<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="101">
<package pkgid="d9269a0b7bbb4abbccc63ee21fa8645e8b4a8b8a" name="clamav" arch="i386"><version epoch="0" ver="0.97.3" rel="3.el5"/><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97.3-3" date="1325455200">- Revert patch from 0.97.3-2</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97.3-1" date="1318975200">- Update to 0.97.3
- Fix CVE-2011-3627 clamav: Recursion level crash fixed in v0.97.3</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-5" date="1312495200">- Configure MilterSocket, PidFile and MilterSocket in clamav-milter.conf.
  (bz#727894)</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-3" date="1311804000">- Handle xz archives in rpmbuilds &lt; RHEL6.
- include updated clamd-wrapper which get the PidFile setting from the
  service configuration file.</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-3" date="1311804000">- Handle xz archives in rpmbuilds &lt; RHEL6.</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-2" date="1311804000">- updated to 0.97.2
- Build-require xz
- CVE-2011-2721 Off-by-one error by scanning message hashes (#725694)</changelog><changelog author="Jeroen van Meeuwen &lt;kanarip@kanarip.com&gt; - 0.97-14" date="1310680800">- Make clamd-wrapper get the PidFile setting from the service
  configuration file.</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97-14" date="1309384800">- Require /usr/sbin/sendmail instead of sendmail</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-13" date="1303855200">- Obsolete and provide clamav-milter-sysvinit (bz#696856)</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-12" date="1301522400">- Move deletion of /var/lib/clamav/mirrors.dat to db package.
- Don't enable NotifyClamd in freshclam config and cronjob, as not
  everybody is running clamd. Running clamd's will anyway notice
  when db is updated.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-11" date="1300485600">- Delete /var/lib/clamav/mirrors.dat, it will be recreated on first run.
- clamav-milter config cleanups.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-10" date="1300312800">- Make sure /var/lib/clamav/mirrors.dat has owner fixed on upgrade.
- Don't start clamd or milter service by default.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-7" date="1300226400">- rpm-provide all old package names that are now obsoleted</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-6" date="1300140000">- clam-db obsoletes old clamav-data-empty.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-4" date="1300053600">- Add back clamd-wrapper to stay compatible with users
  of old packaging (amavisd-new).</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.097-3" date="1298498400">- Move db to /var/lib/clamav
- Ship empty directory /etc/clamd.d for amavisd-new</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.97-2" date="1297980000">- Disable llvm.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.97-1" date="1297202400">- Update to 0.97
- Fix up for current guidelines.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.91.2-3" date="1195855200">- Change username to get upgrades from fedora versions working.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.91.2-2" date="1195768800">- Initial changes for EPEL version.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91.2-1" date="1187733600">- Updated to release 0.91.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91.1-1" date="1184709600">- Updated to release 0.91.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91-1" date="1184191200">- Updated to release 0.91.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.3-1" date="1180648800">- Updated to release 0.90.3.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.2-2" date="1177711200">- Added clamav-milter support for EL2.1 now that it comes with a newer sendmail. (Tom G. Christensen)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.2-1" date="1176674400">- Updated to release 0.90.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-4" date="1173477600">- Removed circular dependency.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-3" date="1173391200">- Cleaned up default options to clamav-milter. (Adam T. Bowen)
- Removed -b/--bounce as it is no longer recognized. (Gerald Teschl)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-2" date="1173132000">- Removed the erroneous --dont-clean-log from the clamav-milter sysconfig. (Gerald Teschl)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-1" date="1172872800">- Updated to release 0.90.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-3" date="1172008800">- Do the right thing...</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-2" date="1171922400">- The tarball was re-rolled before public release. Sigh.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-1" date="1171404000">- Updated to release 0.90.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.7-1" date="1165960800">- Updated to release 0.88.7.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.6-1" date="1162764000">- Updated to release 0.88.6.
- Added condrestart to sysv scripts. (Tsai Li Ming)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.5-2" date="1162072800">- Added missing clamav dependency to clamav-db.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.5-1" date="1160949600">- Updated to release 0.88.5.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.4-1" date="1154988000">- Updated to release 0.88.4.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.3-2" date="1154988000">- Incorporated UPX heap overflow fix.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.3-1" date="1151791200">- Updated to release 0.88.3.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.2-1" date="1146434400">- Updated to release 0.88.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.1-1" date="1144188000">- Updated to release 0.88.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88-1" date="1136844000">- Updated to release 0.88.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.87.1-1" date="1131919200">- Updated to release 0.87.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.87-1" date="1126994400">- Updated to release 0.87.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.86.2-1" date="1122328800">- Updated to release 0.86.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.86.1-1" date="1121119200">- Updated to release 0.86.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.85.1-1" date="1116280800">- Updated to release 0.85.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.84-1" date="1114812000">- Updated to release 0.84.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.83-1" date="1108418400">- Updated to release 0.83.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.82-2" date="1108072800">- Fix for false positive on RIFF files. (Roger Jochem)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.82-1" date="1107813600">- Updated to release 0.82.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.81-1" date="1106863200">- Improved logrotate scripts. (Filippo Grassilli)
- Updated to release 0.81.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.80-2" date="1101938400">- Added %dir /var/clamav/log. (Adam Bowns)
- Changed logrotate script to use clamd.log. (Stuart Schneider)
- Added curl dependency. (Petr Kristof)
- Synchronized some options from Petr. (Petr Kristof)
- Fixed another clamav.conf reference. (Michael Best)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.80-1" date="1099346400">- Updated package description. (Arvin Troels)
- Incorporated fixes from Jima. (Jima)
- Config clamav.conf renamed to clamd.conf.
- Removed obsolete patch.
- Added macros for building without milter.
- Updated to release 0.80.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75.1-1" date="1091224800">- Added obsoletes for fedora.us.
- Updated to release 0.75.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75-2" date="1090879200">- Fixed a problem where $CODE was empty.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75-1" date="1090620000">- Updated to release 0.75.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.74-1" date="1088632800">- Updated to release 0.74.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.73-1" date="1087336800">- Updated to release 0.73.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.72-1" date="1086300000">- Updated to release 0.72.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.71-1" date="1085090400">- Updated to release 0.71.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.70-2" date="1083535200">- Fixed the installation check for conf files. (Richard Soderberg, Udo Ruecker)
- Changed the init-order of the sysv scripts. (Will McCutcheon)
- Changes to the default configuration files.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.70-1" date="1079560800">- Updated to release 0.70.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.68-1" date="1079474400">- Updated to release 0.68.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.67.1-1" date="1079128800">- Updated to release 0.67-1.
- Added clamdwatch and trashcan to clamd.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.67-1" date="1078783200">- Personalized SPEC file.</changelog><changelog author="Matthias Saou/Che" date="1061589600">- Added "--without milter" build option. (Matthias Saou)
- Fixed freshclam cron (Matthias Saou)
- Built the new package. (Che)</changelog><changelog author="Che" date="1056492000">- clamav-milter introduced.
- a few more smaller fixes.</changelog><changelog author="Che" date="1056319200">- version upgrade</changelog><changelog author="Che" date="1055800800">- rh9 build
- various fixes
- got rid of rpm-helper prereq</changelog><changelog author="Che" date="1048543200">- some cleanups and fixes
- new patch added</changelog><changelog author="Che" date="1038002400">- fixed a config patch issue</changelog><changelog author="Che" date="1038002400">- version upgrade and some fixes</changelog><changelog author="Che" date="1036274400">- version upgrade</changelog><changelog author="Che" date="1035496800">- some important changes for lsb compliance</changelog><changelog author="Che" date="1035410400">- initial rpm release</changelog></package>
<package pkgid="b6b3d194fd810aa20b88722ca0d011c9e808d2c7" name="perl-ExtUtils-PkgConfig" arch="noarch"><version epoch="0" ver="1.11" rel="1.rf"/><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.11-1 - 6167+/dag" date="1210032000">- Updated to release 1.11.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.10-1" date="1203552000">- Updated to release 1.10.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.09-1" date="1201392000">- Updated to release 1.09.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.08-1" date="1194652800">- Updated to release 1.08.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 1.07-1" date="1131235200">- Updated to release 1.07.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.03-0" date="1079654400">- Updated to release 1.03.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.01-0" date="1065916800">- Initial package. (using DAR)</changelog></package>
<package pkgid="d51883e8a86b808c9ea397b9497e51afd0728320" name="perl-Config-Tiny" arch="noarch"><version epoch="0" ver="2.12" rel="1.rf"/><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 2.12-1 - 4890+/dries" date="1194393600">- Updated to release 2.12.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 2.10-1" date="1163548800">- Updated to release 2.10.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 2.08-1" date="1158624000">- Updated to release 2.08.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 2.07-1" date="1149292800">- Updated to release 2.07.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 2.05-1" date="1143417600">- Updated to release 2.05.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 2.04-1" date="1136678400">- Updated to release 2.04.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 2.02-1" date="1131235200">- Updated to release 2.02.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 2.01-1" date="1118275200">- Updated to release 2.01.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 2.00-1" date="1090540800">- Initial package.</changelog></package>
<package pkgid="ccfb3c11e4e72699d34597feebc2abb943684a56" name="zz_disable_avahi" arch="noarch"><version epoch="0" ver="1.0" rel="0.5"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 4.2.0-7" date="1276560000">- Added noquery to the restrict line</changelog></package>
<package pkgid="a41376ae5efd52086e165be400acc79ec051cbf5" name="zz_logwatch_df" arch="noarch"><version epoch="0" ver="1.1" rel="2"/></package>
<package pkgid="05bdb1b8c6514c66e2922289fe0af2201f033589" name="zz_ntp_configure" arch="noarch"><version epoch="0" ver="4.2.6" rel="7.slf5"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 4.2.6-7" date="1397779200">- New NTP servers
- Prep for SLF7
- Moved somewhat away from triggers so you can customize your config after
- per: RITM0096493 no more default broadcast client</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 4.2.6-6" date="1392768000">- removing "restrict 131.225.0.0 mask 255.255.0.0 nomodify noquery"
    per RITM0088723
- switched to augeas based config to try and simplify the transition</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 4.2.6-5" date="1359676800">- switched to 'bash' for triggers and post to avoid errors
- updated requires list to get things more in order</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 4.2.6-4" date="1331942400">- switched to a define based ntp server list
- updated ntp server list
- made version independent, now works on SLF5 and SLF6
- added comments to help explain the configuration options</changelog><changelog author="Connie Sieh &lt;csieh@fnal.gov&gt; 4.2.6-3" date="1308268800">- Modified ntpd-fermi code from "RH-Firewall-1-INPUT" to "INPUT" as TUV
  Does not use "RH-Firewall-1-INPUT" anymore.</changelog><changelog author="Tyler Parsons &lt;tparsons@fnal.gov&gt; 4.2.6-2" date="1306454400">- added secondary and tertiary time servers to ntp.conf (131.225.17.150 and 131.225.8.120)
- changed references to servers from (131.225.8.200 and 131.225.17.200) to (131.225.17.150 and 131.225.8.120)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 4.2.6-1" date="1282003200">- added ntpdate to the requirements
- Changed the step-tickers section to trigger on ntpdate
- Removed the change that added -A to /etc/sysconfig/ntpd</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 4.2.0-9" date="1276560000">- Added noquery to the restrict line</changelog></package>
<package pkgid="5e0c809efd0fed6e7a529f9331e99474da8c8005" name="zz_sendmail_fermi_gateway" arch="noarch"><version epoch="0" ver="2.1" rel="2"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 2.1-2" date="1317686400">- fixed typo where on reinstall of the rpm, the sed statement didn't match and therefore nothing happened</changelog><changelog author="Troy Dawson (dawson@fnal.gov) 2.1-1" date="1197417600">- For SL 5 there is a space in the middle of the define statement</changelog></package>
<package pkgid="4e99c728740c5854684d9d1d7b5f0583da29d57b" name="clamav-db" arch="i386"><version epoch="0" ver="0.97.3" rel="3.el5"/><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97.3-3" date="1325455200">- Revert patch from 0.97.3-2</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97.3-1" date="1318975200">- Update to 0.97.3
- Fix CVE-2011-3627 clamav: Recursion level crash fixed in v0.97.3</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-5" date="1312495200">- Configure MilterSocket, PidFile and MilterSocket in clamav-milter.conf.
