# changelog

author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17-rc6-git2
  - Add MyMusix PD-205 to the unusual USB quirk list.
  - Silence noisy unimplemented 32bit syscalls on x86-64.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - rebase xen to linux-2.6 cset 27412
  - rebase xen to linux-2.6-xen cset 22608
  - rebase HV cset 10314


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17rc6. Special 6/6/6 edition, what could go wrong?
  - Add a kdump kernel for PPC64 (Don Zickus)
  - Enable SCHED_STATS


author: Johnny Hughes <johnny@centos.org>
changelog:
  - Initial use in CentOS-5
  - Added paevar and modified paevar, smpvar, xenvar, xdumpvar to follow
    EL5 and not FC6 naming conventions.


author: Akemi Yagi <toracat@centos.org> [2.6.18-348.6.1.el5.centos.plus]
changelog:
  - Roll in CentOS Branding
  - added new config files for i686, x86_64 with extra features turned on
    including all Network Adapters, all Video4Linux adapers, all Radio devices,
    JFS, ReiserFS, NCP (Novell partitions) and LDM (Windows Dynamic
    Partitions) BusLogic support.
  - removed the rhel and olpc sections at the beginning of the prep section
    that apply generic templates
  - added reiserfs patch (bug 3156)
  - Note: NTFS is broken in 5.3 (kernels >=2.6.18-128), therefore is not enabled.
    see bug 3363 bugzilla 481495
  - Note: FUSE is enabled in distro kernel as of 5.4 (kernels >=2.6.8.164)
  - Note: Intel wiki LEDS is enabled in distro kernel in 5.4 (bug 3544)
  - Note: Do not enable CONFIG_RTxxxx_LEDS=y ; one or more of them will
    cause compilation to fail.
  - Note: INFINIBAND_AMSO1100 disabled in 5.4 because enabling it leads to a
    comlilation error.
  - added acpi-early-pdc patches (bug 4139)
  - added alps-E6400.patch (bug 4192)
  - added usb-allow-restart.patch (bug 4196)
  - enabled "cx88-dvb.ko" and related modules (bug 4365)
  - replaced bug4192 patch with the one from upstream [bugzilla 564086]
  - enabled irDA modules (bug 4683)
  - three cplus centos patches are now in 5.6, therefore removed.
  - added jfs patch (bug 4747)
  - added sata_via patch (bug 4851)
  - added ata-sch-slave.patch (bug 4923)
  - Two centos patches are now in 5.8, therefore removed.
  - pata_acpi is now disabled (bug 5537)
  - add a patch snd_pci_quirk_lookup-bug6214.patch [bug#6214]
  - added readpage over i_node patch (bug#6351)
  - added acpi-video-device-notify patch (bug 6415)


