# changelog

author: Nalin Dahyabhai <nalin@redhat.com> - 253-23
changelog:
  - unblock SIGPIPE while closing the connection in the child's part of
    atfork(), so that it can get delivered before we reset the signal
    handler (#454315)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-22
changelog:
  - add patch to not assume we got a result for our start_tls request within the
    bind timelimit (Jatin Nansi, #499302)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-19
changelog:
  - don't close a oneshot connection while we're in the middle of answering a
    specific query (#488857)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-18
changelog:
  - turn the default for paged results back off (#486321)
  - pull in fix for leaking descriptors from version 255 (#428837)
  - replace our proposed patch for being stricter about malformed entries with
    the version upstream went with, and start applying it (#457258)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-15
changelog:
  - build nss_ldap with --enable-paged-results (#444185)
  - add patch to make netgroup enumeration fail due to lack of entries in
    setnetgrent(), rather than in getnetgrent(), to match how other mechanisms
    work (Jose Plans, #445972)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-13
changelog:
  - block SIGPIPE in the atfork handler, so that it doesn't trip up when
    attempting to drop a connection to the server (#448014)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-11
changelog:
  - backport changes to group parsing from version 254 to fix heap corruption
    when parsing nested groups (#444031)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-7
changelog:
  - add keyutils-libs-devel and libselinux-devel as a buildrequires: in order to
    static link with newer Kerberos (#427370)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-6
changelog:
  - suppress password-expired errors encountered during referral chases during
    modify requests (#335661)
  - interpret server-supplied policy controls when chasing referrals, so that
    we don't give up when following a referral for a password change after
    reset (#335661)
  - don't attempt to change the password using ldap_modify if the password
    change mode is "exop_send_old" (we already didn't for "exop") (#364501)
  - don't drop the supplied password if the directory server indicates that
    the password needs to be changed because it's just been reset: we may need
    it to chase a referral later (#335661)
  - correctly detect libresolv and build a URI using discovered settings, so that
    server discovery can work again (#254172)
  - honor the "port" setting again by correctly detecting when a URI doesn't
    already specify one (#326351)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-4
changelog:
  - add dbus,radvd,tomcat,radiusd,news,mailman to the default list of
    nss_initgroups_ignoreusers (#243753)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - resize the supplemental GID array when it gets too large and an array size
    limit isn't set (Gavin Romig-Koch, #246541)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-1
changelog:
  - update to 253
    - closes a crasher when glibc's initgroups backend passes in a zero-length,
      NULL buffer to start
    - includes lookup_nssldap updates for autofs


author: Nalin Dahyabhai <nalin@redhat.com> - 251-2
changelog:
  - configure with --enable-configurable-krb5-ccname-gssapi instead of
    --enable-configurable-krb5-ccname, the latter of which doesn't actually
    do anything (Howard Wilkinson)


author: Nalin Dahyabhai <nalin@redhat.com> - 250-5
changelog:
  - adjust nss_ldap's makefile rule to more correctly deduce the right soversion
    for nsswitch modules (#191927)


author: Nalin Dahyabhai <nalin@redhat.com> - 248-2
changelog:
  - set "nss_initgroups_ignoreusers root,ldap" in the default configuration
    file, so that nss_ldap will assume that there are no supplemental groups
    for this user to be found in the directory server (#180657)


author: Nalin Dahyabhai <nalin@redhat.com> 245-1
changelog:
  - update to nss_ldap 245
  - add patch from upcoming 246 release to change the placeholder used when
    userPassword is unreadable from "x" to "*" (upstream #240)


author: Nalin Dahyabhai <nalin@redhat.com> 239-1
changelog:
  - update to nss_ldap 239
  - provide a libnss_ldap.so link for directly linking with nss_ldap, as glibc
    does for the modules it provides


author: Nalin Dahyabhai <nalin@redhat.com> 234-5
changelog:
  - update to pam_ldap 180 to get fix for vulnerability from parsing password
    policy controls which don't contain error numbers (#166164, CAN-2005-2497)


author: Nalin Dahyabhai <nalin@redhat.com> 234-4
changelog:
  - override glibc version detection so that mismatches between the versions of
    32- and 64-bit glibc don't result in our %install installing the module
    with a different name than the 'make install' target uses


author: Nalin Dahyabhai <nalin@redhat.com> 234-3
changelog:
  - fix type mismatch bug in patch for using non-blocking start_tls in
    preference to the blocking version when it's available (#156582)


author: Nalin Dahyabhai <nalin@redhat.com> 232-2
changelog:
  - prefer using libraries in /usr/lib/nss_ldap-openldap if we find any
  - use ldap_start_tls in preference to ldap_start_tls_s, if found, so that
    we can time out if the server has gone catatonic


author: Nalin Dahyabhai <nalin@redhat.com> 227-1
changelog:
  - update to version 227
  - force nss_ldap to mimic pam_ldap's behavior when the tls_checkpeer setting is
    unconfigured in ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 226-3
changelog:
  - fix misleading doc comment in /etc/ldap.conf -- the checkpeer setting follows
    libldap's default, which is dependent on the version of OpenLDAP which which
    this package is linked (part of #143622)


author: Nalin Dahyabhai <nalin@redhat.com> 226-1
changelog:
  - update to nss_ldap 226, pam_ldap 176
  - rework pam_ldap dns autoconfig patch
  - require automake instead of automake15, because autoreconf uses the current
    version (#129877)


author: Nalin Dahyabhai <nalin@redhat.com> 212-1
changelog:
  - update to 212, pam_ldap 167
  - link nss_ldap with libgssapi_krb5, the static libsasl2 includes the gssapi
    mech, at least for now, and we pick up its unresolved symbols at link-time
  - fix out-of-bounds error at initialization-time (part of #101269)
  - include pam_ldap's authorization schema files for slapd as a doc file


author: Nalin Dahyabhai <nalin@redhat.com> 207-5
changelog:
  - fix objectclass and attribute mapping, which failed due to uninitialized
    fields in mapping index structures, fixed upstream in 210 (#110547)


author: Nalin Dahyabhai <nalin@redhat.com> 207-3
changelog:
  - link dynamically with libcom_err if it isn't in /usr/kerberos/lib (which
    we assume means that it's in /lib)


author: Nalin Dahyabhai <nalin@redhat.com> 207-1
changelog:
  - update to build with newer OpenLDAP
  - add README.TLS to remind people that in order for TLS support to be usable,
    the server's certificate has to pass validation checks made by the client


author: Nalin Dahyabhai <nalin@redhat.com> 202-4
changelog:
  - rework static link order to account for libssl requiring libkrb5
  - force assembly locking on %ix86 systems
  - link with libz, which libssl also requires


author: Nalin Dahyabhai <nalin@redhat.com> 202-2
changelog:
  - apply DB patches from sleepycat.com
  - correctly point nss_ldap at the bundled DB library
  - create /%{_lib} instead of /lib to install into


author: Nalin Dahyabhai <nalin@redhat.com> 202-1
changelog:
  - update to nss_ldap 202, pam_ldap 153
  - update DB from 4.0.14 to 4.1.24.NC
  - try to address multilib path changes


author: Nalin Dahyabhai <nalin@redhat.com> 188-0.6
changelog:
  - rebuild for RHL 6.2
  - change dependency on pam-devel to /usr/include/security/pam_modules.h
  - drop build deps on cyrus-sasl-devel and openldap >= 2.x
  - modify pam_ldap versions file so that binutils from RHL 6.2 can parse it
  - update to nss_ldap 188
  - update to pam_ldap 144


author: Nalin Dahyabhai <nalin@redhat.com> 184-1
changelog:
  - update to pam_ldap 138
  - enable rfc2307bis schema support
  - version the pam_ldap module
  - add the proper soname to the nss_ldap module and remove the symlink
  - add a trigger to run ldconfig again when an upgrade removes the symlink,
    which used to be in this package (doh!)
  - fix the symlink from %{_libdir} to the module (for linking directly to it)


author: Nalin Dahyabhai <nalin@redhat.com> 173-1
changelog:
  - update to nss_ldap 173, which includes doc updates
  - update to pam_ldap 133, which simplifies the dnsconfig patch quite a bit


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - link statically with libldap again, because libldap is linked with other
    shared libraries now (keeping us from having files in /usr open when we
    go to shut the system down)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 172, fixing schema mapping code
  - update to pam_ldap 124, incorporating TLS default option and doc fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 164, fixing the timeout problem correctly
  - update to pam_ldap 122, fixing escaping of user name in filters


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 163, fixing the timeout problem
  - update to pam_ldap 120
  - add gdbm-devel as a buildprereq, because we list it in $LIBS (#48999)
  - add db3-devel as a buildprereq (#48999)
  - add pam-devel as a buildprereq (#48999)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make nss_ldap fail when attempting to startup TLS fails, because that's what
    we do when LDAPS doesn't work (and what pam_ldap does already)
  - add DNS autoconfiguration to pam_ldap


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 149, minor fixes for compile glitches
  - update to pam_ldap 105, minor fixes (as above) and handles shadow expiration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 138, which folds in our patch for initgroups
  - change the default search base in ldap.conf to dc=example,dc=com


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - version the NSS module so that it works properly with programs which have
    been linked statically to a different version of an LDAP library, like
    Netscape Communicator


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - BuildPrereq gdbm-devel
  - pass RPM_OPT_FLAGS as CFLAGS to %configure
  - if protocol version is 2, explicitly set protocol version to 3 before trying
    to start TLS
  - add STARTTLS support to nss_ldap
  - work around a build-time problem on ia64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 122
  - link statically with libsasl, require the first devel package that supplied it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to pam_ldap 67 to fix a bug in template user code
  - convert symlink in /usr/lib to a relative one (#16132)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - use the ldap.conf file as an external source
  - don't forcibly build the support for version 3
  - imported the default spec file from the tarball and fixed it up for RH 6.1


author: Nalin Dahyabhai <nalin@redhat.com> 232-2
changelog:
  - prefer using libraries in /usr/lib64/nss_ldap-openldap if we find any
  - use ldap_start_tls in preference to ldap_start_tls_s, if found, so that
    we can time out if the server has gone catatonic


author: Nalin Dahyabhai <nalin@redhat.com> 207-3
changelog:
  - link dynamically with libcom_err if it isn't in /usr/kerberos/lib64 (which
    we assume means that it's in /lib64)


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-30.2
changelog:
  - Resolves: rhbz#731460
  - Resolves: rhbz#739083
  - Resolves: rhbz#739086

  - Add upstream revision 2178 - Fix problem where openais will segfault if there are gaps in recovery queue
  - Add upstream revision 2179 - whitetank ipc: handle EINTR in msg_send
  - Add upstream revision 2180 - whitetank ipc: Don't deadlock in ipc_disconnect
  - Add upstream revision 2181 - Ignore memb_join messages during flush operations
  - Add upstream revision 2183 - Deliver all messages from my_high_seq_recieved to the last gap


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-30
changelog:
  - Resolves: rhbz#675206
  - Add upstream revision 2172 - don't assert when ring id file is less then 8 bytes.