  (bz#727894)</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-3" date="1311804000">- Handle xz archives in rpmbuilds &lt; RHEL6.
- include updated clamd-wrapper which get the PidFile setting from the
  service configuration file.</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-3" date="1311804000">- Handle xz archives in rpmbuilds &lt; RHEL6.</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-2" date="1311804000">- updated to 0.97.2
- Build-require xz
- CVE-2011-2721 Off-by-one error by scanning message hashes (#725694)</changelog><changelog author="Jeroen van Meeuwen &lt;kanarip@kanarip.com&gt; - 0.97-14" date="1310680800">- Make clamd-wrapper get the PidFile setting from the service
  configuration file.</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97-14" date="1309384800">- Require /usr/sbin/sendmail instead of sendmail</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-13" date="1303855200">- Obsolete and provide clamav-milter-sysvinit (bz#696856)</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-12" date="1301522400">- Move deletion of /var/lib/clamav/mirrors.dat to db package.
- Don't enable NotifyClamd in freshclam config and cronjob, as not
  everybody is running clamd. Running clamd's will anyway notice
  when db is updated.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-11" date="1300485600">- Delete /var/lib/clamav/mirrors.dat, it will be recreated on first run.
- clamav-milter config cleanups.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-10" date="1300312800">- Make sure /var/lib/clamav/mirrors.dat has owner fixed on upgrade.
- Don't start clamd or milter service by default.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-7" date="1300226400">- rpm-provide all old package names that are now obsoleted</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-6" date="1300140000">- clam-db obsoletes old clamav-data-empty.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-4" date="1300053600">- Add back clamd-wrapper to stay compatible with users
  of old packaging (amavisd-new).</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.097-3" date="1298498400">- Move db to /var/lib/clamav
- Ship empty directory /etc/clamd.d for amavisd-new</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.97-2" date="1297980000">- Disable llvm.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.97-1" date="1297202400">- Update to 0.97
- Fix up for current guidelines.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.91.2-3" date="1195855200">- Change username to get upgrades from fedora versions working.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.91.2-2" date="1195768800">- Initial changes for EPEL version.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91.2-1" date="1187733600">- Updated to release 0.91.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91.1-1" date="1184709600">- Updated to release 0.91.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91-1" date="1184191200">- Updated to release 0.91.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.3-1" date="1180648800">- Updated to release 0.90.3.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.2-2" date="1177711200">- Added clamav-milter support for EL2.1 now that it comes with a newer sendmail. (Tom G. Christensen)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.2-1" date="1176674400">- Updated to release 0.90.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-4" date="1173477600">- Removed circular dependency.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-3" date="1173391200">- Cleaned up default options to clamav-milter. (Adam T. Bowen)
- Removed -b/--bounce as it is no longer recognized. (Gerald Teschl)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-2" date="1173132000">- Removed the erroneous --dont-clean-log from the clamav-milter sysconfig. (Gerald Teschl)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-1" date="1172872800">- Updated to release 0.90.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-3" date="1172008800">- Do the right thing...</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-2" date="1171922400">- The tarball was re-rolled before public release. Sigh.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-1" date="1171404000">- Updated to release 0.90.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.7-1" date="1165960800">- Updated to release 0.88.7.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.6-1" date="1162764000">- Updated to release 0.88.6.
- Added condrestart to sysv scripts. (Tsai Li Ming)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.5-2" date="1162072800">- Added missing clamav dependency to clamav-db.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.5-1" date="1160949600">- Updated to release 0.88.5.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.4-1" date="1154988000">- Updated to release 0.88.4.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.3-2" date="1154988000">- Incorporated UPX heap overflow fix.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.3-1" date="1151791200">- Updated to release 0.88.3.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.2-1" date="1146434400">- Updated to release 0.88.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.1-1" date="1144188000">- Updated to release 0.88.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88-1" date="1136844000">- Updated to release 0.88.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.87.1-1" date="1131919200">- Updated to release 0.87.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.87-1" date="1126994400">- Updated to release 0.87.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.86.2-1" date="1122328800">- Updated to release 0.86.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.86.1-1" date="1121119200">- Updated to release 0.86.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.85.1-1" date="1116280800">- Updated to release 0.85.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.84-1" date="1114812000">- Updated to release 0.84.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.83-1" date="1108418400">- Updated to release 0.83.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.82-2" date="1108072800">- Fix for false positive on RIFF files. (Roger Jochem)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.82-1" date="1107813600">- Updated to release 0.82.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.81-1" date="1106863200">- Improved logrotate scripts. (Filippo Grassilli)
- Updated to release 0.81.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.80-2" date="1101938400">- Added %dir /var/clamav/log. (Adam Bowns)
- Changed logrotate script to use clamd.log. (Stuart Schneider)
- Added curl dependency. (Petr Kristof)
- Synchronized some options from Petr. (Petr Kristof)
- Fixed another clamav.conf reference. (Michael Best)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.80-1" date="1099346400">- Updated package description. (Arvin Troels)
- Incorporated fixes from Jima. (Jima)
- Config clamav.conf renamed to clamd.conf.
- Removed obsolete patch.
- Added macros for building without milter.
- Updated to release 0.80.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75.1-1" date="1091224800">- Added obsoletes for fedora.us.
- Updated to release 0.75.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75-2" date="1090879200">- Fixed a problem where $CODE was empty.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75-1" date="1090620000">- Updated to release 0.75.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.74-1" date="1088632800">- Updated to release 0.74.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.73-1" date="1087336800">- Updated to release 0.73.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.72-1" date="1086300000">- Updated to release 0.72.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.71-1" date="1085090400">- Updated to release 0.71.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.70-2" date="1083535200">- Fixed the installation check for conf files. (Richard Soderberg, Udo Ruecker)
- Changed the init-order of the sysv scripts. (Will McCutcheon)
- Changes to the default configuration files.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.70-1" date="1079560800">- Updated to release 0.70.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.68-1" date="1079474400">- Updated to release 0.68.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.67.1-1" date="1079128800">- Updated to release 0.67-1.
- Added clamdwatch and trashcan to clamd.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.67-1" date="1078783200">- Personalized SPEC file.</changelog><changelog author="Matthias Saou/Che" date="1061589600">- Added "--without milter" build option. (Matthias Saou)
- Fixed freshclam cron (Matthias Saou)
- Built the new package. (Che)</changelog><changelog author="Che" date="1056492000">- clamav-milter introduced.