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.6.1.el5]
changelog:
  - [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [953435 947732]
  - [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [953435 947732]
  - [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [954296 948317]
  - [fs] nfs: Fix bugs on short read (Sachin Prabhu) [952098 924011]
  - [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] introduce xzalloc() & Co (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
  - [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
  - [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.4.1.el5]
changelog:
  - [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
  - [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
  - [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
  - [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
  - [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
  - [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
  - [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
  - [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
  - [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
  - [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
  - [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
  - [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
  - [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
  - [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
  - [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.3.1.el5]
changelog:
  - [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
  - [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.16.1.el5]
changelog:
  - [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
  - [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
  - [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
  - [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
  - [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
  - [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.15.1.el5]
changelog:
  - [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [976441 853145]
  - [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [976441 853145]
  - [fs] nfs: define function to update nfsi->cache_change_attribute (Scott Mayhew) [976441 853145]
  - [net] af_key: fix info leaks in notify messages (Jiri Benc) [980999 981000] {CVE-2013-2234}
  - [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981222 981224] {CVE-2013-2237}
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981556 981557] {CVE-2013-2232}
  - [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980141 980142] {CVE-2013-2224}
  - [x86_64] Early segment setup for VT (Paolo Bonzini) [979920 978305]
  - [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971245 971246] {CVE-2013-2147}
  - [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973103 973104] {CVE-2013-2164}
  - [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [972583 965359]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.14.1.el5]
changelog:
  - [net] Fix panic for vlan over gre via tun (Thomas Graf) [983452 981337]
  - [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [983628 865095]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.13.1.el5]
changelog:
  - [net] sctp: Disallow new connection on a closing socket (Daniel Borkmann) [976569 974936] {CVE-2013-2206}
  - [net] sctp: Use correct sideffect command in dup cookie handling (Daniel Borkmann) [976569 974936] {CVE-2013-2206}
  - [net] sctp: deal with multiple COOKIE_ECHO chunks (Daniel Borkmann) [976569 974936] {CVE-2013-2206}
  - [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [980811 957604]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.12.1.el5]
changelog:
  - Revert: [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.11.1.el5]
changelog:
  - Revert: [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
  - Revert: [x86-64] non lazy sleazy fpu implementation (Prarit Bhargava) [948187 731531]
  - Revert: [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
  - Revert: [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
  - Revert: [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.10.1.el5]
changelog:
  - [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955600 955601] {CVE-2013-3224}
  - [net] Bluetooth: HCI & L2CAP information leaks (Jacob Tanenbaum) [922415 922416] {CVE-2012-6544}
  - [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
  - [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
  - [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
  - [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [971872 872531]
  - [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [971872 872531]
  - [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [958021 864648]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.9.1.el5]
changelog:
  - [net] tg3: buffer overflow in VPD firmware parsing (Jacob Tanenbaum) [949939 949940] {CVE-2013-1929}
  - [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955222 955223] {CVE-2013-3222}
  - [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]
  - [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
  - [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
  - [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
  - [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
  - [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
  - [net] llc: Fix missing msg_namelen update in llc_ui_recvmsg() (Jesper Brouer) [956096 956097] {CVE-2013-3231}
  - [net] tipc: fix info leaks via msg_name in recv_msg/recv_stream (Jesper Brouer) [956148 956149] {CVE-2013-3235}
  - [net] Bluetooth: RFCOMM Fix info leak in ioctl(RFCOMMGETDEVLIST) (Radomir Vrbovsky) [922406 922407] {CVE-2012-6545}
  - [net] Bluetooth: RFCOMM - Fix info leak via getsockname() (Radomir Vrbovsky) [922406 922407] {CVE-2012-6545}
  - [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
  - [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}


author: Akemi Yagi <toracat@centos.org> [2.6.18-348.el5.centos.plus]
changelog:
  - Roll in CentOS Branding
  - added new config files for i686, x86_64 with extra features turned on
    including all Network Adapters, all Video4Linux adapers, all Radio devices,
    JFS, ReiserFS, NCP (Novell partitions) and LDM (Windows Dynamic
    Partitions) BusLogic support.
  - removed the rhel and olpc sections at the beginning of the prep section
    that apply generic templates
  - added reiserfs patch (bug 3156)
  - Note: NTFS is broken in 5.3 (kernels >=2.6.18-128), therefore is not enabled.
    see bug 3363 bugzilla 481495
  - Note: FUSE is enabled in distro kernel as of 5.4 (kernels >=2.6.8.164)
  - Note: Intel wiki LEDS is enabled in distro kernel in 5.4 (bug 3544)
  - Note: Do not enable CONFIG_RTxxxx_LEDS=y ; one or more of them will
    cause compilation to fail.
  - Note: INFINIBAND_AMSO1100 disabled in 5.4 because enabling it leads to a
    comlilation error.
  - added acpi-early-pdc patches (bug 4139)
  - added alps-E6400.patch (bug 4192)
  - added usb-allow-restart.patch (bug 4196)
  - enabled "cx88-dvb.ko" and related modules (bug 4365)
  - replaced bug4192 patch with the one from upstream [bugzilla 564086]
  - enabled irDA modules (bug 4683)
  - three cplus centos patches are now in 5.6, therefore removed.
  - added jfs patch (bug 4747)
  - added sata_via patch (bug 4851)
  - added ata-sch-slave.patch (bug 4923)
  - Two centos patches are now in 5.8, therefore removed.
  - pata_acpi is now disabled (bug 5537)


