended restriction bypass via object references
  - CVE-2010-1447 Safe 2.26 and earlier: Intended restriction bypass via Perl 
    object references in code executed outside safe compartment
  - Related: rhbz#591167


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-25.el5
changelog:
  - 458851 remove update of module - the cleanup function was already in
    the previous version
  - 507378 update Scalar-List-Utils to latest CPAN version, 1.21, to prevent
    bug #375621
  - Resolves: rhbz#507378, rhbz#507378
  - patch lib/Net/t/hostname.t, so that it does not fail in mock


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-24.el5
changelog:
  - Fix -Darchname on the Configure line.
  - Do not pack compatibility directories: remove all the mkdirs from %install.
  - Replace perl-5.8.8-incpush.patch by perl-5.8.8-oldarch.patch.
  - Adapt the perl-5.8.8-R-switch.patch; keep it though it probably is not
    useful anymore.
  - Resolves: rhbz#489909


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-23.el5
changelog:
  - libnet.cfg was installed on x86_64 into wron directory because all libnet
    files are stored in /usr/lib/ on both architectures.
  - Resolves: rhbz#490107


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-21.el5
changelog:
  - Time::HiRes version is incompatible with glibc2.5. This is fixed
    with rebase to v1.9715.
  - Resolves: rhbz#453327


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-20.el5
changelog:
  - suidperl binaries shall be owned by the root, reinsert the %defattr
    declaration mistakenly removed at the time of bug 191416


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-19.el5
changelog:
  - fix the # of tests in backport of upstream change 32018
  - fix perl-5.8.8-perlvar-pod.patch again, update expected test results
  - fix a typo causing "make test" to be skipped
  - Related: rhbz#379791 #431041


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-17.el5
changelog:
  - some patches were forgotten, clean and actual patches move on the end
   of list
  - Resolves: rhbz#375621


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-15.el5
changelog:
  - add upstream fix for bless/overload problem (changes 31996,32018,32019,
  	32025) and perl-5.8.8-bug24254.patch. Without this patch had bless
  	poor performance.
  - Resolves: rhbz#379791


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-14.el5
changelog:
  - add two patches, which...
  - Resolves: #435505, #431041
  - remove %define threading, the non-threading variant is not supported,
    Related: 435376


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-13.el5
changelog:
  - comments are before patches patch22-28
  - turn off tests for s390x. They were succesfully run in scratch, but
  	there's some issue with network, which breaks the brew build.
  - Resolves: #375621, #429491, #438114, #379791, #454602, #217833, #449324


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-8
changelog:
  - Fix upstream perl bug #34297:
    'utf8 overload stringify bug (utf8 caching maybe)'
    upstream patch #28006 applied


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix upstream perl bug #38454:
    'rindex corrects for $[ on bytes rather than UTF-8'
    apply upstream patch #27116
  - Fix upstream perl bug 24816:
    'Magic vars seem unsure if they are purely numeric' 
    ( perl -wle 'print $? = $? ^ "3"' -> 'Argument "^C" isn't numeric' )
    apply upstream patch #27391
  - Avoid writing over the input string in the case 'F' in moreswitches.
    apply upstream patch #27426
  - Fix upstream perl bug 34925 - 'overload and rebless' -
    apply upstream patches #27509, #27512
  - Fix upstream perl bug 3038 - '$qr = qr/^a$/m; $x =~ $qr; fails'
    apply upstream patch #27604
  - apply upstream patch #27605 - 'Fix off-by-one in $0 set magic.'
  - Fix upstream perl bug 23141 - '($_) = () fails to set $_ to undef'
    apply upstream patch #27914
  - Fix upstream perl bug #38619 - 
    'Bug in lc and uc (interaction between UTF-8, substr, and lc/uc)'
    apply upstream patch #27329
  - Give users the '-R' option to disable the Red Hat
    module compatibility default search path extension (incpush.patch).


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix bug 191416: make h2ph generate correct code for cpp statements
    like: '#if defined A || defined B'
  - Fix 172396.patch for non-threaded builds


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-4
changelog:
  - Fix bug 183553 / upstream bug 38657: fix -d:Foo=bar processing
  - rebuild with new gcc-4.1.0-1, released today


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-2
changelog:
  - Rebuild again
  - Debian released 5.8.8 patches today; apply only relevant difference:
    03_fix_net_nntp : fix precedence in Net::NNTP::article 
                      from Brendan O'Dea<bod@debian.org>


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.8-0.1_RC1
changelog:
  - fix bug 178343: h2ph must include cpp "predefined macros" in _h2ph_pre.ph
  - Add perl(:MODULE_COMPAT_5.8.8) to Provides
  - Fix perlbug patch


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-8
changelog:
  - Apply upstream patches 26283 and 26284 : complete, revised fixes
    for CVE-2005-3962 and CVE-2005-3912 and 
    "Sys::Syslog security vulnerabilities" issues.
  - Fix bug 136009 / MakeMaker LD_RUN_PATH issue: 
    restore previous default Red Hat behavior of removing the MakeMaker
    generated LD_RUN_PATH setting from the link command .
    Document this removal, as it contravenes upstream default behavior, and 
    provide a USE_MM_LD_RUN_PATH MakeMaker member to enable use of the 
    MakeMaker generated LD_RUN_PATH .


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.8
changelog:
  - fix bug 174684 / CVE-2005-3962: sprintf integer overflow vulnerability
    backport upstream patch #26240


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.7
changelog:
  - fix bug 172739: upstream bug 36521 : deep recursion and segfault
    in CGI::Carp::warn with 'use diagnostics' : applied patch 25160.
  - fix CAN-2004-0976: insecure use of temp files (ala Debian)


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.6
changelog:
  - fix bug 171111 : define ioctl length macro IOCPARM_LEN(x)
    macro to be _IOC_SIZE(x), not 256 - upstream bug #37535 raised.
  - provide 'perl_debugging' .spec file option to enable -DDEBUGGING
    and disable stripping / debuginfo generation - default: 0


author: Warren Togami <wtogami@redhat.com> - 3:5.8.7-0.1
changelog:
  - patch12 from Marius Feraru (#165907)
    TODO: patch11, patch26 and patch27 clash and need verification
  - Build without -DDEBUGGING (#156113)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-17
changelog:
  - Don't remove the core modules:
      Filter::Util::Call, Filter::Simple, and Time::HiRes.
  - Obsoletes perl-{Filter,Filter-Simple,Time-HiRes}.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-16
changelog:
  - Reformatted the specfile.
  - Added the Source0 URL.
  - Dropped the MANIFEST.all file for the perl package.
  - Dropped the MANIFEST.suidperl file for the suidperl subpackage.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-12
changelog:
  - New findbin-selinux patch: it now passes the FindBin.t tests
    (patch28 replaces patch23). #118877 #127023
  - Remove 5.8.2 ABI compat (#154295 comments 6 and 7).


author: Chip Turner <cturner@redhat.com> - 3:5.8.6-4
changelog:
  - add patch to put site_perl and vendor_perl before core perl dirs, to
    allow for overriding modules


author: Jose Pedro Oliveira <jpo@di.uminho.pt>
changelog:
  - Corrected the license information (missing GPL).
  - Added the URL tag.
  - Removed empty .bs files.
  - Eliminated several strip generated messages (bug 127025).
  - Corrected problems mentioned in bug 120772
    (updated Ville Skytta)


author: Colin Walters <walters@redhat.com> 3:5.8.3-17
changelog:
  - Apply patch to fix FindBin module when access to cwd is disallowed,
    should solve the MRTG/SELinux cron spam issue


author: Chip Turner <cturner@redhat.com> 3:5.8.3-6
changelog:
  - fix very broken @INC calculations with slightly less broken @INC
    calculations (not perfectly handled but the result is correct)
  - fix broken -Dsitearch declaration


author: Chip Turner <cturner@redhat.com> 3:5.8.1-90.rc2.1
changelog:
  - RC4
  - remove perl-5.8.0-fhs.patch since it is integrated now
  - remove perl-5.8.0-Safe2.09.patch, unnecessary now


author: Chip Turner <cturner@redhat.com> 3:5.8.0-89.pre%{PRELEVEL}.0
changelog:
  - bump epoch since we went from perl 5.8.1-pre to 5.8.0-pre (ie,
    changed what version perl thought of itself as)


author: Chip Turner <cturner@redhat.com>
changelog:
  - fix MANIFEST.DB_File handling for #83410; problem was unsubstituted
    /usr/lib64 that crept in with multilib


author: Elliot Lee <sopwith@redhat.com> 5.8.0-86
changelog:
  - Fix up multilib handling to use multilib_64_archs macro, add ppc64.
  - Patch100 probably makes sense on all archs, and ifarch'd patches are Bad(tm).


author: Chip Turner <cturner@redhat.com>
changelog:
  - version the Obsoleted on perl-NDBM_File so users can install newer
  - change the Obsoletes on NDBM_File to a Conflicts
    ones than what shipped with 7.3, yet still keep anaconda happy


author: Chip Turner <cturner@redhat.com>
changelog:
  - add rpath fix to prevent building perl from using installed system perl
  - massive re-integration of upstream patches to come to common basis (head of perl-maint branch)


author: Chip Turner <cturner@redhat.com>
changelog:
  - add numerous upstream patches to fix utf8/perlio issues
  - upgrade Storable, Safe, and Encoding to latest CPAN versions


author: Chip Turner <cturner@redhat.com>
changelog:
  - update CPAN, CGI, and DB_File versions; obsolete perl-libnet
  - libnet.cfg supplied, default to passive ftp in all cases


author: Chip Turner <cturner@redhat.com>
changelog:
  - make rpmlint happy, split out NDBM_File, clean up other spots
  - stopped doing grep -v etc in favor of custom script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - replace the deprecated MD5 with Digest::MD5 (has to be here for cleanfeed)
  - obsolete: perl-Digest-MD5
  - use syslog instead of mail to report possible attempts to break into suidperl
  - force syslog on at build-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Owen's fix for #14779/#14863
  - specify cc=gcc; continue to let cpp sort itself out
  - switch shadow support on (#8646)
  - release 7


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable 64-bit file support
  - change name of package that Perl expects gcc to be in from "egcs" to "gcc"
  - move man pages to /usr/share via hints/linux.sh and MM_Unix.pm
  - fix problems prefixifying with empty prefixes
  - disable long doubles on sparc (they're the same as doubles anyway)
  - add an Epoch to make sure we can upgrade from perl-5.00503
  - release 2


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - do not link anymore against the system db library (and make each module
    link against it separately, so that we can have Berkeley db1 and db2 mixed
    up)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version 5.00503
  - make the default man3 install dir be release independent
  - try to link against db1 to preserve compatibility with older databases;
    abandoned idea because perl is too broken to allow such an easy change
    (hardcoded names *everywhere* !!!)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added a patch to fix a security race
  - do not use setres[ug]id - those are not implemented on 2.0.3x kernels


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded to 5.004_04 - 5.004_01 had some nasty memory leaks.
  - fixed the spec file to be version-independent


author: Erik Troan <ewt@redhat.com>
changelog:
  - Use -Darchname=i386-linux 
  - Require csh (for glob)
  - Use RPM_ARCH during configuration and installation for arch independence


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.21
changelog:
  - kvm-Fix-segfault-in-mmio-subpage-handling-code.patch [bz#619412]
  - Resolves: bz#619412
    (CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpage_register() [rhel-5.5.z])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.20
changelog:
  - kvm-virtio-net-correct-packet-length-checks.patch [bz#610343]
  - Resolves: bz#610343
    (Virtio: Transfer file caused guest in same vlan abnormally quit)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.19
changelog:
  - kvm-qcow2-Fix-qemu-img-check-segfault-on-corrupted-image.patch [bz#610342]
  - kvm-qcow2-Don-t-try-to-check-tables-that-couldn-t-be-loa.patch [bz#610342]
  - kvm-qemu-img-check-Distinguish-different-kinds-of-errors.patch [bz#618206]
  - kvm-qcow2-Change-check-to-distinguish-error-cases.patch [bz#618206]
  - Resolves: bz#610342
    ([kvm] segmentation fault when running qemu-img check on faulty image)
  - Resolves: bz#618206
    ([kvm] qemu image check returns cluster errors when using virtIO block (thinly provisioned) during e_no_space events (along with EIO errors))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.18
changelog:
  - kvm-New-slots-need-dirty-tracking-enabled-when-migrating.patch [bz#618205]
  - Resolves: bz#618205
    (SPICE - race in KVM/Spice would cause migration to fail (slots are not registered properly?))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.17
changelog:
  - kvm-kernel-KVM-MMU-fix-conflict-access-permissions-in-direct-sp.patch [bz#616796]
  - Resolves: bz#616796
    (KVM uses wrong permissions for large guest pages)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.16
changelog:
  - kvm-kernel-fix-null-pointer-dereference.patch [bz#570531]
    - Resolves: bz#570531
    - CVE: CVE-2010-0435 
  - kvm-qemu-fix-unsafe-ring-handling.patch [bz#568816]
    - Resolves: bz#568816
    - CVE: CVE-2010-0431


author: Andreas Schwab <schwab@redhat.com> - 2010k-1.el5
changelog:
  - Upadate to 2010k (#618593)
    - No DST in Egypt during Ramadan in 2010
    - Bahía de Banderas moved to UTC-6 on April 4, 2010, new time zone
      America/Bahia_Banderas
    - Rename Pacific/Truk to Pacific/Chuuk and Pacific/Ponape to Pacific/Pohnpei
    - Update historical data of Europe/Helsinki
    - Update tz-links page


author: Tom Lane <tgl@redhat.com> 8.4.5-1.el5_5.1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #639933


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-34.el5
changelog:
  - Added 545822_fix_part2.patch
  - Added 554830_fix.patch
  - Fixed Invista default config, and typo in multipath.conf man page.
  - Resolves: bz #545822, #554830


author: Benjamin Marzinski <bmarzins@redaht.com> 0.4.7-33.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_19
  - Added new multipath.conf option "checker_timeout". If this is not set the
    checker functions with explicit timeouts use /sys/block/sd<x>/device/timeout
  - Resolves: bz #553042


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-31.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_17
  - Resolves: bz #526550, #518575, #512243, #531744, #540882, #537977, #437585, #472171, #473039, #481239, #502128, #510331, #517896, #501019, #524009, #537281, #475967, #499080, #504619, #515171, #524178, #527754, #532424


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-27.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_16
  - Resolves: bz #437588, #474451, #462776, #477023, #485296, #489030, #481227, #484711


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-25.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_14
  - Resolves: bz #452897, #480048, #457776, #459629, #470896, #493402


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-19.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_13
  - Resolves: bz #238421, #419581, #449097, #455692, #456126, #456228, #457226


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-18.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_12
  - Resolves: bz #431843, #434588, #434988, #439366, #440123, #442000, #444421, #446223, #448655, #454928


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-15.el5
changelog:
  - All non-static path_prio callouts are now just symlinks to the static
    ones
  - Resolves: bz #355961


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-14.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_10
  - Resolves: bz #226791, #247443, #249088, #251346, #335021, #354661, #355961


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-10.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_5
  - Resolves: #214838, #223146, #223150, #223762, #231545, #241189, #242723, #243483


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-8.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_2
  - Resolves bz #219804
  - filesystems made on dasd devices may need to be rebuild after upgrading
    to this version.


author: Peter Jones <pjones@redhat.com> - 0.4.7-4.1
changelog:
  - Split kpartx out into its own package so dmraid can use it without
    installing multipathd
  - Fix a segfault in kpartx


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.14.b17.el5
changelog:
  - Synched with el6 branch
  - Updated to IcedTea 1.7.5
  - Resolves: bz639951
  - Also resolves 619800 and 621303


author: Petr Machata <pmachata@redhat.com> - 2010l-1.el5
changelog:
  - Upstream 2010l:
    - Change Cairo's 2010 reversion to DST from the midnight between
      September 8 and 9 to the midnight between September 9 and 10.
    - Change Gaza's 2010 return to standard time to the midnight between
      August 10 and 11.
    - Bahia de Banderas (Mexican state of Nayarit) changed time zone
      UTC-7 to new time zone UTC-6 on April 4, 2010
  - Resolves: #628637


author: Norm Murray <nmurray@redhat.com> - 6.2.8.0-4.el5_1.1
changelog:
  - backport functionality for CVE patches
  - Add patch for CVE-2007-1797 (#235071)
  - Add patch for CVE-2007-4988 (#310081)
  - Add patch for CVE-2007-4985 (#310091)
  - Add patch for CVE-2007-4986 (#310121)
  - Add patch for CVE-2008-1096 (#286411)
  - Add patch for CVE-2008-1097 (#285861)


author: Matthias Clasen <mclasen@redhat.com> - 6.2.8.0-3.fc6
changelog:
  - fix several integer and buffer overflows (#202193, CVE-2006-3743)
  - fix more integer overflows (#202771, CVE-2006-4144)


author: Matthias Clasen <mclasen@redhat.com> 6.2.4.6-1
changelog:
  - Update to 6.2.4-6
  - Drop upstreamed patches
  - Disable DPS (#158984)
  - Add missing requires (#165931)


author: <mclasen@redhat.com> - 6.2.1.7-1
changelog:
  - Update to 6.2.1
  - Include multiple improvements and bugfixes
    by Rex Dieter et al (111961, 145466, 151196, 149970, 
    146518, 113951, 145449, 144977, 144570, 139298)


author: Tim Waugh <twaugh@redhat.com> 6.0.7.1-4
changelog:
  - The devel subpackage requires XFree86-devel (bug #126509).
  - Fixed build requirements (bug #120776).  From Robert Scheck.


author: Karsten Hopp <karsten@redhat.de> 5.5.6-1
changelog:
  - update
  - specfile fixes
            - verified that the upstream version fixes the following bugreports:


author: Karsten Hopp <karsten@redhat.de> 5.4.7-3
changelog:
  - fix non-cpp headers in -devel package
  - fix #62157 (wrong path for include files in ImageMagick-devel)
  - fix #63897 (use _target instead of _arch) in libtool workaround
  - fix #65860, #65780 (tiff2ps) expands images to >10 MB Postscript files.


author: Karsten Hopp <karsten@redhat.de> 5.4.7-1
changelog:
  - update
  - fix localdoc patch
  - fix %files section
  - disable nonroot patch
  - fix #62100,55950,62162,63136 (display doesn't start form gnome menu)
  - fix libtool workaround
  - moved Magick*-config into -devel package (#64249)


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.4.0-1
changelog:
  - 5.4.0
  - work around build system breakage causing applications to be named
    i386-redhat-linux-foo rather than foo


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.3.7-1
changelog:
  - 5.3.7
  - Fix build without previously installed ImageMagick-devel (#49816)
  - Move perl bindings to a separate package.


author: Matt Wilson <msw@redhat.com>
changelog:
  - remove hacks to move perl man pages
  - don't include the perl*/man stuff, these files go in /usr/share/man now.


author: Matt Wilson <msw@redhat.com>
changelog:
  - bootstrap rebuilt to nuke broken libbz2 deps
  - add Prefix: tag such that the FHS macros work properly


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - hacks to make it work with the new perl
  - version 4.1.0 (actually installs the sonames as 4.0.10... doh!)
  - make sure the libraries have the x bit on


author: Marek Grac <mgrac@redhat.com> - 2.0.115-34.el5_5.4
changelog:
  - fence_ipmilan: Add power-wait option
    (fence_agents_add_power_wait_to_fence_ipmilan.patch)
    Resolves: rhbz#642700


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-34.el5_5.3
changelog:
  - cman: Reduce consensus value
    (cman_reduce_consensus_value.patch)
    cman: fix consensus calculation
    (cman_fix_consensus_calculation.patch)
    Resolves: rhbz#618639


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-34
changelog:
  - fencing: Fix fence_snmp so it returns an error code if the passphrase
    is too short
  - Resolves: rhbz#573834


author: Marek Grac <mgrac@redhat.com> - 2.0.115-30
changelog:
  - fence_scsi does not accept unknown options on STDIN
  - fence_scsi man page contains invalid option
  - Resolves: rhbz#515731 rhbz#532920


author: Marek Grac <mgrac@redhat.com> - 2.0.115-26
changelog:
  - New fence agent for VMWare (TechPreview)
  - Fence agent for HP iLO2 MP
  - Fence agent for RSB ends with traceback
  - Resolves: rhbz#508722 rhbz#545054 rhbz#548577


author: Marek Grac <mgrac@redhat.com> - 2.0.115-25
changelog:
  - fence_egenera symlink attack vulnerability
  - Security feature for SNMP based agent: apc_snmp & ibmblade
  - Change default timeout values for various fence agents
  - Version is not shown in several fence agents
  - Resolves: rhbz#519682 rhbz#532922 rhbz#546340 rhbz#549124
  - Resolves: rhbz#549113


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-24
changelog:
  - cman: automatically configure consensus based on token timeout
  - Add readconfig & dumpconfig to fence_tool
  - Make groupd handle partition merges
  - Resolves: rhbz#544482 rhbz#546082 rhbz#514662


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-22
changelog:
  - scsi_reserve should always echo after failure
  - scsi_reserve should handle multipath with partitions
  - fence_scsi_test: add debug information
  - fence_scsi_test should not allow -c and -s options together
  - Resolves: rhbz#514260 rhbz#516625 rhbz#516763 rhbz#528832


author: Marek Grac <mgrac@redhat.com> - 2.0.115-19
changelog:
  - fence: Fencing fails when used without telnet or ssh
  - fence: APC changed product name (MasterSwitch -> Switched Rack PDU)
  - fence: fix invalid initalization introduced by retry-on option
  - Resolves: rhbz#512343 rhbz#447481


author: Marek Grac <mgrac@redhat.com> - 2.0.115-18
changelog:
  - fence: Broken device detection for DRAC3 ERA/O
  - fence: Fix case sensitivities in action parameter
  - Resolves: rhbz#489809 rhbz#528938


author: Marek Grac <mgrac@redhat.com> - 2.0.115-17
changelog:
  - fence: fencing_snmp fails on all operations & traceback fix
  - fence: accept unknown options from standard input
  - fence: fence_apc unable to obtain plug status
  - Resolves: rhbz#528916 rhbz#532916 rhbz#532920


author: Marek Grac <mgrac@redhat.com> - 2.0.115-16
changelog:
  - fence: timeout options added 
  - fence: better XML generation for metadata (needed for default values)
  - fence: better default timeout for bladecenter
  - fence: retry-on option used in iLO fence agent
  - fence: add missing-as-off option (missing blade/device is always OFF)
  - Resolves: rhbz#507514 rhbz#526806 rhbz#248006


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-15
changelog:
  - make qdiskd "master-wins" node work
  - make qdisk self-fence system if write errors take longer than interval*tko
  - Resolves: rhbz#511113 rhbz#372901


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-14
changelog:
  - Make service_cman.lcrso executable, so that RPM adds it to the debuginfo pkg
  - Resolves: rhbz#511346