- a few more smaller fixes.</changelog><changelog author="Che" date="1056319200">- version upgrade</changelog><changelog author="Che" date="1055800800">- rh9 build
- various fixes
- got rid of rpm-helper prereq</changelog><changelog author="Che" date="1048543200">- some cleanups and fixes
- new patch added</changelog><changelog author="Che" date="1038002400">- fixed a config patch issue</changelog><changelog author="Che" date="1038002400">- version upgrade and some fixes</changelog><changelog author="Che" date="1036274400">- version upgrade</changelog><changelog author="Che" date="1035496800">- some important changes for lsb compliance</changelog><changelog author="Che" date="1035410400">- initial rpm release</changelog></package>
<package pkgid="59c95bb003e82307dcd6525eb9449734cac16e0d" name="zz_tcp_wrappers_change" arch="noarch"><version epoch="0" ver="3.0" rel="3"/></package>
<package pkgid="57b12f2039dc7380320e005ac064787624afd982" name="perl-ExtUtils-Depends" arch="noarch"><version epoch="0" ver="0.301" rel="1.rf"/><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.301-1 - 6302+/dag" date="1223424000">- Updated to release 0.301.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.300-1" date="1210032000">- Updated to release 0.300.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.205-1" date="1131235200">- Updated to release 0.205.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.202-0" date="1079654400">- Updated to release 0.202.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.103-0" date="1065916800">- Updated to release 0.103.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.102-0" date="1058745600">- Initial package. (using DAR)</changelog></package>
<package pkgid="5bc3bc00b0d5e264b0e3d8840b286dcfe272a16c" name="Fermi-release-notes" arch="noarch"><version epoch="31" ver="5.11" rel="2"/><changelog author="Connie Sieh &lt;csieh@fnal.gov&gt; 5.11-0" date="1416960000">- Final SLF 5.11 notes</changelog><changelog author="Connie Sieh &lt;csieh@fnal.gov&gt; 5.11-0" date="1415145600">- Rolling SLF 5.11 notes</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 5.8-1" date="1338595200">- Final SLF 5.8 notes</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 5.7-0.2.rolling" date="1315612800">- Added SLF 5.7 release notes to source archive</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5.7-0.1.rolling" date="1312848000">- Moved everything over from 5.5</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5.5-1" date="1275609600">- Updated with the latest slf release notes</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5.5-0.1.rolling" date="1274313600">- Moved everything over from 5.4</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5.4-1" date="1262822400">- updated to the released release notes</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5.3-1" date="1238544000">- updated to the released release notes</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5.3-0.1.rolling" date="1235520000">- Moved everything to 5.3
- Added vendors Update 3 release notes, unaltered
- Added SL 5.2 release notes</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5.2-1" date="1214611200">- updated to the released release notes</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5.2-0.1.rolling" date="1212537600">- Moved everything to 5.2
- Added vendors Update 2 release notes, unaltered
- Added SL 5.1 release notes</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5.0-4" date="1177113600">- Added the SL release notes, so it always gets the latest version</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5.0-3" date="1175040000">- updated release notes and readme's to the final version</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5.0-1" date="1166745600">- Fixed HTML area - web page was pointing to the wrong image
- Made it a no-arch</changelog></package>
<package pkgid="b012c4b5c91b64eaf74a0e571cac6ec4e63f51f2" name="clamav-devel" arch="i386"><version epoch="0" ver="0.97.3" rel="3.el5"/><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97.3-3" date="1325455200">- Revert patch from 0.97.3-2</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97.3-1" date="1318975200">- Update to 0.97.3
- Fix CVE-2011-3627 clamav: Recursion level crash fixed in v0.97.3</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-5" date="1312495200">- Configure MilterSocket, PidFile and MilterSocket in clamav-milter.conf.
  (bz#727894)</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-3" date="1311804000">- Handle xz archives in rpmbuilds &lt; RHEL6.
- include updated clamd-wrapper which get the PidFile setting from the
  service configuration file.</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-3" date="1311804000">- Handle xz archives in rpmbuilds &lt; RHEL6.</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-2" date="1311804000">- updated to 0.97.2
- Build-require xz
- CVE-2011-2721 Off-by-one error by scanning message hashes (#725694)</changelog><changelog author="Jeroen van Meeuwen &lt;kanarip@kanarip.com&gt; - 0.97-14" date="1310680800">- Make clamd-wrapper get the PidFile setting from the service
  configuration file.</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97-14" date="1309384800">- Require /usr/sbin/sendmail instead of sendmail</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-13" date="1303855200">- Obsolete and provide clamav-milter-sysvinit (bz#696856)</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-12" date="1301522400">- Move deletion of /var/lib/clamav/mirrors.dat to db package.
- Don't enable NotifyClamd in freshclam config and cronjob, as not
  everybody is running clamd. Running clamd's will anyway notice
  when db is updated.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-11" date="1300485600">- Delete /var/lib/clamav/mirrors.dat, it will be recreated on first run.
- clamav-milter config cleanups.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-10" date="1300312800">- Make sure /var/lib/clamav/mirrors.dat has owner fixed on upgrade.
- Don't start clamd or milter service by default.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-7" date="1300226400">- rpm-provide all old package names that are now obsoleted</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-6" date="1300140000">- clam-db obsoletes old clamav-data-empty.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-4" date="1300053600">- Add back clamd-wrapper to stay compatible with users
  of old packaging (amavisd-new).</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.097-3" date="1298498400">- Move db to /var/lib/clamav
- Ship empty directory /etc/clamd.d for amavisd-new</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.97-2" date="1297980000">- Disable llvm.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.97-1" date="1297202400">- Update to 0.97
- Fix up for current guidelines.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.91.2-3" date="1195855200">- Change username to get upgrades from fedora versions working.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.91.2-2" date="1195768800">- Initial changes for EPEL version.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91.2-1" date="1187733600">- Updated to release 0.91.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91.1-1" date="1184709600">- Updated to release 0.91.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91-1" date="1184191200">- Updated to release 0.91.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.3-1" date="1180648800">- Updated to release 0.90.3.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.2-2" date="1177711200">- Added clamav-milter support for EL2.1 now that it comes with a newer sendmail. (Tom G. Christensen)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.2-1" date="1176674400">- Updated to release 0.90.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-4" date="1173477600">- Removed circular dependency.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-3" date="1173391200">- Cleaned up default options to clamav-milter. (Adam T. Bowen)
- Removed -b/--bounce as it is no longer recognized. (Gerald Teschl)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-2" date="1173132000">- Removed the erroneous --dont-clean-log from the clamav-milter sysconfig. (Gerald Teschl)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-1" date="1172872800">- Updated to release 0.90.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-3" date="1172008800">- Do the right thing...</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-2" date="1171922400">- The tarball was re-rolled before public release. Sigh.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-1" date="1171404000">- Updated to release 0.90.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.7-1" date="1165960800">- Updated to release 0.88.7.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.6-1" date="1162764000">- Updated to release 0.88.6.
- Added condrestart to sysv scripts. (Tsai Li Ming)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.5-2" date="1162072800">- Added missing clamav dependency to clamav-db.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.5-1" date="1160949600">- Updated to release 0.88.5.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.4-1" date="1154988000">- Updated to release 0.88.4.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.3-2" date="1154988000">- Incorporated UPX heap overflow fix.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.3-1" date="1151791200">- Updated to release 0.88.3.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.2-1" date="1146434400">- Updated to release 0.88.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.1-1" date="1144188000">- Updated to release 0.88.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88-1" date="1136844000">- Updated to release 0.88.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.87.1-1" date="1131919200">- Updated to release 0.87.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.87-1" date="1126994400">- Updated to release 0.87.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.86.2-1" date="1122328800">- Updated to release 0.86.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.86.1-1" date="1121119200">- Updated to release 0.86.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.85.1-1" date="1116280800">- Updated to release 0.85.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.84-1" date="1114812000">- Updated to release 0.84.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.83-1" date="1108418400">- Updated to release 0.83.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.82-2" date="1108072800">- Fix for false positive on RIFF files. (Roger Jochem)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.82-1" date="1107813600">- Updated to release 0.82.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.81-1" date="1106863200">- Improved logrotate scripts. (Filippo Grassilli)
- Updated to release 0.81.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.80-2" date="1101938400">- Added %dir /var/clamav/log. (Adam Bowns)
- Changed logrotate script to use clamd.log. (Stuart Schneider)
- Added curl dependency. (Petr Kristof)
- Synchronized some options from Petr. (Petr Kristof)
- Fixed another clamav.conf reference. (Michael Best)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.80-1" date="1099346400">- Updated package description. (Arvin Troels)
- Incorporated fixes from Jima. (Jima)
- Config clamav.conf renamed to clamd.conf.
- Removed obsolete patch.
- Added macros for building without milter.
- Updated to release 0.80.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75.1-1" date="1091224800">- Added obsoletes for fedora.us.
- Updated to release 0.75.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75-2" date="1090879200">- Fixed a problem where $CODE was empty.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75-1" date="1090620000">- Updated to release 0.75.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.74-1" date="1088632800">- Updated to release 0.74.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.73-1" date="1087336800">- Updated to release 0.73.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.72-1" date="1086300000">- Updated to release 0.72.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.71-1" date="1085090400">- Updated to release 0.71.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.70-2" date="1083535200">- Fixed the installation check for conf files. (Richard Soderberg, Udo Ruecker)
- Changed the init-order of the sysv scripts. (Will McCutcheon)
- Changes to the default configuration files.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.70-1" date="1079560800">- Updated to release 0.70.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.68-1" date="1079474400">- Updated to release 0.68.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.67.1-1" date="1079128800">- Updated to release 0.67-1.
- Added clamdwatch and trashcan to clamd.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.67-1" date="1078783200">- Personalized SPEC file.</changelog><changelog author="Matthias Saou/Che" date="1061589600">- Added "--without milter" build option. (Matthias Saou)
- Fixed freshclam cron (Matthias Saou)
- Built the new package. (Che)</changelog><changelog author="Che" date="1056492000">- clamav-milter introduced.