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.18.1.el5]
changelog:
  - [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [1005239 987539]
  - [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970874 970875] {CVE-2013-2141}
  - [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987647 987648] {CVE-2013-4162}
  - [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849735 849736] {CVE-2012-3511}
  - [fs] autofs: remove autofs dentry mount check (Ian Kent) [1001488 928098]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.17.1.el5]
changelog:
  - [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [999819 995961]
  - [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [983864 956322]
  - [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [983864 956322]
  - [net] be2net: disable TX in be_close() (Ivan Vecera) [983864 956322]
  - [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [983864 956322]
  - [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [983864 956322]
  - [net] be2net: Fixed memory leak (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [983864 956322]
  - [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [983864 956322]
  - [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [983864 956322]
  - [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix Endian (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [983864 956322]
  - [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [983864 956322]
  - [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [983864 956322]
  - [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [983864 956322]
  - [net] be2net: cleanup be_vid_config() (Ivan Vecera) [983864 956322]
  - [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [983864 956322]
  - [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [983864 956322]
  - [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [983864 956322]


author: 17:10:14 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.3-1)
   * Fixed a race condition that could cause us to continue to traverse a bio
     after it was freed. (led to an OOPS)
   * Fixed a race condition that could cause us to use members of an ee, after
     it was freed. (led to various weirdness)
   * Language fixes for the man pages.
   * The drbdsetup commands (events, wait-connect,...) release the lock now.
   * Minor fixes and updates to the user land tools and to the peer outdater.


author: 21:32:39 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.2-1)
   * Removed a bug that could cause an OOPS in drbd_al_to_on_disk_bm()
   * Improved the robustness of the UUID based algorithm that decides
     about the resync direction.
   * Fixed the error handling in case a the open() of a backing
     blockdevice fails.
   * Fixed a race condition that could cause a "drbdadm disconnect" to hang.
   * More verbosity in we can not claim a backing block device.
   * More verbosity and paranoia in the bitmap area.
   * On some vendor kernels 8.0.1 did not load because of kzalloc. fixed.
   * Fault injection can now not only be turned on or off, but can be 
     enabled on a per device basis.
   * Fixed the scripts and files needed to build drbd into a kernel.


author: 10:10:26 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.1-1)
   * Fixed some race conditions that could trigger an OOPS when the loca disk
     failes and DRBD detaches itself from the failing disk.
   * Added a missing call to drbd_try_outdate_peer().
   * LVM's LVs expose ambiguous queue settings. When a RAID-0 (md) PV is
     used the present a segment size of 64k but at the same time allow only
     8 sectors. Fixed DRBD to deal with that fact corretly.
   * New option "always-asbp" to also use the after-after-split-brain-policy
     handlers, even it is not possible to determine from the UUIDs that
     the data of the two nodes was related in the past.
   * More verbosity in case a bio_add_page() fails.
   * Replaced kmalloc()/memset() with kzmalloc(), and a wrapper for older kernls
   * A fast version of drbd_al_to_on_disk_bm(). This is necessary for short
     (even sub-second) switchover times while having large "al-extents" settings.
   * Fixed drbdadm's array overflows (of on stack objects)
   * drbdsetup can now dump its usage in a XML format
   * New init script for gentoo
   * Fixed Typos in the usage of /proc/sysrq-trigger in the example config.


author: 17:30:23 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0rc2-1)
   * Added the well known automagiacally adjust drbd_config.h to
     make drbd compile on every by vendor's backports defaced 
     kernel. ( Linux-2.6.x only of course )
   * Fixed races with starting and finishing resync processes 
     while heavy application IO is going on.
   * Ported DRBD to the new crypto API (and added a emulation of the
     now API on top of the old one for older 2.6.x kernels)
   * Code to perform better on ethernet networks with jumbo
     frames.
   * Bugfixes to our request code (race conditions).
   * Every error code that is returned by drbdsetup has a 
     textual description by now.


author: 15:19:10 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0rc1-1)
   * The drbd-peer-outdater got updated to work in multi node heartbeat
     clusters. (But we still not suceeded to get this into Heartbeat's
     repository accepted.)
   * Fixed resync decission after a crash in a pri-pri cluster.
   * Implemented the ping-timeout option for "sub-second" failover clusters.
   * Implemented all the "violently" options in the reconnect handling.
   * Updated man pages of drbd.conf and drbdsetup.
   * Removed the "self-claiming" on secondary nodes.
   * Fixed an uncountable number of bugs.


author: 15:20:54 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0pre6-1)
   * All panic() calls where removed from DRBD.
   * IO errors while accessing the backing storage device are now handled
     correct.
   * Conflict detection for two primaries is in place and tested.
   * More tracing stuff
   * Lots of bugs found and fixed


author: 22:03:54 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0pre5-1)
   * The request code was completely rewritten.
   * The write conflict detection code for primary-primary is currently
     broken, but will be fixed soon.
   * drbdsetup is no longer based on IOCTL but works now via
     netlink/connector.
   * drbd_panic() is on its way out.
   * A runtime configurable tracing framework got added.
   * A lot of effort was put into finding and fixing bugs.