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-11
changelog:
  - Fix fence_scsi, multipath and persistent reservations
  - scsi_reserve now handles failures
  - cman_tool leave remove reduces quorum when no services are connected
  - Resolves: rhbz#514260 rhbz#516625 rhbz#515446


author: Marek Grac <mgrac@redhat.com> - 2.0.115-4
changelog:
  - Add option 'list devices' for fencing agents
  - Add support for switching IPv4/IPv6
  - Fence agent ends with traceback if option is missing
  - Add option to set port for SSH/telnet
  - Resolves: rhbz#519697 rhbz#520458 rhbz#506928 rhbz#506928


author: Marek Grac <mgrac@redhat.com> - 2.0.115-3
changelog:
  - Force stdout close for fencing agents
  - Support for long options 
  - Resolves: rhbz#518622 rhbz#519670


author: Chris Feist <cfeist@redhat.com> - 2.0.114-1
changelog:
  - local variable 'verbose_filename' referenced before assignment has been fixed
  - RSA II fencing agent has been fixed.
  - Resolves: rhbz#493802 rhbz#514758


author: Chris Feist <cfeist@redhat.com> - 2.0.113-1
changelog:
  - Limitations with 2-node fence_scsi are now properly documented in the man
    page.
  - Resolves: rhbz#512998


author: Chris Feist <cfeist@redhat.cmo> - 2.0.106-1
changelog:
  - The lssyscfg command can take longer than the shell timeout which will
    cause fencing to fail, we now wait longer for the lssyscfg command to
    complete.
  - Resolves: rhbz#504705


author: Chris Feist <cfeist@redhat.com> - 2.0.104-1
changelog:
  - Broadcast communcations are now possible with cman
  - fence_lpar can now login to IVM systems
  - Resolves: rhbz#502674 rhbz#492808


author: Chris Feist <cfeist@redhat.com> - 2.0.103-1
changelog:
  - fence_apc no longer fails with a pexpect exception
  - symlink vulnerabilities in fance_apc_snmp were fixed
  - The virsh fencing agent was added.
  - Resolves: rhbz#496629 rhbz#498952 rhbz#501586


author: Chris Feist <cfeist@redhat.com> - 2.0.101-1
changelog:
  - The SCSI fence agent now verifies that sg_persist is installed properly.
  - The DRAC5 fencing agent now properly handles a modulename.
  - QDisk now logs warning messages if it appears it's I/O to shared storage
    is hung.
  - Resolves: rhbz#496724 rhbz#500450 rhbz#500567


author: Chris Feist <cfeist@redhat.com> - 2.0.100-1
changelog:
  - Support has been added for ePowerSwitch 8+ devices
  - cluster.conf files can now have more than 52 entries inside a block inside
    the <cman> block
  - The output of the group_tool dump sub commands are no longer NULL padded.
  - Using device="" instead of label="" no longer causes qdiskd to incorrectly
    exit
  - The IPMI fencing agent has been modified to timeout after 10 seconds.  It is
    also now possible to specify a different timeout with the '-t' option.
  - The IPMI fencing agent now allows punctuation in the password
  - Quickly starting and stopping the cman service no longer causes the cluster
    membership to become inconsistent across the cluster
  - An issue with lock syncing causing 'receive_own from ...' errors in syslog
    has been fixed
  - An issue which caused gfs_controld to segfault when mounting hundreds of
    filesystems has been fixed
  - The LPAR fencing agent now properly reports status when an LPAR is in
    Open Firmware
  - The APC SNMP fencing agent now properly recognizes outletStatusOn and
    outletStatusOff returns codes from the SNMP agent
  - WTI Fencing agent can now connect to fencing devices with no password
  - The rps-10 fencing agent now properly performs a reboot when run with no
    options.
  - The IPMI fencing agent now supports different cipher types with the '-C'
    option
  - Qdisk now properly scans devices and partitions
  - Added support for LPAR/HMC v3
  - cman now checks to see if a new node has state to prevent killing the first
    node during cluster setup
  - service qdiskd start now works properly
  - The McData fence agent now works properly with the Sphereon 4500 model
  - The Egenera fence agent can now specify an ssh login name
  - APC Fence agent works with non-admin accounts with firmware 3.5.x
  - fence_xvmd now tries two methods to reboot a virtual machine
  - Connections to openais are now allowed from unprivileged CPG clients with
    user and group of 'ais'
  - Support has been added for Cisco 9124/9134 SAN switches
  - groupd no longer allows the default fence domain to be '0' which would cause
    rgmanager to hang
  - The RSA fence agent now supports ssh enabled RSA II devices
  - DRAC fence agent now works with iDRAC on the Dell M600 Blade Chassis
  - fence_drac5 now shows proper usage instructions
  - cman no longer uses the wrong node name when getnameinfo() fails
  - The SCSI fence agent now verifies that sg_persist is installed properly
  - Resolves: rhbz#467112 rhbz#468966 rhbz#470318 rhbz#276541 rhbz#447964 rhbz#472786 rhbz#474163 rhbz#480401 rhbz#481566 rhbz#484095 rhbz#481664 rhbz#322291 rhbz#447497 rhbz#484956 rhbz#485700 rhbz#485026 rhbz#485199 rhbz#470983 rhbz#488958 rhbz#487501 rhbz#491640 rhbz#480178 rhbz#485469 rhbz#480836 rhbz#493207 rhbz#493802 rhbz#462390 rhbz#498329 rhbz#488565 rhbz#499871


author: Chris Feist <cfeist@redhat.com> - 2.0.96-1
changelog:
  - WTI fencing agent no longer powers off/on power if it is unable to get
    status.
  - Resolves: rhbz#468904


author: Chris Feist <cfeist@redhat.com> - 2.0.89-1
changelog:
  - Fixed issue with fence_apc failing with a pexpect exception.
  - Added fence agent for VMware ESX.
  - Additional logging information has been added by fence_scsi.
  - groupd now detects dead daemons and removes their nodes from the cluster.
  - A network interface selection option has been added for fence_xvmd.
  - Resolves: rhbz#460054 rhbz#251048 rhbz#460909 rhbz#318571 rhbz#457104


author: Chris Feist <cfeist@redhat.com> - 2.0.88-1
changelog:
  - Fix cman_tool nodes -a.
  - nolock gfs filesystems are ignored in the groupd startup.
  - skip_undefined option added for fenced.
  - groupd improved to better handle upgrades.
  - man pages for fence agents have been updated.
  - LPAR/HMC fence agent updated to fix state detection.
  - New option added to fence_tool to delay before join.
  - fence_tool -m option has been added for 2 node clusters.
  - group_tool ls is now scriptable.
  - Fixed qdiskd file descriptor leak.
  - qdiskd can no longer updated cman if the disk is unavailable.
  - qdisk no longer freezes cluster when FC cable is unplugged
  - Resolves: rhbz#454401 rhbz#315741 rhbz#459127 rhbz#457104 rhbz#448043 rhbz#460190 rhbz#460190 rhbz#459754 rhbz#459678 rhbz#460645 rhbz#460937 rhbz#442541


author: Chris Feist <cfeist@redhat.com> - 2.0.87-3
changelog:
  - An option to the init script has been added to prevent joining to the fence
    domain.
  - stop_cman="1" now works if heuristics fail during initialization.
  - qdiskd now works with block devices which are not in /proc/partitions
  - Quorum device info can now be displayed with 'cman_tool status'.
  - A dirty node is now prevented from joining the cman cluster.
  - A bug which caused "Node X is undead" error messages to be printed is fixed.
  - When groupd starts up it now ignores nolock file systems.
  - cman is now only notified that a fence has occured when all devices have completed
    successfully.
  - plocks are now read from dlm or lock_dlm.
  - Support for a 24-port APC fencing device has been added.
  - gfs_controld now ignores the write(2) return value on plock devices.
  - Several infinite loops were fixed.
  - gfs_controld now retries recovery for a withdrawn journal.
  - apc_snmp fence agent has been added.
  - Resolves: rhbz#455598 rhbz#455865 rhbz#362031 rhbz#443358 rhbz#442541 rhbz#315741 rhbz#456403 rhbz#450169 rhbz#444615 rhbz#446128 rhbz#444529 rhbz#442451 rhbz#438905


author: Chris Feist <cfeist@redhat.com> - 2.0.81-1
changelog:
  - cman now starts correctly when additional params are given to network-bridge 
  - fencde admin override now updates cman
  - qdisk master abdication now works properly
  - groupd no longer processes messages from dead nodes
  - dlm no longer complains about closing a connection to node 0 when shutting
    down qdisk
  - Resolves: rhbz#434790 rhbz#435189 rhbz#430264 rhbz#436984 rhbz#437496 rhbz#315711


author: Chris Feist <cfeist@redhat.com> - 2.0.80-1
changelog:
  - gfs_tool now recognizes GFS files sytems on ppc
  - Fixed alignment problem with ppc64
  - Prevent "reservation conflict" messages when scsi_reserve starts.
  - Leave the fence domain if scsi_reserve fails to register with any device.
  - Improve logging in scsi_reserve script.
  - Use "locking_type = 0" for all lvm commands (ie. vgs).
  - Fix SCSI reservations scripts to handle LVM mirrors and stripes.
  - Not an error if fence_scsi attempts to remove a non-existent key from a
    device.
  - Resolves: rhbz#429633 rhbz#429546 rhbz#373491 rhbz#373511 rhbz#373541 rhbz#373571 rhbz#429033


author: Chris Feist <cfeist@redhat.com> - 2.0.79-1
changelog:
  - Dumping of debug logs from daemons has been improved
  - Plock performance has been improved
  - ccs_tool now returns the proper exit status
  - ccs lookup functions now recognize alternative hostnames better
  - ccs_connect now fails properly when a non-root user calls it
  - Endian issues which caused problems on multi-arch clusters were fixed
  - Possible NULL pointer dereferences in cman were fixed
  - Quorum is now properly reduced when a node leaves using
    "cman_tool leave remove"
  - Resolves: rhbz#317181 rhbz#359271 rhbz#404451 rhbz#249781 rhbz#323711 rhbz#289501 rhbz#418741 rhbz#267441 rhbz#271701


author: Chris Feist <cfeist@redhat.com> - 2.0.75-1
changelog:
  - Potential NULL pointer dereferences were removed.
  - Correctly reduce quorum when a node leaves using "cman_tool leave remove"
  - Quorum is now recalculated when cman has the new nodes expected_votes.
  - Updated cman_tool man page
  - Resolves: rhbz#323931 rhbz#317561 rhbz#327721


author: Chris Feist <cfeist@redhat.com> - 2.0.71-1
changelog:
  - A memory leak was fixed in fence_xvmd.
  - fence_egenera script no longer will fence a node during a crash dump.
  - Resolves: rhbz#251358 rhbz#250152


author: Chris Feist <cfeist@redhat.com> - 2.0.44-1
changelog:
  - New upstream sources.
  - Resolves: rhbz#213878 rhbz#216902 rhbz#213763 rhbz#217436
  - Resolves: rhbz#217460 rhbz#211836 rhbz#211918


author: Joe Orton <jorton@redhat.com> - 1.2.7-11.1
changelog:
  - add fixes for ttl handling in reslist API (#632096)
  - build with -fno-strict-aliasing to fix strict-aliasing violations


author: Joe Orton <jorton@redhat.com> - 1.2.7-8
changelog:
  - add security fix for CVE-2009-2412 (#515714)
  - add security fixes for CVE-2009-0023, CVE-2009-1955, 
    and CVE-2009-1956 (#504561)


author: Joe Orton <jorton@redhat.com> 0.9.3-5
changelog:
  - fix to try linking against -ldb first (#90917)
  - depend on openldap, gdbm, db4, expat appropriately.


author: Joe Orton <jorton@redhat.com> 0.9.3-3
changelog:
  - make devel package conflict with old subversion-devel
  - run the less crufty parts of the test suite


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-105.el5_5.4
changelog:
  - Add HLT instruction emulation to VMXAssist (rhbz 593230)
  - Support the assignment of the VF of Intel 82599 10GbE Controller (rhbz 599018)
  - Use PCIe FLR for VF of Intel 82599 10GbE Controller (rhbz 599018)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-105.el5_5.1
changelog:
  * Thu Feb 11 2010 Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-105.el5
  - Migration not working sometimes with xen-3.0.3-95.el5 disable paused domain save patch (rhbz 557446)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-102.el5
changelog:
  - Add more SMBIOS data to hvmloader (rhbz 540161)
  - Customize manufacturer and family for guest SMBIOS (rhbz 499453)
  - Fix bugs in ATAPI driver (rhbz 480317)
  - Add guest placement feature to Xen NUMA (rhbz 543199)
  - Fix up xend to allow external clients to PCI hotplug (rhbz 512315)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-101.el5
changelog:
  - Add maxvcpus support for xm (rhbz 453042)
  - Warn on attempts to create live core dumps (rhbz 382591)
  - Print error message when pciback is not loaded (rhbz 514448)
  - Fix Xendomains output formatting (rhbz 251666)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-100.el5
changelog:
  - Make python scripts use system python (rhbz 521333)
  - xen qemu SCSI emulation bugfixes (rhbz 515757)
  - Set FD_CLOEXEC when opening file descriptors (rhbz 522850)
  - Implement xen lzma and bzip2 bzImage loader decompression (rhbz 517049)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-99.el5
changelog:
  - fix 'xm pci-list' for PV guests (rhbz 514025)
  - Fix rename-restart behavior (rhbz 521799)
  - Allow more then 12 PCI device assignments (rhbz 511403)
  - Fix domain name conflicts after domain shutdown (rhbz 529880)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-97.el5
changelog:
  - Allocte VTd space for HVM guests (rhbz 512041)
  - Check if a device is behind PCIe switch that lacks ACS (rhbz 523819)
  - Update scheduler parameters after save-restore (rhbz 513211)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-96.el5
changelog:
  - Give proper error when detaching PCI device from PV guest (rhbz 512307)
  - Fix memory leaks in lib{xc, xenstore} python bindings (rhbz 524308)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-95.el5
changelog:
  - Fix race condition on domain reboot (rhbz 513604)
  - Avoid multiple restarts of a domain (rhbz 518104)
  - Add grub.conf password protection support to pygrub (rhbz 518124)
  - Ignore unimplemented PHYSDEVOP_map_pirq (rhbz 521346)
  - Xend save/shutdown hang when running on paused domain (rhbz 504910)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-92.el5
changelog:
  - Fix Python traceback when pygrub tries to log a message (rhbz 490754)
  - Relax PCI device assignment rules for PV guests (rhbz 508310)
  - Don't list assigned PCI devices as assignable (rhbz 510682)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-91.el5
changelog:
  - Prevent PVFB config loss after PV guest reboot -- reworked fix for PVFB
    xenstore leaks (rhbz 507765)
  - Fix AIO hang in ioemu (rhbz 507329)


author: Michal Novotny <minovotn@redhat.com> - 3.0.3-89.el5
changelog:
  - Fix guest reboot with VT-d device assigned (rhbz 507182)
  - Fix MSI-X NIC hotplug removal (rhbz 507198)
  - Fix PCIE NICs on Stoakley detach issue (rhbz 507179)
  - Add BDFs duplicate check in HVM configure file (rhbz 507195)
  - Fix `xm pci-list` BDF output on WeyBridge platform (rhbz 507257)
  - Set cpu_weight default value back to 256 (rhbz 508680)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-86.el5
changelog:
  - Add missing blktap poll-on-aio support (rhbz 486353)
  - Fix L1 table endianess of qcow images (rhbz 485471)
  - Fix network-bridge-bonding script for VLANs (rhbz 492258)
  - AIO backport for qemu (rhbz 465116)
  - Fix HVM time skew problems (rhbz 480689)
  - Fix device destroy (rhbz 484110)
  - Add 1GB page table support (rhbz 487342)
  - Fix credit scheduler parameters (rhbz 345321)
  - Fixed version of xen-vfb-default-keymap.patch (rhbz 345251)
  - Fix hotplug timeout under heavy I/O (rhbz 456926)
  - Check for devices being used by other domains (rhbz 345441)
  - Support for VT-d (rhbz 480520)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-85.el5
changelog:
  - New version of pci-migration patch to fix file descriptor leak (rhbz 334821)
  - Allow command-line editing in IA64 boot loader (rhbz 249791)
  - Fix PV migration hang on failure (rhbz 428691)
  - Fix disk reordering when xend is restarted (rhbz 474579)
  - Fix xenconsole after aborted save (rhbz 486291)
  - Fix 64-bit MMIO bar remapping (rhbz 494925)
  - Support relative mouse offset VNC extension (rhbz 487559)
  - Fix PVFB backend xenstore leak (rhbz 439182)
  - Fix HVM guest creation under tight memory conditions (rhbz 419771)
  - Add Ctrl+Alt+Del support for HVM bios (rhbz 338331)
  - Add global default keymap setting (rhbz 345251)
  - Fix guest resume after failed save (rhbz 486157)
  - Stop xend in runlevels 0, 1, and 6 (rhbz 490053)
  - Persist bootloader settings across xend restarts (rhbz 468971)
  - Fix cpu affinity reset after save/restore (rhbz 228890)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-84.el5
changelog:
  - Fix `default' and `timeout' parameters in elilo.conf (rhbz 491408)
  - Fix a typo which blocks local migrations (rhbz 484967)
  - Forbid migration with attached PCI devices (rhbz 334821)
  - Fix network-bridge when SRCADDR is used for default route (rhbz 475249)
  - Disallow bogus MAC addresses when creating new VIF devices (rhbz 476611)
  - Fix a typo in a doc string (rhzb 481354)
  - Add INT13 LBA48 extensions to HVM BIOS (rhbz 487907)
  - Fall back to a first entry in grub.conf if default is invalid (rhbz 490754)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-83.el5
changelog:
  - Support virtual SCSI disks larger than 2TB (rhbz #482780)
  - Add F11/F12 key support to hvm bios (rhbz #338321)
  - Fix return values in xend and xendomains init scripts (rhbz #430904)
  - Document Ctrl-] for xm console in xm(1) (rhbz #454611)
  - Fix checking for out-of-range IDE disk devices (rhbz #475433)
  - Fix memory leak in libxenstore (rhbz #490158)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-81.el5
changelog:
  - Fix data corruption with virtual SCSI disks >1TB (rhbz #479339)
  - Fix SCSI problems on fullvirt guests with >4GB RAM (rhbz #480843)
  - Give back memory to dom0 after a failed auto-balloon (rhbz #345271)
  - Fix save/restore for 32-on-64 PV guests (rhbz #425411)
  - Fix xm dump-core for 32-on-64 PV guests (rhbz #480118)
  - Report errors when saving guests (rhbz #451675)
  - Truncate existing file when dumping guest core (rhbz #484346)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-78.el5
changelog:
  - Alternative network-bridge scripts without netloop for using with
    bonding (rhbz #453463, rhbz #429154)
  - Fix xm block-detach operation (rhbz #473882)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-75.el5
changelog:
  - Fix disk device ordering randomness which breaks reboots (rhbz #462727)
  - Remove qemu-dm.debug wrapper script (CVE-2008-4993, rhbz #470795)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-74.el5
changelog:
  - Avoid duplicate core dump race condition (rhbz #455879)
  - Xenstore unsafe data access (CVE-2008-4405, rhbz #464817)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-73.el5
changelog:
  - Fix xenstat corruption when a domain shuts down (rhbz #251743)
  - Fix selinux labelling if xenstored is on tmpfs (rhbz #462702)
  - Clear out stale NVRAM files on ia64 (rhbz #358321)
  - Allow use of tap:aio for HVM guests emulated devices + pv drivers (rhbz #362401)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-72.el5
changelog:
  - Fix network for ia64 HVM guests with > 3gb RAM (rhbz #453114)
  - Add e1000 emulation (rhbz #344861)
  - Fix network-bridge script VLAN handling (rhbz #337651)
  - Use largepages for HVM guests (rhbz #445663)
  - Fix xm network-attach docs (rhbz #440274)
  - Fix xm shutdown --wait, when using domid (rhbz #442755)


author: Chris Lalancette <clalance@redhat.com> - 3.0.3-71.el5
changelog:
  - Support for attaching more than 16 xvd devices to guest domains (rhbz #456392)
  - Don't clobber the wallclock during restore (rhbz #426861)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-68.el5
changelog:
  - Rotate all log files periodically (rhbz #422271)
  - Fix overflow in qemu-img (rhbz #437086)
  - Fix race in DMA thread (rhbz #250988)
  - Fix blktap data access alignment (rhbz #253884)
  - Don't unpause domain after taking core (rhbz #442698)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-67.el5
changelog:
  - Persist device model PID across restarts (rhbz #280611)
  - Pass internal libxc return value back to caller (rhbz #414391)
  - Fix passing of domid to libxc from python IOport & IRQ controllers (rhbz #432376)
  - Don't try to balloon more than physical RAM (rhbz #280881)
  - Add blktap sub-type checks (rhbz #444413)
  - Respect nographics request for HVM (rhbz #230841)
  - Put xenstored database on tmpfs (rhbz #446089)
  - Prefer grub.conf in pygrub (rhbz #234486)
  - Don't throw errors when listing domains (rhbz #238833)
  - Add mouse wheel support to PVFB (rhbz #250401)


author: Markus Armbruster <armbru@redhat.com> - 3.0.3-66.el5
changelog:
  - Correctly limit PVFB size CVE-2008-1952 (rhbz #447761)
  - Disable QEMU USB disk image format auto-detection CVE-2008-1945 (rhbz #445846)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-65.el5
changelog:
  - Remove blktap sharing patch which prevents guests with large
    numbers of disks booting (rhbz #445476)


author: Markus Armbruster <armbru@redhat.com> - 3.0.3-63.el5
changelog:
  - Fix PVFB to validate frame buffer description (rhbz #443376)
  - Fix PVFB to cope with bogus update requests (rhbz #443392)


author: Chris Lalancette <clalance@redhat.com> - 3.0.3-60.el5
changelog:
  - Pull in the userland side of upstream c/s 15161 to fix fully virt SMP
    boot on Intel machines (rhbz #435744)


author: Richard W.M. Jones <rjones@redhat.com> - 3.0.3-59.el5
changelog:
  - Clarify documentation for 'xm vcpu-set' and 'xm mem-set' on FV guests
    (earlier changelog entry for this bug is incorrect) (rhbz #370101)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-54.el5
changelog:
  - Fix pygrub unaligned access (rhbz #259541)
  - Add timestamp to console and hypervisor log files (rhbz #271181)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-51.el5
changelog:
  - Fix PCI device passthrough (rhbz #339421)
  - Fix device sharing checks for blktap disks (rhbz #223259)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-50.el5
changelog:
  - Allow type of None for VIF in HVM guests (rhbz #300531)
  - Fix release of NVRAM on domain reboot cleanup (rhbz #426079)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-48.el5
changelog:
  - Fix NVRAM cleanup for ia64 (rhbz #428653)
  - Fix destroy of large VMs (rhbz #428651)
  - Fix crash dump of PAE guests > 4 GB (rhbz #336041)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-47.el5
changelog:
  - Really fix qemu bug (rhbz #360381)
  - Fix blkif check to distinguish 0 and None for Solaris (rhbz #253222)


author: Daniel P. Berrange <berrange@redhat.com>
changelog:
  - Add NUMA info to physinfo sysctl (rhbz #426322)
  - Add NR cpus info to physinfo sysctl (rhbz #426323)
  - Add availheap sysctl (rhbz #426321)
  - Add 'xm trigger' command (rhbz #223900)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-43.el5
changelog:
  - Fixed xenbaked tmpfile flaw (CVE-2007-3919) (rhbz #350421)
  - Delete kernel/initrd after dryrun xm create (rhbz #251225)
  - Update 32-on-64 PVFB compat fix (rhbz #253221)
  - Delete xenstored TDB upon startup (rhbz #356461)
  - Cleanup kernel/initrd after pygrub errors (rhbz #231144)
  - Stop SDL backend choking on bogus screen updates (rhbz #368931)
  - Fix handling of lilo.conf for ia64 (rhbz #288371)
  - Backport USB tablet fixes (rhbz #245574)
  - Fix libvncserver unaligned access (rhbz #286021)


author: Chris Lalancette <clalance@redhat.com> - 3.0.3-41.el5
changelog:
  - QEmu NE2000 overflow check - CVE-2007-1321 (rhbz #296281)
  - Pygrub guest escape - CVE-2007-4993 (rhbz #302831)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-38.el5
changelog:
  - Fixed memory ballooning for HVM restore (rhbz #253583)
  - Avoid bogus VNC password prompts after migrate/restore (rhbz #252359)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-37.el5
changelog:
  - Fix UUID normalization when no UUID is present (rhbz #253683)
  - Fix handling of 'keymap' param in config files (rhbz #252361)
  - Don't destroy guest after shutdown timeout (rhbz #236595)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-36.el5
changelog:
  - Ensure PVFB daemon terminates promptly on domain shutdown (rhbz #252232)
  - Fix rtl8139 checksums for VISTA (rhbz #251407)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-35.el5
changelog:
  - Fix more VNC threading problems (rhbz #245188)
  - Fix save/restore edge case (rhbz #245960)
  - Fix legacy PVFB for 32-on-64 (rhbz #248947)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-34.el5
changelog:
  - Fixed booting guests with legacy native ABI device protocol (rhbz#248192)
  - Fix more VNC keycode/keysym mappings issues (rhbz #248863)
  - Fix potential QEMU crash when VNC client disconnects (rhbz #230083)
  - Add NVRAM support for ia64 guests (rhbz #246006)
  - Normalize UUID to avoid loosing guest name upon restarts (rhbz #249564)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-31.el5
changelog:
  - Rate limit console messages from guest (rhbz 204504)
  - Use -r flag to losetup for readonly block devices (rhbz 225166)
  - Mark /etc/sysconfig/xend as a config file (rhbz 202636, rhbz 223911)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-30.el5
changelog:
  - Fix address test in network-bridge (rhbz 237667)
  - Permissions of xend-debug.log (rhbz 234227)
  - Hotplug scripts error reporting (rhbz 233433)
  - Disable network-bridge if running on Dom0 with nfs/iscsi root device (rhbz 238143)