- a few more smaller fixes.</changelog><changelog author="Che" date="1056319200">- version upgrade</changelog><changelog author="Che" date="1055800800">- rh9 build
- various fixes
- got rid of rpm-helper prereq</changelog><changelog author="Che" date="1048543200">- some cleanups and fixes
- new patch added</changelog><changelog author="Che" date="1038002400">- fixed a config patch issue</changelog><changelog author="Che" date="1038002400">- version upgrade and some fixes</changelog><changelog author="Che" date="1036274400">- version upgrade</changelog><changelog author="Che" date="1035496800">- some important changes for lsb compliance</changelog><changelog author="Che" date="1035410400">- initial rpm release</changelog></package>
<package pkgid="b12d5fef570a5e07f97565ebde1e1465a26c4d5c" name="yum-autoupdate" arch="noarch"><version epoch="31" ver="1.2" rel="3.SLF"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.2-3.SLF" date="1339804800">- Fix for selinux error from Gilles Detillieux</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.2-2.SLF" date="1339804800">- doing a better job creating the tempfiles</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.2-1.SL" date="1333411200">- added PRERUN and POSTRUN from SL6
- added /etc/yum.d/yum.cron.updateexec for configuring PRERUN and POSTRUN</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.1-2.SLF" date="1317168000">- added dependency</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.1-1.SLF" date="1307491200">- Use mktemp for dynamic temp files that are created</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1-1.SLF" date="1189036800">- Made changes from yum-autoupdate-1-1-SL
- Added the addons repository,  Brought the code over from SLF4</changelog></package>
<package pkgid="3bdadb435490359c8b27d1aac058ade45248d4cc" name="openafs-thiscell" arch="noarch"><version epoch="1" ver="FNAL" rel="6"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; FNAL-6" date="1238544000">- Fixed CellAlias to copy to the correct area.</changelog></package>
<package pkgid="b4e539c92f1d650de96e8c828cffce60cc07cf95" name="krb5-fermi-config" arch="noarch"><version epoch="0" ver="5.0a" rel="1"/><changelog author="Olga Terlyga &lt;terlyga@fnal.gov&gt; 5.0a-1" date="1410825600">- Update krb5.conf to remove i-keb-3 from KDC list</changelog><changelog author="Olga Terlyga &lt;terlyga@fnal.gov&gt; 5.0a-1" date="1409788800">- Update krb5.conf to v5.0a adding new enctypes
- Added aes256-cts-hmac-sha1-96  aes128-cts-hmac-sha1-96 des3-cbc-sha1
- to default tgs,tkt and permitted enctypes</changelog><changelog author="Olga Terlyga &lt;terlyga@fnal.gov&gt; 4.8-1" date="1401926400">- Update  krb5.conf to v4.8 adding kdc to PILOT realm
- Added i-krb-22 and added pilot KDCs t domain-realm section</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.7-1" date="1372809600">- Update krb5.conf to v4.7 changing KDC search order to
- put the FCC3 Slave KDC first by default</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.6-1" date="1357344000">- Update krb5.conf to v4.6 updating list of Accelerator Division servers
- Fixed bug in make-cron-keytab so it will take error exit if run
- in shared account via ksu rather than ssh into the account.</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.5-2" date="1349136000">- Update version number in config-krb5.conf script</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.5-1" date="1349136000">- Added Nova Far Detector KDC to search list, edit and re-format
- SysAdmin HowTo instructions for a local KDC search list and
- set so krb5-fermi-config and krb5-fermi-krb5.conf conflict with
- each other so only one gets installed</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.4-2" date="1328832000">- Correctted version number in config-krb5.conf</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.4-1" date="1328745600">- Correct spellings and phrasing in this file, config-xinetd and
- config-services.  Fixed order of paramter statements in the
- [capaths] section of v4.4 of krb5.conf</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.3-1" date="1319155200">- V4.2 added PSC.EDU and EXTENCI.ORG realms to the [realms] section
- and V4.3 changed the KDC defintions for the CERN.CN realm</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.1-2" date="1309305600">- Fixed typo in KDC saerch names (d0online)</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.1-1" date="1307491200">- Added permitted_enctypes line to [libdefaults] section
- Removed obsolete AD nodes from [domain_realms]</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.0-1" date="1306886400">- Changed to krb5.conf V4.0 with expanded KDC list, removed
- Kerberos4 ticket generation from login/pam sections and
- other minor changes.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.1-3" date="1293494400">- Changed Copyrite to License in spec file
- Changed PreReq to Requires in spec file</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 3.1-2" date="1284681600">- Remove iginore_afs = true line from pam section</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 3.1-1" date="1284681600">- Emergency fix due to PAM mishandling comments on lines
- in [appdefults]pam section causing long login times</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 3.0-4" date="1282348800">- Correct some errors in krb5.conf and the config-krb5.conf scipt to
- get the editted comments correct during installation</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 3.0-3" date="1282348800">- Correct some minor errors in the krb5.conf in the package</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 3.0-2" date="1282348800">- Correct missing KDC_LOCAL_FILE definitiions in config-krb5.conf script</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 3.0-1" date="1282262400">- Installation scripts modified to drop obsolete edits and support
- local saved FNAL.GOV KDC list
- Added 3DEC to default encoding types and allow Wek Encryption in
- [libdefaults] addded commented tag linges around FNAL.GOV KDC list</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.14-1" date="1266624000">- Added mappings for Windows file servers to [domain_realm] section</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.13-1" date="1262822400">- Added entries to [domain_realm] section of krb5.conf for AD</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.12-7" date="1255651200">- If /etc/xinetd.d/ekrb5-telnet file found, replace the ftp and telnet
- template files in config/ (both .xinetd and .xinetd.on files) with
- the gssftp and ekrb-telnet (encrypted telnet only) templates with
- modern server options</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.12-6" date="1254960000">- Changed to require krb5-workstation instread of krb5-workstation-fermi and to
- obsolete previous versions of this RPM so file replacements will work correctly</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.12-4" date="1252627200">- Added make-cron-keytab script and fixed makehostkeys permissions
- Duplicated following changes by Troy Dawson from 12.2-1 RPM for SLF5
- Added the triggerin for krb5-libs, updating krb5.conf if EXAMPLE is in the file</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.12-4" date="1247529600">- Release 3 did not work so use %attr in the %files section</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.12-3" date="1247529600">- Explicitly set file owner on install command</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.12-2" date="1247270400">- Corrected file owner in tarball to root:root</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.12-1" date="1247097600">- Updated to V 2.12 of krb5.conf; added FERMITEST domain definitions and mappings</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov) 2.11-1" date="1244505600">- Updated to version 2.11 of krb5.conf</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 2.8-1" date="1214611200">- Updated to version 2.8
- kept the ignore_afs change</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 2.7a-1" date="1193356800">- Removed the "ignore_afs = true" from the pam section</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 2.7.1" date="1188259200">- Updated to krb5.conf 2.7 - fixing cryptocard problems</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 2.5-4" date="1186617600">- Made it generic, to work with both SLF3 and SLF4</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 2.5-3" date="1186617600">- Updated the name to match the krb5.conf version - 2.5
- updated the config script to say 2.5
- Made it so that it moves the old krb5.conf out of the way</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.25-1.LTS4" date="1183420800">- updated the krb5.conf.template file to version 1.25
- Changed makekeys so that it finds the right kadmin</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.24a-1.LTS4" date="1182988800">- updated the krb5.conf.template file to version 1.24a</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.16-1.LTS4" date="1159920000">- updated the krb5.conf.template file to version 1.16</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.15-1.LTS4" date="1157068800">- updated the krb5.conf.template file to version 1.15</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.10-1.LTS4" date="1123286400">- updated the krb5.conf.template file to version 1.10</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-4.LTS" date="1099440000">- added config-krb5.conf.aklog and /etc/sysconfig/krb5.conf.aklog
- added triggers to run config-krb5.conf.aklog with AFS triggers</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-3.LTS" date="1096675200">- fixed script that says it's 1.8a
- made the rpm a noarch</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-1.LTS" date="1096416000">- updated to 1.9</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1081296000">- added .sdsc.edu to the FNAL.GOV realm</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1081296000">- added .sdsc.edu to the FNAL.GOV realm</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1080950400">- Changed krb5.conf.template to put PAM section at top.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1076371200">- Fixed it so that it no longer moves the current krb5.conf out of the way
if it does not have to.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1074297600">- Updated to krb5conf 1.8a</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1068595200">- Put back in the krb.conf, but with proper settings, and triggers</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1065312000">- Cleaned out krb.conf so it quits messing things up.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1065312000">- Converted to krb5conf 1.7.  I had missed a few things the first time</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1064534400">- Added triggers for the xinetd configs</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1049760000">- Took out the check that took krb.conf completely out.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1049328000">- Took /etc/krb.conf out</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1028937600">- Changed the requires, put in a check before it does ssh config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1022284800">- Fixed a bug in the krb5.conf template (removed two 4's)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1020816000">- Made changes to the config xinetd script</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1020729600">- Configured to use the krb5conf v1_6 stuff</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1004054400">- Changed spec file so that it moves the /etc/krb5.conf file</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1004054400">- Changed the krb5.conf.template file so that the Pam part was first, 
also lengthened ticket time
- Edited the spec file so that it doesn't automatically move the /etc/krb5.conf file</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1002067200">- Made changes for pam usage in krb.conf and krb5.conf
- Also removed the linking of /usr/krb5 and /usr/kerberos</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="998956800">- Upgraded from krb5conf 1.5.  Also put in changes for xinetd.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="992390400">- Made improvements to the makehostkeys script.  I also have it check 
  for the varias files (sshd_config, services) before modifying them.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="991785600">- The config-inetd.conf script has been changed to look for services
  that have a kerberos equal.  If these services were originally turned
  off, then the kerberized version is turned off.  I also took out the
  keytab-convert program, as this is dependant on one particular flavor
  of fermi kerberos.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="990576000">- I added the keytab-convert program into the config rpm, with it's
  corresponding manpage.  It will also be in the normal kerberos rpm
  but in the bin area.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="990489600">- I changed things to the version 1.4.  I also added the config-sshd_config
  script, as well as the config-hostkeys script.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="989452800">- I finished with the config-services and config-inetd.conf scripts.