author: 12:04:41 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0pre4-1)
   * Added the "drbd-peer-outdater" heartbeat plugin.
   * New ("cluster wide") state changes. (Cluster wide serialisation of
     major state changes, like becomming primary, invalidateing a disk etc...)
   * Write requests are now sent by the worker instead out of the process's
     context that calls make_request().
   * The worker thread no longer gets restarted upon loss of connection.
   * A testsuite developed by students of 'FH Hagenberg' was added.


author: 13:46:18 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0pre3-1)
   * Now it works on device mapper (LVM) as well as on "real" block devices.
   * Finally (after years) a sane "drbdadm adjust" imprementation, which is
     really really robust.
   * Fixes for 64bit kernel / 32 bit userland environments
   * Fixes in the sys-v init script
   * Renamed "--do-what-I-say" to "--overwrite-data-of-peer". Hopefully
     people now understand what this option does.


author: 17:53:56 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0-pre2-1)
   * removed the "on-disconnect" and "split-brain-fix" config options and
     added the "fencing" config option instead.
   * Updated all manpages to cover drbd-8.0
   * /proc/drbd shows the whole drbd_state_t, as well the logging of state
     changes shows every field of drbd_state_t now.
   * Deactivated most of the TCQ code for now, since it changed again
     in the mainline kernel.
   * Minor other fixes.


author: 11:37:56 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0_pre1-1)
   * Removed support for Linux-2.4.x
   * Cleanup of the wire protocol.
   * Added optional peer authentication with a shared secret.
   * Consolidated state changes into a central function.
   * Improved, tunable after-split-brain recovery strategies.
   * Always verify all IDs used in the protocol that are used as pointers.
   * Introduced the "outdate" disk state, and commands for managing it.
   * Introduced the "drbdmeta" command, and require the user to create
     meta-data explicitly.
   * Support for primary/primary (for OCFS2, GFS...)
   * Replaced the sync-groups with the sync-after mechanism.
   * The "common" section in the configuration file.
   * Replaced the generation counters (GCs) with data-generation-UUIDs
   * Improved performance by using Linux-2.6's BIOs with up to 32k per
     IO request. Before we transferred only up to 4k per IO request.
   * A Warning if the disk sizes are more than 10% different.
   * A connection teardown packet to differentiate between a crash
     of the peer and a peer that is shut down gracefully.
   * External imposable SyncPause states, to serialize DRBD's resynchronisation
     with the resynchronisation of backing storage's RAID configurations.
   * Backing storage can be hot added to disk less nodes.
   * Prepared for advanced integration to Heartbeat-2.0
   * Changed internal APIs so that missed writes of the meta-data super
     block are reported as they happen.
   * The http://usage.drbd.org sub project.
   * Rewrote the scanner/parser of drbd.conf. 10 times smaller/faster and
     easier to maintain.
   * Asynchronous meta-data IO [ Code drop from the DRBD+ branch ]


author: Johnny Hughes <johnny@centos.org> - 2:2.3.3.0.1-6.el5.centos.plus
changelog:
  - Added PGSQL support
  - bumped up the release by adding .0.1 to ensure this package is newer than the one in base


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.3.3-5
changelog:
  - Packaged example scripts
    Resolves: rhbz#251677
  - Fixed recipient duplicate elimination
    Resolves: rhbz#474541
  - Compiled with mysql support
    Resolves: rhbz#502412
  - Clarified documentation about reject_invalid_helo_hostname
    Resolves: rhbz#514948
  - Fixed milter communication if single header is larger than 64k
    Resolves: rhbz#617069
  - Improved init script to check for PID
    Resolves: rhbz#645348
  - Fixed mailq, newaliases, sendmail, aliases man pages display
    Resolves: rhbz#664627


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.3-2.2
changelog:
  - fixed postfix privilege problem with symlinks in the mail spool directory
    (CVE-2008-2936)
    Resolves: rhbz#456718


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.2-1
changelog:
  - new version 2.3.2 with major upstream fixes:
    - corrupted queue file after a request to modify a short message header
    - panic after spurious Milter request when a client was rejected
    - maked the Milter more tolerant for redundant "data cleanup" requests
  - applying pflogsumm-conn-delays-dsn-patch from postfix tree to pflogsumm