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-29
changelog:
  - Resolves: rhbz#561546
  - Resolves: rhbz#611434
  - Resolves: rhbz#623176
  - Resolves: rhbz#645299
  - Add upstream revision 2162 - speed up the case where a lot of nodes leave at the same time.
  - Add upstream revision 2165 - fix abort when token is lost in RECOVERY state.
  - Add upstream revision 2166 - resolve abort during simulatenous stopping of atleast 4 nodes.
  - Add upstream revision 2167 - totemsrp: Remove recv_flush code.
  - Add upstream revision 2168 - totemsrp: Only restore old ring id information one time.
  - Add upstream revision 2169 - totemsrp: free messages originated in recovery rather then rely on messages_free.
  - Add upstream revision 2170 - return error if there is no space for semaphore.
  - Add upstream revision 2171 - IPC: handle maximum use of file descriptors gracefully.


author: Steven Dake <sdake@redhat.com> 0.80.6-28
changelog:
  - Resolves: rhbz#568650
  - Resolves: rhbz#625947
  - Add upstream revision 2160 - first part of remove stale pid members from confchg.
  - Add upstream revision 2161 - second part of remove stale pid members from confchg.
  - Add upstream revision 2159 - prevent non-null terminated strings in checkpoint names or section from triggering stack protector


author: Angus Salkeld <asalkeld@redhat.com> 0.80.6-27
changelog:
  - Resolves: rhbz#619536
  - Add upstream revision 2153 - make openais more resilient to
    delayed multicast packets.


author: Steven Dake <sdake@redhat.com> 0.80.6-25
changelog:
  - Resolves: rhbz#619570
  - Add upstream revision 2151 - resolve problem where out of order messages
    can result in token loss in very rare circumstances.


author: Steven Dake <sdake@redhat.com> 0.80.6-23
changelog:
  - Resolves: rhbz#614222
  - Add upstream revision 2150 - don't reset token timer on each received
    retransmitted token


author: Steven Dake <sdake@redhat.com> 0.80.6-22
changelog:
  - Resolves: rhbz#611129
  - Resolves: rhbz#606028
  - Add upstream revision 2148 - Fix membership algorithm failure which can result
    in singleton rings forming in rare circumstances.
  - Add upstream revision 2149 - support compatibility with corosync.


author: Steven Dake <sdake@redhat.com> 0.80.6-21
changelog:
  - Resolves: rhbz#599654
  - Add upstream revision 2147 - Fix problem where CPG_REASON_LEAVE is sent instead of CPG_REASON_PROCDOWN.


author: Steven Dake <sdake@redhat.com> 0.80.6-20
changelog:
  - Resolves: rhbz#579081
  - Resolves: rhbz#596359
  - Add upstream revision 2143 - Avoid problem where library users block forever
    when server fails.
  - Add upstream revision 2146 - Fix problem where dispatch returning -1 in
    library functions results in segfaults.


author: Steven Dake <sdake@redhat.com> 0.80.6-19
changelog:
  - Resolves: rhbz#598689
  - Resolves: rhbz#594480
  - Add upstream revision 2145 - Resolve problems with failed to receive logic
  - Add upstream revision 2144 - don't reset last_aru when token is retransmitted


author: Steven Dake <sdake@redhat.com> 0.80.6-18
changelog:
  - Resolves: rhbz#586519
  - Resolves: rhbz#588500
  - Resolves: rhbz#588494
  - Resolves: rhbz#588489
  - Add upstream revision 2130 - Resolve problem where ring id is not saved
    and restored when recovery is interrupted.
  - Add upstream revision 2129 - Resolve problem where highly lossy networks
    will sigabort (assert) if 512 or more entries are originated in recovery.
  - Add upstream revision 2128 - Use proper typing for retransmit token storage
    area.
  - Add upstream revision 2127 - Fix stack corruption that happens because of
    invalid length in memmove operation on highly lossy networks.


author: Steven Dake <sdake@redhat.com> 0.80.6-17
changelog:
  - Resolves: rhbz#533383
  - Add upstream revision 2122 - Fix retransmission problem that results in
    failure to receive condition.


author: Steven Dake <sdake@redhat.com> 0.80.6-16
changelog:
  - Resolves: rhbz#566467
  - Add upstream revision 2121 - Fix lockup in atexit handler registered by
    print.c that occurs less then 1% of the time.  This is resolved by calling
    a special version of log_flush before calling exit, and not relying on the
    atexit handler to call pthread_cond_wait.


author: Steven Dake <sdake@redhat.com> 0.80.6-15
changelog:
  - Resolves: rhbz#560313
  - Add upstream revision 2117 - fix problem where ipc doesn't differentiate
    between full buffer and empty buffer properly resulting in cpg message
    corruption


author: Steven Dake <sdake@redhat.com> 0.80.6-14
changelog:
  - Resolves: rhbz#515590
  - Add upstream revision 2097 - Ensure IPC memory is 1mb instead of 477k.
  - actually apply patch in spec file.


author: Steven Dake <sdake@redhat.com> 0.80.6-12
changelog:
  - Resolves: rhbz#529054
  - Resolves: rhbz#525280
  - Resolves: rhbz#519159
  - Resolves: rhbz#540267
  - Resolves: rhbz#540490
  - Resolves: rhbz#544680
  - Resolves: rhbz#544682
  - Resolves: rhbz#545151
  - Resolves: rhbz#547828
  - Resolves: rhbz#525280
  - Resolves: rhbz#515159
  Add upstream revision 2079 - remove segfault from calling saClmTrackStart more then one time.
  Add upstream revision 2081 - cpg can use a variable after it is freed.
  Add upstream revision 2081 - netmask was being anded with broadcast address, not interface address resulting in invalid binding if netmask was not 255.255.255.x.
  Add upstream revision 2089 - originating many messages in recovery results in lockup.
  Add upstream revision 2090 - originating many messages in recovery results in lockup.
  Add upstream revision 2091 - recovery protocol implementation doesn't reset variable properly.
  Add upstream revision 2092 - String buffer overflow can occur if many messsages are originated during recovery.
  Add upstream revision 2094 - Remove invalid assertion in totemsrp.

  Add upstream revision 2095 - Remove stack overflow within aisexec.
  Add upstream revision 2096 - Prevent ckpt iterations from occuring during sync.


author: Steven Dake <sdake@redhat.com> 0.80.6-11
changelog:
  - Resolves: rhbz#509180
  - Resolves: rhbz#526069
  - Resolves: rhbz#474400
  - Resolves: rhbz#520164
  Add upstream revision 2039 - Remove implicit declartion in code.
  Add upstream revision 2040 - Don't segfault with ais group doesn't exist in system. 
  Add upstream revision 2043 - Properly shutdown service engines on ctrl-c.
  Add upstream revision 2044 - Resolve cpg race condition during synchronization.
  Add upstream revision 2054 - Resolve random error code returned by saCkptCheckpointOpen.


author: Steven Dake <sdake@redhat.com> 0.80.6-10
changelog:
  - Resolves: rhbz#520012
  - Add upstream revision 2053 - Ensure 9000 MTU doesn't assert totemsrp.
  - Actually apply patch during build.


author: Steven Dake <sdake@redhat.com> 0.80.6-8
changelog:
  - Resolves: rhbz#506119
  - Add upstream revision 1998 - Ensure that leaving processors in totempg have
    their assembly state reset.


author: Steven Dake <sdake@redhat.com> 0.80.6-7
changelog:
  - Resolves: rhbz#506778
  - Add upstream revision 1959 - fix leaking of shared memory objects during
    shutdown of cman.


author: Steven Dake <sdake@redhat.com> 0.80.6-2
changelog:
  - Resolves: rhbz#501561
  - Resolves: rhbz#501337
  - Resolves: rhbz#492808
  - Resolves: rhbz#497480
  - Add upstream revision 1928 - Fix race condition in cpg join/leave operations.
  - Add upstream revision 1926 - Adds feature to allow uidgid files to be added
    to /etc/ais directory to allow external users to specify uid and gids to
    access the system.
  - Add upstream revision 1925 - Adds feature to allow rolling crypto upgrades
    from openais-0.80.6-2 to corosync.
  - Add upstream revision 1924 - Adds feature to use broadcast instead of
    multicast.  To enable this feature, the broadcast: yes option should be
    specified.


author: Steven Dake <sdake@redhat.com> 0.80.6-1
changelog:
  - Resolves: rhbz#494347
  - Resolves: rhbz#494035
  - Resolves: rhbz#496985
  - Resolves: rhbz#497419
  - Resolves: rhbz#497420
  - Resolves: rhbz#499767
  - Fixes problem with cpg_init not returning security error code.
  - Fixes problem with not starting redundant ring
  - Fixes regression with cluster mirror and in general DOA openais rpm.
  - Fix problem where first message is thrown away in new configuration.
  - Fixes problem where ipc connect/disconnect in cpg service segfaults aisexec.
  - Fixes problem where openais segfaults on ppc64 platforms.


author: Steven Dake <sdake@redhat.com> 0.80.5-5
changelog:
  - Resolves: rhbz#490098
  - Resolves: rhbz#490099
  - Add upstream revision 1753 - Serialize ipc access.
  - Add upstream revision 1752 - Remove break from cpgbench.
  - Add upstream revision 1750 - Remove pass by value in the ckpt ervice.
  - Add upstream revision 1749 - Remoe extra debugging output.
  - Add upstream revision 1747 - Fix reference counting problem in ckpt service.


author: Steven Dake <sdake@redhat.com> 0.80.5-4
changelog:
  - Resolves: rhbz#487214
  - Resolves: rhbz#488095
  - Resolves: rhbz#489451
  - Add upstream revision 1743 - autogenerated node ids cause CPG not to issue synchronization of the process group information.
  - Add upstream revision 1742 - 5.2->5.3 rolling upgrades.
  - Add upstream revision 1740 - removes segfault in cpg service when ipc connection disconnects and no groups are joined to the cpg group (ipc regression).
  - Add upstream revision 1739 - removes assert in multicast operations under overload.


author: Steven Dake <sdake@redhat.com> 0.80.5-3
changelog:
  - Resolves: rhbz#474277
  - Resolves: rhbz#477243
  - Resolves: rhbz#480684
  - Resolves: rhbz#261381
  - Add upstream revision 1737-1738 cherrypicked & backported - Fix assertion in totempg usage.
  - Add upstream revision 1735 cherrypicked - Allow lib_exit_fn to be called early so that lib_init_fn can use refcounting ipc functions.
  - Add upstream revision 1734 cherrypicked - Add IPC refcounting to CPG service.