  I also changed how the /usr/krb5 and /usr/kerberos were linked.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="988848000">- I put the raw scripts into the package from Fermi.  These will
  need to be rewritten so that they don't depend on Fermi packages.</changelog></package>
<package pkgid="04e0c6c2c9067b510d4a571a9d3e91e8f732dc22" name="upsupdbootstrap" arch="i386"><version epoch="0" ver="5.0" rel="0"/></package>
<package pkgid="335d7f504c03b5a688c0d86af5eafc0325322d0a" name="yum-conf-5x" arch="noarch"><version epoch="31" ver="2" rel="7.slf5"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 2-7.slf5" date="1391731200">- Corrected priorities on sl5x to fix upgrade related issues</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 5x-2-0.sl5" date="1357948800">- No longer conflicts with yum-conf-&lt;release&gt;
- Now can be built for rolling with little risk to the real release</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 5x-1-11.SL" date="1357862400">- No longer need jdk exclusion</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 5x-1-10.SL" date="1330992000">- Updated repos for jdk exclusion allowing gpgcheck=1</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5x-1-9.SL" date="1270512000">- Updated sl-srpms.repo to read [sl-source] instead of [sl-srpms]</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5x-1-8.SL" date="1255996800">- Updated download server list to include ftp2.scientificlinux.org</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5x-1-7.SL" date="1247702400">- Updated yum.conf to say the default installonly_limit is 4</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5x-1-6.SL" date="1247529600">- Updated gpg keys to include sl and sl5
- Updated download server list to include ftp1.scientificlinux.org</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5x-1-5.SL" date="1214265600">- Added priorities to the repos.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5x-1-4.SL" date="1213228800">- Added comments in yum.conf for installonlyn
- Changed flash.repo to adobe.repo
- Changed repo's to use http first, and then try ftp</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5x-1-3.SL" date="1177718400">- Added commented out mirrorlist sl5x.repo, sl5x-security.repo, sl5x-fastbugs.repo</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5x-1-2.SL" date="1177200000">- Fixed fastbugs repo</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 5x-1-1.SL" date="1177113600">- Converted from yum-conf-50</changelog></package>
<package pkgid="71926656a768980c05e3d81ade0524a60d171c16" name="openssh-askpass" arch="i386"><version epoch="0" ver="4.3p2" rel="82.el5.slf"/><changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt; 4.3p2-82.el5.slf" date="1333490400">For SLF we add legacy GSSAPI
  Spec change: Add management of vulnkey
- Added patch FERMI-CHANGES-TO-SPEC-FILE-openssh-4.3p2.patch
- Added patch FERMI-openssh-4.3p2-fermi-pam-sshd.patch
  Configures pam to use kerberos right away
- Added patch FERMI-openssh-4.3p2-fermi-ssh-config.patch
  Turns on GSSAPI by default
- Added patch FERMI-openssh-4.3p2-fermi-sshd-config.patch
  Turns on GSSAPI by default
- Added patch FERMI-openssh-4.3p2-fermi-gss_hostname_for_CMS.patch
  Added for CMS, GSSAPIStrictAcceptorCheck may be better under SL6
- Added patch openssh_4.3p2-8ubuntu1.5-trimmed.diff
  Modified slightly from upstream so it works with RH better
- Added patch openssh_4.3p2-8ubuntu1.5.diff
- Added patch openssh-4.3p2-8ubuntu1.diff
- Added patch openssh-TROYS_CHANGELOG
- Prevented application of patch openssh-4.3p2-gssapi-no-spnego.patch
  conflicts with legacy GSSAPI patch
- Prevented application of patch openssh-4.3p2-gssapi-canohost.patch
  conflicts with legacy GSSAPI patch
- Prevented application of patch openssh-TROYS_CHANGELOG
  History from Troy, not a real patch
- Prevented application of patch openssh-4.3p2-8ubuntu1.diff
  History from Troy
- Prevented application of patch openssh_4.3p2-8ubuntu1.5.diff
  Full upstream patch, unmodified
- Prevented application of patch FERMI-CHANGES-TO-SPEC-FILE-openssh-4.3p2.patch</changelog><changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 4.3p2-82" date="1325628000">- improve RNG seeding from /dev/random (#681291,#708056)</changelog><changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 4.3p2-81" date="1322776800">- make ssh(1)'s ConnectTimeout option apply to both the TCP connection and
  SSH banner exchange (#750725)</changelog><changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 4.3p2-80" date="1322258400">- use IPV6_V6ONLY for sshd inet6 listening socket (#640857)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-79" date="1319234400">- add LANGUAGE to the sent/accepted evvironment (#710229)
- ssh-copy-id copies now id_rsa.pub by default (#731930)
- repairs man pages (#731925)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-78" date="1317852000">- set cloexec on accept socket (#642935)
- add umask to sftp (#720598)
- enable lastolg for big uids (#706315)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-77" date="1314309600">- enable selinux domain transition to passwd_t (#689406)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-76" date="1313186400">- enable pubkey auth in the fips mode (#674747)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-75" date="1301349600">- improve resseding the prng from /dev/urandom or /dev/random respectively (#681291)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-73" date="1300917600">- periodically ressed the prng from /dev/urandom or /dev/random respectively (#681291)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-72" date="1292450400">- change cipher preferences (#661716)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-71" date="1291932000">- change cipher preferences (#661716)
- enable to run sshd as non root user (#661669)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-70" date="1291759200">- reenable rekeying (#659242)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-69" date="1288735200">- add nss keys to key audit patch (#632402)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-68" date="1288735200">- key audit patch (#632402)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-47" date="1284501600">- supply forced command documentation (#532559)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-46" date="1281996000">- compile in the OpenSSL engine support</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-45" date="1277848800">- record lastlog with big uid (#616396)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-44" date="1277848800">- add OpenSSL engine support (#594815)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-43" date="1277848800">- backport forced command directive (#532559)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-42" date="1277762400">- stderr does not more disturb sftp (#576765)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-41" date="1264197600">- add RAND_cleanup at the exit of each program using RAND (#557166)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-40" date="1259704800">- revert adjustable buffer length patch (#508914)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-39" date="1257976800">- set adjustable buffer length  (#508914)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-38" date="1257458400">- set better buffer length in latency patch (#508914)
- close error file descriptor before running external subsystem (#530358)
- prevent initscript from hanging when generates the keys (#531738)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-37" date="1253052000">- minimize chroot patch to be compatible with upstream (#522141)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-36.1" date="1250632800">- revert latency patch to solve scp stall regression (#508914)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-36" date="1245794400">- tiny change in chroot sftp capability into openssh-server solve ls speed problem (#440240)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-35" date="1243375200">- workaround to plaintext recovery attack against CBC ciphers CVE-2008-5161 (#502230)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-34" date="1242424800">- disable protocol 1 in the FIPS mode</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-33" date="1241128800">- fix scp hangup on exit (#454812)
- call integrity checks only on binaries which are part of the OpenSSH FIPS
  modules</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-32" date="1240264800">- log if FIPS mode is initialized (#492363)
- check the integrity of the binaries in the FIPS mode (#467268)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-31" date="1239228000">- fix ssh hangup on exit (#454812)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-30" date="1238191200">- add chroot sftp capability into openssh-server (#440240)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-29" date="1222984800">- allow options for the sshd subsystem for the sftp logging support (#452619)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-28" date="1221170400">- use OpenSSL RNG directly (needed for FIPS-140-2 compliance)
- when in FIPS mode do not try to use algorithms which are not allowed (#447936)
- improve transfer speed on high latency connections (#227722)
- more correct 'service sshd status' reporting (#430877)
- add logging support to the sftp server (#452619)
- small scp manual page improvement (#433381)</changelog><changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 4.3p2-26.el5_2.1" date="1218837600">- CVE-2007-4752 - Prevent ssh(1) from using a trusted X11 cookie if creation of an
  untrusted cookie fails (#280361)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-26" date="1200434400">- drain acks on sftp write failures (#251565)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-24" date="1184364000">- fixed audit log injection problem (CVE-2007-3102) (#248059)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-23" date="1182463200">- document where the nss certificate and token dbs are looked for</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-22" date="1182376800">- experimental support for PKCS#11 tokens through libnss3 (#183423)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-21" date="1175637600">- fix an information leak in Kerberos password authentication (CVE-2006-5052)
  (#234638)
- correctly setup context when empty level requested (#234951)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-20" date="1174341600">- and always request default level as returned by getseuserbyname (#231695)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-19" date="1174341600">- check requested level context against a context with the same role (#231695)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-18" date="1172613600">- reject connection if requested mls range is not obtained (#229278)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-17" date="1171058400">- allow selecting non-default roles and audit role changes (#227733)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-16" date="1168552800">- support also level selection on unlabeled networks (#220487)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-15" date="1166824800">- make sshd work with mls networking (patch by Klaus Weidner) (#220487)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-14" date="1164924000">- fix gssapi with DNS loadbalanced clusters (#216857)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-13" date="1164751200">- improved pam_session patch so it doesn't regress, the patch is necessary
  for the pam_session_close to be called correctly as uid 0 (#167488)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-10.1" date="1163196000">- CVE-2006-5794 - properly detect failed key verify in monitor (#214642)
- kill all ssh sessions when stop is called in halt or reboot runlevel (#213008)
- remove -TERM option from killproc so we don't race on sshd restart (#213490)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-10" date="1159826400">- improve gssapi-no-spnego patch (#208102)
- CVE-2006-4924 - prevent DoS on deattack detector (#207957)
- CVE-2006-5051 - don't call cleanups from signal handler (#208459)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-9" date="1156370400">- don't report duplicate syslog messages, use correct local time (#189158)
- don't allow spnego as gssapi mechanism (from upstream)
- fixed memleaks found by Coverity (from upstream)
- allow ip options except source routing (#202856) (patch by HP)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-8" date="1155074400">- drop the pam-session patch from the previous build (#201341)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-7" date="1153432800">- dropped old ssh obsoletes
- call the pam_session_open/close from the monitor when privsep is
  enabled so it is always called as root (patch by Darren Tucker)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-6" date="1153173600">- improve selinux patch (by Jan Kiszka)
- upstream patch for buffer append space error (#191940)
- fixed typo in configure.ac (#198986)
- added pam_keyinit to pam configuration (#198628)
- improved error message when askpass dialog cannot grab
  keyboard input (#198332)
- buildrequires xauth instead of xorg-x11-xauth
- fixed a few rpmlint warnings</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 4.3p2-5.1" date="1152741600">- rebuild</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-5" date="1145052000">- don't request pseudoterminal allocation if stdin is not tty (#188983)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-4" date="1141336800">- allow access if audit is not compiled in kernel (#183243)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-3" date="1140818400">- enable the subprocess in chroot to send messages to system log
- sshd should prevent login if audit call fails</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-2" date="1140559200">- print error from scp if not remote (patch by Bjorn Augustsson #178923)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-1" date="1139868000">- new version</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 4.3p1-2.1" date="1139608800">- bump again for double-long bug on ppc(64)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p1-2" date="1139263200">- fixed another place where syslog was called in signal handler
- pass locale environment variables to server, accept them there (#179851)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p1-1" date="1138831200">- new version, dropped obsolete patches</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.2p1-10" date="1135116000">- hopefully make the askpass dialog less confusing (#174765)</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt;" date="1134165600">- rebuilt</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.2p1-9" date="1132696800">- drop x11-ssh-askpass from the package
- drop old build_6x ifs from spec file
- improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
  characters to person looking at the display
- less hackish fix for the __USE_GNU problem</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 4.2p1-8" date="1132351200">- work around missing gccmakedep by wrapping makedepend in a local script
- remove now-obsolete build dependency on "xauth"</changelog><changelog author="Warren Togami &lt;wtogami@redhat.com&gt; - 4.2p1-7" date="1132264800">- xorg-x11-devel -&gt; libXt-devel
- rebuild for new xauth location so X forwarding works
- buildreq audit-libs-devel
- buildreq automake for aclocal
- buildreq imake for xmkmf
-  -D_GNU_SOURCE in flags in order to get it to build
   Ugly hack to workaround openssh defining __USE_GNU which is
   not allowed and causes problems according to Ulrich Drepper
   fix this the correct way after FC5test1</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; - 4.2p1-6" date="1131573600">- rebuild against new openssl</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-5" date="1130536800">- put back the possibility to skip SELinux patch
- add patch for user login auditing by Steve Grubb</changelog><changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; 4.2p1-4" date="1129672800">- Change selinux patch to use get_default_context_with_rolelevel in libselinux.</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-3" date="1129240800">- Update selinux patch to use getseuserbyname</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-2" date="1128722400">- use include instead of pam_stack in pam config