author: Markus Armbruster <armbru@redhat.com> - 3.0.3-29.el5
changelog:
  - Fix a race in the pvfb startup (rhbz 243884)
  - Loadable pvfb keymap (rhbz 223799)
  - Fix pvfb save/restore broken in 3.0.3-27.el5


author: Daniel P. Berrange <berrange@redhat.com>
changelog:
  - Fixed 32-bit core dumps with HVM (rhbz 244300)
  - Add persistent logging of guest & hypervisor console (rhbz 202636, rhbz 223911)
  - Fix destroyDevice() args (rhbz 222094)
  - Check file exists in blktap hotplug scripts (rhbz 215342)
  - Make SXPR server in XenD multi-threaded (rhbz 210141)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-27.el5
changelog:
  - Update low level (non-XenD) userspace to work with 3.1.0 hypervisor (rhbz#243462,
    rhbz#234166, rhbz#230790)
  - Patch XenD to use 'domid' instead of 'dom' with libxc
  - Patch XenD to use new HVM domain creation process
  - Remove unused i18n stuff from Makefile
  - Fix pygrub, blktapctrl paths to return to original settings
  - Back-port 3.1.0  HVM save/restore changes to XenD (rhbz#214995)
  - Move HVM save/restore files from /tmp to /var/lib/xen (rhbz#214995)
  - Ensure pvfb backend terminates when frontend vanishes early (rhbz#230634)
  - Save vncpasswd in xenstore along with the other pvfb
    configuration (rhbz#220494)
  - Fix allocation of fixed VNC ports for pvfb (rhbz#211208)
  - Don't start a xen-vncfb process for HVM (rhbz#225413)


author: Rik van Riel <riel@redhat.com> - 3.0.3-26.el5
changelog:
  - disable qemu monitor mode, for security reasons (rhbz#230295)
  - fix IA64 shadow page table mode (rhbz#230459, rhbz#230331)


author: Rik van Riel <riel@redhat.com> - 3.0.3-21.el5
changelog:
  - make /var/log/xen only readable by root (rhbz#212082)
  - we no longer package /var/xen/dump, so don't mkdir it


author: Rik van Riel <riel@redhat.com> - 3.0.3-20.el5
changelog:
  - fix core dumps of 32 bit guests >2GB RAM (rhbz#215796)
  - write the /local/domain/vm node early in the startup process (rhbz#215269)


author: Rik van Riel <riel@redhat.com> - 3.0.3-19.el5
changelog:
  - fix memory boundary checking in qemu-dm (rhbz#221119)
  - fix VNC JP106 keyboard handling (rhbz#215778)


author: Rik van Riel <riel@redhat.com> - 3.0.3-18.el5
changelog:
  - add --force option to xenbus device detach code (rhbz#217853)
  - fix keeping track of HVM vnc password (rhbz#218050)


author: Rik van Riel <riel@redhat.com> - 3.0.3-17.el5
changelog:
  - enable DMA on HVM virtual cdrom drive (rhbz#218357)
  - new paravirt framebuffer, as merged upstream (rhbz#218050)


author: Rik van Riel <riel@redhat.com> - 3.0.3-14.el5
changelog:
  - do not auto-start a domain that was restored from a save (rhbz#217295)
  - use log level info for messages that are not errors (rhbz#218759)
  - Resolves: rhbz#217295 rhbz#218759


author: Rik van Riel <riel@redhat.com> - 3.0.3-12.el5
changelog:
  - catch it when an HVM guest tries to use hde (rhbz#217736)
  - make "xm list" display how much memory a domain really has (rhbz#217443)
  - move rtc timer for HVM guests into the hypervisor (rhbz#214780)
  - Resolves: rhbz#214780 rhbz#217736 rhbz#217443


author: Rik van Riel <riel@redhat.com> - 3.0.3-10.el5
changelog:
  - fix 2TB overflow/wraparound in blktap (rhbz#217580)
  - various fixes from Herbert Xu's security audit
  - allow HVM virtual floppy to be a device on dom0 (rhbz#216449)
  - make uppercase characters always work in HVM console (rhbz#217554)
  - Resolves: rhbz#217580 rhbz#216449 rhbz#217999 rhbz#218000 rhbz#218002 rhbz#218003 rhbz#218005 rhbz#217554


author: Rik van Riel <riel@redhat.com> - 3.0.3-9.el5
changelog:
  - reapply the for bugs 211600, 212193 and 211697
  - move the dump path to /var/lib/xen (bug 212558)
  - Resolves: rhbz#211600 rhbz#212193 rhbz#211697 rhbz#212558


author: Rik van Riel <riel@redhat.com> - 3.0.3-8.el5
changelog:
  - undo the fixes for bz 211600, 212193 and 211697, apply them after beta 2
  - fix vmxassist segment loading on real->protected mode transition (bz 214004)


author: Rik van Riel <riel@redhat.com> - 3.0.3-7.el5
changelog:
  - fix the uptime statistic for suspended/resumed guests (bz 211600)
  - improve the error message when domU uses the wrong device (bz 212193)
  - print the full path to the config file in error messages (bz 211697)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-5.el5
changelog:
  - Added /var/lib/xen/images as default dir for storing guest disk image files
    to ensure correct selinux context (bz 212995)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-3.el5
changelog:
  - Switch /etc/xen directory to be mode 0700 because the config files
    can contain plain text passwords (bz 209335)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-1.el5
changelog:
  - Pull in the official 3.0.3 tarball of xen (changeset 11774). No functional
    change, only release number toggled.
  - Add patches for VNC password authentication (bz 209335)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.2-42
changelog:
  - Added vnclisten patches to make VNC only listen on localhost
    out of the box, configurable by 'vnclisten' parameter (bz 203196)


author: Stephen C. Tweedie <sct@redhat.com> - 3.0.2-40
changelog:
  - Workaround blktap/xenstore startup race
  - Add udev rules for xen blktap devices (srostedt)
  - Add support for dynamic blktap device nodes (srostedt)
  - Fixes for infinite dom0 cpu usage with blktap
  - Fix xm not to die on malformed "tap:" blkif config string
  - Enable blktap on kernels without epoll-for-aio support.
  - Load the blktap module automatically at startup
  - Reenable blktapctrl


author: Daniel Berrange <berrange@redhat.com> - 3.0.2-39
changelog:
  - Disable paravirt framebuffer server side rendered cursor (bz 206313)
  - Ignore SIGPIPE in paravirt framebuffer daemon to avoid terminating
    on client disconnects while writing data (bz 208025)


author: Stephen C. Tweedie <sct@redhat.com> - 3.0.2-35
changelog:
  - Don't strip qemu-dm early, so that we get proper debuginfo (danpb)
  - Fix compile problem with latest glibc


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-26
changelog:
  - update to xen-unstable cs 11251
  - clean up patches some
  - disable ia64 as it doesn't currently build


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-24
changelog:
  - remove copy of xenguest-install from this package, require 
    python-xeninst (the new home of xenguest-install)


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-23
changelog:
  - add patch to fix rtl8139 in FV, switch it back to the default nic
  - add necessary ia64 patches (#201040)
  - build on ia64


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-20
changelog:
  - don't start blktapctrl for now
  - fix HVM guest creation in xenguest-install
  - make sure log files have the right SELinux label


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-19
changelog:
  - fix libblktap symlinks (#199820)
  - make libxenstore executable (#197316)
  - version libxenstore (markmc)


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-18
changelog:
  - include /var/xen/dump in file list
  - load blkbk, netbk and netloop when xend starts
  - update to cs 10712
  - avoid file conflicts with qemu (#199759)


author: Stephen C. Tweedie <sct@redhat.com> - 3.0.2-13
changelog:
  - Update to xen-unstable cset 10675
  - Remove internal libvncserver build, new qemu device model has its own one
    now.
  - Change default FV NIC model from rtl8139 to ne2k_pci until the former works
    better


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-11
changelog:
  - split into main packages + -libs and -devel subpackages for #198260
  - add patch from jfautley to allow specifying other bridge for 
    xenguest-install (#198097)


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-1
changelog:
  - update to post 3.0.2 snapshot (changeset:   9744:1ad06bd6832d)
  - stop applying patches that are upstreamed
  - add patches for bootloader to run on all domain creations
  - make xenguest-install create a persistent uuid
  - use libvirt for domain creation in xenguest-install, slightly improve 
    error handling


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-4
changelog:
  - add udev rule so that /dev/xen/evtchn gets created properly
  - make pygrub not use /tmp for SELinux
  - make xenguest-install actually unmount its nfs share.  also, don't use /tmp


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-3
changelog:
  - set /proc/xen/privcmd and /var/log/xend-debug.log as close on exec to avoid
    SELinux problems
  - give better feedback on invalid urls (#184176)


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-1
changelog:
  - fix xenguest-install so that it uses phy: for block devices instead of 
    forcing them over loopback.  
  - change package versioning to be a little more accurate


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-0.20060208.fc5.3
changelog:
  - add patch to ensure we get a unique fifo for boot loader (#182328)
  - don't try to read the whole disk if we can't find a partition table 
    with pygrub 
  - fix restarting of domains (#179677)


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-0.20060208.fc5
changelog:
  - update to current hg snapshot for HVM support
  - update xenguest-install for hvm changes.  allow hvm on svm hardware
  - fix a few little xenguest-install bugs


author: Jeremy Katz <katzj@redhat.com> - 3.0-0.20060130.fc5.4
changelog:
  - patch from David Lutterkort to pass macaddr (-m) to xenguest-install
  - rework xenguest-install a bit so that it can be used for creating 
    fully-virtualized guests as well as paravirt.  Run with --help for 
    more details (or follow the prompts)
  - add more docs (noticed by Andrew Puch)


author: Bill Nottingham <notting@redhat.com> 3.0-0.20060130.fc5.3
changelog:
  - disable iptables/ip6tables/arptables on bridging when bringing up a
    Xen bridge. If complicated filtering is needed that uses this, custom
    firewalls will be needed. (#177794)


author: Jeremy Katz <katzj@redhat.com> - 3.0-0.20060110.fc5.5
changelog:
  - buildrequire dev86 so that vmx firmware gets built
  - include a copy of libvncserver and build vmx device models against it


author: Daniel Veillard <veillard@redhat.com> - 3.0-0.20051109.fc5.4
changelog:
  - adding missing headers for libxenctrl and libxenstore
  - use libX11-devel build require instead of xorg-x11-devel


author: Rik van Riel <riel@redhat.com> 3.0-0.20050912.fc5
changelog:
  - add /var/{lib,run}/xenstored to the %files section (#167496, #167121)
  - upgrade to today's Xen snapshot
  - some small build fixes for x86_64
  - enable x86_64 builds


author: Rik van Riel <riel@redhat.com> 3.0-0.20050908
changelog:
  - explicitly call /usr/sbin/xend from initscript (#167407)
  - add xenstored directories to spec file (#167496, #167121)
  - misc gcc4 fixes 
  - spec file cleanups (#161191)
  - upgrade to today's Xen snapshot
  - change the version to 3.0-0.<date> (real 3.0 release will be 3.0-1)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - patch manpath instead of moving in specfile.  patch sent upstream
  - install to native python path instead of /usr/lib/python
  - other misc specfile duplication cleanup


author: Rik van Riel <riel@redhat.com> 2-20050402
changelog:
  - move initscripts to /etc/rc.d/init.d (Florian La Roche) (#153188)
  - ship only PDF documentation, not the PS or tex duplicates


author: Rik van Riel <riel@redhat.com> 2-20050328
changelog:
  - do not yet upgrade to new hypervisor ;)
  - add barrier to fix SMP boot bug
  - add tags target
  - add zlib-devel build requires (#150952)


author: Rik van Riel <riel@redhat.com> 2-20050305
changelog:
  - the gcc4 compile patches are now upstream
  - upgrade to last night's snapshot, drop patches locally


author: Rik van Riel <riel@redhat.com> 2-20050218
changelog:
  - upgrade to last night's Xen snapshot
  - a kernel upgrade is needed to run this Xen, the hypervisor
    interface changed slightly
  - comment out unused debugging function in plan9 domain builder
    that was giving compile errors with -Werror


author: Jeremy Katz <katzj@redhat.com> - 2-20050114
changelog:
  - update to new snap
  - python-twisted is its own package now
  - files are in /usr/lib/python now as well, ugh.


author: Rik van Riel <riel@redhat.com>
changelog:
  - grab new Xen tarball (with wednesday's patch already included)
  - transfig is a buildrequire, add it to the spec file


author: Jindrich Novy <jnovy@redhat.com> 4.3.29-7.fc6
changelog:
  - fix memleak caused by SET_TXN macro in xa_db.c, when opening
    database created with DB_XA_CREATE flag (#204920)


author: Jindrich Novy <jnovy@redhat.com> 4.3.29-2
changelog:
  - don't package /usr/share/doc/images in the main db4 package
    and move it to db4-devel (#33328)
  - make db4 LFS capable (#33849)
  - move db4-devel, db4-tcl, db4-java to Development/Libraries
    group instead of System Environment/Libraries (#54320)
  - BuildPrereq -> BuildRequires
  - don't use RPM_SOURCE_DIR
  - Obsoletes db3, db2


author: Nalin Dahyabhai <nalin@redhat.com> 4.2.52-6
changelog:
  - on %{ix86} systems, make the availability of an NPTL-requiring libdb match
    the availability of an NPTL libpthread in glibc > 2.3.3-48
  - run ldconfig in db4-java's %post/%postun
  - when building java support, assume that libgcj is equivalent enough to 1.3


author: Jeff Johnson <jbj@jbj.org> 4.2.52-4
changelog:
  - remove dangling symlinks (#123721 et al).
  - remove db_cxx.so and db_tcl.so symlinks, versioned equivs exist.
  - apply 2 patches from sleepycat.
  - resurrect db4-java using sun jvm-1.4.2.
  - cripple autoconf sufficiently to build db4-java with gcj, without jvm.
  - check javac first, gcj34 next, then gcj-ssa, finally gcj.
  - add ed build dependency (#125180).


author: Nalin Dahyabhai <nalin@redhat.com> 4.1.25-14
changelog:
  - symlink from %{_libdir}/tls/libdb-4.1.so to the copy in /%{_lib}/tls, so
    that the run-time linker can find the right copy for of apps which use an
    RPATH to point at %{_libdir}/libdb-4.1.so


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build both with and without support for shared mutex locks, which require NPTL
  - make behavior wrt where we put libdb the same for all OSs
  - revert changes making tcl optional - nesting %if tcl and %ifarch nptl
    doesn't work
  - fix dangling HREFs in utility docs (pointed to main docs dir, while they're
    actually in the -utils docs dir)
  - run ldconfig when installing/removing the -utils subpackage, as it contains
    shared libraries


author: Jeff Johnson <jbj@jbj.org> 4.2.42-0.1
changelog:
  - update to 4.2.42.
  - build in build_unix subdir.
  - eliminate --enable-dump185, db_dump185.c no longer compiles for libdb*.
  - create db4-tcl sub-pkg to isolate libtcl dependencies.


author: Jeff Johnson <jbj@redhat.com> 4.1.25-6
changelog:
  - build with libtool-1.5, which can't recognize the .so in libfoo*.so atm.
  - whack out libtool predep_objects wonkiness.


author: Nalin Dahyabhai <nalin@redhat.com> 4.1.25-2
changelog:
  - change configure to only warn if JNI includes aren't found, assuming that
    the C compiler can find them
  - remove build requirement on jdkgcj -- gcj is sufficient


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.14-20
changelog:
  - add dynamic libdb-4.0.so link back to %{_libdir} so that dynamically
    linking with -ldb-4.0 will work again


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.14-19
changelog:
  - rebuild to use link the shared object with the same libraries we use
    for the bundled utils, should pull in libpthread when needed
  - move libdb.so from /%{_lib} to %{_libdir} where the linker can find it


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - re-enable db.h symlink creation, db_util names, and db[23]-devel obsoletes.
  - make sure that -ldb is functional.


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.14-3
changelog:
  - remove relocatability stuffs
  - swallow a local copy of db1 and build db185_dump statically with it, to
    remove the build dependency and simplify bootstrapping new arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix dangling docs symlinks
  - fix dangling doc HREFs (#33328)
  - apply the two patches listed at http://www.sleepycat.com/update/3.2.9/patch.3.2.9.html


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't build with --enable-diagnostic.
  - add build prereq on tcl.
  - default value for %_lib macro if not found.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rather than hack *.la (see below), create /usr/lib/libdb-3.1.so symlink.
  - turn off --enable-diagnostic for performance.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - remove redundant strip of libnss_db* that is nuking symbols.
  - change location in /usr/lib/libdb-3.1.la to point to /lib (#16776).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - summaries from specspo.
  - all of libdb_tcl* (including symlinks) in db3-utils, should be db3->tcl?


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.1.14.
  - create db3-utils sub-package to hide tcl dependency, enable tcl Yet Again.
  - FHS packaging.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - disable --enable-test --enable-debug_rop --enable-debug_wop.
  - disable --enable-posixmutexes --enable-tcl as well, to avoid glibc-2.1.3
    problems.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - add 3.0.55.1 alignment patch.
  - add --enable-posixmutexes (linux threads has not pthread_*attr_setpshared).
  - add --enable-tcl (needed -lpthreads).


author: Joe Orton <jorton@redhat.com> - 2.2.3-43.2
changelog:
  - add security fixes for CVE-2010-1452, CVE-2010-2791 (#623210)
  - mod_deflate: rebase to 2.2.15 (#625435)
  - stop multiple invocations of filter init functions (#625451)


author: Joe Orton <jorton@redhat.com> - 2.2.3-38
changelog:
  - mod_ssl: fix additional case for OID() handling (#552942)
  - mod_authnz_ldap: fix handling of empty filter in group defn (#252038)


author: Joe Orton <jorton@redhat.com> - 2.2.3-32.el5
changelog:
  - fix hard-coded default pidfile to match default config (#505002)
  - mod_ssl: fix potential hang in renegotiation (#510515)
  - drop legacy X-Pad header from short responses (#526110)
  - mod_proxy_ajp: fix handling of large uploads (#528640)
  - mod_authnz_ldap: add AuthLDAPRemoteUserAttribute directive (#520838)
  - mod_rewrite: add DiscardPathInfo flag (#517500)
  - mod_authnz_ldap: don't fail authz if no ldap-* configured (#448350)
  - disable keepalive for Expect: 100-continue and error response (#533407)


author: Joe Orton <jorton@redhat.com> 2.2.3-27.el5
changelog:
  - mod_cgi, mod_cgid: fix logging on input read error (#498170)
  - mod_rewrite: don't serialize logfile access (#493023)
  - mod_ext_filter: fix spurious error log output (#479463)


author: Joe Orton <jorton@redhat.com> 2.2.3-25.el5
changelog:
  - mod_rewrite: fix URI escaping with [P] in directory context (#480604)
  - mod_cgi: fix headers/status in error responses (#480932)
  - mod_speling: fix handling of directory names (#485524)
  - init script: use ${pidfile} in more places (#491135)
  - mod_log_config: support remote/local with 'p' format (#493070)
  - remove Obsolete for mod_jk (#493592)
  - mod_ssl: fix SSL per-dir-reneg buffering with internal redirects (#488886)
  - fix spurious error messages on graceful restart (#233955)


author: Joe Orton <jorton@redhat.com> 2.2.3-22.el5
changelog:
  - add security fixes for CVE-2008-2939 (#468841)
  - note that the mod_proxy 2.2.9 rebase fixed CVE-2008-2634


author: Joe Orton <jorton@redhat.com> 2.2.3-16.el5
changelog:
  - mod_proxy*, mod_cache*: rebase to 2.2.9 (#252024, #249534,
    - backport changes to make chunk filter non-blocking (#454098)


author: Joe Orton <jorton@redhat.com> 2.2.3-15.el5
changelog:
  - mod_ldap: fix memory lifetime issues (#440259)
  - mod_ssl: configure OpenSSL dynamic lock callbacks (#462044)
  - escape the Request-Method in canned error responses (#445888)
  - build the event MPM and fix a deadlock therein (#444643)
  - mod_headers: support "RequestHeader edit" (#428253)
  - use "OPTIONS *" rather than "GET /" in dummy connection (#367981)


author: Joe Orton <jorton@redhat.com> 2.2.3-13.el5
changelog:
  - mod_proxy_balancer: allow alternative string to match for
    stickysession parameter (#439218)
  - fix dist tag in Release (#440615)


author: Joe Orton <jorton@redhat.com> 2.2.3-11.el5_1.1
changelog:
  - add security fixes for CVE-2007-6388, CVE-2007-6421
    and CVE-2007-6422 (#427240)
  - add security fix for CVE-2007-4465, CVE-2007-5000 (#421631)
  - add security fix for mod_proxy_ftp UTF-7 XSS (#427745)


author: Joe Orton <jorton@redhat.com> 2.2.3-8.el5
changelog:
  - add 'ServerTokens Full-Release' config option (#240857)
  - use init script in logrotate postrotate (#241680)
  - fix mod_proxy option inheritance (#245719)
  - fix ProxyErrorOverride to only affect 4xx, 5xx responses (#240024)
  - bump logresolve line buffer length to 10K (#245763)
  - add security fixes for CVE-2007-1863, CVE-2007-3304,
    and CVE-2006-5752 (#244666)


author: Joe Orton <jorton@redhat.com> 2.2.2-5
changelog:
  - require pkgconfig for -devel (#194152)
  - fixes for installed support makefiles (special.mk et al)
  - BR autoconf


author: Joe Orton <jorton@redhat.com> 2.2.0-5.1
changelog:
  - mod_auth_basic/mod_authn_file: if no provider is configured,
    and AuthUserFile is not configured, decline to handle authn
    silently rather than failing noisily.