author: Steven Dake <sdake@redhat.com> 0.80.5-2
changelog:
  - Resolves: rhbz#474277
  - Resolves: rhbz#477243
  - Resolves: rhbz#480684
  - Resolves: rhbz#261381
  - openais-0.80.5.tar.gz was missing three commits that I expected were in the tarball.
  - Add upstream revision 1692 - Add to message size in totempg operation.
  - Add upstream revision 1691 - Execute proper list_init operation.
  - Add upstream revision 1690 - Execute proper list_del operation.


author: Steven Dake <sdake@redhat.com> 0.80.5-1
changelog:
  - Resolves: rhbz#474277
  - Resolves: rhbz#477243
  - Resolves: rhbz#480684
  - Resolves: rhbz#261381
  - Add upstream revision 1698 - Complete IPC rewrite.
  - Add upstream revision 1697 - BSD compatability patch.
  - Add upstream revision 1694 - BSD compatability patch.
  - Rebase to 0.80.5 to fix above Red Hat bugzilla IDs.


author: Steven Dake <sdake@redhat.com> 0.80.3-22
changelog:
  - Resolves: rhbz#471896
  - Add upstream revision 1665 - Compare local address with bindnetaddr properly.
  - Add upstream revision 1664 - Use node's full ipv4 address when generating nodeids.
  - Add upstream revision 1662 - Fix segfault when user with inappropriate access permissions accessed aisexec.


author: Steven dake <sdake@redhat.com> 0.80.3-20
changelog:
  - Resolves: rhbz#441413
  - Add upstream revision 1661 - Fix a message lost during delivery which resulted in checkpoing service segfaulting.
  - Add upstream revision 1660 - Fix commit token received_flg being incorrect in some rare circumstances.
  - Add upstream revision 1659 - Fix rare problem where checkpoint synchronizatoin database could be thrown away.
  - Add upstream revision 1655 - Allow 31 bit nodeid's which default to off.


author: Steven Dake <sdake@redhat.com> 0.80.3-19
changelog:
  - Resolves: rhbz#442102
  - Add upstream revision 1653 - Schedule ipc dispatch thread at same priority as aisexec.
  - Add upstream revision 1652 - Remove more signal flooding problems in ipc dispatch thread.
  - Add upstream revision 1651 - Remove signal flooding of the ipc dispatch thread.


author: Steven dake <sdake@redhat.com> 0.80.3-8
changelog:
  - Resolves: rhbz#444909
  - Add upstream revision 1647 - Change log level output of a logging message.
  - Add upstream revision 1646 - Add test case.
  - Add upstream revision 1645 - Remove ipc deadlock in overload conditions.
  - Add upstream revision 1644 - Make lib_exit_fn work properly.
  - Add upstream revision 1643 - Remove checkpoint expiration assertions.
  - Add upstream revision 1642 - Remove checkpoint close assertion.


author: Steven Dake <sdake@redhat.com> 0.80.3-16
changelog:
  - Resolves: rhbz#400491
  - Add upstream revision 1521 - Compile on latest glibc.
  - Add upstream revision 1524 - Fix syscall usage in keygen application.
  - Add upstream revision 1546 - Fix build for authentication on bsd platforms.
  - Add upstream revision 1548 - Fix synchronization of checkpoint global id.


author: Steven Dake <sdake@redhat.com> - 0.80.3-15
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1514 - Remove extra log_printf.
  - Add upstream revision 1513 - Remove comparison with zero and replace with comparison with NULL in handle database code.
  - Add upstream revision 1512 - Remove early commit of synchronization data when a synchronization in progress is followed by a node leaving or joining the cluster.
  - Add upstream revision 1511 - Remove double pthread_mutex_destroy from evt service.
  - Add upstream revision 1510 - Remove double pthread_mutex_destroy from evs service.
  - Add upstream revision 1509 - Remove double pthread_mutex_destroy from cpg service.
  - Add upstream revision 1508 - Remove double pthread_mutex_destroy from clm service.
  - Add upstream revision 1507 - Remove double pthread_mutex_destroy from checkpoint service.


author: Steven Dake <sdake@redhat.com> - 0.80.3-14
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1506 - Resolves incomplete checkpoing synchronization when totem queue is full.


author: Steven Dake <sdake@redhat.com> - 0.80.3-13
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1504 - Fixes checkpoint synchronization issue when a new node is started.
  - Add upstream revision 1503 - backport -f foreground option.
  - Add upstream revision 1502 - Revert revision 1477 which exhibits problems with cman.
  - Add revision 1477 - This was reverted in a previous version but cherrypicked.  Now the patch has been applied and reverted in the rpm build process to match upstream.


author: Steven Dake <sdake@redhat.com> - 0.80.3-11
changelog:
  - Resolves: rhbz#429920
  - Add upstream revision 1500 - IPC locks up if a POLLERR is returned in certain circumstances.
  - Resolves: rhbz#433839
  - Add upstream revision 1501 - A mcast is delivered before a join in some circumstances.


author: Steven Dake <sdake@redhat.com> - 0.80.3-8
changelog:
  - Resolves: rhbz#249287
  - Add non-merged IPC changes for fixing operation with cluster mirror
  - Resolves: rhbz#403901
  - Add upstream revision 1498 - enhance openais_exit_error to report string instead of error code
  - Resolves: rhbz#309621
  - Add upstream revision 1497 - Follow LSB guidelines for initscript
  - Add upstream revision 1496 - Revert patch 1480 since it causes problems with cman
  - Add upstream revision 1493 - Backport of patch 1379 to remove this_ip and replace with accessor functoins for use by ipc system
  - Add upstream revision 1486 - Unlock mutex on error condition of no memory when creating handle
  - Add upstream revision 1480 - Endian fixes for the totempg code
  - Add upstream revision 1479 - Remove & when regular reference works properly.
  - Add upstream revision 1478 - Patch to set system_from properly in retransmitted messages
  - Add upstream revision 1473 - Fix pthread_equal for timer_delete operation
  - Add upstream revision 1471 - Endian convert cpg downlist messages properly
  - Add upstream revision 1469 - change initialDataSize paramter from saUint32gt to SaSizeT to match specifications


author: Steven Dake <sdake@redhat.com> - 0.80.3-5
changelog:
  - Resolves: rhbz#302341
  - Add upstream revision 1455 - Fix loss of node joins in commit state resulting in looping of membership protocol.
  - Add upstream revision 1453 - Fix assertion if component registration occurs during certain phases of instantation.
  - Add upstream revision 1450 - Fix reference counting in lcr code so that lcr_ifact_release works properly.
  - Add upstream revision 1449 - Allow missing services in synchronization to not cause a segfault.k
  - Add upstream revision 1446 - Remove inadvertant commit of changes to totemsrp which happened when security changes were patched in revision 1426.
  - Add upstream revision 1426 - Patch to log security warnings when invalid identifier is used in message header for a totem header.


author: Steven Dake <sdake@redhat.com> - 0.80.3-4
changelog:
  - Resolves: rhbz#251082
  - Add upstream revision 1423 - Fix synchronization defect resulting in segfault.
  - This is the fc6 build.


author: Steven Dake <sdake@redhat.com> - 0.80.3-2
changelog:
  - Resolves: rhbz#209862
  - Add upstream revision 1406 - Filter commit token when it is retransmitted.
  - Resolves: rhbz#249506
  - Add upstream revision 1407 - Reset consensus array on entering operational mode.
  - Resolves: rhbz#249509
  - Add upstream revision 1408 - Store the ring id information properly when it changes.
  - Resolves: rhbz#247733
  - Add upstream revision 1409 - Add subtractor to availability of message entries for the totem message queue
  - This is the rhel5 version of 0.80.3-0 with some upstream patches.


author: Steven Dake <sdake@redhat.com> - 0.80.3-1
changelog:
  - Resolves: rhbz#243119
  - Resolves: rhbz#221190
  - Resolves: rhbz#224190
  - Resolves: rhbz#233892
  - Resolves: rhbz#236549
  - New upstream version including all previous revisions.
  - This is the fc6 version of 0.80.3-1.


author: Steven Dake <sdake@redhat.com> - 0.80.3-0
changelog:
  - Resolves: rhbz#243119
  - Resolves: rhbz#221190
  - Resolves: rhbz#224190
  - Resolves: rhbz#233892
  - Resolves: rhbz#236549
  - New upstream version including all previous revisions.
  - This is the rhel5 version of 0.80.3-0.


author: Steven Dake <sdake@redhat.com> - 0.80.2-0
changelog:
  - Resolves: rhbz#211357
  - New upstream version including all prevision revisions.
  - Fixes cpg ordering problem.
  - Fixes ia64 unaligned problem.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-21
changelog:
  - Resolves: rhbz#216492
  - Add upstream revision 1319 - Increase outbound buffer size to 5000 messages.
  - Add upstream revision 1316 - Improvements on segfault logging.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-18
changelog:
  - Add upstream revision 1315 - Fix compile error in libcpg.
  - Add upstream revision 1314 - Change rundir to /var/openais.
  - Add upstream revision 1313 - Flow control fixes for the CPG service.
  - Add upstream revision 1312 - Correct usage of ERR_LIBRARY to SA_AIS_ERR_LIBRARY.
  - Add upstream revision 1311 - handle case where POLLHUP and POLLERR are not uspported by OS.
  - Add upstream revision 1309 - set default downcheck value to 1000ms.
  - Add upstream revision 1308 - Remove invalid code and warnings detected by Intel compiler.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-16
changelog:
  - Add upstream revision 1307 - Remove flow control compile warning.
  - Add upstream revision 1306 - Make clean now really makes clean.
  - Add upstream revision 1305 - Set scheduler SCHED_RR to max priority available
    in system.
  - Add upstream revision 1300 - Improve behavior of flow control of CPG service
    during configuration changes.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-14
changelog:
  - Add upstream revision 1296 - Remove compile warnings.
  - Add upstream revision 1295 - The totem membership protocol was changed to
  - Add upstream revision 1294 - modify location of ringid file to
  - Add upstream revision 1293 - flush output of debug messages on exit or segv.
    /var/run/openais and chdir here so cores are saved there.
    match specifications.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-13
changelog:
  - Add upstream revision 1286 - Fix checkpoint unlink operation under certain
    conditions.  This is the rhel5 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-12
changelog:
  - Add upstream revision 1286 - Fix checkpoint unlink operation under certain
    conditions.  This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-9
changelog:
  - Add upstream revision 1270 - Resolve IPC segfault.
  - Add upstream revision 1271 - Fix errors in ia64 alignment.
  - Add upstream revision 1275 - pthread_mutex_destroy cleanup patch.
  - Add upstream revision 1276 - Remove debug from makefile committed in revision 1275.
  - Add upstream revision 1277 - Formatting changes.
  - Add upstream revision 1278 - Patch testckpt to use proper seciton id size.
  - Add upstream revision 1279 - Call abort in sync service when processing is interrupted.
  - Add upstream revision 1282 - New generation checkpoint state machine.
  - Add upstream revision 1283 - Fix memory leaks.