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.10-1
changelog:
  - new version 2.2.10
  - added option LDAP_DEPRECATED to support deprecated ldap functions for now
  - fixed build without pflogsumm support (#188470)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.5-2.1
changelog:
  - replaced postconf and postalias call in initscript with newaliases (#156358)
  - fixed initscripts messages (#155774)
  - fixed build problems when sasl is disabled (#164773)
  - fixed pre-definition of mailbox_transport lmtp socket path (#122910)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.0-1
changelog:
  - new version 2.2.0
  - cleanup of spec file: removed external TLS and IPV6 patches, removed 
    smtp_sasl_proto patch
  - dropped samples directory till there are good examples again (was TLS and
    IPV6)
  - v2.2.0 fixes code problems: #132798 and #137858


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-5.1
changelog:
  - fixed open relay bug in postfix ipv6 patch: new version 1.26 (#146731)
  - fixed permissions on doc directory (#147280)
  - integrated fixed fqdn patch from Joseph Dunn (#139983)


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2.2
changelog:
  - automated postalias call in init script
  - removed postconf call from spec file: moved changes into patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2
changelog:
  - switched over to system aliases file and database in /etc/ (#117661)
  - new reuires and buildrequires for setup >= 2.5.36-1


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.4-1
changelog:
  - new version 2.1.4
  - new ipv6 and tls+ipv6 patches: 1.25-pf-2.1.4
  - new pfixtls-0.8.18-2.1.3-0.9.7d patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.1-3.1
changelog:
  - fixed directory permissions in %doc (#125406)
  - fixed missing spool dirs (#125460)
  - fixed verify problem for aliases.db (#125461)
  - fixed bogus upgrade warning (#125628)
  - more spec file cleanup


author: John Dennis <jdennis@redhat.com> 2:2.0.18-4
changelog:
  - remove version from pflogsumm subpackage, it was resetting the
    version used in the doc directory, fixes bug 119213


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.18-1
changelog:
  - bring source up to upstream release 2.0.18
  - include pflogsumm, fixes bug #68799
  - include smtp-sink, smtp-source man pages, fixes bug #118163


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - set sasl back to v2 for mainline, this is good for fedora and beyond,
    for RHEL3, we'll branch and set set sasl to v1 and turn off ipv6


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - revert back to v1 of sasl because LDAP still links against v1 and we can't 
  - bump revision for build
    have two different versions of the sasl library loaded in one load image at
    the same time. How is that possible? Because the sasl libraries have different 
    names (libsasl.so & libsasl2.so) but export the same symbols :-(
    Fixes bugs 115249 and 111767


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-4
changelog:
  - remove mysqlclient prereq, fixes bug 101779
  - remove md5 verification override, this fixes bug 113370. Write parse-postfix-files
    script to generate explicit list of all upstream files with ownership, modes, etc.
    carefully add back in all other not upstream files, files list is hopefully
    rock solid now.


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-3
changelog:
  - add zlib-devel build prereq, fixes bug 112822
  - remove copy of resolve.conf into chroot jail, fixes bug 111923


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to new 2.0.11 upstream release
  - fix authentication problems
  - rewrite SASL documentation
  - upgrade to use SASL version 2
  - Fix bugs 75439, 81913 90412, 91225, 78020, 90891, 88131


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to release 2.0.6
  - remove chroot as this is now the preferred installation according to Wietse Venema, the postfix author


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix shell in /etc/passwd (#68373)
  - fix documentation in /etc/postfix (#65858)
  - Provides: /usr/bin/newaliases (#66746)
  - fix autorequires by changing /usr/local/bin/perl to /usr/bin/perl in a
    script in %doc (#68852), although I don't think this is necessary anymore


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed missing smtpd.conf file for SASL support and included SASL Postfix
    Red Hat HOWTO (#62505).
  - Included SASL2 support patch (#68800).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.4-1
changelog:
  - 1.1.4
  - TLS 0.8.4
  - Move postalias run from %post to init script to work around
    anaconda being broken.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.3-3
changelog:
  - adjust the default postfix-files config file to match the alternatives setup
    by altering the arguments passed to post-install in the %install phase
    (otherwise, it might point to sendmail's binaries, breaking it rather rudely)
  - adjust the post-install script so that it silently uses paths which have been
    modified for use with alternatives, for upgrade cases where the postfix-files
    configuration file isn't overwritten
  - don't forcefully strip files -- that's a build root policy
  - remove hard requirement on openldap, library dependencies take care of it
  - redirect %postun to /dev/null
  - don't remove the postfix user and group when the package is removed