author: Joe Orton <jorton@redhat.com> 2.2.0-5
changelog:
  - mod_ssl: add security fix for CVE-2005-3357 (#177914)
  - mod_imagemap: add security fix for CVE-2005-3352 (#177913)
  - add fix for AP_INIT_* designated initializers with C++ compilers
  - httpd.conf: enable HTMLTable in default IndexOptions
  - httpd.conf: add more "redirect-carefully" matches for DAV clients


author: Joe Orton <jorton@redhat.com> 2.2.0-2
changelog:
  - don't strip C-L from HEAD responses (Greg Ames, #110552)
  - load mod_proxy_balancer by default
  - add proxy_ajp.conf to load/configure mod_proxy_ajp
  - Obsolete mod_jk
  - update docs URLs in httpd.conf/ssl.conf


author: Joe Orton <jorton@redhat.com> 2.0.54-15
changelog:
  - log notice giving SELinux context at startup if enabled
  - drop SSLv2 and restrict default cipher suite in default
   SSL configuration


author: Joe Orton <jorton@redhat.com> 2.0.54-14
changelog:
  - mod_ssl: add security fix for SSLVerifyClient (CVE-2005-2700)
  - add security fix for byterange filter DoS (CVE-2005-2728)
  - add security fix for C-L vs T-E handling (CVE-2005-2088)
  - mod_ssl: add security fix for CRL overflow (CVE-2005-1268)
  - mod_ldap/mod_auth_ldap: add fixes from 2.0.x branch (upstream #34209 etc)
  - add fix for dummy connection handling (#167425)
  - mod_auth_digest: fix hostinfo comparison in CONNECT requests
  - mod_include: fix variable corruption in nested includes (upstream #12655)
  - mod_ssl: add fix for handling non-blocking reads
  - mod_ssl: fix to enable output buffering (upstream #35279)
  - mod_ssl: buffer request bodies for per-location renegotiation (upstream #12355)


author: Joe Orton <jorton@redhat.com> 2.0.54-11
changelog:
  - mod_dav_fs: fix uninitialized variable (#162144)
  - add epoch to dependencies as appropriate
  - mod_ssl: drop dependencies on dev, make
  - mod_ssl: mark post script dependencies as such


author: Joe Orton <jorton@redhat.com> 2.0.54-7
changelog:
  - mod_userdir: fix memory allocation issue (upstream #34588)
  - mod_ldap: fix memory corruption issue (Brad Nicholes, upstream #34618)


author: Joe Orton <jorton@redhat.com> 2.0.54-5
changelog:
  - create default dummy cert in /etc/pki/tls
  - use a pseudo-random serial number on the dummy cert
  - change default ssl.conf to point at /etc/pki/tls
  - merge back -suexec subpackage; SELinux policy can now be
    used to persistently disable suexec (#155716)
  - drop /etc/httpd/conf/ssl.* directories and Makefiles
  - unconditionally enable PIE support
  - mod_ssl: fix for picking up -shutdown options (upstream #34452)


author: Joe Orton <jorton@redhat.com> 2.0.53-6
changelog:
  - update default httpd.conf:
   * clarify the comments on AddDefaultCharset usage (#135821)
   * remove all the AddCharset default extensions
   * don't load mod_imap by default
   * synch with upstream 2.0.53 httpd-std.conf
  - mod_ssl: set user from SSLUserName in access hook (upstream #31418)
  - htdigest: fix permissions of created files (upstream #33765)
  - remove htsslpass


author: Joe Orton <jorton@redhat.com> 2.0.52-7
changelog:
  - fix cosmetic issues in "service httpd reload"
  - move User/Group higher in httpd.conf (#146793)
  - load mod_logio by default in httpd.conf
  - apachectl: update for correct libselinux tools locations


author: Joe Orton <jorton@redhat.com> 2.0.52-6
changelog:
  - add security fix for CVE CAN-2004-0942 (memory consumption DoS)
  - SELinux: run httpd -t under runcon in configtest (Steven Smalley)
  - fix SSLSessionCache comment for distcache in ssl.conf
  - restart using SIGHUP not SIGUSR1 after logrotate
  - add ap_save_brigade fix (upstream #31247)
  - mod_ssl: fix possible segfault in auth hook (upstream #31848)
  - add htsslpass(1) and configure as default SSLPassPhraseDialog (#128677)
  - apachectl: restore use of $OPTIONS
  - apachectl, httpd.init: refuse to restart if $HTTPD -t fails
  - apachectl: run $HTTPD -t in user SELinux context for configtest
  - update for pcre-5.0 header locations


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-3
changelog:
  - fixed BadDrawable error (rhbz#557453)
  - fixed MultiList not displayed properly (mzbz#1453) (rhbz#568730)
  - fixed invisible insensitive labels, buttons, icons and list entries
    (mzbz#1381) (rhbz#568730)
  - fixed XmNaccelerator do not work with CapsLock/ScrollLock/NumLock
    modifiers (mzbz#345) (rhbz#492529)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-10
changelog:
  - Add support for newer Option NV mobile broadband devices (Quicksilver, iCON 505)
  - Resolves: #536897
  - Fix problems with 63-character WPA PSKs
  - Resolves: #532723
  - Improve VPN password handling
  - Resolves: #528425
  - Correctly handle carrier events for renamed ethernet interfaces
  - Resolves: #513547
  - Fix problems with wired 802.1x certificate usage
  - Resolves: #477061
  - Ensure a connection is not used after its CA certificate has been deleted
  - Resolves: CVE-2009-4144
  - Fix possible information disclosure by nm-connection-editor
  - Resolves: CVE-2009-4145


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-9
changelog:
  - Don't show the applet's VPN submenu if no VPN plugins are installed
  - Resolves: #464604
  - Revert fix for #494212, since it breaks multilib (see 351101)
  - Related: #494212


author: Matthew Barnes <mbarnes@redhat.com> - 1:0.7.0-6
changelog:
  - Add new /etc/sysconfig/network options to disable wifi sharing
  - Resolves: #496247
  - Fix a compiler warning in nm-applet-wifi-passphrase-not-hex-rh466509.patch
  - Related: #466509


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-5
changelog:
  - Fix AP signal strength display in multi-BSSID networks
  - Resolves: #485477
  - Fix VPN export in the connection editor
  - Resolves: #485345
  - Close applet context menu before requesting keyring items
  - Resolves: #476020
  - Silence ifcfg-rh plugin warning about invalid 'lo' connections
  - Resolves: #484060
  - Show wifi passphrases instead of hashed hex keys
  - Resolves: #466509
  - Fix wpa_supplicant requires
  - Resolves: #486688


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-4
changelog:
  - CVE-2009-0365: GetSecrets disclosure
  - CVE-2009-0578: local users can modify the connection settings
  - Resolves: #487778
  - Resolves: #487779


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-2
changelog:
  - Always bring the secrets dialog to the front (updated)
  - Resolves: #467728
  - Prevent stuck grabs between applet menu and the keyring password dialog (updated)
  - Resolves: #465154
  - Fix issues with creating wired 802.1x connections
  - Resolves: #474879


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-1
changelog:
  - Update to NetworkManager 0.7 final release
  - Rename 'ifcfg-fedora' plugin to 'ifcfg-rh'
  - Resolves: #471932


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.12.svn4326
changelog:
  - Initially ignore ONBOOT to preserve RHEL 5.2 behavior
  - Resolves: #467243
  - Fix routing when the gateway is not on the local subnet (rh #434625)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.12.svn4185
changelog:
  - Defer notification bubbles a bit longer
  - Resolves: #467037
  - Always bring the secrets dialog to the front
  - Resolves: #467728
  - Prevent stuck grabs between applet menu and the keyring password dialog
  - Resolves: #465154


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4185
changelog:
  - Explicitly allow HAL to send signals to NM
  - Resolves: #463930
  - Always use AP_SCAN=2 on airo
  - Resolves: #467117
  - Fix default route behavior
  - Resolves: #466166
  - Remove un-needed dependency on gnome-panel
  - Suppress applet notification bubbles for short period after startup
  - Resolves: #467037


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4133
changelog:
  - Fix resume issues with ipw3945 driver
  - Resolves: #463930
  - Related: #362421
  - Power up mobile broadband cards before trying to use them
  - Fix VPN connection importing
  - Recognize additional Dell mobile broadband cards
  - Related: #455790


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4088
changelog:
  - Related: #455790
  - Fix desktop file validation
  - Disable hostname updates to match previous NM behavior
  - Remove bogus BuildRequires on external libnl
  - Add support for Sierra Wireless AC860


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4082
changelog:
  - Update to NetworkManager 0.7
  - Resolves: #455790
  - Resolves: #221773
  - Resolves: #223119
  - Resolves: #224022
  - Resolves: #434625
  - Resolves: #437873


author: Dan Williams <dcbw@redhat.com> - 1:0.6.4-8
changelog:
  - Ensure dialog is realized before setting it's time (Related: #219155)
  - Fix check when moving WPA private key password (Related: #220915)


author: Dan Williams <dcbw@redhat.com> - 1:0.6.4-7
changelog:
  - Add LEAP authentication support (Resolves: #224922)
  - Suppress initial wireless device activation until wired devices have had
      time to figure out their link state (Related: #362421)
  - Give drivers some time to recover after suspend/resume (Resolves: #362421)
  - Increase D-Bus pending call limit for applet and NM (Resolves: #221323)
  - Send default EAP fragment size of 1300 to supplicant for better 802.1x
      compatibility (Related: #427843)
  - Move WPA-Enterprise passwords to the GNOME Keyring (Resolves: #220915)
  - Fix the focus-stealing-prevention workarounds to always show the wireless
      secrets dialog (Resolves: #219155)
  - Fix a race when checking whether to activate devices (Resolves: #215720)
  - Indicate when an IPv4 autoip address has been acquired on a wired interface
      (Resolves: #213094)
  - Make use of driver-reported scan capabilities if supported (Related: #427528)


author: Dan Williams <dcbw@redhat.com> - 1:0.6.4-2
changelog:
  - Revert FC6 to latest stable NM
  - Update to stable snapshot
  - Remove bind/caching-nameserver hard requirement


author: Dan Williams <dcbw@redhat.com> - 0.7.0-0.cvs20060529
changelog:
  - Update to latest CVS
  	o Gnome.org #333420: dialog do not have window icons
  	o Gnome.org #336913: HIG tweaks for vpn properties pages
  	o Gnome.org #336846: HIG tweaks for nm-vpn-properties
  	o Gnome.org #336847: some bugs in nm-vpn-properties args parsing
  	o Gnome.org #341306: nm-vpn-properties crashes on startup
  	o Gnome.org #341263: Version 0.6.2-0ubuntu5 crashes on nm_device_802_11_wireless_get_type
  	o Gnome.org #341297: displays repeated keyring dialogs on resume from suspend
  	o Gnome.org #342400: Building libnm-util --without-gcrypt results in linker error
  	o Gnome.org #342398: Eleminate Gnome dependency for NetworkManager
  	o Gnome.org #336532: declaration of 'link' shadows a global declaration
  - Specfile fixes (#rh187489#)


author: Dan Williams <dcbw@redhat.com> - 0.7.0-0.cvs20060521
changelog:
  - Update to latest CVS
  - Drop special-case-madwifi.patch, since WEXT code is in madwifi-ng trunk now


author: Bill Nottingham <notting@redhat.com> - 0.6.2-3.fc6
changelog:
  - use the same 0.6.2 tarball as FC5, so we have the same VPN interface
    (did he fire ten args, or only nine?)


author: Jeremy Katz <katzj@redhat.com> - 0.6.2-2.fc6
changelog:
  - use the hal device type instead of poking via ioctl so that wireless 
    devices are properly detected even if the kill switch has been used


author: Dan Williams <dcbw@redhat.com> - 0.6.2-1
changelog:
  - Update to 0.6.2:
      * Fix various WPA-related bugs
      * Clean up leaks
      * Increased DHCP timeout to account for slow DHCP servers, or STP-enabled
          switches
      * Allow applet to reconnect on dbus restarts
      * Add "Dynamic WEP" support
      * Allow hiding of password/key entry text
      * More responsive connection switching


author: Dan Williams <dcbw@redhat.com> 0.5.1-18.cvs20060301
changelog:
  - Fix VPN-related crash
  - Fix issue where NM would refuse to activate a VPN connection once it had timed out
  - Log wpa_supplicant output for better debugging


author: Dan Williams <dcbw@redhat.com> 0.5.1-13.cvs20060221
changelog:
  - Add BuildRequires: libnl-devel (#rh179438#)
  - Fix libnm_glib to not clobber an application's existing dbus connection
  	(#rh177546#, gnome.org #326572)
  - libnotify support
  - AP compatibility fixes


author: Dan Williams <dcbw@redhat.com> 0.5.1-10.cvs20060205
changelog:
  - Workarounds for madwifi/Atheros cards
  - Do better with non-SSID-broadcasting access points
  - Fix hangs when access points change settings


author: Dan Williams <dcbw@redhat.com> 0.5.1-8.cvs20060131
changelog:
  - Switch to autostarting the applet instead of having it be session-managed
  - Work better with non-broadcasting access points
  - Add more manufacturer default SSIDs to the blacklist


author: Christopher Aillon <caillon@redhat.com> - 0.5.1-3
changelog:
  - Split out the -glib subpackage to have a -glib-devel package as well
  - Add epoch to version requirements for bind and wireless-tools
  - Update URL of project


author: Dan Williams <dcbw@redaht.com> - 0.4.1-5.cvs20051010
changelog:
  - Fix automatic wireless connections
  - Remove usage of NMLoadModules callout, no longer needed
  - Try to fix deadlock when menu is down and keyring dialog pops up


author: Dan Williams <dcbw@redhat.com> - 0.4.1-4.cvs20051009
changelog:
  - Update to latest CVS
  	o Integrate connection progress with applet icon (Chris Aillon)
  	o More information in "Connection Information" dialog (Robert Love)
  	o Shorten time taken to sleep
  	o Make applet icon wireless strength levels a bit more realistic
  	o Talk to named using DBUS rather than spawning our own
  		- You need to add "-D" to the OPTIONS line in /etc/sysconfig/named
  		- You need to set named to start as a service on startup


author: Dan Williams <dcbw@redhat.com> - 0.4-35.cvs20050811
changelog:
  - Update to latest CVS
  	o Use DHCP server address as gateway address if the DHCP server doesn't give
  		us a gateway address #rh165698#
  	o Fixes to the applet (Robert Love)
  	o Better caching of information in the applet (Bill Moss)
  	o Generate automatic suggested Ad-Hoc network name from machine's hostname
  		(Robert Love)
  	o Update all network information on successfull connect, not just 
  		authentication method


author: David Zeuthen <davidz@redhat.com> - 0.4-33.cvs20050629
changelog:
  - Update to latest CVS to get latest VPN interface settings to satisfy
    BuildReq for NetworkManager-vpnc in Fedora Extras Development
  - Latest CVS also contains various bug- and UI-fixes


author: Dan Williams <dcbw@redhat.com> - 0.4-32.cvs20050617
changelog:
  - Update to latest CVS
  	o VPN connection import/export capability
  	o Fix up some menu item names
  - Move nm-vpn-properties.glade to the gnome subpackage


author: Dan Williams <dcbw@redhat.com> - 0.4-31.cvs20050616
changelog:
  - Update to latest CVS
  	o Clean up wording in Wireless Network Discovery menu
  	o Robert Love's applet beautify patch


author: Dan Williams <dcbw@redhat.com> - 0.4-12.cvs20050404
changelog:
  - Enable OK button correctly in Passphrase and Other Networks dialogs when
  	using ASCII or Hex WEP keys


author: Dan Williams <dcbw@redhat.com> - 0.4-9.cvs20050404
changelog:
  - Fix some memory leaks (Tom Parker)
  - Join to threads rather than spinning for their completion (Tom Parker)
  - Fix misuse of a g_assert() (Colin Walters)
  - Fix return checking of an ioctl() (Bill Moss)
  - Better detection and matching of hidden access points (Bill Moss)
  - Don't use varargs, and therefore don't crash on PPC (Peter Jones)


author: Dan Williams <dcbw@redhat.com> 0.3.3-2.cvs20050214
changelog:
  - Never automatically choose a device that doesn't support carrier detection
  - Add right-click menu to applet, can now "Pause/Resume" scanning through it
  - Fix DHCP Renew/Rebind timeouts
  - Fix frequency cycling problem on some cards, even when scanning was off
  - Play better with IPv6
  - Don't send kernel version in DHCP packets, and ensure DHCP packets are at
  	least 300 bytes in length to work around broken router
  - New DHCP options D-BUS API by Dan Reed
  - Handle multiple domain search options in DHCP responses


author: Dan Williams <dcbw@redhat.com> 0.3.3-1.cvs20050202
changelog:
  - Display wireless network name in applet tooltip
  - Hopefully fix double-default-route problem
  - Write out valid resolv.conf when we exit
  - Make multi-domain search options work
  - Rework signal strength code to be WEXT conformant, if strength is
  	still wierd then its 95% surely a driver problem
  - Fix annoying instances of suddenly dropping and reactivating a
  	wireless device (Cisco cards were worst offenders here)
  - Fix some instances of NetworkManager not remembering your WEP key
  - Fix some races between NetworkManager and NetworkManagerInfo where
  	NetworkManager wouldn't recognize changes in the allowed list
  - Don't shove Ad-Hoc Access Point MAC addresses into GConf


author: Dan Williams <dcbw@redhat.com> 0.3.3-1.cvs20050124
changelog:
  - Update to latest CVS
  - Make sure we start as late as possible so that we ensure dbus & HAL
  	are already around
  - Fix race in initial device activation


author: <dcbw@redhat.com> - 0.3.3-1.cvs20050118
changelog:
  - Fix issue where NM wouldn't recognize that access points were
  	encrypted, and then would try to connect without encryption
  - Refine packaging to put client library in separate package
  - Remove bind+caching-nameserver dep for FC-3, use 'nscd -i hosts'
  	instead.  DNS queries may timeout now right after device
  	activation due to this change.


author: <dcbw@redhat.com> - 0.3.3-1.cvs20050112
changelog:
  - Update to latest CVS
  - Fixes to DHCP code
  - Link-Local (ZeroConf/Rendezvous) support
  - Use bind in "caching-nameserver" mode to work around stupidity
  	in glibc's resolver library not recognizing resolv.conf changes
  - #rh144818# Clean up the specfile (Patch from Matthias Saou)
  - Ad-Hoc mode support with Link-Local addressing only (for now)
  - Fixes for device activation race conditions
  - Wireless scanning in separate thread


author: <dcbw@redhat.com> - 0.3.2-4.3.cvs20041208
changelog:
  - Update to CVS
  - Updates to link detection, DHCP code
  - Remove NMLaunchHelper so we start up faster and don't
  	block for a connection.  This means services that depend
  	on the network may fail if they start right after NM
  - Make sure DHCP renew/rebinding works


author: <dcbw@redhat.com> - 0.3.2-3.cvs20041117
changelog:
  - Update to CVS
  - Fixes to link detection
  - Better detection of non-ESSID-broadcasting access points
  - Don't dialog-spam the user if a connection fails


author: <dcbw@redhat.com> - 0.3.2-2.cvs20041115
changelog:
  - Update to CVS
  - Much better link detection, works with Open System authentication
  - Blacklist wireless cards rather than whitelisting them


author: <dcbw@redhat.com> - 0.3.2-2.cvs20041029
changelog:
  - #rh134893# NetworkManagerInfo and the panel-icon life-cycle
  - #rh134895# Status icon should hide when in Wired-only mode
  - #rh134896# Icon code needs rewrite
  - #rh134897# "Other Networks..." dialog needs implementing
  - #rh135055# Menu highlights incorrectly in NM
  - #rh135648# segfault with cipsec0
  - #rh135722# NetworkManager will not allow zaurus to sync via usb0
  - #rh135999# NetworkManager-0.3.1 will not connect to 128 wep
  - #rh136866# applet needs tooltips
  - #rh137047# lots of applets, yay!
  - #rh137341# Network Manager dies after disconnecting from wired network second time
  - Better checking for wireless devices
  - Fix some memleaks
  - Fix issues with dhclient declining an offered address
  - Fix an activation thread deadlock
  - More accurately detect "Other wireless networks" that are encrypted
  - Don't bring devices down as much, won't hotplug-spam as much anymore
  	about firmware
  - Add a "network not found" dialog when the user chooses a network that could
  	not be connected to


author: Dan Williams <dcbw@redhat.com> 0.2-4
changelog:
  - Update from CVS
  - Improvements:
  	o Better link checking on wireless cards
  	o Panel applet now a Notification Area icon
  	o Static IP configuration support


author: Don Howard <dhoward@redhat.com> [2.6.18-194.11.4.el5]
changelog:
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Don Howard) [634463 634464] {CVE-2010-3081}


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.14-17.2
changelog:
  - Fix tcsh obeys printexitvalue for back-ticks
    Resolves: #640252
  - Remove extra fork when tcsh processes backquotes
    Resolves: #640251


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.14-17
changelog:
  - Revert "selector out of range" patch
    Resolves: #495642
  - Fix printing of multi-byte character
    Resolves: #502474
  - Fix tcsh %j prompt formatting sequence overrides all other formatting
    Resolves: #461836
  - Fix various globbing problems
    Resolves: #529425, #529703


author: Vitezslav Crhonek <vcrhonek@rehat.com> - 6.14-14
changelog:
  - Fix $name[selector] doesn't fail when selector is out of range
    Resolves: #435398
  - Fix description of builtin command 'set' in tcsh manpage
    Resolves: #430459
  - Fix strings which begin with '0' are not recognized as octal numbers
    Resolves: #438109
  - Fix tcsh scripts with multiple case statement with end keywords
    break with error
    Resolves: #436956
  - Fix calculation order of operators description in tcsh manpage
    Resolves: #442536
  - Fix memoryuse description in tcsh manpage
    Resolves: #437095
  - Change config_f.h to use system malloc()
    Resolves: #443643


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.14-13
changelog:
  - Fix UTF-8 Japanese character is garbled in tcsh script in
    a certain situation
    Resolves: #453785


author: Miloslav Trmac <mitr@redhat.com> - 6.14-7
changelog:
  - Fix a crash when reading scripts with multibyte characters (#183267)
  - Block SIGINT while waiting for children (#177366)


author: Miloslav Trmac <mitr@redhat.com> - 6.13-12
changelog:
  - Don't ship the HTML documentation (generated from the man page, contains
    also a copy of the man page)


author: Miloslav Trmac <mitr@redhat.com> - 6.13-7
changelog:
  - Define $HOSTTYPE and $MACHTYPE for ppc64 and s390 (#115531),
    I hope that finally covers all architectures.


author: Miloslav Trmac <mitr@redhat.com> - 6.13-6
changelog:
  - Define $HOSTTYPE and $MACHTYPE also on IA-64 and s390x (#115531)
  - Don't close sockets to avoid file descriptor conflits with nss_ldap (#112453)


author: Miloslav Trmac <mitr@redhat.com> - 6.13-5
changelog:
  - Fix HTML documentation generation, second attempt (#60664)
  - Set dspmbyte using nl_langinfo(CODESET) if possible, should cover all
    cases where lang.csh was correctly setting dspmbyte (#89549)


author: Miloslav Trmac <mitr@redhat.com> - 6.13-2
changelog:
  - Make comparisons for ranges in bracket expressions symmetric (#59493)
  - Run perl2html with LC_ALL=C to workaround what seems to be a perl bug
    (#60664)
  - Define $HOSTTYPE and $MACHTYPE on x86_64 (#115531)
  - Fix setting of O_LARGEFILE (#122558)


author: Miloslav Trmac <mitr@redhat.com> - 6.13-1
changelog:
  - Update to tcsh-6.13.00
  - Fix charset headers in some of the translations
  - Convert translated messages to LC_CTYPE locale
  - Fix automatic dspmbyte setting


author: Adrian Havill <havill@redhat.com>
changelog:
  - use <time.h> instead of <sys/time.h> for pickier lib (#25935)
  - allow arguments for login shells (#19926)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - patch for using PATH_MAX instead of some silly internal #defines for
    variables that handle filenames.