author: Steven Dake <sdake@redhat.com> - 0.80.1-8
changelog:
  - Add upstream revision 1268 - Align data in totem delivery on 4 byte
    boundaries for ia64.
  - Add upstream revision 1269 - Increase default stack size for IPC connections
    on ia64.


author: Steven Dake <sdake@redhat.com> - 0.80.1-6
changelog:
  - Add upstream revision 1260 - Allocate the retransmission token in
    instance initialize instead of totemsrp_initialize.
  - Add upstream revision 1261 - cleanup the way the memb_index variable is
    handled in the commit token.
  - Add upstream revision 1262 - Set the ring sequence number according to the
    totem specifications.
  - Add upstream revision 1263 - Use the fullset variable instead of he local
    variable j to make easier code reading.
  - Add upstream revision 1264 - If the failed_list has zero entries, don't
    add it as an iovector in the join messages.
  - Add upstream revision 1265 - Only originate one regular token.


author: Steven Dake <sdake@redhat.com> - 0.80.1-5
changelog:
  - Add upstream revision 1256 - remove extra totem debug logging output.
  - Add upstream revision 1257 - fix subset operation to repair membership behavior.
  - Add upstream revision 1258 - accept commit token in proper circumstances.


author: Steven Dake <sdake@redhat.com> - 0.80.1-1.1
changelog:
  - Add upstream revision 1223 - Fix checkpoint write size of zero to
    return INVALID_PARAM error code.
  - Add upstream revision 1230 - Add missing include for assert.h.
  - Add upstream revision 1245 - Add cpgbench tool and better flow control system.
  - Move /sbin/ldconfig into regular package from devel package.


author: Steven Dake <sdake@redhat.com> - 0.80-1.2
changelog:
  - Move libraries to openais package.
  - Add cpg hash collision patch.
  - Add makefile install clm patch.


author: Steven Dake <sdake@redhat.com> - 0.76-1.8
changelog:
  - Readded ExlcusiveArch since build system builds s390 and ia64 which are
    untested.
  - Add makefile override patch which fixes build with optflags on x86_64 arch.
  - Remove -DOPENAIS_LINUX from passed CFLAGS since it now works properly with
    makefile override patch.


author: Steven Dake <sdake@redhat.com> - 0.76-1.5
changelog:
  - Changed BuildRoot tag to match convention specified in Fedora Wiki.
  - Removed /sbin/service dependency since it is pulled in from init packages.


author: Steven Dake <sdake@redhat.com> - 0.76-1.3
changelog:
  - Allocated uid 102 from setup package for user add operation.
  - Added || : to initscript stuff so initscript bugs dont cause RPM transaction
    failures as per Paul's suggestion.
  - Added /sbin/services to post requires as per Paul's suggestion.
  - Removed ldconfig from the requires post for the main package as per Paul's
    suggestion.
  - Changed post devel scriptlet action as per Paul's suggestion.


author: Steven Dake <sdake@redhat.com> - 0.76-1.2
changelog:
  - Add user account for AIS applications and authentication.
  - Move /etc/ld.so.conf/openais-*.conf to devel package since it is
    only needed there.
  - Move ldconfig to devel package.
  - Execute condrestart on upgrade


author: Steven Dake <sdake@redhat.com> - 0.76-1.1
changelog:
  - Fix unowned dirs problem.
  - Correct make with optflags work properly.
  - Move plugins from /usr/lib/openais/lcrso to /usr/libexec/lcrso.
  - Remove static archives from RPM.
  - Name shared objects in devel package as 1.0.0 instead of 1.0.


author: Paul Howarth <paul@city-fan.org> - 0.75-1.1
changelog:
  - Address rpmlint issues during package review (#192889)
  - Move docs to associated packages, don't bother with -docs subpackage
  - Make -devel package require main package
  - Fix Source: and URL: tags
  - Fix up Makefile to handle DESTDIR properly
  - Honoring %{optflags} breaks build!


author: Adam Tkac <atkac redhat com> 0.17-39
changelog:
  - initialize environment variables configured in pam_env.conf (#434938)
  - handle long user names in rexecd well (#436748)
  - check return value from close to catch errors on NFS filesystems (#461903)


author: Adam Tkac <atkac redhat com> 0.17-38
changelog:
  - obsoleted netkit-rsh-0.17-nohostcheck.patch
  - r{logind,shd} works when DNS isn't avaliable and -a option isn't
    specified (#222624)
  - removed wrong sentence from rsh-server description


author: Karel Zak <kzak@redhat.com> 0.17-35
changelog:
  - added support for IPv6 (patch by Jan Pazdziora)
  - fix #198632 - add keyinit instructions to the rsh, rlogin and rexec PAM scripts
    (patch by David Howells)
  - fix #191390 - improve linefeed patch


author: Karel Zak <kzak@redhat.com> 0.17-25
changelog:
  - rexecd uses PAM session now (#68590)
  - fixed errno usage in rcp (#67361)
  - fixed  rexec fails with "Invalid Argument" (#118630)


author: Nalin Dahyabhai <nalin@redhat.com> 0.17-11
changelog:
  - remove directory names from PAM configuration files, allowing them to be used
    for all arches on multilib systems


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed really missing BuildPrereq: libtermcap-devel (#49577)
  - Fixed security problem with rexec.pam (#49181)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - securetty is screwy because rsh doesn't allocate one and rlogin does auth
    before it has a tty, so change the hard-coded TTYs used from "tty" for all
    to "rsh" or "rlogin" or "rexec"


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix PAM config files to always honor nologin and securetty, to use rhosts,
    and to fall back to password auth only for rlogin and rexec (#17183)
  - add references to pam_env to the PAM configs as well (#16170)
  - disable rlogin and rsh by default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - expunge all mentions of kerberos authentication or DES encryption using
    kerberos from the man pages


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rexec needs pam_set_item() (#60).
  - clarify protocol in rexecd.8.
  - add rexec client from contrib.


author: Mike A. Harris <mharris@redhat.com> 0.9.1-3
changelog:
  - Added "BuildRequires: libdrm-devel >= 2.0-1" for (#192358)
  - Bumped sdk dep to pick up proto-devel indirectly.


author: Mike A. Harris <mharris@redhat.com> 0.8.1.2-1
changelog:
  - Updated xorg-x11-drv-sis to version 0.8.1.2 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.8.1-1
changelog:
  - Updated xorg-x11-drv-sis to version 0.8.1 from X11R7 RC2
  - Added "BuildRequires: mesa-libGL-devel >= 6.4-4" for DRI-enabled builds.


author: Mike A. Harris <mharris@redhat.com> 0.7.0-1
changelog:
  - Update BuildRoot to use Fedora Packaging Guidelines.
  - Deglob file manifest.
  - Limit "ExclusiveArch" to x86, x86_64, ppc


author: Harald Hoyer <harald@redhat.com> 095-14.23
changelog:
  - vol_id: check if device is readable
  Resolves: rhbz#456447
  - fix race condition, to prevent udevd from SIGBUS
  Resolves: rhbz#521318
  - fix rename interface bug 
  Resolves: rhbz#520453
  - kill loop in post and preun, so the new udevd can start
  Resolves: rhbz#567406
  - set umask 022 in start_udev
  Resolves: rhbz#596774
  - let scd* be a symlink to sr*
  Resolves: rhbz#610897
  - add by-path symlinks for tape devices
  Resolves: rhbz#611664
  - add virtio-ports symlinks
  Resolves: rhbz#624928


author: Harald Hoyer <harald@redhat.com> 095-14.21
changelog:
  - remove old udev queue,
    which might be leftover from udev in initrd (rhbz#487858)
  - add cciss support to scsi_id (rhbz#449057)
  - Resolves: rhbz#487858, rhbz#449057


author: Harald Hoyer <harald@redhat.com> 095-14.19
changelog:
  - removed zaptel rules (rhbz #294061)
  - fixed segfault for empty lines in passwd (rhbz#413831)
  - added patch for iscsi ids (Daniel Berrange) (rhbz#427640)
  - added /etc/sysconfig/udev-stw, which makes MODULES 
    configurable (Jeff Bastian) (rhbz#437979)
  - added ext4 support to vol_id (rhbz#444528)
  - updated dasd_id from dasdinfo of s390-tools-1.6.2 (rhbz#430532)
  - Resolves: rhbz#294061, rhbz#413831, rhbz#427640
  - Resolves: rhbz#437979, rhbz#444528, rhbz#430532


author: Harald Hoyer <harald@redhat.com> 095-14.16
changelog:
  - set selinux context for .udev dirs and symlinks (rhbz#442886)
  - fixed rule for hp iLO2 virtual mouse device (rhbz#429215)
  - Resolves: rhbz#429215, rhbz#442886


author: Harald Hoyer <harald@redhat.com> 095-14.12
changelog:
  - fix for looping vol_id, because of a malformed passwd (rhbz#425941)
  - revised fix for tape devices (rhbz#231990)
  - Resolves: rhbz#425941, rhbz#231990


author: Harald Hoyer <harald@redhat.com> 095-14.11
changelog:
  - moved "ignore_device" for dm devices to 90-dm.rules (rhbz#275441)
  - added cciss support (rhbz#250484)
  - support more than 10 nst devices in the persistent rules (rhbz#231990)
  - extra double check for symlinks improved (rhbz#217917)
  - Resolves: rhbz#217917, rhbz#231990, rhbz#250484, rhbz#275441


author: Harald Hoyer <harald@redhat.com> - 095-14.8
changelog:
  - removed pie link flag from static build flags
  - Resolves: rhbz#233956, rhbz#233307, rhbz#226997, rhbz#236242
  - Resolves: rhbz#217917, rhbz#231990


author: Harald Hoyer <harald@redhat.com> - 095-14.7
changelog:
  - added RPM_OPT_FLAGS and pie to static build flags
  - Resolves: rhbz#233956, rhbz#233307, rhbz#226997, rhbz#236242
  - Resolves: rhbz#217917, rhbz#231990


author: Harald Hoyer <harald@redhat.com> - 095-14.6
changelog:
  - do not fail, if EEXIST on mkdir() (#217917)
  - configure process numbers dynamically according to CPU and MEM (#226997)
  - link statically (#236242, #233307)
  - fixed rule for raw1394 (#233956)
  - added persistent device names for tape devices (#231990)
  - Resolves: rhbz#233956, rhbz#233307, rhbz#226997, rhbz#236242 
  - Resolves: rhbz#217917, rhbz#231990


author: Harald Hoyer <harald@redhat.com> - 095-14.5
changelog:
  - added symlink to /sbin/dasd_id (#219181)
  - added more debugging possibilities (#219621)
  - Resolves: rhbz#219181, rhbz#219621