- use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
- upstream patch for displaying authentication errors</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-1" date="1126044000">- upgrade to a new upstream version</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-5" date="1124229600">- use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
- install ssh-copy-id from contrib (#88707)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-4" date="1122501600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-3" date="1120082400">- fix small regression caused by the nologin patch (#161956)
- fix race in getpeername error checking (mindrot #1054)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-2" date="1118354400">- use only pam_nologin for nologin testing</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-1" date="1118095200">- upgrade to a new upstream version
- call pam_loginuid as a pam session module</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.0p1-3" date="1116280800">- link libselinux only to sshd (#157678)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.0p1-2" date="1112652000">- fixed Local/RemoteForward in ssh_config.5 manpage
- fix fatal when Local/RemoteForward is used and scp run (#153258)
- don't leak user validity when using krb5 authentication</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.0p1-1" date="1111701600">- upgrade to 4.0p1
- remove obsolete groups patch</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1111010400">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-12" date="1109628000">- rebuild so that configure can detect that krb5_init_ets is gone now</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-11" date="1109023200">- don't call syslog in signal handler
- allow password authentication when copying from remote
  to remote machine (#103364)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt;" date="1107986400">- add spaces to messages in initscript (#138508)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-10" date="1107900000">- enable trusted forwarding by default if X11 forwarding is 
  required by user (#137685 and duplicates)
- disable protocol 1 support by default in sshd server config (#88329)
- keep the gnome-askpass dialog above others (#69131)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt;" date="1107554400">- change permissions on pam.d/sshd to 0644 (#64697)
- patch initscript so it doesn't kill opened sessions if
  the sshd daemon isn't running anymore (#67624)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-9" date="1104789600">- don't use initlog</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.1" date="1101765600">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096927200">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095717600">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095199200">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095112800">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094162400">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094162400">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094162400">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093989600">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093384800">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091397600">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087336800">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087336800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086818400">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086645600">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086300000">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086127200">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086127200">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079474400">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078351200">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078178400">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077832800">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077832800">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077573600">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076709600">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075154400">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075154400">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074117600">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070488800">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069192800">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068501600">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068156000">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067032800">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066082400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066082400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064008800">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064008800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064008800">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063836000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063836000">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063836000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063836000">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063749600">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063749600">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063749600">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063749600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063749600">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062799200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062799200">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061935200">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060725600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060725600">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059429600">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058911200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055800800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055800800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054850400">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054764000">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048543200">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045260000">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044914400">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043272800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041976800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037138400">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034719200">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033768800">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031868000">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030658400">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029362400">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025215200">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025042400">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024956000">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024696800">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023487200">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022882400">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022623200">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021672800">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021672800">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017784800">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016748000">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015538400">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015538400">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015538400">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015365600">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014242400">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013637600">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011823200">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009663200">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007503200">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005948000">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005688800">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005256800">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005170400">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001628000">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000418400">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999813600">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998344800">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997999200">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997394400">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997308000">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997135200">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996098400">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994888800">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993506400">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992901600">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991951200">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990828000">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990741600">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988927200">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988840800">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987631200">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986767200">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986248800">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985384800">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985298400">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985125600">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983656800">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983570400">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983224800">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982879200">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982706400">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982620000">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982360800">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982101600">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981583200">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980287200">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979941600">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979855200">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977349600">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976053600">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975535200">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975448800">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975362400">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975276000">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974844000">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974757600">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974498400">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973634400">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972943200">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971215200">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970783200">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970524000">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968277600">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967068000">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963871200">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963439200">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962920800">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962834400">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962575200">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962488800">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962316000">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962143200">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960588000">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960069600">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953157600">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946245600">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942703200">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942530400">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942184800">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942098400">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941320800">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941234400">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941148000">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941061600">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="1b5443b6361085551ad946ec9225cd4dde8be4eb" name="zz_local_dns_cache" arch="noarch"><version epoch="0" ver="3" rel="1.3.2"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 3-1.3.2" date="1363651200">- yet another update to the resolv.conf preservation
- documentation better distributed for 'FRESH install' checks</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 3-1.3.1" date="1348876800">- better checks for upgrades of various things
- clearer doc on what triggers are running off of which events and why
- fixed the NetworkManager scripts to only modify controlled interfaces</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 3-1.3" date="1348876800">- yet another update to the resolv.conf preservation
- fixed the NetworkManager scripts so that they correctly clean up upon removal</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 3-1.2" date="1344643200">- nscd process searches now seach by process ownership.
- resolv.conf settings are more accuratly preserved.</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 3-1.1" date="1340064000">- Yet another check on nscd, this really shouldn't start it unless you want it
- Standardized the trigger interface a bit further
- Updated grep checks, thanks Steve Timm</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 3-1" date="1339804800">- moved most of the config work to a trigger on 'bind'
  this way the config is validated on each update.  This should
  keep things working longer through updates
- made nscd restart silent (oops)</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 3-0.3" date="1327017600">- clean up stray /etc/named.conf link
- added nscd restart
- made smarter about when it starts bind and when it doesn't</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 3-0.2" date="1326412800">- try and hardlink /etc/named.rfc1912.zones before soft link
- moved the blocks which actually start the named server to the 'fresh install only' space
- made the /etc/resolv.conf edit smarter so that it doesn't do anything if named isn't running</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 3-0.1" date="1323388800">- fixed a minor chmod problem
- switched search from /etc/sysconfig/network-scripts/ifcfg-eth* to /etc/sysconfig/network-scripts/ifcfg-*|grep -v ifcfg-lo to account for strangly named cards</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 3-0.0" date="1320883200">- Almost totally re-written because of bugs with virtulization
- Moved NetworkManager to trigger
- Moved dhclient to trigger
- Added dnsmasq trigger
  this rpm enables bind, but if you want instead dnsmasq it should be configured
- Now requires selinux packages, selinux enforcement is however optional
  more info in README.selinux
- Using links to help make it obvious which file bind is reading
- Modified config to use views to help reduce possible non localhost use in bind
- Switched from a dynamic config to a static one for deploy and copy to 'doc'
  it is configured after the style of SLF5 caching-nameserver but with
  the approach from SLF6 bind.  It ballences security and readibility.