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.17.1.el5]
changelog:
  - Syncing following patch from branched build:
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Don Howard) [634463 634464] {CVE-2010-3081}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.15.1.el5]
changelog:
  - [net] cxgb3: don't flush workqueue if called from wq (Doug Ledford) [630978 630124]
  - [net] cxgb3: get fatal parity error status on interrupt (Doug Ledford) [630978 630124]
  - [net] cxgb3: clear fatal parity error register on init (Doug Ledford) [630978 630124]
  - [net] cxgb3: add define for fatal parity error bit (Doug Ledford) [630978 630124]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.14.1.el5]
changelog:
  - [s390] dasd: force online does not work (Hendrik Brueckner) [627194 619466]
  - [s390] dasd: allocate fallback cqr for reserve/release (Hendrik Brueckner) [627195 619465]
  - [fs] xfs: fix untrusted inode number lookup (Dave Chinner) [629219 624862]
  - [net] sched: fix some kernel memory leaks (Jiri Pirko) [624904 624638] {CVE-2010-2942}
  - [usb] fix usbfs information leak (Eugene Teo) [566628 566629] {CVE-2010-1083}
  - [fs] xfs: rename XFS_IGET_BULKSTAT to XFS_IGET_UNTRUSTED (Dave Chinner) [624366 607032] {CVE-2010-2943}
  - [fs] xfs: validate untrusted inode numbers during lookup (Dave Chinner) [624366 607032] {CVE-2010-2943}
  - [fs] xfs: always use iget in bulkstat (Dave Chinner) [624366 607032] {CVE-2010-2943}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.13.1.el5]
changelog:
  - [xen] fix guest crash on non-EPT machine may crash host (Paolo Bonzini) [621429 621430] {CVE-2010-2938}
  - [fs] ext4: consolidate in_range definitions (Eric Sandeen) [624331 624332] {CVE-2010-3015}
  - [mm] add option to skip ZERO_PAGE mmap of /dev/zero (Larry Woodman) [623141 619541]
  - [net] bonding: check if clients MAC addr has changed (Flavio Leitner) [623143 610234]
  - [net] sctp: fix length checks (Neil Horman) [624369 605305]
  - [xen] bring back VMXE/SVME flags (Andrew Jones) [624365 570091]
  - Syncing following patches from branched builds:
  - [mm] accept an abutting stack segment (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] pass correct mm when growing stack (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix up some user-visible effects of stack guard page (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix page table unmap for stack guard page properly (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix missing unmap for stack guard page failure case (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] keep a guard page below a grow-down stack segment (Jiri Pirko) [607857 607858] {CVE-2010-2240}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.11.2.el5]
changelog:
  - Branch build based on 2.6.18-194.11.1.el5
  - [mm] pass correct mm when growing stack (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix up some user-visible effects of stack guard page (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix page table unmap for stack guard page properly (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix missing unmap for stack guard page failure case (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] keep a guard page below a grow-down stack segment (Jiri Pirko) [607857 607858] {CVE-2010-2240}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.12.1.el5]
changelog:
  - [pci] msi: add option for lockless interrupt mode (Prarit Bhargava) [621940 599295]
  - [fs] ecryptfs: fix ecryptfs_uid_hash buffer overflow (Jerome Marchand) [611386 611387] {CVE-2010-2492}
  - [scsi] ips driver sleeps while holding spin_lock (Steve Best) [620661 616961]
  - [fs] gfs2: fix rename causing kernel oops (Robert S Peterson) [614916 602025] {CVE-2010-2798}


author: Milan Broz <mbroz@redhat.com> - 2.02.56-8.el5_5.5
changelog:
  - Fix initialisation of logging to file to not cause boot failure.
  - Fix lvchange --refresh to require partial flag if PVs are missing.
    Resolves: #601079 #601078


author: Milan Broz <mbroz@redhat.com> - 2.02.56-8.el5_5.2
changelog:
  - Fix incorrect removal of symlinks after LV deactivation fails.
  - Only do one full device scan during each read of text format metadata.
  - Disallow primary mirror image removal when mirror is not in-sync.
    Resolves: #580831 #584705 #583995 #581611


author: Milan Broz <mbroz@redhat.com> - 2.02.56-8.el5_5.1
changelog:
  - Mask LCK_HOLD flag in cluster VG locks for compatibility reasons.
  - Always use blocking lock for VGs and orphan locks.
    Resolves: #582218 #582232


author: Milan Broz <mbroz@redhat.com> - 2.02.56-7
changelog:
  - Make mirror repair exit with success when no action is needed.
  - Fix inappropriate second resync when adding mimage to core-logged mirror.
    Resolves: #562004 #510526


author: Milan Broz <mbroz@redhat.com> - 2.02.56-6
changelog:
  - Fix dmeventd crash if both snapshot and mirror monitoring DSO are used.
  - Fix pvmove abort to be cluster-aware when temporary mirror activation fails.
    Resolves: #538571 #557104


author: Milan Broz <mbroz@redhat.com> - 2.02.56-4
changelog:
  - Fix precommitted metadata cache handling on remote nodes.
  - Fix mirror repair policies and automatic missing PV removal.
  - Fix possible stack overflow in persistent filter dump.
    Resolves: #538571 #538620 #547891 #547842 #552723


author: Milan Broz <mbroz@redhat.com> - 2.02.56-3
changelog:
  - Fix missing flag device handling.
  - Revert the dmeventd mirror repair logic to use vgreduce (548223).
    Resolves: #537954 #543225


author: Milan Broz <mbroz@redhat.com> - 2.02.56-2
changelog:
  - Fix problems with mirror repair handling.
  - Fix cluster locking flags.
    Related: #536817
    Resolves: #543146 #500899


author: Milan Broz <mbroz@redhat.com> - 2.02.55-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Related: #536817
    Resolves: #537942 #537954 #537947


author: Milan Broz <mbroz@redhat.com> - 2.02.54-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Resolves: #536817 #186437 #463272 #481793 #500177 #529668


author: Milan Broz <mbroz@redhat.com> - 2.02.46-9
changelog:
  - Add write lock write prioritization to avoid possible starvation.
  - Fix orphan order locking (fix vgextend to use blocking lock).
  - Use read lock for lvchange activation commands.
    Resolves: #515232 #516773


author: Milan Broz <mbroz@redhat.com> - 2.02.46-8
changelog:
  - Reintruduce old mirror repair behaviour.
  - Fix various memory leaks in command context manipulation 
  - Enhance and fix various problems in vgimportclone.
    Resolves: #504699 #504877


author: Milan Broz <mbroz@redhat.com> - 2.02.46-7
changelog:
  - Ignore suspended devices during repair.
  - Call vgreduce --removemissing automatically.
    Resolves: #505604


author: Milan Broz <mbroz@redhat.com> - 2.02.46-4
changelog:
  - Fix virtual origin snapshot manipulation.
  - Implement mirror repair policies.
    Resolves: #249478 #503708


author: Milan Broz <mbroz@redhat.com> - 2.02.46-3
changelog:
  - Fix crash when calculating readahead on missing device in vgreduce.
  - Fix mirror log allocation when smallest PV has only 1 extent.
    Resolves: #502899 #502671


author: Milan Broz <mbroz@redhat.com> - 2.02.46-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Resolves: #470560 #488059 #490298 #493311 #494414 #220567
    Resolves: #477040 #431760 #454645 #476117 #501473 #501756


author: Milan Broz <mbroz@redhat.com> - 2.02.40-6
changelog:
  - Avoid overwriting in-use on-disk text metadata.
  - Fix mirror upconvert for active mirrors.
    Resolves: #467435 #455670


author: Milan Broz <mbroz@redhat.com> - 2.02.40-2
changelog:
  - Fix vgreduce --force --removemissing hangling.
  - Do not print warning for old stripe_filler default setting.


author: Milan Broz <mbroz@redhat.com> - 2.02.39-1
changelog:
  - Update to latest upstream release.
    Resolves: #453753 #452813 #447905 #446228 #444795 #443419
    Resolves: #443060 #428005


author: Milan Broz <mbroz@redhat.com> - 2.02.32-4
changelog:
  - Fix vgsplit locking of new VG.
  - Fix another allocation bug with clvmd and large node IDs.
    Resolves: #438434 #438249


author: Milan Broz <mbroz@redhat.com> - 2.02.32-3
changelog:
  - clvmd no longer crashes if it sees nodeids over 50.
  - Fix potential deadlock in clvmd thread handling.
    Resolves: #437446 #438434


author: Milan Broz <mbroz@redhat.com> - 2.02.30-1
changelog:
  - Update to latest upstream release.
    Resolves: #252150 #210724 #245563 #363931 #291411 #246115
    Resolves: #427360 #421191 #180436 #220568 #429122 #429124
    Resolves: #429118 #427294 #251992


author: Milan Broz <mbroz@redhat.com> - 2.02.26-2
changelog:
  - Fix spec to create /etc/lvm/cache correctly.
  - Fix warning for unsupported mirror configuration.
  - Fix lvm2-monitor initscript to not display some invalid errors.
    Resolves: #246272 #219189 #245174


author: Milan Broz <mbroz@redhat.com> - 2.02.26-1
changelog:
  - Update to latest upstream release.
  - Add conflict with lvm2-cluster package from different update.
    Resolves: #210365 #224468 #232238 #203745 
    Resolves: #244791 #244792 #244793 #244794 #244795 #244796


author: Alasdair Kergon <agk@redhat.com> - 2.02.12-3
changelog:
  - Remove no-longer-used ldconfig from lvm2-cluster and fix lvmconf
    to cope without the shared library.
    Resolves: #211632


author: Alasdair Kergon <agk@redhat.com> - 2.02.12-1.0
changelog:
  - Change package suffix to use dist variable.
  - Fix clustered flag propagation in vgsplit and require resizeable flag.
  - Fix lvchange to keep activation state when changing LV minor with --force.
  - Fall back to internal locking if external locking lib is missing or fails.
  - Fix pvdisplay to use vg_read() for non-orphans.


author: Alasdair Kergon <agk@redhat.com> - 2.02.11-1.0
changelog:
  - Improve allocation policy for mirrors.
  - Fix two rare vg_read segmentation faults.
  - Accept size as percentages in lvcreate and lvresize.
  - Fix PE size calculations for small PEs.


author: Alasdair Kergon <agk@redhat.com> - 2.02.06-5.0
changelog:
  - Fix monitoring shutdown when devire removed. (194125)
  - Prevent renaming of clustered mirrors for now. (195610)


author: Alasdair Kergon <agk@redhat.com> - 2.02.06-4.0
changelog:
  - Fix PV tools to include orphaned PVs in default output again. (195276)
  - Avoid clvm 'unaligned access' error on some archs. (194626, lost)
  - Fixes and workarounds for mirroring. (195476, 197268)


author: Alasdair Kergon <agk@redhat.com> - 2.02.01-1.0
changelog:
  - Fix lvdisplay command line for snapshots; fix open file promotion
    to read/write; fix an lvcreate error path.
  - Update package dependencies.


author: Alasdair Kergon <agk@redhat.com> - 2.01.08-1.0
changelog:
  - Improve detection of external changes affecting internal cache.
  - Add clustered VG attribute.
  - Suppress rmdir opendir error message.


author: Alasdair Kergon <agk@redhat.com> - 2.00.24-1
changelog:
  - More upstream fixes.  (Always check WHATS_NEW file for details.)
  - Add requested BuildRequires. [bz 124916, 132408]


author: Jeremy Katz <katzj@redhat.com> - 2.00.20-2
changelog:
  - add patch for iSeries viodasd support
  - add patch to check file type using stat(2) if d_type == DT_UNKNOWN (#129674)


author: Alasdair Kergon <agk@redhat.com> 2.00.12-1
changelog:
  - Install default /etc/lvm/lvm.conf.
  - Move non-static binaries to /usr/sbin.
  - Add temporary links in /sbin to lvm.static until rc.sysinit gets updated.


author: Alasdair Kergon <agk@redhat.com> 2.00.10-1
changelog:
  - Update to version 2.00.10, which incorporates the RH-specific patches
    and includes various fixes and enhancements detailed in WHATS_NEW.


author: Jeremy Katz <katzj@redhat.com> 2.00.08-5
changelog:
  - Fix sysfs patch to find sysfs
  - Take patch from dwalsh and tweak a little for setting SELinux contexts on
    device node creation and also do it on the symlink creation.  
    Part of this should probably be pushed down to device-mapper instead


author: Than Ngo <than@redhat.com> - 6:3.5.4-20
changelog:
  - Resolves: #469723, Cannot mount floppy disk
  - Resolves: #472295, KDE Desktop icons do not refresh correctly


author: Than Ngo <than@redhat.com> 6:3.5.4-19
changelog:
  - Resolves: #251414, knotification cannot be enabled after re-enabling arts from kcontrol
  - Resolves: #251968, kdesktop_lock issue
  - Resolves: #236931, kdm does not cleanup PAM state


author: Than Ngo <than@redhat.com> - 6:3.5.4-17
changelog:
  - Resolves: #222970, khelpcenter crashes if press F1 at least 2 consecutive times
  - Resolves: #380281, kcmshell desktop - default button on virtual
    desktop doesn't work


author: Than Ngo <than@redhat.com> 6:3.5.4-13.3.el5
changelog:
  - second login attempt by validated user bypasses login passwords (#201507), CVE-2006-3742
  - fix #211979, switchuser only available with KDM
  - fix kde#134816, XDG's NoDisplay flag is not processed correcrly
  - devices that are in fstab should show up no matter what HAL thinks
  - get rid of unneeded dependency on xorg-x11-xdm
  - fix Theme/Colors/ksplash for RHEL5


author: Than Ngo <than@redhat.com> 6:3.5.4-10
changelog:
  - FedoraDNA for KDM
  - fix #205566, don't overwrite config files
  - fix #178320,#198828, follow menu-spec


author: Than Ngo <than@redhat.com> 6:3.5.4-8
changelog:
  - apply upstream patch
     fix #205701, no bold is displayed in konsole
     fix two possible mem leaks
  - add missing icons for package_games_kids
  - add more icon contexts (Tango icontheme)


author: Than Ngo <than@redhat.com> 6:3.5.4-7
changelog:
  - apply upstream patch
     fix #53642, Menubar is always visible after coming back from fullscreen
     fix #133665, crash in kiosk mode


author: Than Ngo <than@redhat.com> 6:3.5.4-5
changelog:
  - add Requires: eject 
  - fix #203279, antialiasing issue
  - apply upstream patch to fix kdedesktop crash, kde#132873
  - fix #201507, pam config issue
  - fix kdm crash


author: Than Ngo <than@redhat.com> 6:3.5.4-1
changelog:
  - apply upstream patch to fix KDED crashing on startup when D-BUS is unavailable.
  - apply upstream patch to fix kde#128552, kicker regression


author: Petr Rockai <prockai@redhat.com> - 6:3.5.4-0.pre1
changelog:
  - prerelease of 3.5.4 (from the first-cut tag)
  - disable --enable-final on s390x in case it would cause problems


author: Than Ngo <than@redhat.com> 6:3.5.3-6
changelog:
  - apply patch to to fix #194659, CVE-2006-2449 KDM symlink attack vulnerability
    thanks to KDE security team


author: Than Ngo <than@redhat.com> 6:3.5.3-3
changelog:
  - move only *.so symlinks to -devel subpackage
  - enable --enable-new-ldflags again since ld bug fixed


author: Than Ngo <than@redhat.com> 6:3.5.3-1
changelog:
  - update to 3.5.3
  - drop --enable-new-ldflags, workaround for ld bug
  - update kioslave_media_dbus patch


author: Than Ngo <than@redhat.com> 6:3.5.2-11
changelog:
  - apply upstream patches to fix several bugs in konsole, and
    fix #192832, konsole crashes on kde logout


author: Than Ngo <than@redhat.com> 6:3.5.2-10
changelog:
  - fix #191049, KDE screensaver calls PAM incorrectly
  - fix 191306, Kde Help Center can't build an index


author: Than Ngo <than@redhat.com> 6:3.5.2-8
changelog:
  - fix 190836, xmTextFieldClass widgets don't work properly
  - fix 153202, startkde gets wrong field from space_tmp/space_home with finnish


author: Than Ngo <than@redhat.com> 6:3.5.2-1
changelog:
  - update to 3.5.2
  - update dbus patch
  - drop kdebase-3.5.1-kwin-systray.patch, kdebase-3.5.1-keyboardlayout.patch,
    included in new upstream


author: Than Ngo <than@redhat.com> 6:3.5.1-3
changelog:
  - kscreensaver/kdm/kcheckpass use a separate PAM config file #66902
  - cleanup kdm config file #166388 
  - apply patch to launch kde scripts in shutdown,env directories #178326
  - kdm.log logrotate-enabled #178328
  - add konqueror webshortcuts for fedora project #178366
  - don't include unnecessary README #169331


author: Than Ngo <than@redhat.com> 6:3.5.1-1
changelog:
  - 3.5.1
  - apply patch to fix kded segfaults for audio/blank cd's
  - get rid some of unneeded patches
  - add buildrequires on libxkbfile-devel


author: Than Ngo <than@redhat.com> 6:3.5.0-2
changelog:
  - add dbus support
  - backport kde-mount from coolo kde-branch for working with new dbus/hal
  - update KDE default setting
  - update desktop-database/GTK+ icon cache


author: Than Ngo <than@redhat.com> 6:3.4.2-4
changelog:
  - apply patch to fix local root vulnerability in kcheckpass CAN-2005-2494, #166997
  - apply upstream patch to fix kinfocenter opengl DRI/GLX crash


author: Than Ngo <than@redhat.com> 6:3.4.0-6
changelog:
  - apply kdebase-3.4.0rc1-konsole-keymap.patch to change backspace key
    to ASCII-DEL, thanks to j.w.r.degoede@hhs.nl


author: Than Ngo <than@redhat.com> 6:3.4.0-4
changelog:
  - update kdebase-3.4.0rc1-konsole-keymap.patch
  - add Bluecurve theme for kdm
  - enable show device icons as default


author: Than Ngo <than@redhat.com> 6:3.3.2-0.2
changelog:
  - apply the patch to fix Konqueror Window Injection Vulnerability #142510
    CAN-2004-1158,  Thanks to KDE security team


author: Than Ngo <than@redhat.com> 6:3.3.2-0.1
changelog:
  - update to 3.3.2
  - remove unneeded kdebase-3.3.1-cvs.patch, kdebase-3.3.1-sidebar.patch
  - add CVS patch, that fixes a konsole crash


author: Than Ngo <than@redhat.com> 6:3.3.1-6
changelog:
  - remove unneeded require on lm_sensors #137649
  - enable devices-symbol
  - get rid of unneeded device desktop files


author: Than Ngo <than@redhat.com> 6:3.3.0-2
changelog:
  - Own mozilla plugin dir, bug #131667
  - Fix hangup in kicker when user clears clipboard history fom klipper
  - Fix df problem on AFS again


author: Than Ngo <than@redhat.com> 3.2.1-1.5
changelog:
  - fix typo bug
  - add missing Catagories in konsole, #118864
  - add missing requires on kdelibs-devel, bug #118605


author: Than Ngo <than@redhat.com> 3.2.0-1.9
changelog:
  - don't rename to the contents of the translated Name field
  - create desktop files if Desktop directory is empty


author: Than Ngo <than@redhat.com> 6:3.1.94-0.2
changelog:
  - KDE 3.2 Beta 2 respin
  - adjusted aboutkde.patch for 3.2
  - remove kdebase-3.1.93-menu.patch, it's in upstream


author: Than Ngo <than@redhat.com> 6:3.1.93-0.3
changelog:
  - disable kpersonalizer
  - fix konsole desktop file
  - get rid of some old workarounds in startkde, speedup startkde
  - get rid of theme, it's obsolete in 3.2
  - add missing starthere icon
  - add missing kde-unknown.directory


author: Than Ngo <than@redhat.com> 6:3.1.93-0.1
changelog:
  - KDE 3.2 Beta 1
  - remove many patch files, which are now in upstream
  - cleanup many patch files
  - cleanup startkde
  - cleanup rpm file list


author: Than Ngo <than@redhat.com> 6:3.1.4-4
changelog:
  - add patch to allow different icon size in kicker menu
  - don't reset icon size to 20x20 if it's greater than 20


author: Than Ngo <than@redhat.com> 6:3.1.4-2
changelog:
  - install kde.desktop in /usr/share/xsession
  - add more translations for kde.desktop (stolen from kde 3.2 cvs)


author: Than Ngo <than@redhat.com> 6:3.1.2-6
changelog:
  - fix to build nsplugins with openmotif
  - add buildrequires openmotif-devel instead lesstif-devel
  - vfolder-0.1.2


author: Elliot Lee <sopwith@redhat.com> 6:3.1.1-7
changelog:
  - Unconditionally extract vfolder archive, to allow for patching
  - Patch vfolder/admin/cvs.sh to deal with new 'head' options.
  - Patch vfolder/xmlcheck/main.cpp to fix typo


author: Than Ngo <than@redhat.com> 6:3.1.1-1
changelog:
  - 3.1.1 release
  - get rid of some patch files, which are now in new upstream
  - adjust some patch files for 3.1.1
  - permission fix
  - get rid of unneeded pam config file of kscreensaver
  - move desktop-create-menu to kdelibs


author: Than Ngo <than@redhat.com> 6:3.1-9
changelog:
  - set default start page to red hat welcome page (#84858)
  - add fix for KDE Random Screensaver (#83671)


author: Than Ngo <than@redhat.com> 6:3.1-5
changelog:
  - fix scanpath mozilla plugin, #83618
  - add a patch file from Leon Ho llch@redhat.com,  #82529
  - add some missing KDE screensavers, bug #83671


author: Than Ngo <than@redhat.com> 6:3.1-4
changelog:
  - rhn-applet/pam-panel-icon/eggcups applet start correct now, #83264
  - set NFSPollInterval=5000, PollInterval=500


author: Nalin Dahyabhai <nalin@redhat.com> 3.1-0.12
changelog:
  - add openssl-devel as a buildreq
  - add pkgconfig as a buildreq
  - if pkgconfig admits to knowing about openssl, incorporate its information


author: Than Ngo <than@redhat.com> 3.1-0.6
changelog:
  - clean up KDE menu/kcontrol center menu
  - fix build problem on s390/s390x
  - eggcups to kdebase default session (Tim Waugh)
  - rpm macros (Mike Harris)


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.5-3
changelog:
  - remove directory names from PAM configuration files so that they can be
    used for all arches on multilib boxes


author: Than Ngo <than@redhat.com> 3.0.4-2.2
changelog:
  - konsole super user mode shouldn't require password to be retyped (bug #77387)
  - unpackged files in buildroot


author: Than Ngo <than@redhat.com> 3.0.4-1
changelog:
  - cleanup some patch file for 3.0.4
  - cleanup configure to build correct on x86_64
  - Added /etc/X11/applnk in WatchDir
  - KDE screensaver issue (bug #73412)
  - better handling of desktop file renames (bug #74071)
  - Konsole screen refresh is slow (bug #73303, #75154)
  - localiztion fix (bug #75085, #75012)
  - Unable to acess the preferences of KNewsTicker (bug #74805)


author: Than Ngo <than@redhat.com> 3.0.3-10
changelog:
  - Fixed kdm to read X resource if it's deleted.
  - Set Bluecurve theme in kdm as default
  - Add share/applnk in WatchDir
  - remove merging share/applnk
  - Ajust Colors scheme


author: Than Ngo <than@redhat.com> 3.0.3-9
changelog:
  - turn on  AntiAliasing in KDM as default (bug #68872)
  - fixed KDM using Fonts Sans
  - put Red Hat in the version number
  - disable Report Bug menu item
  - turn off stick button in window title
  - added katefiledialogencoding patch from Leon Ho (bug #68214)


author: Than Ngo <than@redhat.com> 3.0.3-8
changelog:
  - Fixed kicker not showing buttons if desktop file not found (bug #71141)
  - Fixed clock patch to prefer redhat-config-date
  - klippper only showed in KDE
  - Add icon order patch from Phil Knirsch


author: Than Ngo <than@redhat.com> 3.0.3-7
changelog:
  - Added Bluecurve theme for kthememanager
  - Fixed a bug in KDE default theme (bug #71413)
  - Added missing KDE settings
  - Added keymap patch and clock patch from Preston
  - Adjusted clock patch


author: Than Ngo <than@redhat.com> 3.0.3-5
changelog:
  - Add fix to resize panel icons (bug #72549)
  - Add fix to lauch kdm login manager module from kcontrol (bug #72470)
  - remove OnlyShowIn KDE in konqueror (bug #72408)
  - Get rid of kpersonalizer from startkde, now KDE supports LANG (bug #72251)
  - Fix vfolder bug (bug #71919)
  - Set Sans 10 as default font
  - Set help_about_kde to false as default
  - Rename konsole to Terminal
  - Add fix to reload global X resource if it's deleted


author: Preston Brown <pbrown@redhat.com> 3.0.3-4
changelog:
  - Default mouse focus should be click to focus (#71816)
  - move all "Preferences->System" items to Extras
  - move kdm configuration to Extras
  - remove "Date & Time" (duplicate functionality) from menus (#59695)
  - remove kcmfontinst (incompatible functionality) from menus (#59695)
  - Kate into Accessories category (from Programming)
  - fix Configure... menu entry in RMB menu of kwin
  - default wallpaper mode is Scaled not Centered


author: Than Ngo <than@redhat.com> 3.0.3-3
changelog:
  - Some Tweaks in configuration
  - lauch rhn-applet-gui instead applet-gui
  - Fixed kpersonalizer using Bluecurve instead Wonderland