author: Harald Hoyer <harald@redhat.com> - 095-14.1
changelog:
  - Do not ignore dm devices completly (rhbz#204157, rhbz#214639)
  - Remove tty devices from udev.nodes (rhbz#209204)
  - Resolves: rhbz#204157, rhbz#214639, rhbz#209204


author: Harald Hoyer <harald@redhat.com> - 095-9
changelog:
  - improved error msg for firmware_helper (bug #206944)
  - added xpram symlink to slram device nodes (bug #205563)
  - removed infiniband rules (bug #206224)
  - use newest path_id script (bug #207139)


author: Harald Hoyer <harald@redhat.com> - 095-7
changelog:
  - added udevtimeout=<timeout in seconds>
    kernel command line parameters for start_udev 
    (default is to wait forever)


author: Harald Hoyer <harald@redhat.com> - 089-1
changelog:
  - version 089
  - do not force loading of parport_pc (bug #186850)
  - manually load snd-powermac (bug #176761)
  - added usb floppy symlink (bug #185171)
  - start_udev uses udevtrigger now instead of udevstart


author: Harald Hoyer <harald@redhat.com> - 084-9
changelog:
  - create non-enum device (cdrom, floppy, scanner, changer)
    for compatibility (random device wins)
  	e.g. /dev/cdrom -> hdd
  	     /dev/cdrom-hdc -> hdc
               /dev/cdrom-hdd -> hdd


author: Harald Hoyer <harald@redhat.com> - 084-8
changelog:
  - fixed ZIP drive thrashing (bz #181041 #182601)
  - fixed enumeration (%e does not work anymore) (bz #183288)


author: Peter Jones <pjones@redhat.com> - 084-7
changelog:
  - Don't start udevd in %post unless it's already running
  - Stop udevd before chkconfig --del in %preun


author: Harald Hoyer <harald@redhat.com> - 084-4
changelog:
  - fixed group issue with vol_id (bz #181432)
  - fixed dvb permissions (bz #179993)
  - added support for scsi media changer (bz #181911)
  - fixed pktcdvd device creation (bz #161268)


author: Harald Hoyer <harald@redhat.com> - 078-4
changelog:
  - removed group "video" from the rules
  - fixed specfile
  - load nvram, floppy, parport and lp modules in
    /etc/sysconfig/modules/udev-stw.modules until there 
    is a better solution
  - fixed more floppy module loading


author: Harald Hoyer <harald@redhat.com> - 077-2
changelog:
  - switched back to udevstart and use active /dev/.udev/queue waiting 
    in start_udev
  - removed support for old kernels
  - refined some udev.rules


author: Harald Hoyer <harald@redhat.com> - 075-2
changelog:
  - moved /etc/udev/scripts to /lib/udev
  - moved /etc/udev/devices to /lib/udev/devices
  - added new event replay for kernel >= 2.6.15
  - added usb devices
  - renamed cpu device to cpuid (bug #161538)
  - changed vendor string "Onstream" to "On[sS]tream" (bug #173043)
  - compiled all *_id programs statically


author: Bill Nottingham <notting@redhat.com> - 062-2
changelog:
  - update to 062
  - use included ata_id, build usb_id
  - load modules for pci, usb, pcmcia
  - ship RELEASE-NOTES in %doc


author: Harald Hoyer <harald@redhat.com> - 056-1
changelog:
  - updated to version 056
  - merged permissions in the rules file
  - added udevpermconv.sh to convert old permission files


author: Harald Hoyer <harald@redhat.com> - 050-6
changelog:
  - introducing /etc/udev/makedev.d/50-udev.nodes
  - glibcstatic patch modified to let gcc4 compile udev


author: Harald Hoyer <harald@redhat.com> - 048-2
changelog:
  - fixed a case where reading /proc/ide/hd?/media returns EIO
    (bug rh#142713)
  - changed all device node permissions of group "disk" to 0640 
    (bug rh#110197)
  - remove $udev_db with -fr in case of a directory (bug rh#142962)


author: Harald Hoyer <harald@redhat.com> - 039-6.FC3.1
changelog:
  - speed up pam_console.dev
  - mount pts and shm, in case of the dev trigger
  - increased timeout for udevstart
  - removed syslog() from signal handler (caused vmware locks)
  - turned off logging, which speeds up the boot process


author: Harald Hoyer <harald@redhat.com> - 039-5
changelog:
  - added udev-039-norm.patch, which prevents removal of hd* devices,
    because the kernel sends remove/add events, if an IDE removable device
    is close(2)ed. mke2fs, e.g. would fail in this case.


author: Harald Hoyer <harald@redhat.com> - 039-4
changelog:
  - do not call dev.d scripts, if network interface hasn't changed 
    the name
  - correct wait for dummy network devices
  - removed NONBLOCK from volume-id
  - do not log in udev.static, which should fix bug 136005


author: Harald Hoyer <harald@redhat.com> - 039-2
changelog:
  - improved wait_for_sysfs for virtual consoles with Kay Siever's patch
  - wait for ppp class
  - wait for LVM dm- devices
  - integrate wait_for_sys in udev.static for the initrd


author: Harald Hoyer <harald@redhat.com> - 039-1
changelog:
  - version 039, fixes also manpage bug 135996 
  - fixed glibc issue for static version (getgrnam, getpwnam) (bug 136005)
  - close the syslog in every app


author: Harald Hoyer <harald@redhat.com> - 038-2
changelog:
  - par[0-9] is now a symlink to lp
  - MAKEDEV the parport devices
  - now conflicts with older initscripts


author: Harald Hoyer <harald@redhat.com> - 035-1
changelog:
  - version 035, which only improves wait_for_sysfs
  - load ide modules in start_udev, until a hotplug script is available
    (bug 135260)


author: Harald Hoyer <harald@redhat.com> - 034-3
changelog:
  - removed scary error messages from wait_for_sysfs
  - symlink from nst? -> tape?
  - kill udevd on update


author: Harald Hoyer <harald@redhat.com> - 034-1
changelog:
  - new version udev-034
  - removed patches, which went upstream
  - pam_console.dev link renamed to 05-pam_console.dev
  - MAKEDEV.dev links renamed to 10-MAKEDEV.dev


author: Harald Hoyer <harald@redhat.com> - 032-10
changelog:
  - added floppy madness (bug 134830)
  - replay scsi events in start_udev for the devices on the adapter (bug 130746)


author: Harald Hoyer <harald@redhat.com> - 032-9
changelog:
  - obsoleted $UDEV_LOG, use udev_log
  - correct SYMLINK handling in pam_console.dev
  - specfile cleanup
  - added check-cdrom.sh for nice cdrom symlinks


author: Harald Hoyer <harald@redhat.com> - 032-8
changelog:
  - added patches from Féliciano Matias for multiple symlinks (bug 134477 and 134478)
  - corrected some permissions with a missing leading 0
  - added z90crypt to the permissions file (bug 134448)
  - corrected requires and conflicts tags
  - removed /dev/log from MAKEDEV creation


author: Harald Hoyer <harald@redhat.com> - 032-4
changelog:
  - made /etc/udev/devices/ for manual device nodes
  - refined SELINUX check, if /dev is not yet mounted in start_dev


author: Harald Hoyer <harald@redhat.com> - 032-3
changelog:
  - corrected permissions for /dev/rtc (bug 133636)
  - renamed device-mapper to mapper/control (bug 133688)


author: Harald Hoyer <harald@redhat.com> - 030-27
changelog:
  - simplified udev.conf
  - refined close_on_exec patch
  - added pam_console supply for symlinks, now gives correct permissions,
    for e.g. later plugged in cdroms
  - renamed sr? to scd? (see devices.txt; k3b likes that :)


author: Jeremy Katz <katzj@redhat.com> - 030-26
changelog:
  - require a 2.6 kernel
  - prereq instead of requires MAKEDEV
  - obsolete and provide dev
  - add a trigger for the removal of /dev so that we set things up


author: Harald Hoyer <harald@redhat.com> - 030-21
changelog:
  - applied enumeration patch from David Zeuthen for cdrom symlinks (bug 131532)
  - create /dev/ppp in start_udev (bug 131114)
  - removed nvidia devices from start_udev
  - check for restorecon presence in start_udev (bug 131904)


author: Harald Hoyer <harald@redhat.com> - 030-16
changelog:
  - moved %{_sysconfdir}/hotplug.d/default/udev.hotplug to %{_sysconfdir}/hotplug.d/default/10-udev.hotplug


author: Harald Hoyer <harald@redhat.com> - 030-15
changelog:
  - added nvidia devices to start_udev
  - added UDEV_RAMFS for backwards compat to udev.conf
  - changed Group (bug 131488)
  - added libselinux-devel to build requirements


author: Jeremy Katz <katzj@redhat.com> - 030-11
changelog:
  - use tmpfs instead of ramfs (it has xattr support now)
  - change variables appropriately to TMPFS intead of RAMFS in udev.conf
  - create loopN, not just loop in start_udev


author: Harald Hoyer <harald@redhat.com> - 030-8
changelog:
  - changed defaults not to remove device nodes
  - added rule for net/tun
  - extended start_udev to create devices, which can trigger module autoloading
  - refined cloexec patch, to redirect stdin,out,err of /dev.d execed apps to /dev/null


author: Harald Hoyer <harald@redhat.com> - 030-7
changelog:
  - removed usage of /usr/bin/seq in start_udev
  - set correct permissions in start_udev
  - extended the cloexec patch
  - removed udev-persistent package (define with_persistent==0)
  - check for /var/run/console/console.lock before calling /sbin/pam_console_setowner
  - linked pam_console_setowner statically against libglib-2.0.a


author: Harald Hoyer <harald@redhat.com> - 029-3
changelog:
  - put /etc/sysconfig/udev in /etc/udev/udev.conf and removed it
  - made only udev.static static
  - make our defaults the default values
  - removed /udev


author: Harald Hoyer <harald@redhat.com> - 026-2
changelog:
  - udev-026
  - preserve ownership of device nodes, which already exist
  - do not remove device nodes if UDEV_REMOVE="no"
  - added volume_id
  - build with klibc


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - add some more files to the documentation directory
  - add ability to build scsi_id and make it the default


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - fix up udevd build, as it's no longer needed to be build seperatly
  - add udevtest to list of files
  - more Red Hat sync ups.