- Obsolete caching-nameserver for 5.x its not in 6.x and integration was messy
   this lets us unify between 5 and 6
- Set sane looking defaults rather than ad-hoc creation of forwarder list
   + 131.225.0.254
   + 8.8.8.8</changelog><changelog author="Jason Harrington &lt;jason@fnal.gov&gt; 2.0-2" date="1306195200">- Fixed bugs dealing with NetworkManager comments in /etc/resolv.conf
- Added default DNS forwarder when no nameserver list found
- Added eth0-specific domain-name-server prepend for use with NetworkManager
- Added post-uninstall bits to undo dhclient tweaks</changelog><changelog author="Jason Harrington &lt;jason@fnal.gov&gt; 2.0-1" date="1305849600">- Updated for use with SL(F)6x</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.0-2" date="1168041600">- Added post and postun to add 127.0.0.1 to the resolv.conf</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.0-1" date="1168041600">- First pass, looks good</changelog></package>
<package pkgid="26b7ff3d4e4addbcf34afe6c642cb2bac29d95bd" name="flpr" arch="i386"><version epoch="0" ver="2.4" rel="4f.9x"/></package>
<package pkgid="bfe6ae6cf3e4cfb3234e47ae4e1d62cd9edf262b" name="zz_dhcp_resolv" arch="noarch"><version epoch="0" ver="3.0.5" rel="1"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.0.5-1" date="1181952000">- Updated so that it works with dhclient 3.0.5
- Removed the big messes from my scripts</changelog></package>
<package pkgid="d2b544a5912cdaa9cf6064fc420e6d12bae02ed6" name="perl-Gtk2" arch="i386"><version epoch="0" ver="1.183" rel="1.rf"/><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.183-1 - 6302+/dag" date="1214265600">- Updated to release 1.183.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.182-1" date="1210032000">- Updated to release 1.182.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.180-1" date="1205539200">- Updated to release 1.180.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.164-1" date="1201132800">- Updated to release 1.164.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.162-1" date="1194998400">- Updated to release 1.162.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.161-1" date="1194652800">- Updated to release 1.161.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.146-1" date="1186531200">- Updated to release 1.146.
- Disabled auto-requires for examples/ and gtk-demo/.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 1.141-1" date="1167868800">- Updated to release 1.141.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 1.102-1" date="1135728000">- Updated to release 1.102.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 1.101-1" date="1131235200">- Updated to release 1.101.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.080-1" date="1110326400">- Updated to release 1.080.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.062-1" date="1108339200">- Updated to release 1.062.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.040-0" date="1080345600">- Updated to release 1.040.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.023-0" date="1079654400">- Updated to release 1.023.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.00-0" date="1065916800">- Updated to release 1.00.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.97-0" date="1063238400">- Updated to release 0.97.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.96-0" date="1062288000">- Updated to release 0.96.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.95-0" date="1061596800">- Updated to release 0.95.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.94-0" date="1061078400">- Updated to release 0.94.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.93-0" date="1060819200">- Updated to release 0.93.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.92-0" date="1059955200">- Updated to release 0.92.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91-0" date="1059350400">- Updated to release 0.91.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-0" date="1058745600">- Initial package. (using DAR)</changelog></package>
<package pkgid="b531614825538a15ec9049169666ce6225e51155" name="drbd" arch="i386"><version epoch="0" ver="8.3.7" rel="3.sl"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-3.sl" date="1275429600">- Removed Requires: drbd-xen since this pulls xen onto a system
  that might not want it.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-2.sl" date="1274738400">- Updated to version 8.3.7
- Added Requires: drbd-kernel-module-8.3.7
- Added %config(noreplace) /etc/drbd.d/global_common.conf</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-2" date="1257717600">- Do not build the drbd-xen package on non x86 architectures.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-1" date="1257717600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.5-1" date="1256680800">- New upstream release.</changelog><changelog author="Florian Haas &lt;florian@linbit.com&gt; - 8.3.4-12" date="1256162400">- Packaging makeover.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.4-1" date="1254866400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.3-1" date="1254780000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.2-1" date="1246658400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.1-1" date="1238191200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.0-1" date="1229637600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.7-1" date="1226527200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.6-1" date="1212184800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.5-1" date="1202853600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.4-1" date="1200088800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.3-1" date="1199916000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.1-1" date="1194040800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.0-1" date="1191016800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.6-1" date="1188856800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.5-1" date="1186178400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.4-1" date="1182981600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.3-1" date="1178575200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.2-1" date="1175896800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.1-1" date="1172959200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt;  - 8.0.0-1" date="1169676000">- New upstream release.</changelog></package>
<package pkgid="35ff39d7c414d8cc47d679b50fb97a7a51d3262e" name="perl-Number-Compare" arch="noarch"><version epoch="0" ver="0.01" rel="1.2.rf"/><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.01-1 #5963" date="1102723200">- Initial package.</changelog></package>
<package pkgid="fcadad763729d2c5755b94602255d24bcf607f89" name="perl-Text-Glob" arch="noarch"><version epoch="0" ver="0.08" rel="1.rf"/><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.08-1 - 5526/dries" date="1182211200">- Updated to release 0.08.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.07-1" date="1158624000">- Updated to release 0.07.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.06-1.2" date="1143072000">- Rebuild for Fedora Core 5.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.06-1" date="1102550400">- Initial package.</changelog></package>
<package pkgid="bc26c09dace69e92559d36b4149b4db03bc62967" name="krb5-fermi-addons" arch="i386"><version epoch="0" ver="1.2" rel="2.slf5"/><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 1.2-1" date="1413504000">- Replace Fermilab-provided aklog executable by a scriptlet to
- /usr/bin/aklog if it exists</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 1.1-1" date="1294272000">- New versions of SLF5 executables for kcron and kcron-create
- Adds -d (debug print) flag to kcron.  kcron modified to
- invoke /usr/krb5/bin/kinit so that aklog will be invoked
- on AFS client systems.  Also added aklog executable (replaces
- link to /usr/bin/akoog from OpenAFS) for SLF5 made from the
- OpenAFS aklog with added support for Fermilab compound
- principals.</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 1.0-2" date="1263340800">- Now have SLF5 executables for kcron and kcron-create, remove
- libraries and incorporated changes from SLF4 krb1-1.8d.spec</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 1.0-1" date="1241827200">- Created from krb5-fermi-baseconfig for SLF5.x</changelog></package>
<package pkgid="f483d3e6f73975e636d1078d123f61e3d13bda51" name="rrdtool-devel" arch="i386"><version epoch="0" ver="1.3.9" rel="2.sl5"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 1.3.9-2.sl5" date="1259618400">- Added Provides for tcl, perl, python, ruby to be compatable with dag</changelog><changelog author="William R. Lorenz &lt;wrl@express.org&gt; - 1.3.9-1.wrl" date="1256767200">- Update to 1.3.9</changelog><changelog author="William R. Lorenz &lt;wrl@express.org&gt; - 1.3.8-1.wrl" date="1247954400">- Update to 1.3.8</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.7-1 - 6801/cmr" date="1242424800">- Update to 1.3.7</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.6-1" date="1234562400">- Update to 1.3.6</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.5-2" date="1231192800">- Remove fc10 conditionals
- Compile against evolution28 version of pango,cairo,glib on el4</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.5-1" date="1230674400">- Update version
- Add BuildRequires: ruby for macro expansion
- Add BuildRequires: gettext-devel
- Add Requires: gettext
- Add fc10 conditionals</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.4-2" date="1227477600">- Removed 1.2.x patches.
- Removed dependencies cgilib.
- Added dependencies pango, cairo.</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.4-1" date="1227477600">- Updated to release 1.3.4.</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.2.28-1" date="1224108000">- Updated to release 1.2.28.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.23-1" date="1181167200">- Updated to release 1.2.23.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.21-1" date="1178143200">- Updated to release 1.2.21.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.18-1" date="1169848800">- Updated to release 1.2.18.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.15-1" date="1153346400">- Updated to release 1.2.15.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.13-1" date="1146866400">- Updated to release 1.2.13.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.12-1" date="1135029600">- Updated to release 1.2.12.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.11-1" date="1122501600">- Updated to release 1.2.11.
- Fixes for x86_64 and perl/tcl/python bindings.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.9-1" date="1117922400">- Updated to release 1.2.9.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.8-1" date="1116453600">- Updated to release 1.2.8.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.6-1" date="1115762400">- Updated to release 1.2.6.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.2-1" date="1115503200">- Updated to release 1.2.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.1-1" date="1115503200">- Updated to release 1.2.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.0-1" date="1114812000">- Updated to release 1.2.0.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.49-2" date="1112652000">- Fix for the php-rrdtool patch. (Joe Pruett)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.49-1" date="1093471200">- Updated to release 1.0.49.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.48-3" date="1093471200">- Fixes for x86_64. (Garrick Staples)</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.48-3" date="1088805600">- Actually apply the patch for fixing the php module, doh!</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.48-2" date="1085695200">- Added php.d config entry to load the module once installed.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.48-1" date="1084485600">- Updated to release 1.0.48.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.47-1" date="1081288800">- Updated to release 1.0.47.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.46-2" date="1078437600">- Change the strict dependency on perl to fix problem with the recent
  update.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.46-1" date="1073340000">- Update to 1.0.46.
- Use system libpng and zlib instead of bundled ones.
- Added php-rrdtool sub-package for the php4 module.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.45-4" date="1070661600">- Added epoch to the perl dependency to work with rpm &gt; 4.2.
- Fixed the % escaping in the perl dep.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.45-2" date="1069106400">- Rebuild for Fedora Core 1.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1059948000">- Update to 1.0.45.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1050530400">- Update to 1.0.42.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1049148000">- Rebuilt for Red Hat Linux 9.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1046901600">- Added explicit perl version dependency.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1046037600">- Update to 1.0.41.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1044050400">- Update to 1.0.40.