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.3-2
changelog:
  - Some fixes in the vfolder ioslave
  - Support <Not> queries in the vfolder ioslave
  - Add Start Here icon on desktop


author: Than Ngo <than@redhat.com> 3.0.3-1
changelog:
  - 3.0.3
  - Added some rh default settings in kicker/kwin
  - Fixed a bug in kicker to start menueditor (bug #71164)
  - Fixed a bug in setting clock/date
  - Added fix to start rhn-applet and pam-panel-icon in systemtray
  - Configuration tweaks (bug #70926)
  - Added fix to use Bluecurve
  - Added new desktop-create-kmenu
  - Added a systemtray patch from Harald Hoyer


author: Than Ngo <than@redhat.com> 3.0.2-8
changelog:
  - Implemented slotRhDescription in kpersonalizer (bug #70863)
  - Added more BuildPrereq (bug #69992, #70011)
  - Wonderland icon Theme as default (bug #69654)
  - Added fix for looking desktop file with prefix kde
  - Fixed a bug Konsole configure (bug #67217)
  - don't use prefix kde by some typical KDE appllications
  - use -O0 on alpha machine (compiler bug)


author: Than Ngo <than@redhat.com> 3.0.2-7.2
changelog:
  - add patch file to fix kicker segfault (bug #69688)
  - get rid of Taiwanese Flag in KDE (bug #70235)


author: Than Ngo <than@redhat.com> 3.0.2-7.1
changelog:
  - don't merge old kde menus (#69652)
  - add fix to show evolution/mozilla in kicker (#69725, #70152, #70618, #69822)
  - add fix to have rh panel layout (#59676)
  - add some fixes from 3.0.2 stable branch
  - add a patch file to fix a bug in startkde, Karsten Hopp
  - add requires images for ksplash
  - add pam_timestamp support (#69863)
  - add fix to make kpersonalizer usable in 640x480 resolution (#68358)
  - add fix for looking DesktopEntryName with prefix kde


author: Than Ngo <than@redhat.com> 3.0.2-5
changelog:
  - Fixed a bug by writing widgetStyle in confile
  - default.jpg as default background, if no background image is found
    use plain color #5477A0
  - BusyCursor=false as default for rh Style
  - use klipper applet rather than tray icon (bug #67107)
  - add rh panel layout
  - build against gcc 3.2-0.1


author: Than Ngo <than@redhat.com> 3.0.2-4
changelog:
  - merge /var/lib/menu/kde/Applications
  - Added missing index file for Crystal icons
  - Own /usr/share/icons/Crystal, /usr/share/mimelnk/print
  - Fixed kwin issue in kpersonalizer
  - Added a missing patch file
  - Fixed KDE menu issue (bug #69102, #67648)
  - Fixed Control Center issue (bug #69031) 
  - Tiny tweaks to kdebase .desktop files (bug #69002)
  - Added some hacks for KDE screen savers


author: Than Ngo <than@redhat.com> 3.0.2-3
changelog:
  - Added patch in konqueror, it should search pluggins on mozilla directory (bug #68599)
  - Fixed a bug in merging /etc/X11/applnk (bug #64919,64594)
  - Added patch for merging /var/lib/menu/kde
  - Fixed a bug in kcontrol, it should search screensavers in /var/lib/menu/kde
  - Added desktop-create-kmenu
  - Added fix for building against g++-296 (bug #68752)
  - Added fix in KDE font installer using xfs reload (bug #64664) (rdieter@math.unl.edu)
  - Fixed refresh issue in konsole (Harald Hoyer)
  - Fixed font issue in konsole (bug #68476)
  - Fixed font issue in terminal emulation under Konqueror (bug #68618)
  - correct fonts in KDE startup (bug #68872)
  - Redhat Style Kwin has opaque resize as default (bug #68401)
  - AntiAliasing on as default in Redhat Style Wonderland
  - Added missing screensave desktop files
  - Rename the section in screen save desktop files
  - Don't strip binaries
  - get rid of wallpapers, requires desktop-backgrounds-basic,
    wallpapers are now in desktop-backgrounds-basic
  - Fixed colorScheme issue in kpersonalizer
  - Added floppy unit icon missing on desktop (bug #68890)
  - Adapted kdebase to new desktop background framework (bug #66784)
  - 3.0.2 fixed bug #63700


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Change defaults
  - Add the vfolder ioslave
  - Add hacks to launch desktop-create-kmenu when needed, merge /etc/kde/menu


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-9
changelog:
  - Try to fix bug #60811 (kpersonalizer now sets default fonts for CJK)
  - Put kicker configuration back in kpersonalizer (#61266) and make sure the
    minimal variant is selected for extremely low resolutions (#63266)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-7
changelog:
  - Fix default kicker config - it shouldn't point to absolute paths (#62355)
  - Add build requirement on samba >= 2.2.3a-5 to build the correct smb
    ioslave (#62202)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-5
changelog:
  - Add fixes from KDE_3_0_BRANCH, except for the "F1 in konsole" change
    (that one breaks things)
  - Don't show Taiwanese flag for zh_CN (#61946)
  - Move in Red Hat splash screen


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-4
changelog:
  - Fix issues with multiple instances of kbookmarkeditor being opened
    at the same time
  - Remove the static cdparanoia hack, we're shipping shared cdparanoia
    libs these days.


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-3
changelog:
  - Merge patches from KDE_3_0_BRANCH:
    - Fix konsole crash
    - Fix Comment vs. GenericName issue in kcm_kdm
    - Fix memory leak in kcontrol


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20020314.1
changelog:
  - Add patch from Than to scale down icons for submenus pointing to legacy
    applications rather than keeping them at 32x32


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.2-0.cvs20010805.1
changelog:
  - Fix anti-aliased fonts
  - Remove Japanese konsole patch, it breaks changing fonts in all other
    languages
  - BuildRequire lesstif-devel to make sure recompiled versions of Konqueror
    support Netscape plugins
  - Remove language detection hacks from startkde, they're now in kpersonalizer
  - Personalize kicker in kpersonalizer
  - Power off when halting the system in kdm (#50847)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.2-0.cvs20010731.1
changelog:
  - Remove some patches that made it into cvs
  - Fix up the Japanese patch, it messed up konsole fonts on "normal"
    languages


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.2-0.cvs20010721.1
changelog:
  - rebuild - somehow an application got linked against an older version of
    itself from the buildroot
  - update


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.2-0.cvs20010720.1
changelog:
  - update
  - get rid of some rpmlint warnings
  - remove kappfinder (we maintain /etc/X11/applnk)
  - work around ia64 breakage


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.2-0.alpha2.2
changelog:
  - Work around NFS-mounted home directories residing on servers with
    ultimately broken OSes (#40711)
  - Fix desktopconv compilation without optimizations (#40144)
  - Move old config files rather than deleting them (#38107)
  - Add explicit requirements on lm_sensors and kdelibs-sound (#32678)
  - Fix doc generation (#40087)
  - s/Copyright:/License:/


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.2-0.cvs20010513.1
changelog:
  - Fix up default settings; KSpell should use Aspell right away
  - Split out -devel subpackage; with KWin and Kate moving to plugin systems,
    this is getting big...


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.2-0.cvs20010512.1
changelog:
  - Update, adapt patches
  - Fix up desktop devices patch, we want the "Eject" action for CD-ROMs,
    CD-Writers, CD-RWs, ZIP and JAZ-Drives and LS120.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix deadkeys handling in kdm
  - Fix uninitialized variable in konsole, patch
    from Tim Waugh (#34452)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix rpmfind shortcut (Bugzilla #34057, KDE Bug #21100)
  - Add patch from KDE_2_1_BRANCH to get rid of debug output in
    the ktar IO slave


author: Than Ngo <than@redhat.com>
changelog:
  - fix charmap/encoding problem
  - fix MinimumFontSize in konqueror, default is 10
  - set correct DefaultEncoding for konqueror
  - clean up startkde
  - disable Israel and Thai, it's broken in qt


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove CD-ROM / Floppy .desktop files, they are generated automatically now
  - remove some other old obsolete default config files


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-2
changelog:
  - Log utmp/wtmp correctly in konsole, using utempter
  - Remove setuid state from konsole_grantpty, it's no longer needed now
    that we use utempter.
  - Fix escaping in the konsole KPart
  - Fix grammar and order in the arts control module


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-1
changelog:
  - 2.1.1
  - Don't crash if kfmexec is invoked without arguments (#32029)
  - Various desktopconv fixes:
    - Allow removing or ignoring KDE 1.x files
    - convert the printer icon we had on the desktop by default.
    - Support i18n
  - Add mailsettings tool (generates sane kcmemail defaults at first
    startup)
  - Fix up support for Brazil Portuguese and Chinese
  - Fix loading of child panel config files (harald)
  - remove -T and --title in konsole, use instead --caption (#31483) (Than Ngo)
  - More i18n fixes (zh_HK is closer to zh_TW than to zh_CN...)


author: Than Ngo <than@redhat.com>
changelog:
  - fix Login Screen Red Hat logo (Bug #32241)
  - fix kdm background color
  - fix a bug in setting font size (Bug #32258)


author: Than Ngo <than@redhat.com> 2.1-11
changelog:
  - fix placed icons on desktop (Bug #31985)
  - some bugfixes in startkde
  - restore support for Russian (bero)
  - merge bugfix patch from KDE_2_1_BRANCH, Ctrl-U could crash Konqueror
    under certain circumstances (bero)
  - Fix up the effects patch (if everything was disabled, no radio button
    was checked by default, rather than the "No effects" button) (bero)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-10
changelog:
  - Fix up i18n support
  - Don't use predictable tmp file names in krdb
  - Remove the printer icon from the desktop. It uses klpq which is in kdeutils,
    so the icon should come from there.
  - fix error.c in kdebase-2.1-fixes.patch, It's broken (Than Ngo)
  - better fix for konsole keyboard mappings (Preston Brown)


author: Than Ngo <than@redhat.com>
changelog:
  - fix default profile for konqueror in webbrowser mode 
  - set lucidatypewriter as fixed-width font for konqueror


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-9
changelog:
  - Fix locale settings (old versions didn't check the user's locale settings
    and always started up in English)
  - Fix some braindead code in kwrite


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-8
changelog:
  - Add option to save backtraces to a file (#30867)
  - Fix kdm looking horrible on 8 bit displays
  - Revert to /usr/share/config with an exception for kdmrc
  - Add /etc/skel/Desktop/.directory (the /etc/skel/Desktop/* glob doesn't include
    /etc/skel/Desktop/.* ...)
  - Don't apply konsole-noxft patch anymore (workaround for an X bug
    that was fixed in 11.4)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - /usr/share/config -> /etc/kde
  - Don't throw all config files at every user's home directory; 2.x supports
    changing global defaults
  - Get rid of bogus "can't find schema named" warning
  - Fix various bugs in konsole (don't connect to a NULL slot, etc.)
  - Cripple kxmlrpcd by default (#23253)
  - Add a sane icon arrangement at first startup (#25026)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add fixes from KDE_2_1_BRANCH:
    - Fix up cookie handling in konqueror
    - Fix a potential crash in kcontrol when using config files from
      cvs snapshots
    - Fix possible khotkeys segfault
  - Fix up Konqueror User Agent dialog
  - Log in to "default" session by default (#29157)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up konsole_grantpty to work with the /dev/pts filesystem and
    /dev/ptmx rather than the old /dev/ptyXX system
  - Replace ktip logo with Red Hat logo, the old one could be considered
    offensive by some people
  - Fix build with glibc 2.2.2
  - Turn off icon view in kdm
  - Other minor changes to default config


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - desktopconv: Don't strip off .png/.xpm/.gif in Icon= if it is
    provided as a full pathname
  - Build with --disable-debug
  - Fix a bug causing all icons to appear in the upper-left corner
  - Don't use antialiased fonts in konsole even if they're turned on.
    Konsole can't deal with them.
  - Don't show the postgres and amanda users in kdm
  - Add rhbug/bz shortcut to Bugzilla
  - Add ftpsearch/fs shortcut to FTP Search
  - Add "Eject" option to CD-ROM icon (RFE #26301)
  - Fix permissions on some files in /etc/skel/Desktop (having them readable
    by root only is not really useful ;) )
  - Fix PAM exiting (#25232, Patch from Tim Waugh)
  - Fix utmp handling in konsole (Bug #25048)
  - Rewrite desktopconv and run it from startkde, ensures
    clean updates from KDE 1.x (Bug #25473)
  - Add $HOME/bin to PATH in kdm (Bug #25743)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Link the greeter into kdm statically, pulling in libpthreads
    Fixes crash with glibc-2.2.1-3 i686


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Turn off anti-aliasing by default
  - Restore the turning AA on/off and "apply styles to non-KDE-apps"
    functionality, someone managed to break them just in time for
    2.1 beta 2.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Kill /usr/share/icons/hicolor/22x22/actions/view_tree.png, it's in
    kdelibs
  - restore missing /etc/kderc (Bug #24601)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update CVS (fixed #24298, #24242)
  - Hack in support for turning anti-aliasing on and off, as requested
    by Than. Unfortunately, this patch probably won't go into the base 2.1
    because of the message freeze.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - kdm shouldn't show gdm and mailnull users (#23136)
  - don't install the konsole fonts, they're now
    included in XFree86 (#23467)
  - Obsoletes kdebase2 (from 7.0-preview)
  - Add config files (used to be in kdesupport) (#22601)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update
  - Obsolete kdebase-3d-screensavers, kdebase-locolor-icons,
    kapm kcmlaptop (optional stuff from KDE 1.x)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Some fixes to startkde:
    - if /etc/skel/.kde doesn't exist, don't copy it
    - remove stale .DCOPserver* files at startup
  - Rebuild with fixed kdoc


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move include files to /usr/include/kde
  - Don't install any of the mini-lesstif files, we need them at
    build time only
  - Fix consolehelper config for kappfinder


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to KDE_2_0_BRANCH, now that the ".0 release" bugs are fixed
  - Get rid of the Red Hat menu, it's merged now
  - Fix up the gdm session file
  - Fix up kappfinder, run it through consolehelper (Bug #19903)
  - Enable Netscape plugin support, add a stripped down version of lesstif
    to allow this


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - get rid of the 3d-screensavers package - now that qt-GL is part of qt,
    there's no need to keep them separate to avoid the dependency.


author: Than Ngo <than@redhat.com>
changelog:
  - fix gnome-session so that KDE2 can be started from gdm
  - pam/kde2 instead pam/kde to avoid problem with KDE1
  - don't requires qt-GL, It's now in qt


author: Than Ngo <than@redhat.com>
changelog:
  - fix dependency problem with KDE1 so that KDE1 and KDE2 can be installed
    at the same time
  - add missing ldconfig in %post anf %postun
  - fix for reading config files in /etc/X11/xdm, add Xsession to requires


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - rebuild, now that kdelibs2 works on alpha
  - use the same ugly hack to get kdebase to compile
  - remove ksysguard on alpha (even more compiler problems)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot
  - ExcludeArch ia64 for now
  - remove gnome .desktop file, we get it from gnome-core now.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Build the OpenGL screensavers, and move them to a separate package
  - Improve the spec file (BuildPrereqs etc.)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - start autorun if present in startkde
  - check for configured soundcard before running sound services


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added link to /etc/X11/applnk, .directory file
  - included lowcolor icon sub-package
  - enable .desktop file access


author: Preston Brown <pbrown@redhat.com>
changelog:
  - customized startkde script to set up user environment if not present.
  - mention kthememgr in description.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - snapshot, includes kde 1.1.1 + fixes
  - kvt removed for security reasons.  It is a steaming pile of...


author: Preston Brown <pbrown@redhat.com>
changelog:
  - today's snapshot makes kfm a bit nicer and some other fixes
  - moved default rc files to kdesupport


author: Preston Brown <pbrown@redhat.com>
changelog:
  - removed bell.xpm (used to be in fvwm2-icons, don't want installer to see
  - this previous connection and autoselect kdebase for upgrade).


author: Jakub Jelinek <jakub@redhat.com> 2.5-6
changelog:
  - fix svc_run (#216834, BZ#3559)
  - make sure there is consistent timestamp for /etc/ld.so.conf,
    /etc/localtime and /etc/rpc between multilib glibc rpms
  - fix :include: /etc/alias handling (#215572)
  - update powerpc-cpu add-on to version 0.4 (#196319)
  - add power6x subdir to /lib/ and /lib/rtkaio/,
    link all libs from ../power6/* into them
  - update nl, sv, pl and tr translations
  - add mai_IN locale (#213415)
  - fix es_ES LC_TIME (BZ#3320)


author: Jakub Jelinek <jakub@redhat.com> 2.5-5
changelog:
  - remove bogus /usr/lib/librt.so.1 symlink (#213555)
  - fix memusage (#213656)
  - fix sysconf (_SC_LEVEL{2,3}_CACHE_SIZE) on Intel Core Duo
    CPUs
  - fix ld.so locking on dlopen failures (#213037, BZ#3429)
  - fix libthread_db.so on TLS_DTV_AT_TP architectures (#215513)
  - fix --inhibit-rpath (#214569)
  - fix _r_debug content when prelinked ld.so executes
    a program as its argument
  - handle new tzdata format to cope with year > 2037 transitions
    on 64-bit architectures
  - fix strxfrm
  - fix i?86 floor and ceil inlines (BZ#3451)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-33
changelog:
  - fix dlclose (#206639)
  - don't load platform optimized libraries if kernel doesn't set
    AT_PLATFORM
  - fix ppc{32,64} libSegFault.so
  - use -mtune=generic even for glibc-devel.i386 (#206437)
  - fix /lib/librt.so.1 symlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-2
changelog:
  - update from CVS
    - with MALLOC_CHECK_=N N>0 (#153003)
    - fix recursive dlclose (#154641)
    - handle %z in strptime (#154804)
    - automatically append /lib/obsolete/linuxthreads/
      to standard library search path if LD_ASSUME_KERNEL=N N <= 2.4.19
      or for glibc 2.0 binaries (or broken ones that don't use errno/h_errno
      properly).  Warning: all those will stop working when LinuxThreads
      is finally nuked, which is not very far away
    - remove nonnull attribute from acct prototype (BZ#877)
    - kernel CPU clocks support
    - fix *scanf in locales with multi-byte decimal point


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-20
changelog:
  - move LinuxThreads libraries to /lib/obsolete/linuxthreads/
    and NPTL libraries to /lib.  To run a program against LinuxThreads,
    LD_ASSUME_KERNEL=2.4.xx LD_LIBRARY_PATH=/lib/obsolete/linuxthreads/
    is now needed
  - bzip2 ChangeLog* files instead of gzipping them


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-19
changelog:
  - update from CVS
    - fix nextafterl and several other libm routines on ia64
    - fix initgroups (BZ#661)
  - kill nptl-devel subpackage, add linuxthreads-devel,
    compile and link by default against NPTL and only with
    -I/usr/include/linuxthreads -L/usr/lib/linuxthreads
    against LinuxThreads
  - package /usr/lib/debug/lib/tls/i{5,6}86 symlinks in
    i386 glibc-debuginfo
  - limit number of ChangeLog* files in glibc-common %doc
    to last 2.5 years of changes only to save space


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-15
changelog:
  - update from CVS
    - better fix for the dlclose bug (#145810, #150414)
    - fix regex crash on case insensitive search in zh_CN locale
      (#151215)
    - fix malloc_trim (BZ#779)
    - with -D_FORTIFY_SOURCE=*, avoid defining read and a bunch of others
      as function-like macros, there are too many broken programs
      out there
  - add %dir /usr/lib/gconv to glibc's file list (#151372)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-12
changelog:
  - fix tst-chk{2,3}
  - fix up AS_NEEDED directive in /usr/lib/libc.so
  - BuildReq binutils >= 2.15.94.0.2-1 for AS_NEEDED, in
    glibc-devel Conflict with binutils < 2.15.94.0.2-1


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-20
changelog:
  - update from CVS
    - change NPTL PTHREAD_MUTEX_ADAPTIVE_NP mutexes to spin on SMP
    - strtol speed optimization
    - don't try to use certainly unimplemented syscalls on ppc64
  - kill -debug subpackage, move the libs to glibc-debuginfo{,-common}
    into /usr/lib/debug/usr/lib/ directory
  - fix c_stubs with gcc 3.4
  - move all the up to 3 builds into %build scriptlet and
    leave only installation in the %install scriptlet


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-18
changelog:
  - update from CVS
  - fix NPTL pthread_cond_timedwait
  - fix sysconf (_SC_MONOTONIC_CLOCK)
  - use /%{_lib}/tls instead of /lib/tls on x86-64
  - add /lib/tls/librt*so* and /lib/i686/librt*so*
  - display content of .out files for all make check failures