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - add udevsend, and udevd to the files
  - add ability to build udevd with glibc after the rest is build with klibc


author: Robert Love <rml@tech9.net>
changelog:
  - Make work without a build root
  - Correctly install the right files
  - Pass the RPM_OPT_FLAGS to gcc so we can build per the build policy
  - Put some prereqs in
  - Install the hotplug symlink to udev


author: Jiri Popelka <jpopelka@redhat.com> - 0.6.6-5
changelog:
  - Fixed ZeroDivisionError (#709459)
  - Changed shebang /usr/bin/env python -> /usr/bin/python (#521340)


author: Scott Baker <scott@perturb.org> - 0.6.3-5
changelog:
  - Removed the execute permission from the examples directory
  - Fixed the changelog to remove the replaceable %clean


author: Scott Baker <scott@perturb.org> - 0.6.3-4
changelog:
  - Removed some commeted lines in the .spec file that weren't needed
  - Changed the permissions on the examples/* scripts
  - Converted the HTML documentation to unix line endings
  - Removed the erroneous commenting of the %clean section of the .spec


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-6
changelog:
  - fixed Label size computed wrong within a Form (rhbz#583977)
  - fixed LabelGadget draws background over border of its parent (rhbz#584287)
    and LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1517 and #1521)
  - fixed memory leaks from OpenMotif 2.3.3 (rhbz#644824)
    (MotifZone bug #1388 refixed and #1502)
  - fixed invisible XFT text for insensitive labels (rhbz#684210)
    (missing parts of MotifZone bug #1381)
  - fixed im_widget double-free issue (rhbz#695650)
    (MotifZone bug #1534)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-3
changelog:
  - fixed BadDrawable error (rhbz#557453)
  - fixed MultiList not displayed properly (mzbz#1453) (rhbz#568730)
  - fixed invisible insensitive labels, buttons, icons and list entries
    (mzbz#1381) (rhbz#568730)
  - fixed XmNaccelerator do not work with CapsLock/ScrollLock/NumLock
    modifiers (mzbz#345) (rhbz#492529)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.14-8
changelog:
  - XML-LibXML use triggers for XML::SAX update. Deleting of settings in
   ParserDetails.ini is solved by post and preun part, which create backup.
  - Resolves: rhbz#536819


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.14-7
changelog:
  - post scriptlet needs to check whether the file is installed. When it isn't,
   then it's needed a call for adding PurePerl parser
   http://perl-xml.sourceforge.net/faq/#parserdetails.ini
  - Resolves: rhbz#536819


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.14-6
changelog:
  - 289061 add post and preun part which should fix ghost problem
  - 475250 upstream patch http://rt.cpan.org/Public/Bug/Display.html?id=26588
  - Resolves: rhbz#475250, rhbz#289061


author: Ville Skyttä <ville.skytta at iki.fi> - 0.12-7
changelog:
  - #121167
  - Handle ParserDetails.ini parser registration.
  - Require perl(:MODULE_COMPAT_*).
  - Own installed directories.


author: Ondrej Vasik <ovasik@redhat.com> 2:1.15.1-31
changelog:
  - tar can incorrectly seek when extracting a tarball and reaching
    ENOSPC (#643111)
  - tar no longer dumps core (just shows an error) when updating
    gzipped/bzipped archive(#675693)
  - document --no-overwrite-dir option in manpage(#698618)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.15.1-30
changelog:
  - CVE-2007-4476 - fix stack crashing in safer_name_suffix
  - CVE-2010-0624 - fix heap-based buffer overflow by expanding
    a specially-crafted archive


author: Ondrej Vasik <ovasik@redhat.com> 2:1.15.1-25
changelog:
  - do process install-info only without --excludedocs(#530955)
  - provide symlink manpage for gtar (#530956)
  - add BuildRequires for rsh(#294661)
  - fix off-by-one errors in xattrs patch (#472553)
  - do not remove old files with --keep-newer-files (#495686)
  - fix restoring of directory default acls(#512097)
  - fix various problems with tar xattrs(#518208)
  - do interpret --no-wildcards option right(#510714)


author: Peter Vrabec <pvrabec@redhat.com> 2:1.15.1-23
changelog:
  - Fix default ACLs on files problem. Header fixes. root => trusted.
  - Fix NIL termination for ACLs.
  - Fix star/POSIX compat. for ACLs
  - Resolves: #221971
  - all fixes made by james.antill@redhat.com


author: Peter Vrabec <pvrabec@redhat.com> 1.15.90-4
changelog:
  - fix problem with unpacking archives in a directory for which 
    one has write permission but does not own (such as /tmp) (#149686)


author: Peter Vrabec <pvrabec@redhat.com> 1.15.1-12
changelog:
  - fix extracting sparse files to a filesystem like vfat,
    when ftruncate may fail to grow the size of a file.(#179507)


author: Peter Vrabec <pvrabec@redhat.com> 1.15.1-5
changelog:
  - extract sparse files even if the output fd is not seekable.(#154882)
  - (sparse_scan_file): Bugfix. offset had incorrect type.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.13.19-5
changelog:
  - Fix build with current autoconf (stricter checking on AC_DEFINE)
  - Fix segfault when tarring directories without having read permissions
    (#40802)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix hang on tar tvzf - <something.tar.gz, introduced by
    exit code fix (Bug #15448), Patch from Tim Waugh <twaugh@redhat.com>


author: Bernhard Rosenkranzer <bero@redhat.com>
changelog:
  - 1.13.14
  - Update man page to know about -I / --bzip
  - Remove dependancy on rmt - tar can be used for anything local
    without it.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to tar-1.12.64013.
  - subtract (and reopen #2415) bzip2 support using -y.
  - move gtar to /bin.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Fiddle bindir/libexecdir to get RH install correct.
  - Don't include /sbin/rmt -- use the rmt from dump.
  - Turn on nls.


author: Adam Tkac <atkac redhat com> 30:9.3.6-11.P1
changelog:
  - /etc/sysconfig/named can be modified, don't verify it's md5/size/mtime (#556770)
  - resolver could have destroyed fetch too early (#555848)
  - replace bind-9.3.1-next_server_on_referral.patch by bind93-rh625240.patch (#625240)


author: Adam Tkac <atkac redhat com> 30:9.3.6-10.P1
changelog:
  - add possibility not to call named-checkzone for every zone during startup (#500896)
  - bind-chroot-admin: don't touch chroot environment when modified by user (#517279)


author: Adam Tkac <atkac redhat com> 30:9.3.6-9.P1
changelog:
  - don't crash due use-after-free in D-Bus related code (#523052)
  - if connection to PG database failed, retry it during every lookup (#533229)
  - initscript: terminate only the correct named process (#500535)


author: Adam Tkac <atkac redhat com> 30:9.3.6-8.P1
changelog:
  - handle broken DNSSEC chains better (#572848)
  - host: handle "debug", "attempts" and "timeout" options in resolv.conf (#570851)
  - host/dig: query servers specified on commandline instead of in resolv.conf (#561299)


author: Adam Tkac <atkac redhat com> 30:9.3.6-7.P1
changelog:
  - add manpages for binaries in -sdb subpkg (#556798)
  - drop useless bind-9.3.1beta2-openssl-suffix.patch (#546477)
  - fix "service named configtest" return value (#530214)


author: Adam Tkac <atkac redhat com> 30:9.3.6-6.P1
changelog:
  - NSEC validation code could cause wrong NXDOMAIN responses (#554851,
    CVE-2010-0097)
  - improve fix for CVE-2009-4022 (#538744)
    - {C,D}NAMEs could be returned to clients without proper DNSSEC validation
    - don't validate + cache out-of-bailiwick data returned with a secure answer.
      Refetch it instead.


author: Adam Tkac <atkac redhat com> 30:9.3.6-1.P1
changelog:
  - backport allow-query-cache option to control access for all non-authoritative
    data (#483708)
  - add support for dynamically loadable database backends (#479273)
  - named-checkconf now checks ACLs validity (#496495)
  - update sample configuration file to address "DNS reflector" attacks (#485393)


author: Adam Tkac <atkac redhat com> 30:9.3.6-0.3.P1
changelog:
  - handle named_write_master_zones SELinux boolean and /var/named perms
    relationship as documented (#494370)
  - handle unknown DLV algorithms well (#491655)
  - remove useless glibc-kernheaders BuildReq
  - print nicer error message when configuration file is directory (#490837)
  - named-checkconf handles "check-names" directive well (#491400)


author: Adam Tkac <atkac redhat com> 30:9.3.6-0.2.P1
changelog:
  - select correct nameservers when dig/host is called with -4 param (#469441)
  - add support for "master-only" notify type (#477651)
  - own chroot/var/log directory (#481803)
  - don't call bind-chroot-admin automatically during installation/update/remove
    of bind-chroot package. It broke too many configurations (#480156)


author: Adam Tkac <atkac redhat com> 30:9.3.6-0.1.P1
changelog:
  - rebased to 9.3.6-P1 (#457036), updated patches
  - patches merged
    - bind-bsdcompat.patch
    - bind-9.2.2-nsl.patch
    - bind-9.3-CVE-2008-1447.patch
    - bind93-rh458932.patch
    - bind-9.3-dbus-race.patch
    - bind-9.3-l_server.patch
    - bind-9.3-CVE-2008-0122.patch
    - bind93-dsa_verify.patch
    - bind-9.3.1-dbus_archdep_libdir.patch
    - bind-9.3.2-prctl_set_dumpable.patch
    - libbind-9.3.1rc1-fix_h_errno.patch


author: Adam Tkac <atkac redhat com> 30:9.3.4-8.9.P1
changelog:
  - don't crash when certain subdomain is used as rndc reload argument (#457533)
  - return nonzero value from initscript when named fails to reload (#457984)
  - accept krb5-self and krb5-subdomain update-policy matches (#457932)


author: Adam Tkac <atkac redhat com> 30:9.3.4-8.2.P1
changelog:
  - bind-sdb scripplet sets /etc/openldap/slapd.conf ownership correcly (#437789)
  - revised permissions of executables and scripts (#441495)
  - set open files limit to unlimited by default as described in documentation
    (#458932)


author: Adam Tkac <atkac redhat com> 30:9.3.4-5.P1
changelog:
  - improved patch to handle D-BUS races (#240876)
  - updated named.root zone to affect root IPv6 migration


author: Adam Tkac <atkac redhat com> 30:9.3.4-0.9.P1
changelog:
  - fixed building of SDB stuff (#240788)
  - fixed race condition during DBUS initialization (#240876)
  - initscript LSD standardization (#242734)
  - improved rndc freeze/thaw <zonename> command (#247148)
  - fixed wrong perms of named's ldap schema (#250118)
  - supressed errors from chroot's specfile scripts (#252334)
  - fixed ${chroot}/dev/random SELinux labelling
  - added configtest to usage report from named initscript (#250744)
  - fixed rndc stop return value handler (#250901)
  - fixed named.log sync in bind-chroot-admin (#247486)
  - rebased to latest 9.3 maintenance release (9.3.4-P1, #353741)
  - updated named.root file (new L.ROOT-SERVERS.NET, #363531)
  - added GSS-TSIG support to named (#251528)
    - dropped patches (upstream)
      - bind-9.3.4.P1-query-id.patch
      - bind-9.3.3rc2-dbus-0.6.patch
      - bind-9.3.4-validator.patch
      - bind-9.3.4-nqueries.patch
    - updated patches
      - bind-9.3.2-tmpfile.patch


author: Adam Tkac <atkac redhat com> - 30:9.3.3-9
changelog:
  - added fix for #224445 - CVE-2007-0493 BIND might crash after 
    attempting to read free()-ed memory (stransky@redhat.com)
  - added fix for #225229 - CVE-2007-0494 BIND dnssec denial of service
    (stransky@redhat.com)
  - initscript now unmounts /proc filesystem correctly
    (#212549, stransky@redhat.com)
  - dnssec-signzone now accepts -d option correctly (#230667)


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
changelog:
  - added fix for #213630: EDNS is globally enabled,
    crashing CheckPoint FW-1
  - Resolves: rhbz##213630


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
changelog:
  - added fix from #209400 - Bind Init Script does not create 
    the PID file always, created by Jeff Means
  - added timeout to stop section of init script. 
    The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
    shell variable.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
changelog:
  - fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
  - fix for #202547 - file_contexts: invalid context


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
changelog:
  - fix addenda to bug 189789: 
    determination of selinux enabled was still not 100% correct in bind-chroot-admin
  - fix addenda to bug 196398:
    make named.init test for NetworkManager being enabled AFTER testing for -D absence;
    named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
    auto-enable of named dbus support if NetworkManager enabled.