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-2
changelog:
  - listen on 127.0.0.1 only by default (#60071)
  - Put config samples in /usr/share/doc/postfix-2.3.3 rather than
    /etc/postfix (#60072)
  - Some spec file cleanups


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-1
changelog:
  - 1.1.3, TLS 0.8.3
  - Fix updating
  - Don't run the statistics cron job
  - remove requirement on perl Date::Calc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.2-1
changelog:
  - Initial Red Hat Linux packaging, based on spec file from
    Simon J Mudd <sjmudd@pobox.com>
  - Changes from that:
    - Set up chroot environment in triggers to make sure we catch glibc errata
    - Remove some hacks to support building on all sorts of distributions at
      the cost of specfile readability
    - Remove postdrop group on deletion


author: Johnny Hughes <johnny@centos.org> 2.2.46-1
changelog:
  - upgraded to upstream version 2.2.46
  - added e2fsprogs-devel and ncurses-devel as build requirements.


author: Akemi Yagi <toracat@centos.org> [2.6.18-348.4.1.el5.centos.plus]
changelog:
  - Roll in CentOS Branding
  - added new config files for i686, x86_64 with extra features turned on
    including all Network Adapters, all Video4Linux adapers, all Radio devices,
    JFS, ReiserFS, NCP (Novell partitions) and LDM (Windows Dynamic
    Partitions) BusLogic support.
  - removed the rhel and olpc sections at the beginning of the prep section
    that apply generic templates
  - added reiserfs patch (bug 3156)
  - Note: NTFS is broken in 5.3 (kernels >=2.6.18-128), therefore is not enabled.
    see bug 3363 bugzilla 481495
  - Note: FUSE is enabled in distro kernel as of 5.4 (kernels >=2.6.8.164)
  - Note: Intel wiki LEDS is enabled in distro kernel in 5.4 (bug 3544)
  - Note: Do not enable CONFIG_RTxxxx_LEDS=y ; one or more of them will
    cause compilation to fail.
  - Note: INFINIBAND_AMSO1100 disabled in 5.4 because enabling it leads to a
    comlilation error.
  - added acpi-early-pdc patches (bug 4139)
  - added alps-E6400.patch (bug 4192)
  - added usb-allow-restart.patch (bug 4196)
  - enabled "cx88-dvb.ko" and related modules (bug 4365)
  - replaced bug4192 patch with the one from upstream [bugzilla 564086]
  - enabled irDA modules (bug 4683)
  - three cplus centos patches are now in 5.6, therefore removed.
  - added jfs patch (bug 4747)
  - added sata_via patch (bug 4851)
  - added ata-sch-slave.patch (bug 4923)
  - Two centos patches are now in 5.8, therefore removed.
  - pata_acpi is now disabled (bug 5537)
  - add a patch snd_pci_quirk_lookup-bug6214.patch [bug#6214]
  - added readpage over i_node patch (bug#6351)


author: Daniel de Kok <daniel@centos.org> 36-2
changelog:
  - Kernel 2.6.18-53.el5 now defines some CPU_.*FROZEN macros, but doesn't
    define others. Modify compatibility macros to check each case.


author: Robert Scheck <redhat@linuxnetz.de> 2.8.3-1
changelog:
  - Upgrade to 2.8.3 (#196599)
  - Applied Russell Coker's suggested patch to improve the
    performance for SELinux machines significantly (#120622)


author: Jeremy Katz <katzj@redhat.com> - 2.6.13-1
changelog:
  - update to 2.6.13 per request of upstream
  - fixes mount by label of xfs on former raid partition (#122043)


author: Phil Knirsch <pknirsch@redhat.com> 2:3.6.4-5
changelog:
  - Bumped release and rebuilt
  - Removed s390 and s390x again until i get around fixing the bitops related
    stuff (which is borken on big-endian).


author: Tim Powers <timp@redhat.com>
changelog:
  - rebuilt, for some reason the build date for the binary is not
    matching the build date for the SRPM.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 3.x.0f, many important fixes in fsck
  - Add missing README (#30556)
  - Use -v2 by default in mkreiserfs (#30556)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - initial RPM
  - changes from base package:
    - Fix a security problem (yet another tmp file issue)
    - Fix an fd leak
    - Get rid of the config.cache file, it contains broken settings
    - Install man pages
    - Fix locations of binaries, installing this stuff to "bin" is
      not really a good idea
    - Fix build on alpha and ia64