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-18:.2
changelog:
  - Applied patch for CVE-2010-1748 (web interface memory disclosure,
    STR #3577, bug #591983).
  - Applied patch for CVE-2010-0542 (texttops unchecked memory
    allocation failure leading to NULL pointer dereference, STR #3516,
    bug #587746).
  - Applied patch for CVE-2010-0540 (CUPS administrator web interface
    CSRF, STR #3498, bug #588805).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-16
changelog:
  - Applied patch to prevent memory leak when adding/modifying printers
    (bug #540646, STR #2836).
  - Applied patch to fix CVE-2009-3553 (bug #530111, STR #3200).
  - Applied patch to fix CVE-2009-2820 (bug #529833, STR #3367, STR #3401).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Fixed lspp.patch to avoid memory leak (bug #496008).
  - Applied patches to enable changing of quotas
    with lpadmin (bug #496082, STR #3077, STR #3078).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Use poppler pdftops wrapper filter from upstream (bug #527429).  No
    longer need ext, includeifexists, strict-aliasing,
    CVE-2009-0146,0147,0166, cert-batch3892,4781,5486,19856,19869, or
    CVE-2009-3608,3609 patches.
  - Also fixes rotation of landscape documents when printed from OS X
    (bug #447987).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Applied patch to prevent removing of multiple file job when
    the printer is disabled and enabled again (bug #506257, STR #3226).
  - Applied patch to fix issues with CGI handling (bug #497632, STR #2781, STR #2816).
  - Applied patch to fix incorrect CGI handling (bug #460898, STR #3194)
    and use php-cgi instead of php when running PHP scripts (bug #460898, STR #2923).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Requires tmpwatch for the cron.daily script (bug #487495).
  - Applied patch to fix POSTing to custom cgi (bug #506316, STR #3221).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-13
changelog:
  - Include NULL pointer check in ObjectStream::getObject.  Part of the
    fix for CVE-2009-3608 (bug #526637).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-10
changelog:
  - Reverted php-cgi change due to incorrectly handling of CGI output
    that is not line-based (STR #3194, bug #460898).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-9
changelog:
  - Include printer-uri IPP attribute in IPP-Get-Jobs requests in order
    to be able to operate correctly with newer versions of CUPS
    (bug #497529, STR #2996, STR #3107, STR #3117).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied additional patches for batch3892.pdf, batch4781.pdf,
    batch5486.pdf, batch19856.pdf, batch19869.pdf testing files from
    CERT (bug #491864).
  - Applied patches to fix CVE-2009-0163 (bug #490596),
    CVE-2009-0146 (bug #490612), CVE-2009-0147 (bug #490614),
    and CVE-2009-0166 (bug #490625).
  - Fixed SendFF option in textonly filter (bug #491190).
  - Requires krb5 library that contains correct krb5_cc_new_unique()
    function (bug #489714).
  - MIME type detection fixes (bug #479635): always set document-name in
    client library (STR #3055) and fixed handle of "or" rules (STR #3059).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't verify MD5 sum, file size, or mtime for several config files:
    cupsd.conf, client.conf, classes.conf, printers.conf, pdftops.conf,
    snmp.conf (bug #487161).
  - Fixed cupsGetNamedDest() behaviour when lpoptions file specifies a
    non-existent default printer (bug #481481, STR #3082).
  - Fixed admin URLs in CUPS web interface (bug #479809, STR #3022).
  - Fixed mailto notifier (bug #474920, STR #3011).
  - Fixed option encoding for "compression" (bug #474814, STR #2997).
  - Marked templates and translated templates as configuration files
    (bug #474769).
  - Fixed a busy-loop in the scheduler that could occur when a
    connection is closed (bug #474323).
  - Use php-cgi instead of php when running PHP scripts (bug #460898).
  - Applied patch from upstream to fix handling of "Satisfy Any" in
    cupsd.conf (bug #481303).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-8
changelog:
  - Applied patch to fix STR #2974 (bug #473905, CVE-2008-5286,
    CVE-2008-1722).
  - Applied patch to fix STR #2774 (bug #473915, CVE-2008-5184).
  - Applied patch to fix RSS subscription limiting (bug #473901,
    CVE-2008-5183).
  - Run the serial backend as root (bug #216658).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-6
changelog:
  - Applied patch to fix CVE-2008-3639 (STR #2918, bug #464722).
  - Applied patch to fix CVE-2008-3640 (STR #2919, bug #464722).
  - Applied patch to fix CVE-2008-3641 (STR #2911, bug #464722).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-2
changelog:
  - Preserve default BrowseAllow value as @LOCAL so as to avoid
    unexpected configuration file changes.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-1
changelog:
  - Preserve _cupsAdminGetServerSettings and _cupsAdminSetServerSettings
    function declarations in adminutil.h, and ship i18n.h as in 1.2.x.
  - Preserve 'do not use' comment in http_t struct definition.
  - Applied upstream patch to fix https stalls when using Firefox 3
    (bug #453610, STR #2892).
  - Compile pdftops/GlobalParams.cxx with -fno-strict-aliasing (bug #447868).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Require exactly matching libs package (bug #447867).
  - Fixed cancel man page (bug #434967).
  - Fixed permissions of classes.conf in file manifest to match those
    set in cupsd (bug #245748).
  - Fixed log file permissions (bug #218761).
  - Backported cupsGetNamedDest() support for faster look-ups when the
    destination is known, such as in 'lp -d ...' (bug #428086).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Re-based to 1.3.7.  Fixes bug #241406 (STR #2400),
    bug #249570 (STR #2228), bug #250383 (STR #2084, STR #2198),
    bug #409121, bug #430067 (STR #1969, STR #2386), bug #430076
    (STR #1985), bug #430648 (STR #2319), bug #432001,
    bug #433087 (STR #2319), bug #441439 (STR #2699), bug #441811,
    bug #446023 (STR #1261), bug #447548 (STR #2179), bug #451101,
    bug #453396.
  - No longer need initscript, locale, relro, directed-broadcast,
    str2061, str2056, str2055, get_jobs, af_unix-auth, str2264,
    if-modified-since, str2266, str2023, str2117, str2351,
    CVE-2007-0720, CVE-2007-3387, CVE-2007-4351,
    CVE-2007-4352,5492,5393, CVE-2007-4045, docinfo-crash, str2656,
    CVE-2008-0047, CVE-2008-0053, CVE-2008-1373 or CVE-2008-1722
    patches.
  - Build now requires krb5-devel and avahi-compat-libdns_sd-devel.
  - The devel sub-package now requires krb5-devel.
  - Don't run autoconf; only lspp patch required it, and
    autoconf-generated changes have now been folded into that patch.
  - Don't aclocal even when we modify m4 files -- CUPS does not use
    automake (bug #250251).
  - Don't overwrite upstream snmp.conf file.
  - Move _http_s structure into public header file to prevent build
    failures in other packages.  Ship md5.h for this as well.
  - Revert STR #2537 so that non-UTF-8 clients continue to be accepted.
  - Don't strip foomatic recommended strings from make/model names.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.18
changelog:
  - Applied patch to fix CVE-2008-0053 (HP-GL/2 input processing, bug #438117).
  - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.17
changelog:
  - Applied patch to prevent heap-based buffer overflow in CUPS helper
    program (bug #436153, CVE-2008-0047, STR #2729).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.16
changelog:
  - Prevent double-free when a browsed class has the same name as a printer
    or vice versa (bug #433767, STR #2656).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.15
changelog:
  - Fixed LSPP patch so that strings allocated with cupsdSetString() are always
    clear correctly (bug #258221).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #356581).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #356581).
  - Applied patch to fix CVE-2007-4351 (STR #2561, bug #353991).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.9
changelog:
  - Fixed IPv6 address parsing (bug #241400, STR #2117).
  - Fixed a bug that caused cups-lpd not to set the correct value for
    job-originating-host-name (bug #240223, STR #2023).
  - Cleaned up initscript error handling (bug #237953).
  - Fixed cups-lpd -odocument-format=... option (bug #230073, STR #2266).
  - Fixed If-Modified-Since: handling in libcups (bug #218764, STR #2133).
  - Make the initscript use start priority 56 (bug #213828).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.8
changelog:
  - Applied fix for STR #2264 (bug #230118).
  - Added patch for UNIX domain sockets authentication (bug #230613).
  - LSPP: Updated patch for line-wrapped labels (bug #228107).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.7
changelog:
  - Don't reload CUPS after rotating the logs with logrotate, but make sure
    to use the new file in that case (bug #215024).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.6
changelog:
  - LSPP: added check_context() function for get_jobs(), get_job_attrs() and
    validate_user() (bug #229673).
  - Fixed a potential scheduler crash (bug #231522).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.2
changelog:
  - Run the serial backend as root (bug #216658).
  - Fixed LSPP SELinux check (bug #216856).
  - LSPP fix: process URI before logging it (bug #216673).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.1
changelog:
  - Reload, don't restart, when logrotating (bug #215024).
  - Fixed pdftops.conf (bug #214612).
  - LSPP patch fix (bug #213501).
  - Added filter and PPD for text-only printer (bug #213034).
  - Fixed parallel backend (bug #213023, STR #2056).
  - Added support for /dev/ttyUSB devices (bug #212580, STR #2061).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-9
changelog:
  - adminutil.c: when writing 'BrowseAllow @LOCAL', add a comment about what
    to change it to when using directed broadcasts from another subnet
    (bug #204373).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-8
changelog:
  - LSPP patch didn't get updated properly in 1:1.2.4-6.  Use the right
    patch this time (bug #208676).  LSPP re-enabled.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-10
changelog:
  - Remove 'Provides: LPRng = 3.8.15-3' (bug #148757).
  - Applied patch to fix STR #1893 (bug #201800).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-6
changelog:
  - Use replacement snmp.c from STR #1737 (bug #193093).
  - Re-enable LSPP; doesn't harm browsing after all.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.1-2
changelog:
  - 1.2.1.
  - Another STR #1705 fix (bug #192034).
  - Fixed devel package multilib conflict (bug #192664).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-7
changelog:
  - Sync to svn5568.  No longer need rpath patch.
  - Added a 'conflicts:' for kdelibs to prevent bug #192548.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-4
changelog:
  - Disable back-channel data in the usb backend (STR #1705, bug #192034).
  - Fix for 'browsing stops on reload', STR #1670 (bug #191217).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5538.
  - Added 'restartlog' to initscript, for clearing out error_log.  Useful
    for problem diagnosis.
  - Initscript no longer needs to check for printconf-backend.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5470.
  - No longer need link, CAN-2005-0064, or no-propagate-ipp-port patches.
  - Switch to upstream PIE implementation (every single binary is PIE).
  - Extend relro to all binaries.
  - Better rpath patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No longer need backend, rcp, or ppdsdat patches.
  - Use configure switch for LogFilePerm default instead of patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.2
changelog:
  - Patch pdftops to understand 'includeifexists', and use that in the
    pdftops.conf file (bug #189809).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.8
changelog:
  - No longer need openssl-devel.
  - Build with LDAP_DEPRECATED=1, to pick up declarations of ldap_init() etc.
  - Only warn about ACLs once (STR #1532).
  - Fix imagetops filter (STR #1533).
  - Sync pstops.c with svn 5382.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.1
changelog:
  - Ship a printers.conf file, and a client.conf file.  That way, they get
    their SELinux file contexts set correctly.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.6
changelog:
  - Add KDE compatibility symbols _ipp_add_attr/_ipp_free_attr to ipp.h, with
    a comment saying why they shouldn't be used.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5102.0
changelog:
  - New svn snapshot.
  - No longer need enabledisable patch.
  - Fixed double-free in scheduler/policy.c (STR #1428).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn4964.0
changelog:
  - Use -fPIE not -fpie in PIE patch.
  - Fix link patch.
  - Patch in PIE instead of using --enable-pie, since that doesn't work.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - 1.2 svn snapshot.
  - No longer need doclink, str1023, pdftops, sanity, lpstat, str1068,
    sigchld, gcc34, gcc4, slow, CAN-2004-0888, CAN-2005-2097, finddest,
    str1249, str1284, str1290, str1301, CVE-2005-3625,6,7 patches.
  - Removed autodetect-tag patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.23-18
changelog:
  - Raise IPP_MAX_VALUES to 100 (bug #164232).  STR #1284.
  - Made FindDest better behaved in some instances (bug #164232).  STR #1283.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-2
changelog:
  - Fixed cups-lpd file mode (bug #137325).
  - Convert all man pages to UTF-8 (bug #107118).  Patch from Miloslav Trmac.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc2.1
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.
  - 1.1.22rc2.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7
changelog:
  - Prevent filters generating incorrect PS in locales where "," is the
    decimal separator (bug #136102).  Patch from STR #970.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1
changelog:
  - 1.1.21rc2.
  - No longer need state, reload-timeout or str743 patches.
  - httpnBase64 patch no longer applies; alternate method implemented
    upstream.
  - Fix single byte overread in usersys.c (spotted by Colin Walters).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-9
changelog:
  - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
    result STR #719.  This fixes several problems including those noted in
    bug #114999.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-8
changelog:
  - If cupsd fails to start, make it exit with an appropriate code so that
    initlog notifies the user (bug #110135).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
    or requested (bug #118982).
  - Use upstream patch for the HTTP/1.1 Continue bug (from STR716).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-7
changelog:
  - Fix non-conformance with HTTP/1.1, which caused failures when printing
    to a Xerox Phaser 8200 via IPP (bug #122352).
  - Make lppasswd(1) PIE.
  - Rotate logs within cupsd (instead of relying on logrotate) if we start
    to approach the filesystem file size limit (bug #123003).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-4
changelog:
  - Tracked D-BUS API changes.
  - Updated D-BUS configuration file.
  - Symlinks to avoid conflicting with bash builtins (bug #102490).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-2
changelog:
  - Try harder to find a translated page for the web interface (bug #107619).
  - Added build_as_pie conditional to spec file to facilitate debugging.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-1
changelog:
  - 1.1.20.
  - No longer need idefense, str226 patches.
  - Updated sanity patch.
  - The devel sub-package requires openssl-devel (bug #110772).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ignore the file descriptor when ShutdownClient is called: it
    might get closed before we next try to read it (bug #107787).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-10
changelog:
  - Pass correct attributes-natural-language through even in the absence
    of translations for that language (bug #100984).
  - Show compilation command lines.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-7
changelog:
  - Add some %if %use_dbus / %endif's to make it compile without dbus
    (bug #97397).  Patch from Jos Vos.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1
changelog:
  - 1.1.19rc4.  Ported initscript, idefense, ppdsdat, dbus patches.
  - No longer need error, sigchld patches.
  - Ship cupstestppd.


author: Havoc Pennington <hp@redhat.com> 1:1.1.18-4
changelog:
  - adjust dbus patch - dbus_bus_get() sends the hello for you, 
    and there were a couple of memleaks
  - buildprereq dbus 0.9
  - rebuild for new dbus
  - hope it works, I'm ssh'd in with no way to test. ;-)


author: Tim Waugh <twaugh@redhat.com> 1.1.18-1
changelog:
  - 1.1.18.
  - No longer need uninit patch.
  - Some parts of the iDefense and pdftops patches seem to have been
    picked up, but not others.


author: Tim Waugh <twaugh@redhat.com> 1.1.17-6
changelog:
  - Add epoch to internal requirements.
  - Make 'condrestart' return success exit code when daemon isn't running.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14
changelog:
  - Buildrequire pam-devel.
  - Patch default PAM config file to remove directory names from module paths,
    allowing the configuration files to work equally well on multilib systems.
  - Patch default PAM config file to use system-auth, require the file at build-
    time because that's what data/Makefile checks for.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-13
changelog:
  - Use logrotate for log rotation (bug #76791).
  - No longer need cups.desktop, since redhat-config-printer handles it.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-11
changelog:
  - Use %configure for multilib correctness.
  - Use libexec instead of lib for CUPS_SERVERBIN.
  - Ship translated man pages.
  - Remove unshipped files.
  - Fix file list permissions (bug #59021, bug #74738).
  - Fix messy initscript output (bug #65857).
  - Add 'reload' to initscript (bug #76114).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-7
changelog:
  - Really add cups-lpd xinetd file (bug #63919).
  - Ship pstoraster (bug #69573).
  - Prevent fread from trying to read from beyond EOF (fixes a segfault
    with new glibc).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3
changelog:
  - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
    because some applications expect to find the cups docs in
    /usr/share/cups/doc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1
changelog:
  - 1.1.15-1
  - Fix up smb printing trigger (samba-client, not samba-clients)
  - Start cupsd earlier, apparently it needs to be running before samba
    starts up for smb printing to work.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12
changelog:
  - Support SMB printing (#62407)
  - Add HTML redirections to doc files to work around users mistaking
    /usr/share/doc/cups-1.1.14 for the web frontend (#62405)


author: Bill Nottingham <notting@redhat.com> 1.1.14-7
changelog:
  - lpc man page is alternative too
  - run ldconfig in -libs %post/%postun, not main
  - remove alternatives in %preun


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5
changelog:
  - Move cups-config to cups-devel subpackage
  - Make alternatives usage a %define to simplify builds for earlier
    releases
  - Explicitly provide things we're supplying through alternatives
    to shut up kdeutils dependencies


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1
changelog:
  - 1.1.13
  - Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
  - Rename init scripts so we can safely "killall cupsd" from there


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.1.1 (this has some major bugfixes)
  - Fix a typo in initscript (it's $?, not ?$)
  - Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
  - Create the spool dir


author: Than Ngo <than@redhat.de>
changelog:
  - update to 1.1 release
  - move back to /etc/rc.d/init.d
  - fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
  - split cups


author: Tim Powers <timp@redhat.com>
changelog:
  - started changelog 
  - fixed init.d script location
  - changed script in init.d quite a bit and made more like the rest of our
    startup scripts


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.4.0-1
changelog:
  - 5.4.0
  - work around build system breakage causing applications to be named
    x86_64-redhat-linux-foo rather than foo


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-18:.7
changelog:
  - Reverted patch for STR #3563 as it does not fix the original problem
    and may well introduce further regressions (bug #601516).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-18:.5
changelog:
  - Adjust texttops output to be in natural orientation (STR #3563).
    This fixes page-label orientation when texttops is used in the
    filter chain (bug #601516).


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-8
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#514703)
  - fix memory leak in ipNetToPhysicalTable (#515650)
  - fix periodical memory leaks in various MIBs (#518633)
  - create MIB indexes in /var/lib/net-snmp to fix SELinux alerts in applications
    (#523249)
  - fix multilib issues in net-snmp and net-snmp-devel packages (#521820)
  - allow snmpusm to create views with OIDs larger than 255 (#527364)
  - plug memory leak in processing of GETNEXT request on last item in
    mteEventSetTable (#515650)
  - suppress showing of "truncating unsigned value to 32 bits" message in Net-SNMP
    utilities (#528164)
  - fix endless loop in ipDefaultRouterTable when there are more default routes
    with the same destination (#504742)
  - suppress logging of "truncating integer value > 32 bits" in IP-MIB and TCP-MIB
    when the counters overflow 32 bits (#507528)
  - fix responding to broadcast requests (#521175)
  - fix ipNetToPhysicalTable and ipNetToMediaTable with network interfaces with
    long HW address (like InfiniBand) (#543499)
  - fix IP address size in ipCidrRouteTable on 64 bit platforms (#547698)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-6
changelog:
  - fix command line options related to logging (#477768)
  - don't spam log with 'diskio.c: don't know how to handle X request'
    (#474093)
  - add ipAddressSpinLock OID (#479609)
  - fix reloading of trapsink and trap2sink entries on SIGHUP (#468147)
  - fix reporting of IF-MIB::ifSpeed of 10GB/s interfaces (#464061)
  - backport skipNFSInHostResources option (#461631)
  - implement ipNetToPhysicalLastUpdated OID (#477092)
  - implement RMON-MIB::etherStatsJabbers (#468832)
  - fix memory leak in SCTP-MIB (#497280)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-1
changelog:
  - rebase to net-snmp-5.3.2.2 (#454977)
  - introduce new "dontLogTCPWrappersConnects" config file option
    to reduce logging of incomming connections (#448664)
  - introduce new "v1trapaddress" config file option
    which allows setting agent address inside SNMPv1 traps (#426355)
  - correctly recover when admin starts snmpd or snmptrapd with
    wrong port specifier (#449351)
  - update snmpd.conf man page to emphasize necessity of explicit port
    specification in 'trapsess' option (#436452)
  - net-snmp.rpm requires now the same version and release of net-snmp-libs
    (#434746)
  - 32-bit ifTable counters are now updated (#438151)
  - fix hrProcessorLoad OID (#431439)
  - fix documentation of 'exec' statement - it does not cache results
    (#431519)
  - fix inetNetToMediaTable processing, some entries could be missing
    when ipv6 kernel module is removed (#450076)
  - fix memory leak on UDP transport creation (#454294)
  - add SCTP-MIB implementation (#435110)
  - fix a filedescriptor leak in hrSWRunTable (#458009)
  - allow 16bit ifIndex (#458937)
  - move /etc/snmp/snmpd.options to /etc/sysconfig and add snmptrapd.options
    file (#459054)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-25
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449898)
  - fix SNMPv3 authentication checks (unknown CVE) (#449898)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-23
changelog:
  - add ipIfStatsTable to build
  - make ipv6ScopeZoneIndexTable loading quiet (#433446)
  - make ipAddressPrefixTable loading quiet (#253399 related)
  - fix inetToMediaTable to recover from error when ipv6 kernel module is 
    not present (#431977)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-20
changelog:
  - fix snmpwalk / bulkwalk on TCP scalars (#248342)
  - fix bulkwalk security flaw (#366631)
  - interface names can be longer than 8 characters (#357121)
  - aliased interfaces have correct netmask and broadcast addresses
    (#357121)
  - fix icmpStatsTable (#256041)
  - fix race condition when reading /proc/*/cmdline (#311261)
  - fix hostname logging of snmptrapd (#270941)
  - fix race condition when reading process status (#252216)
  - fix TCP support (#251332)
  - fix reading of agentsecname and iquerysecname from config file
    (#338981, #311761)
  - fix disk statistics of mount points with spaces (#348681)
  - store temporary files to /var/run/snmpd to prevent
    users to modify them and to make selinux happy (#401211)
  - print more meaningful message when interface changes its ifIndex
    (#396141)
  - fix hrDeviceStatus and hrDeviceErrors missing during walk
    (#419511)
  - correctly cut values to 32bits in UCD-DISKIO-MIB, preventing
    "truncating integer value > 32 bits" to appear (#386821)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-15
changelog:
  - fix sending SNMPv1 traps on v2 connections (#236933)
  - fix ugly error messages when more interfaces share one IP addr.
    (#223236)
  - build with rpm-devel to support HOST-RESOURCES-MIB::hrSWInstalled
    (#232870)
  - store pid in /var/run/snmpd.pid (240470)
  - fix wrong sprintf in path generation (#240609)
  - fix too verbose snmpassert (#239083)
  - fix perl bulkwalk (#238145)
  - extend ipv6 support of some MIBs (#242483)


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: David Malcolm <dmalcolm@redhat.com> - 2.4.3-27.el5_5.1
changelog:
  - Backport fix for leaking filedescriptors in subprocess error-handling path
  from Python 2.6
  - Resolves: rhbz#609017
  - Backport usage of "poll" within the subprocess module to 2.4.3
  - Resolves: rhbz#609020


author: James Antill <james.antill@redhat.com> - 2.4.3-27.el5
changelog:
  - Add workaround for subprocess import with threads
  - Resolves: 499095
  - Resolves: rhbz#499097
  - Resolves: rhbz#498979


author: James Antill <james.antill@redhat.com> - 2.4.3-24.el5_3.4
changelog:
  - Fix all of the low priority security bugs:
  - Resolves: 486351
  - Multiple integer overflows in python core
  - Resolves: 455008
  - PyString_FromStringAndSize does not check for negative size values
  - Resolves: 443810
  - Multiple integer overflows discovered by Google
  - Resolves: 455013
  - Multiple buffer overflows in unicode processing
  - Resolves: 454990
  - Potential integer underflow and overflow in the PyOS_vsnprintf C API function
  - Resolves: 455018
  - imageop module multiple integer overflows
  - Resolves: 469656
  - stringobject, unicodeobject integer overflows
  - Resolves: 470915
  - integer signedness error in the zlib extension module
  - Resolves: 442005
  - off-by-one locale.strxfrm() (possible memory disclosure)
  - Resolves: 235093
  - imageop module heap corruption
  - Resolves: 295971


author: James Antill <james.antill@redhat.com> - 2.4.3-24
changelog:
  - Remove unapproved socket constants and xmlrpclib fixes.
  - Resolves: rhbz#444088
  - Resolves: rhbz#460694


author: James Antill <james.antill@redhat.com> - 2.4.3-23
changelog:
  - Fix gettext problem
  - Resolves: rhbz#444088
  - Add socketmodule constants (bug #436560)
  - Fix xmlrpclib marchal problem (python bug #1739842)
  - Fix fd leak in urllib2
  - Resolves: rhbz#460694


author: Mihai Ibanescu <misa@redhat.com> - 2.4.3-15
changelog:
  - Fixed bug #201434 (distutils.sysconfig is confused by the change to make
    python-devel multilib friendly)


author: Mihai Ibanescu <misa@redhat.com> - 2.4.3-6
changelog:
  - Fixed bug #192592 (too aggressive assertion fails) - SF#1257960
  - Fixed bug #167468 (Doc/tools not included) - added in the python-tools package


author: Peter Jones <pjones@redhat.com> 2.4.1-12
changelog:
  - Fixed bug #169159 (check for argc>0 and argv[0] == NULL, not just
      argv[0][0]='\0')
    Reworked the patch from -8 a bit more.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-10
changelog:
  - Fixed bug #169159 (don't let python core dump if no arguments are passed in)
    Reworked the patch from -8 a bit more.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-7
changelog:
  - Fixed bug #169046 (realpath is unsafe); thanks to 
    Peter Jones <pjones@redhat.com> and Arjan van de Ven <arjanv@redhat.com> for
    diagnosing and the patch.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-2
changelog:
  - Fixed bug #143667 (python should own /usr/lib/python* on 64-bit systems, for
    noarch packages)
  - Fixed bug #143419 (BuildRequires db4 is not versioned)


author: Mihai Ibanescu <misa@redhat.com> 2.4-6
changelog:
  - building the docs from a different source rpm, to decouple bootstrapping
    python from having tetex installed


author: Jeff Johnson <jbj@jbj.org> 2.4-2
changelog:
  - db-4.3.21 returns DB_BUFFER_SMALL rather than ENOMEM (#141994).
  - add Provide: python(abi) = 2.4
  - include msgfmt/pygettext *.pyc and *.pyo from brp-python-bytecompile.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-10
changelog:
  - Fixed bug #77418 (Demo dir not packaged)
  - More tweaking on #19347 (Moved Tools/ under /usr/lib/python2.3/Tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-8
changelog:
  - Fixed bug #129769: Makefile in new python conflicts with older version found
    in old python-devel
  - Reorganized the spec file to get rid of the aspython2 define; __python_ver
    is more powerful.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-7
changelog:
  - Including html documentation for non-i386 arches
  - Fixed #125362 (python-doc html files have japanese character encoding)
  - Fixed #128923 (missing dependency between python and python-devel)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-6
changelog:
  - Fixed #128030 (help() not printing anything)
  - Fixed #125472 (distutils.sysconfig.get_python_lib() not returning the right
    path on 64-bit systems)
  - Fixed #127357 (building python as a shared library)
  - Fixed  #19347 (including the contents of Tools/scripts/ in python-tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-3
changelog:
  - Added an optik.py that provides the same interface from optparse for
    backward compatibility; obsoleting python-optik


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-1
changelog:
  - Updated to 2.3.4-1 with Robert Scheck's help (bug #124764)
  - Added BuildRequires: tix-devel (bug #124918)


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-6
changelog:
  - Correct fix for #122304 from upstream:
    http://sourceforge.net/tracker/?func=detail&atid=105470&aid=931848&group_id=5470


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-4
changelog:
  - Fix for bug #122304 : splitting the domain name fails on 64-bit arches
  - Fix for bug #120879 : including Makefile into the main package

  - Requires XFree86-devel instead of -libs (see bug #118442)


author: Mihai Ibanescu <misa@redhat.com> 2.3-0.2
changelog:
  - Building python 2.3
  - Added more BuildRequires
  - Updated the startup files for modulator and pynche; idle installs its own
    now.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-25
changelog:
  - Fixed bug #84886: pydoc dies when run w/o arguments
  - Fixed bug #84205: add python shm module back (used to be shipped with 1.5.2)
  - Fixed bug #84966: path in byte-compiled code still wrong


author: Jeremy Katz <katzj@redhat.com> 2.2.2-23
changelog:
  - ftp uri's should be able to specify being rooted at the root instead of 
    where you login via ftp (#84692)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-22
changelog:
  - Using newer Japanese codecs (1.4.9). Thanks to 
    Peter Bowen <pzb@datastacks.com> for pointing this out.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-13
changelog:
  - Attempt to look both in /usr/lib64 and /usr/lib/python2.2/site-packages/:
    some work on python-2.2.2-lib64.patch


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-11.7.3
changelog:
  - Fixed bug #82544: Errata removes most tools
  - Fixed bug #82435: Python 2.2.2 errata breaks redhat-config-users
  - Removed .lib64 and - files that get installed after we fix the multilib
    .py files.


author: Jeremy Katz <katzj@redhat.com> 2.2.2-8
changelog:
  - urllib2 didn't support non-anonymous ftp.  add support based on how 
    urllib did it (#80676, #78168)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-7
changelog:
  - Fix bug #79647 (Rebuild of SRPM fails if python isn't installed)
  - Added a bunch of missing BuildRequires found while fixing the
    above-mentioned bug


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.7.3
  - Recompiled for 7.3 (to fix the -lcrypt bug)
  - Fix for the spurious error message at the end of the build (build-requires
    gets confused by executable files starting with """"): make the tests
    non-executable.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-5
  - Fixed configuration patch to add -lcrypt when compiling cryptmodule.c

  2.2.2-4
  - Spec file change from Matt Wilson <msw@redhat.com> to disable linking 
    with the C++ compiler.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.*
  - Merged patch from Karsten Hopp <karsten@redhat.de> from 2.2.1-17hammer to
    use %{_libdir}
  - Added XFree86-libs as BuildRequires (because of tkinter)
  - Fixed duplicate listing of plat-linux2
  - Fixed exclusion of lib-dynload/japanese
  - Added lib64 patch for the japanese codecs
  - Use setup magic instead of using tar directly on JapaneseCodecs


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-2
  - Fix #76912 (python-tools contains idle, which uses tkinter, but there is no
    requirement of tkinter from python-tools).
  - Fix #74013 (rpm is missing the /usr/lib/python2.2/test directory)


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - builds as python2 require a different libdb
  - changed the buildroot name of python to match python2 builds


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-16
changelog:
  - the same, but in builddirs - this will remove them from the 
    docs package, which doesn't look in the buildroot for files.