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
changelog:
  - fix bug 196398 - Enable -D option automatically in initscript
    if NetworkManager enabled in any runlevel.
  - fix namedGetForwarders for new dbus
  - fix bug 195881 - libbind.so should be owned by bind-libbind-devel


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
changelog:
  - fix bugs 191093, 189789
  - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
    ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
    o change 2024 / bug 16027:
      named emitted spurious "zone serial unchanged" messages on reload
    o change 2013 / bug 15941:
      handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
    o change 2009 / bug 15808: coverity fixes
    o change 1997 / bug 15818: 
      named was failing to replace negative cache entries when a positive one
      for the type was learnt
    o change 1994 / bug 15694: OpenSSL 0.9.8 support
    o change 1991 / bug 15813:
      The configuration data, once read, should be treated as readonly.
    o misc. validator fixes 
    o misc. resolver fixes
    o misc. dns fixes
    o misc. isc fixes
    o misc. libbind fixes
    o misc. isccfg fix
    o misc. lwres fix
    o misc. named fixes
    o misc. dig fixes
    o misc. nsupdate fix
    o misc. tests fixes


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
changelog:
  - apply upstream patch for ncache_adderesult segfault bug 173961 addenda
  - fix bug 188382: rpm --verify permissions inconsistencies
  - fix bug 189186: use /sbin/service instead of initscript
  - rebuild for new gcc, glibc-kernheaders


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
changelog:
  - fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
    (upstream bugs #15642, #15528 ?)
  - allow named ability to generate core dumps after setuid (upstream bug #15753)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
changelog:
  - fix bug 187286: 
       prevent host(1) printing duplicate 'is an alias for' messages
       for the default AAAA and MX lookups as well as for the A lookup
       (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
       This is upstream bug #15702 fixed in the unreleased bind-9.3.3
  - fix bug 187333: fix SOURCE24 and SOURCE25 transposition


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
changelog:
  - fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
  - add '%doc' sample configuration files in /usr/share/doc/bind*/sample
  - rebuild with new gcc and glibc


author: Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
changelog:
  - Do not allow package to be installed if named:25 userid creation fails
  - Give libbind a pkg-config file
  - remove restorecon from bind-chroot-admin (not required).
  - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
changelog:
  - replace caching-nameserver with bind-config sub-package
  - fix bug 177595: handle case where $ROOTDIR is a link in initscript
  - fix bug 177001: bind-config creates symlinks OK now
  - fix bug 176388: named.conf is now never replaced by any RPM
  - fix bug 176248: remove unecessary creation of rpmsave links
  - fix bug 174925: no replacement of named.conf
  - fix bug 173963: existing named.conf never modified
  - major .spec file cleanup


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
changelog:
  - regenerate redhat_doc patch for non-DBUS builds
  - allow dbus builds to work with dbus version < 0.6 (bz #179816)


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
changelog:
  - allow D-BUS support to work in bind-chroot environment:
    workaround latest selinux policy by mounting /var/run/dbus/
    under chroot instead of /var/run/dbus/system-bus-socket


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
changelog:
  - fix bug 172632 - remove .la files
  - ship namedGetForwarders and namedSetForwarders scripts
  - fix detection of -D option in chroot


author: Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
changelog:
  - Allow the -D enable D-BUS option to be used within bind-chroot .
  - fix bug 171226: supply some documentation for pgsql SDB .


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
changelog:
  - fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
        task->state != task_ready and will cause Abort in task.c if process
        is waiting for NameOwnerChanged to do a SetForwarders


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
changelog:
  - fix bug 168302: use gcc for compiling dns-keygen
  - fix bug 167682: bind-chroot directory permissions
  - fix issues with -D dbus option when dbus service not running or disabled


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
changelog:
  - Build with D-BUS patch by default; D-BUS support enabled with named -D option
  - Enable D-BUS for named_sdb also
  - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
  - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
  - fix named.init script to handle named_sdb properly
  - fix named.init script checkconfig() to handle named '-c' option
    and make configtest, test, check configcheck synonyms


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
changelog:
  - fix bug 160914: resolver utilities should try next server on empty referral
                    (now that glibc bug 162625 is fixed)
  		  host and nslookup now by default try next server on SERVFAIL
  		  (host now has '-s' option to disable, and nslookup given
                     '[no]fail' option similar to dig's [no]fail option).
  - rebuild and re-test with new glibc & gcc (all tests passed).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
changelog:
  - fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
                    files and not use uninitialized garbage nameserver values
                    (ISC bug 14841 raised).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
changelog:
  - Fix bug 157601: give named.init a configtest function
  - Fix bug 156797: named.init should check SELinux booleans.local before booleans
  - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
  - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
                    BIND quirks and SELinux DDNS / slave zone file configuration
  - D-BUS patches NOT applied until dhcdbd is in FC


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
changelog:
  - Enhancement to allow dynamic forwarder table management and
  - DHCP forwarder auto-configuration with D-BUS


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
changelog:
  - Rebuild for bind-sdb libpq.so.3 dependency
  - fix bug 150981: don't install libbind man-pages if no libbind
  - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
    to work and correct number of CPUs to be determined


author: Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
changelog:
  - fix bug 150288: h_errno not being accessed / set correctly in libbind
  - add libbind man-pages from bind-8.4.6


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
changelog:
  - Upgrade to 9.3.1rc1
  - Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
  -     add named_sdb - ldap + pgsql + dir database backend support with
  -     'ENABLE_SDB' named.sysconfig option
  - Add BIND resolver library & includes sub-package ( libbind-devel)
  - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
  - fix bug 146084 : shutup restorecon


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
changelog:
  - Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
  -                 based on 'named_write_master_zones' SELinux boolean.
  - Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
changelog:
  - Fix bugs 140528 and 141113:
  - 2 second timeouts when IPv6 not configured and root nameserver's
  - AAAA addresses are queried


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
changelog:
  - Fix bug 136243: bind-chroot %post must run restorecon -R /var/named/chroot
  - Fix bug 135175: named.init must return non-zero if named is not run
  - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named
  - Fix bug 133423: bind-chroot %files entries should have been %dirs


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
changelog:
  - BIND 9.2.4 (final release) released - source code actually
  - identical to 9.2.4rc8, with only version number change.


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
changelog:
  - Upgrade to upstream bind-9.2.4rc8 .
  - Progress: Finally! Hooray! ISC bind now distributes:
  - o named.conf(5) and nslookup(8) manpages
  -    'bind-manpages.bz2' source can now disappear
  -    (could this have something to do with ISC bug I raised about this?)
  - o 'deprecation_msg' global has vanished
  -     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
changelog:
  - Fix bug 132303: if ROOTDIR line was replaced after upgrade from
  - bind-chroot-9.2.2-21, restart named


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
changelog:
  - Fix bug 131803: replace ROOTDIR line removed by broken
  - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
changelog:
  - Fix bug 130121: add '%ghost' entries for files included in previous
  - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
  - that RPM removed after upgrade .


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fix bug 130981: add '-t' option to named-checkconf invocation in
  - named.init if chroot installed.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Remove resolver(5) manpage now in man-pages (bug 130792);
  - Don't create /dev/ entries in bind-chroot if already there (bug 127556);
  - fix bind-devel Requires (bug 130919)
  - Set default location for dumpdb & stats files to /var/named/data


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed bug 129289: bind-chroot install / deinstall
  - on install, existing config files 'safe_replace'd
  - with links to chroot copies; on uninstall, moved back.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed named.init generation of error messages on
  - 'service named stop' and 'service named reload'
  - as per bug 127775


author: Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
changelog:
  - Fix config description of named.conf in chroot
  - Change named.init script to check for existence of /etc/sysconfig/network


author: Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
changelog:
  - Fix log rotate to use service named reload
  - Change service named reload to give success/failure message [73770]
  - Fix File checking [75710]
  - Begin change to automatically run in CHROOT environment


author: Karsten Hopp <karsten@redhat.de> 9.2.1-7
changelog:
  - fix name of pidfine in logrotate script (#68842)
  - fix owner of logfile in logrotate script (#41391)
  - fix nslookup and named.conf man pages (output on stderr)
    (#63553, #63560, #63561, #54889, #57457)
  - add rfc1912 (#50005)
  - gzip all rfc's
  - fix typo in keygen.c (#54870)
  - added missing manpages (#64065)
  - shutdown named properly with rndc stop (#62492)
  - /sbin/nologin instead of /bin/false (#68607)
  - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
  - don't kill initscript when rndc fails (reload)    (#58750)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
changelog:
  - Move libisccc, lib isccfg and liblwres from bind-utils to bind,
    they're not required if you aren't running a nameserver.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
changelog:
  - Don't exit if /etc/named.conf doesn't exist if we're running
    chroot (#60868)
  - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
    versions or bug #58335 will be back. "It compiles, therefore it works"
    isn't always true.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
changelog:
  - 9.2.0rc3
  - remove ttl patch, I don't think we need this for 8.0.
  - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
  - add lwres* man pages to -devel


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
changelog:
  - Make sure /etc/rndc.conf isn't world-readable even after the
    %post script inserted a random key (#53009)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
changelog:
  - Add build dependencies (#49368)
  - Make sure running service named start several times doesn't create
    useless processes (#47596)
  - Work around the named parent process returning 0 even if the config
    file is broken (it's parsed later by the child processes) (#45484)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
changelog:
  - Add named.conf man page from bind 8.x (outdated, but better than nothing,
    - Rename the rndc key (#42895)
  - Add dnssec* man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
changelog:
  - 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
    the version number, though.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
changelog:
  - Work around bind 8 -> bind 9 migration problem when using buggy zone files:
    accept zones without a TTL, but spew out a big fat warning. (#31393)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't use the standard rndc key from the documentation, instead, create a random one
    at installation time (#26358)
  - Make /etc/rndc.conf readable by user named only, it contains secret keys