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-8
changelog:
  - Make files in /usr/bin install side by side with python 1.5 when
  - Drop explicit requirement of db4
    built as python2


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-5
changelog:
  - disable ndbm support, which is db2 in disguise (really interesting things
    can happen when you mix db2 and db4 in a single application)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.11c1
changelog:
  - 2.2 RC 1
  - Don't include the _tkinter module in the main package - it's 
    already in the tkiter packace
  - Turn off the mpzmodule, something broke in the buildroot


author: Matt Wilson <msw@redhat.com> 2.2-0.9b2
changelog:
  - changed DESTDIR to point to / so that distutils will install dynload
    modules properly in the installroot


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.4a4
changelog:
  - 2.2a4
  - Enable UCS4 support
  - Enable IPv6
  - Provide distutils
  - Include msgfmt.py and pygettext.py


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix the "requires" clause, it lacked a space causing problems
  - use %{_tmppath}
  - don't define name, version etc
  - add the available patches from the Python home page


author: Matt Wilson <msw@redhat.com>
changelog:
  - modify all files to use "python2.0" as the intrepter
  - don't build the Expat bindings
  - build against db1


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - updated for 2.0c1
  - build audioop, imageop, and rgbimg extension modules
  - include xml.parsers subpackage
  - add test.xml.out to files list


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - Version 2 of 2.0b1
  - Make the package relocatable.  Thanks to Suchandra Thapa.
  - Exclude Tkinter from main RPM.  If it is in a separate RPM, it is
    easier to track Tk releases.


author: Tomas Heinrich <theinric@redhat.com> 3.22.1-1
changelog:
  - rebase to rsyslog-3.22.1 
  - backport 'MaxOpenFiles' configuration directive
  - add support for arbitrary number of open file descriptors
    Resolves: #473419, #475217, #488068, #499186, #519192
    Resolves: #519201, #519203


author: Peter Vrabec <pvrabec@redhat.com> 1.17.1-1
changelog:
  - upstream bug fix release
  - include html docs (#248712)
  - make "-r" option compatible with sysklogd config (248982)


author: Eric Sandeen <esandeen@redhat.com> 1.39-23.1
changelog:
  - blkid: handle stale entries in blkid cache (#637920)
  - e2fsck: mark sparse journal as invalid (#580671, #621836)


author: Eric Sandeen <esandeen@redhat.com> 1.39-13
changelog:
  - New uuidd subpackage for unique time-based UUID generation (#233471)
  - Fix potential uninitialized reference in e2fsck (#428707)


author: Eric Sandeen <esandeen@redhat.com> 1.39-11
changelog:
  - e2fsck: Check all journal blocks for validity (#241222)
  - wrap a couple headers to fix multilib issues (#270441)


author: Eric Sandeen <esandeen@redhat.com> 1.39-9
changelog:
  - Many coverity-found potential leaks, segfaults, etc (#239354)
  - Fix debugfs segfaults when no fs open (#208416, #209330)
  - Avoid recursive loops in logdump due to symlinks in /dev (#210371)
  - Don't write changes to the backup superblocks by default (#229561)
  - Correct byteswapping for fast symlinks with xattrs (#232663)
  - e2fsck: added sanity check for xattr validation (#230193)


author: Peter Jones <pjones@redhat.com> - 1.39-8
changelog:
  - Prefer the labels that dosfsutils writes, rather than various other kinds of
    labels on FAT/VFAT
    Related: rhbz#218957


author: Thomas Woerner <twoerner@redhat.com> - 1.39-1
changelog:
  - new version 1.39
  - dropped ext2online, because resize2fs is now able to do online resize
  - spec file cleanup
  - enabled checks for build


author: Thomas Woerner <twoerner@redhat.com> 1.38-2.1
changelog:
  - fixed file conflicts between 32bit and 64bit packages (#168815)
  - fixed mklost+found crashes with buffer overflow (#157773)
    Thanks to Arjan van de Ven for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.38-2
changelog:
  - splitted up libs from main package, into a new e2fsprogs-libs package
  - fixed requires and prereqs


author: Thomas Woerner <twoerner@redhat.com> 1.38-1
changelog:
  - new version 1.38
  - Close File descriptor for unregognized devices (#159878)
    Thanks to David Milburn for the patch.
    Merged from RHEL-4
  - enable tune2fs to set and clear feature resize_inode (#167816)
  - removed outdated information from ext2online man page (#164383)


author: Karel Zak <kzak@redhat.com> - 1.37-5
changelog:
  - fix swsuspend partition detection (#165863)
  - fix revalidate from ext2 to ext3 (#162927)
  - fix vfat without magic detection (#161873)


author: Thomas Woerner <twoerner@redhat.com> 1.37-2
changelog:
  - upstream fixes 1.1589, 1.1590 and 1.1591:
  - add include of stdlib.h to fix a core dump bug on IA64
  - ignore environment variables in blkid and ext2fs for setuid and setguid
    programs
  - no LOW_DTIME checks if the superblock last mount time looks insane


author: Stephen C. Tweedie <sct@redhat.com>
changelog:
  - Disable offline resize for now: resize2fs is incompatible with
    online resize, and can result in corrupt filesystems.


author: Stephen C. Tweedie <sct@redhat.com>
changelog:
  - More byte-order fixes for mke2fs and ext2online
  - Disable fallback to old-style resize if new kernel resize code is not
    available


author: Phil Knirsch <pknirsch@redhat.com> 1.35-2
changelog:
  - Updated s390 patch. It's not not arch dependant anymore but only changes the
    default blocksizes when necessary.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update the mainframe patch to its current version, but disable it
    until the change also properly supports SCSI and is usable also
    for non-mainframe archs


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 1.35-pre
  - use ldconfig to create symlinks to shared libs
  - remove some cruft from the spec file
  - man3 is now part of the devel rpm


author: Phil Knirsch <pknirsch@redhat.com> 1.32-7
changelog:
  - Fixed problem with mke2fs and default blocksize small partitions on dasd
  - Disabled Florians patch for now as it's a little incomplete. :-)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 1.30, leave out already integrated patches
  - clean up spec file
  - also package some missing files


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.23-4
changelog:
  - Fix headers of libext2fs - it wasn't possible to include them from
    C++ code (using private as a variable name isn't a good idea)
  - Fix build with autoconf 2.5x


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 1.23. This was requested to support the "auto" fstype
    to ease ext2 <-> ext3 conversions.


author: Alan Eldridge <alane@geeksrus.net>
changelog:
  - Added 16K buffer for reading /proc/partitions in 
    get_label_by_device.c to correct problems with LABEL= in fsck 
    caused by not reading /proc/partitions in a single read() call;
    if somebody has a "partitions" > 16K, it may still fail ...


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-6.2
changelog:
  - fix insecure dropping of priviledges in pam_xauth
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-5
changelog:
  - add group audio to sound devices when no console user owns them (#244688)
  - resolve pam access origin entry only when it makes sense (#459057)
  - silence the strict-aliasing warnings (#462647)
  - pam_keyinit: save old uid so we can revert to it (#466411)
  - pam_filter: make it use pty subsystem (#473970)
  - add pam_faildelay module to be able to set the failure delay (#476217)
  - pam_tty_audit: fix double free when open_only option is used (#476833)
  - allow root to change users passwords when helper is needed (#476904)
  - make package's requires more correct (#497570)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-4
changelog:
  - add pam_tty_audit module (#244352)
  - pam_cracklib: additional optional checks for password quality (#438994)
  - pam_lastlog: display failed login attempts if requested (#438990)
  - pam_unix: do not check new passwords through cracklib (#448860)
  - pam_unix: clear PAM_AUTHTOK item if new password is bad (#443872)
  - comment in the limits.conf manpage that rss limit is ignored (#459624)
  - allow larger entries in pammodutil_get functions (#445355)
  - pam_tally: do not leak fds in tally_check (#457024)
  - pam_loginuid: use correct format when printing uid type (#460263)
  - pam_rhosts_auth: correct test for IP address (#461917)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.27
changelog:
  - support sha256 and sha512 password hashes (#427389)
  - fixed in operator of pam_succeed_if module (#295151)
  - fixed audit option of pam_tally and pam_tally2 (#328281)
  - do not free putenved pointer in pam_xauth (#402391)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.26
changelog:
  - removed realtime default limits (#240123) from the package as
    it caused regression on machines with nonexistent realtime group


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.25
changelog:
  - added and improved translations (#219124)
  - adjusted the default limits for realtime users (#240123)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.23
changelog:
  - pam_unix: truncated MD5 passwords in shadow shouldn't match (#219258)
  - pam_limits: add limits.d support (#232700)
  - pam_limits, pam_time, pam_access: add auditing of failed logins (#232993)
  - pam_namespace: expand $HOME even when appended with text (#237163)
    original patch by Ted X. Toth
  - add some default limits for users in realtime group (#240123)
  - CVE-2007-3102 - prevent audit log injection through user name (#243204)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.21
changelog:
  - pam_namespace: better document behavior on failure (#237249)
  - pam_unix: split out passwd change to a new helper binary (#236316)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.18
changelog:
  - pam_console: always decrement use count (#233581)
  - pam_namespace: fix parsing config file with unknown users (#234513)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.17
changelog:
  - pam_namespace: unmount poly dir for override users (#229689)
  - pam_namespace: use raw context for poly dir name (#227345)
  - pam_namespace: truncate long poly dir name (append hash) (#230120)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.14
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.7
changelog:
  - No shortcut on Password: in ja locale (#218271)
  - Revert to old euid and not ruid when setting euid in pam_keyinit (#219486)
  - Fix no answer to select_context question (#213812)
  - Rename selinux-namespace patch to namespace-level


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.4
changelog:
  - move setgid before setuid in pam_keyinit (#212329)
  - make username check in pam_unix consistent with useradd (#212153)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.1
changelog:
  - preserve effective uid in namespace.init script (LSPP for newrole)
  - include /var/log/faillog and tallylog to filelist (#209646)
  - add ids to .xml docs so the generated html is always the same (#210569)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-2
changelog:
  - silence pam_succeed_if in default system-auth (#205067)
  - round the pam_timestamp_check sleep up to wake up at the start of the
    wallclock second (#205068)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-1
changelog:
  - upgrade to new upstream version, as there are mostly bugfixes except
    improved documentation
  - add support for session and password service for pam_access and
    pam_succeed_if
  - system-auth: skip session pam_unix for crond service


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-7
changelog:
  - revoke keyrings properly when pam_keyinit called as root (#201048)
  - pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails (#197748)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-6
changelog:
  - revoke keyrings properly when pam_keyinit called more than once (#201048)
    patch by David Howells


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-3
changelog:
  - don't report error in pam_selinux for nonexistent tty (#188722)
  - add pam_keyinit to the default system-auth file (#198623)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-1
changelog:
  - updated to a new upstream release
  - added service as value to be matched and list matching to
    pam_succeed_if
  - namespace.init was missing from EXTRA_DIST


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-5
changelog:
  - updated pam_namespace with latest patch by Janak Desai
  - merged pam_namespace patches
  - added buildrequires libtool
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-3
changelog:
  - use md5 implementation from pam_unix in pam_namespace
  - pam_namespace should call setexeccon only when selinux is enabled


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-2
changelog:
  - pam_console_apply shouldn't access /var when called with -r (#191401)
  - actually apply the large-uid patch
  - don't build hmactest in pam_timestamp so openssl-devel is not required
  - add missing buildrequires (#191915)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-1
changelog:
  - upgrade to new upstream version
  - make pam_console_apply not dependent on glib
  - support large uids in pam_tally, pam_tally2


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-5
changelog:
  - the namespace instance init script is now in /etc/security (#190148)
  - pam_namespace: added missing braces (#190026)
  - pam_tally(2): never call fclose twice on the same FILE (from upstream)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-4
changelog:
  - fixed console device class for irda (#189966)
  - make pam_console_apply fail gracefully when a class is missing


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-3
changelog:
  - added pam_namespace module written by Janak Desai (per-user /tmp
  support)
  - new pam-redhat modules version


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-2
changelog:
  - added try_first_pass option to pam_cracklib
  - use try_first_pass for pam_unix and pam_cracklib in
    system-auth (#182350)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-1
changelog:
  - new upstream version
  - updated db4 to 4.3.29
  - added module pam_tally2 with auditing support
  - added manual pages for system-auth and config-util (#179584)


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-2
changelog:
  - fix dangling symlinks in -devel (#175929)
  - link libaudit only where necessary
  - actually compile in audit support


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-1
changelog:
  - support netgroup matching in pam_succeed_if
  - upgrade to new release
  - drop pam_pwdb as it was obsolete long ago
  - we don't build static libraries anymore


author: Tomas Mraz <tmraz@redhat.com> 0.80-13
changelog:
  - fixed CAN-2005-2977 unix_chkpwd should skip user verification only if
    run as root (#168181)
  - link pam_loginuid to libaudit
  - support no tty in pam_access (#170467)
  - updated audit patch (by Steve Grubb)
  - the previous pam_selinux change was not applied properly
  - pam_xauth: look for the xauth binary in multiple directories (#171164)


author: Tomas Mraz <tmraz@redhat.com> 0.80-9
changelog:
  - don't include ps and pdf docs (#168823)
  - new common config file for configuration utilities
  - remove glib2 dependency (#166979)


author: Tomas Mraz <tmraz@redhat.com> 0.80-8
changelog:
  - process limit values other than RLIMIT_NICE correctly (#168790)
  - pam_unix: always honor nis flag on password change (by Aaron Hope)


author: Tomas Mraz <tmraz@redhat.com> 0.80-2
changelog:
  - fixed module tests so the pam doesn't require itself to build (#163502)
  - added buildprereq for building the documentation (#163503)
  - relaxed permissions of binaries (u+w)


author: Tomas Mraz <tmraz@redhat.com> 0.80-1
changelog:
  - upgrade to new upstream sources
  - removed obsolete patches
  - pam_selinux module shouldn't fail on broken configs unless
    policy is set to enforcing (Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.79-10
changelog:
  - add the Requires dependency on audit-libs (#159885)
  - pam_loginuid shouldn't report error when /proc/self/loginuid
    is missing (#159974)


author: Tomas Mraz <tmraz@redhat.com> 0.79-9
changelog:
  - update the pam audit patch to support newest audit library,
    audit also pam_setcred calls (Steve Grubb)
  - don't use the audit_fd as global static variable
  - don't unset the XAUTHORITY when target user is root


author: Tomas Mraz <tmraz@redhat.com> 0.79-7
changelog:
  - pam_xauth: unset the XAUTHORITY variable on error, fix
    potential memory leaks
  - modify path to IDE floppy devices in console.perms (#155560)


author: Tomas Mraz <tmraz@redhat.com> 0.79-5
changelog:
  - added auditing patch by Steve Grubb
  - added cleanup patches for bugs found by Steve Grubb
  - don't clear the shadow option of pam_unix if nis option used


author: Tomas Mraz <tmraz@redhat.com> 0.79-3
changelog:
  - make pam_unix LSB 2.0 compliant even when SELinux enabled
  - #88127 - change both local and NIS passwords to keep them in sync,
    also fix a regression in passwd functionality on NIS master server


author: Tomas Mraz <tmraz@redhat.com> 0.78-9
changelog:
  - fix wrong logging in pam_console handlers
  - add executing ainit handler for alsa sound dmix
  - #147879, #112777 - change permissions for dri devices


author: Tomas Mraz <tmraz@redhat.com> 0.78-8
changelog:
  - remove ownership and permissions handling from pam_console call
    pam_console_apply as a handler instead


author: Tomas Mraz <tmraz@redhat.com> 0.78-6
changelog:
  - add functionality for running handler executables from pam_console
    when console lock was obtained/lost
  - removed patches merged to pam-redhat


author: Tomas Mraz <tmraz@redhat.com> 0.78-5
changelog:
  - echo why tests failed when rebuilding
  - fixed some warnings and errors in pam_console for gcc4 build
  - improved parsing pam_console config file


author: Tomas Mraz <tmraz@redhat.com> 0.78-1
changelog:
  - update to Linux-PAM-0.78
  - #140451 parse passwd entries correctly and test for failure
  - #137802 allow using pam_console for authentication


author: Tomas Mraz <tmraz@redhat.com> 0.77-66
changelog:
  - #77646 log failures when renaming the files when changing password
  - Log failure on missing /etc/security/opasswd when remember option is present


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - #87628 pam_timestamp remembers authorization after logout
  - #116956 fixed memory leaks in pam_stack


author: Tomas Mraz <tmraz@redhat.com> 0.77-63
changelog:
  - Fix checking of group Development/Debug syntax in pam_limits
  - Drop fencepost patch as it was already fixed 
    by upstream change from 0.75 to 0.77
  - Fix brokenshadow patch


author: Tomas Mraz <tmraz@redhat.com> 0.77-61
changelog:
  - #129328 pam_env shouldn't abort on missing /etc/environment
  - #126985 pam_stack should always copy the conversation function 
  - #127524 add /etc/security/opasswd to files


author: Tomas Mraz <tmraz@redhat.com> 0.77-56
changelog:
  - #75454 fixed locking when changing password
  - #127054 
  - #125653 removed unnecessary getgrouplist call
  - #124979 added quiet option to pam_succeed_if


author: Dan Walsh <dwalsh@redhat.com> 0.77-19.sel
changelog:
  - Change unix_chkpwd to handle unix_passwd and unix_acct
  - This eliminates the need for pam modules to have read/write access to /etc/shadow.


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-15
changelog:
  - don't install _pam_aconf.h -- apps don't use it, other PAM headers which
    are installed don't use it, and its contents may be different for arches
    on a multilib system
  - check for linkage problems in modules at %install-time (kill #107093 dead)
  - add buildprereq on flex (#101563)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_pwdb.so link with libnsl again so that it loads (#107093)
  - remove now-bogus buildprereq on db4-devel (we use a bundled copy for
    pam_userdb to avoid symbol collisions with other db libraries in apps)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_succeed_if: fix thinko in argument parsing which would walk past the
    end of the argument list


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-0
changelog:
  - update to 0.77 upstream release
    - pam_limits: limits now affect root as well
    - pam_nologin: returns PAM_IGNORE instead of PAM_SUCCESS unless "successok"
      is given as an argument
    - pam_userdb: correctly return PAM_AUTH_ERR instead of PAM_USER_UNKNOWN when
      invoked with the "key_only" argument and the database has an entry of the
      form "user-<wrongpassword>"
  - use a bundled libdb for pam_userdb.so because the system copy uses threads,
    and demand-loading a shared library which uses threads into an application
    which doesn't is a Very Bad Idea


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-49
changelog:
  - modify calls to getlogin() to check the directory of the current TTY before
    searching for an entry in the utmp/utmpx file (#98020, #98826, CAN-2003-0388)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-46
changelog:
  - pam_xauth: reintroduce ACL support, per the original white paper
  - pam_xauth: default root's export ACL to none instead of everyone


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-45
changelog:
  - create /lib/security, even if it isn't /%{_lib}/security, because we
    can't locate /lib/security/$ISA without it (noted by Arnd Bergmann)
  - clear out the duplicate docs directory created during %install


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-44
changelog:
  - fix syntax errors in pam_console's yacc parser which newer bison chokes on
  - forcibly set FAKEROOT at make install time


author: Elliot Lee <sopwith@redhat.com> 0.75-42
changelog:
  - Since cracklib-dicts location will not be correctly detected without 
    that package being installed, add buildreq for cracklib-dicts.
  - Add patch57: makes configure use $LIBNAME when searching for cracklib 
    dicts, and error out if not found.


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-40
changelog:
  - pam_timestamp_check: check that stdio descriptors are open before we're
    invoked
  - add missing chroot.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-36
changelog:
  - pam_timestamp: chown intermediate directories when creating them
  - pam_timestamp_check: add -d flag to poll


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-31
changelog:
  - libpam_misc: fix possible infinite loop in misc_conv (#62195)
  - pam_xauth: fix cases where DISPLAY is "localhost:screen" and the xauth
    key is actually stored using the system's hostname (#61524)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-20
changelog:
  - pam_stack: fix some memory leaks (reported by Fernando Trias)
  - pam_chroot: integrate Owl patch to report the more common causes of failures


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-19
changelog:
  - fix a bug in the getpwnam_r wrapper which sometimes resulted in false
    positives for non-existent users


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-16
changelog:
  - pam_xauth: always return PAM_SUCCESS or PAM_SESSION_ERR instead of PAM_IGNORE,
    matching the previous behavior (libpam treats PAM_IGNORE from a single module
    in a stack as a session error, leading to false error messages if we just
    return PAM_IGNORE for all cases)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-15
changelog:
  - reorder patches so that the reentrancy patch is applied last -- we never
    came to a consensus on how to guard against the bugs in calling applications
    which this sort of change addresses, and having them last allows for dropping
    in a better strategy for addressing this later on


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_rhosts: allow "+hostname" as a synonym for "hostname" to jive better
    with the hosts.equiv(5) man page
  - use the automake install-sh instead of the autoconf install-sh, which
    disappeared somewhere between 2.50 and now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_tally: don't try to read past the end of faillog -- it probably contains
    garbage, which if written into the file later on will confuse /usr/bin/faillog