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
    from 9.1.1rc2
  - bind requires bind-utils (#28317)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
    1 was fixed in a Red Hat patch already, 2 others are portability
    improvements)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Make /etc/rndc.conf and /etc/sysconfig/named noreplace
  - Make devel require bind = %{version} rather than just bind


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move run files to /var/run/named/ - /var/run isn't writable
    by the user we're running as. (Bug #20665)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed logrotate script (wrong path to kill)
  - include header files in -devel package
  - bugzilla #22049, #19147, 21606


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - Fix up the initscript (Bug #13033)
  - Fix build with current glibc (Bug #12755)
  - /etc/rc.d/init.d -> /etc/init.d
  - use %{_mandir} rather than /usr/share/man


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify logrotate setup to use PID file
  - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
  - actually bump the release this time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - provide /var/named (fix for bugs #9847, #10205)
  - preserve args when restarted via ndc(8) (bug #10227)
  - make resolv.conf(5) a link to resolver(5) (bug #10245)
  - fix SYSTYPE bug in all makefiles
  - move creation of named user from %post into %pre


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of named-bootconf.pl and make it executable
    (Bug #8028)
  - bind-devel requires bind


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use real stop and start in named.init for restart, not ndc restart, it has
    problems when named has changed during a package update... (# 4890)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 8.2.1.
  - add named.logrotate (#3571).
  - hack around egcs-1.1.2 -m486 bug (#3413, #3485).
  - vet file list.


author: Stepan Kasal <kasal@math.cas.cz>
changelog:
  - nslookup patched:
    to count numRecords properly
    to fix subsequent calls to ls -d
    to parse "view" and "finger" commands properly
    the view hack updated for bind-8 (using sed)


author: Manuel J. Galan <manolow@step.es>
changelog:
  - Several essential modifications to build and install correctly.
  - Modified 'ndc' to avoid deprecated use of '-'


author: Scott Lampert <fortunato@heavymetal.org>
changelog:
  - Used buildroot
  - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
    on Redhat 5.0 instead of <nlist.h>


author: Adam Tkac <atkac redhat com> 32:9.7.0-6.P2.1
changelog:
  - work correctly when new DS is introduced in the trusted DNS tree (#675467)
  - include root zone DNSKEY (#693788)


author: Adam Tkac <atkac redhat com> 32:9.7.0-4.P2
changelog:
  - replace bind97-rh507429.patch by improved bind97-rh643102.patch
  - don't pass unsupported "-N" option to useradd (#643323)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-15.el5
changelog:
  - revert init script priority (#470945, #689636)
  - drop tentative patch (#489835)
  - move restorecon call to %posttrans


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-13.el5
changelog:
  - don't crash with more than 512 local addresses (#661934)
  - add -I option (#528799)
  - fix -L option to not require argument (#460434)
  - move ntpd and ntpdate to /sbin and start earlier on boot (#470945, #689636)
  - increase memlock limit (#575874)
  - ignore tentative addresses (#489835)
  - print synchronization distance instead of dispersion in ntpstat (#679034)
  - fix typos in ntpq and ntp-keygen man pages (#664524, #664525)
  - clarify ntpd -q description (#591838)
  - don't verify ntp.conf (#481151)
  - replace Prereq tag


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-11.el5
changelog:
  - fix buffer overflow when parsing Autokey association message 
    (#500784, CVE-2009-1252)
  - fix buffer overflow in ntpq (#500784, CVE-2009-0159)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-9.el5
changelog:
  - fix selecting multicast interface (#444106)
  - disable kernel discipline when -x option is used (#431729)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-8.el5
changelog:
  - avoid use of uninitialized floating-point values in clock_select (#250838)
  - generate man pages from html source, include config man pages (#307271)
  - add note about paths and exit codes to ntpd man page (#242925, #246568)
  - add section about exit codes to ntpd man page (#319591)
  - always return 0 in scriptlets


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-6.el5
changelog:
  - fix broadcast client to accept broadcasts on 255.255.255.255 (#226958)
  - compile with crypto support on 64bit architectures (#239580)
  - add ncurses-devel to buildrequires (#239580)
  - exit with nonzero code if ntpd -q did not set clock (#240134)
  - fix return codes in init script (#240118)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2-3
changelog:
  - fix manycast support in ntpdate (#194329)
  - reply to manycast requests with null refid
  - enable mlockall (#195617)
  - correct threshold value in ntpdate manpage


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-14
changelog:
  - modify ntp.conf, change default restrict, remove broadcastdelay,
    use fedora.pool.ntp.org (#189667)
  - don't install drift file
  - remove unsupported options from ntptrace manpage (#137717)
  - fix default paths in manpages for ntp-keygen and ntpdate


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-12
changelog:
  - fix initscript:
    - replace -U with -u in getopts (#187003)
    - don't pass group to ntpdate -U argument and ignore -i in options (#142926)
    - set ntpconf for -c
    - remove -p 8 from ntpdate arguments
    - don't call ntpdate when step-tickers doesn't contain anything useful
      and -x isn't in options
  - fix default keyfile for ntpdate (#183196)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-11
changelog:
  - update man pages (#153195, #162856)
  - drop C-Frame-121, vsnprintf, minusTi and loconly patch
  - prevent segfault when loopback interface is not configured (#159056)
  - spec cleanup


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-10
changelog:
  - ntpd does not submit his local clock (if there is no peer).
    ntpdate->ntpd #163862 , Patch13: ntp-stable-4.2.0a-20050816-loconly.patch


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-3
changelog:
  - A similar patch as ntp-4.0.99j-vsnprintf.patch in FEDORA CORE 4
  - (current patch is ntp-stable-4.2.0a-20050816-vsnprintf.patch)


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-2
changelog:
  - Fix fails on upgrade, if ntpd is disabled (#166773)
  - A cosmetic patch. There are some comments and braces '{' '}' added.
  - One unprintable character was converted to octal-form .
  - It can be removed anytime (conversion of the cvs-projets for C-Frame 121,
  - (auto-debug, auto-trace for cfr-printnet server).


author: Jindrich Novy <jnovy@redhat.com> 4.2.0.a.20050816-1
changelog:
  - update to the latest stable 4.2.0.a.20050816
  - drop upstreamed .gcc4, .vsnprintf patches
  - remove obsolete .autofoo patch
  - make patch numbering less chaotic
  - don't package backup for .droproot patch


author: Harald Hoyer <harald@redhat.com> - 4.2.0.a.20040617-4
changelog:
  - removed firewall hole punching from the initscript; rely on iptables
    ESTABLISHED,RELATED or manual firewall configuration


author: Harald Hoyer <harald@redhat.de> 4.1.1b-1
changelog:
  - updated to version 4.1.1b
  - improved initscript - use ntpdate on -x
  - improved initscript - open firewall only for timeservers
  - ntp-4.1.1a-adjtime.patch removed (already in source)
  - ntp-4.1.1a-mfp.patch removed (already in source)
  - ntp-4.0.99j-vsnprintf.patch removed (already in source)


author: Harald Hoyer <harald@redhat.de> 4.1.0b-4
changelog:
  - created drift with dummy value #58294
  - grep for timeservers in ntp.conf also for ntpdate #57837
  - check return value of ntpdate #58836


author: Harald Hoyer <harald@redhat.de> 4.1.0-1
changelog:
  - wow, how stupid can a man be ;).. fixed #50698 
  - updated to 4.1.0 (changes are small and in non-critical regions)


author: Harald Hoyer <harald@redhat.de>
changelog:
  - new snapshot
  - removed typos and security patch (already there)
  - commented multicastclient in config file


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Add the remote root exploit patch (based on ntp-hackers).
  - Enhance droproot patch (more documentation, etc.) <Jarno.Huuskonen@uku.fi>
  - Tweak the droproot patch to include sys/prctl.h, not linux/prctl.h
  (implicit declarations)
  - Remote groupdel commands, shouldn't be needed.
  - Removed -Wcast-qual and -Wconversion due to excessive warnings (hackish).
  - Make ntp compilable with both glibc 2.1 and 2.2.x (very dirty hack)
  - Add %{_sysconfdir}/sysconfig/ntpd which drops root privs by default


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - require/buildprereq libcap/libcap-devel
  - use 'ntp' user, tune the pre/post scripts, %files
  - add $OPTIONS to the init script


author: Preston Brown <pbrown@redhat.com>
changelog:
  - allow comments in %{_sysconfdir}/ntp/step-tickers file (#28786).
  - need patch0 (glibc patch) on ia64 too


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - comment out default values for keys, warn about starting with -A (#19316).
  - take out -A from ntpd startup as well.
  - update to 4.0.99k.


author: Petr Sabata <contyk@redhat.com> - 2.6.18-13
changelog:
  - Correct lnstat usage (dump, keys)
  - Resolves: rhbz#645264
  - Correct arpd usage (various missing options), based on Petr Lautrbach's patch
    for bug 592266
  - Resolves: rhbz#645260
  - Correct ss usage (query, diag)
  - Resolves: rhbz#645267


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.18-10
changelog:
  - “ip maddr show” on an infiniband address causes a stack corruption 
   because the length of the address for Infiniband
  - Resolves: rhbz#472878


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.18-8
changelog:
  - change ss.c - use standart library
  - fix segfault - only hexadecimal keys are possible values for xfrm
  - support for TCP_RTO_MIN
  - update of man ip - xfrm details
  - IPv6 Default Address Selection - User Configurable Policy Table
  - Resolves: rhbz#446198, rhbz#449933, rhbz#358351, rhbz#431011, rhbz#439524


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.18-7
changelog:
  - [iPv6DoD] fix RFC 4309 Using AES CCM Mode with IPsec ESP
  - change xfrm.h header according to ibm patch
  - Resolves: #441384


author: Radek Vokal <rvokal@redhat.com> - 2.6.18-1
changelog:
  - upgrade to upstream 2.6.18
  - initcwnd patch merged
  - bug fix for xfrm monitor
  - alignment fixes for cris
  - documentation corrections


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-14
changelog:
  - Fixed -f option for ss (#118355).
  - Small description fix (#110997).
  - Added initialization of some vars (#74961). 
  - Added patch to initialize "default" rule as well (#60693).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Updated to latest version. Used by other distros, so seems stable. ;-)
  - Quite a few patches needed updating in that turn.
  - Added ss (#107363) and several other new nifty tools.


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-3
changelog:
  - Fixed missing diffserv and atm support in config (#57278).
  - Fixed inconsistent numeric base problem for command line (#65473).


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to iproute2-2.2.4-now-ss001007.tar.gz 
  - bzip2 source tar file
  - "License" replaces "Copyright"
  - added "BuildPrereq: tetex-latex tetex-dvips psutils"
  - rebuilt for 7.2