- Spec file cleanup.</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1025906400">- 1.0.39</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1023141600">- 1.0.38</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1019253600">- 1.0.37</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1015970400">- 1.0.34
- rrdtools include zlib 1.1.4 which fix vulnerabilities in 1.1.3</changelog></package>
<package pkgid="a819fa27cda9ea54e8ff76fbd5a38a54eae6b30b" name="zz_screenlock_kde" arch="noarch"><version epoch="0" ver="1" rel="2"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1-2" date="1359676800">- Added more 'Requires' to ensure things run correctly
- Config script now runs in bash rather than sh
-  No changes were made to the script itself</changelog><changelog author="Connie Sieh (csieh@fnal.gov)" date="1260835200">- 1.1 changed location of binary to /usr/sbin 
-     changed name of script to lower case</changelog><changelog author="Connie Sieh (csieh@fnal.gov)" date="1260489600">- 1.0 Enables Blanking Screen Lock for KDE 
-     Works for root not like GNOME</changelog></package>
<package pkgid="bdd234dce2547dd18d699c7cfd96dadb320d24ff" name="rrdtool-tcl" arch="i386"><version epoch="0" ver="1.3.9" rel="2.sl5"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 1.3.9-2.sl5" date="1259618400">- Added Provides for tcl, perl, python, ruby to be compatable with dag</changelog><changelog author="William R. Lorenz &lt;wrl@express.org&gt; - 1.3.9-1.wrl" date="1256767200">- Update to 1.3.9</changelog><changelog author="William R. Lorenz &lt;wrl@express.org&gt; - 1.3.8-1.wrl" date="1247954400">- Update to 1.3.8</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.7-1 - 6801/cmr" date="1242424800">- Update to 1.3.7</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.6-1" date="1234562400">- Update to 1.3.6</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.5-2" date="1231192800">- Remove fc10 conditionals
- Compile against evolution28 version of pango,cairo,glib on el4</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.5-1" date="1230674400">- Update version
- Add BuildRequires: ruby for macro expansion
- Add BuildRequires: gettext-devel
- Add Requires: gettext
- Add fc10 conditionals</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.4-2" date="1227477600">- Removed 1.2.x patches.
- Removed dependencies cgilib.
- Added dependencies pango, cairo.</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.4-1" date="1227477600">- Updated to release 1.3.4.</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.2.28-1" date="1224108000">- Updated to release 1.2.28.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.23-1" date="1181167200">- Updated to release 1.2.23.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.21-1" date="1178143200">- Updated to release 1.2.21.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.18-1" date="1169848800">- Updated to release 1.2.18.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.15-1" date="1153346400">- Updated to release 1.2.15.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.13-1" date="1146866400">- Updated to release 1.2.13.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.12-1" date="1135029600">- Updated to release 1.2.12.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.11-1" date="1122501600">- Updated to release 1.2.11.
- Fixes for x86_64 and perl/tcl/python bindings.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.9-1" date="1117922400">- Updated to release 1.2.9.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.8-1" date="1116453600">- Updated to release 1.2.8.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.6-1" date="1115762400">- Updated to release 1.2.6.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.2-1" date="1115503200">- Updated to release 1.2.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.1-1" date="1115503200">- Updated to release 1.2.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.0-1" date="1114812000">- Updated to release 1.2.0.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.49-2" date="1112652000">- Fix for the php-rrdtool patch. (Joe Pruett)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.49-1" date="1093471200">- Updated to release 1.0.49.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.48-3" date="1093471200">- Fixes for x86_64. (Garrick Staples)</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.48-3" date="1088805600">- Actually apply the patch for fixing the php module, doh!</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.48-2" date="1085695200">- Added php.d config entry to load the module once installed.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.48-1" date="1084485600">- Updated to release 1.0.48.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.47-1" date="1081288800">- Updated to release 1.0.47.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.46-2" date="1078437600">- Change the strict dependency on perl to fix problem with the recent
  update.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.46-1" date="1073340000">- Update to 1.0.46.
- Use system libpng and zlib instead of bundled ones.
- Added php-rrdtool sub-package for the php4 module.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.45-4" date="1070661600">- Added epoch to the perl dependency to work with rpm &gt; 4.2.
- Fixed the % escaping in the perl dep.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.45-2" date="1069106400">- Rebuild for Fedora Core 1.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1059948000">- Update to 1.0.45.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1050530400">- Update to 1.0.42.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1049148000">- Rebuilt for Red Hat Linux 9.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1046901600">- Added explicit perl version dependency.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1046037600">- Update to 1.0.41.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1044050400">- Update to 1.0.40.
- Spec file cleanup.</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1025906400">- 1.0.39</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1023141600">- 1.0.38</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1019253600">- 1.0.37</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1015970400">- 1.0.34
- rrdtools include zlib 1.1.4 which fix vulnerabilities in 1.1.3</changelog></package>
<package pkgid="727671659080b58dbb655cd2c03adbd13522c689" name="perl-Glib" arch="i386"><version epoch="0" ver="1.200" rel="1.rf"/><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.200-1 - 6384+/dag" date="1223424000">- Updated to release 1.200.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.183-1" date="1214265600">- Updated to release 1.183.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.182-1" date="1210032000">- Updated to release 1.182.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.180-1" date="1205539200">- Updated to release 1.180.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.164-1" date="1201132800">- Updated to release 1.164.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.162-1" date="1194998400">- Updated to release 1.162.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.161-1" date="1194652800">- Updated to release 1.161.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 1.142-1" date="1167868800">- Updated to release 1.142.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.140-1" date="1159660800">- Updated to release 1.140.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 1.101-1" date="1131235200">- Updated to release 1.101.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.080-1" date="1110326400">- Updated to release 1.080.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.062-1 - $Rev: 6384 $" date="1108339200">- Updated to release 1.062.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.040-1" date="1080345600">- Updated to release 1.040.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.022-1" date="1079654400">- Updated to release 1.022.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.00-0" date="1065916800">- Updated to release 1.00.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.97-0" date="1062979200">- Updated to release 0.97.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.96-0" date="1062288000">- Updated to release 0.96.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.95-0" date="1061596800">- Updated to release 0.95.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.94-0" date="1061078400">- Updated to release 0.94.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.92-0" date="1059868800">- Updated to release 0.92.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91-0" date="1059350400">- Updated to release 0.91.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-0" date="1058745600">- Initial package. (using DAR)</changelog></package>
<package pkgid="ca703b77c480b9838a140eaa389f9b4671bb6947" name="perl-gettext" arch="i386"><version epoch="0" ver="1.05" rel="1.rf"/><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.05-1 - 5999+/dag" date="1195516800">- Updated to release 1.05.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.00-1" date="1178323200">- Initial package. (using DAR)</changelog></package>
<package pkgid="3826b7466e06e86a1d1c83fe98bd6f44b474714b" name="perl-File-Find-Rule" arch="noarch"><version epoch="0" ver="0.30" rel="1.rf"/><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.30-1 - 4479/dries" date="1149292800">- Updated to release 0.30.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.28-1.2" date="1143072000">- Rebuild for Fedora Core 5.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.28-1" date="1102464000">- Initial package.</changelog></package>
<package pkgid="005fda453504f655cd3a9d510f11a1cb6ce259b2" name="openssh-clients" arch="i386"><version epoch="0" ver="4.3p2" rel="82.el5.slf"/><changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt; 4.3p2-82.el5.slf" date="1333490400">For SLF we add legacy GSSAPI
  Spec change: Add management of vulnkey
- Added patch FERMI-CHANGES-TO-SPEC-FILE-openssh-4.3p2.patch
- Added patch FERMI-openssh-4.3p2-fermi-pam-sshd.patch
  Configures pam to use kerberos right away
- Added patch FERMI-openssh-4.3p2-fermi-ssh-config.patch
  Turns on GSSAPI by default
- Added patch FERMI-openssh-4.3p2-fermi-sshd-config.patch
  Turns on GSSAPI by default
- Added patch FERMI-openssh-4.3p2-fermi-gss_hostname_for_CMS.patch
  Added for CMS, GSSAPIStrictAcceptorCheck may be better under SL6
- Added patch openssh_4.3p2-8ubuntu1.5-trimmed.diff
  Modified slightly from upstream so it works with RH better
- Added patch openssh_4.3p2-8ubuntu1.5.diff
- Added patch openssh-4.3p2-8ubuntu1.diff
- Added patch openssh-TROYS_CHANGELOG
- Prevented application of patch openssh-4.3p2-gssapi-no-spnego.patch
  conflicts with legacy GSSAPI patch
- Prevented application of patch openssh-4.3p2-gssapi-canohost.patch
  conflicts with legacy GSSAPI patch
- Prevented application of patch openssh-TROYS_CHANGELOG
  History from Troy, not a real patch
- Prevented application of patch openssh-4.3p2-8ubuntu1.diff
  History from Troy
- Prevented application of patch openssh_4.3p2-8ubuntu1.5.diff
  Full upstream patch, unmodified
- Prevented application of patch FERMI-CHANGES-TO-SPEC-FILE-openssh-4.3p2.patch</changelog><changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 4.3p2-82" date="1325628000">- improve RNG seeding from /dev/random (#681291,#708056)</changelog><changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 4.3p2-81" date="1322776800">- make ssh(1)'s ConnectTimeout option apply to both the TCP connection and
  SSH banner exchange (#750725)</changelog><changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 4.3p2-80" date="1322258400">- use IPV6_V6ONLY for sshd inet6 listening socket (#640857)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-79" date="1319234400">- add LANGUAGE to the sent/accepted evvironment (#710229)
- ssh-copy-id copies now id_rsa.pub by default (#731930)
- repairs man pages (#731925)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-78" date="1317852000">- set cloexec on accept socket (#642935)
- add umask to sftp (#720598)
- enable lastolg for big uids (#706315)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-77" date="1314309600">- enable selinux domain transition to passwd_t (#689406)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-76" date="1313186400">- enable pubkey auth in the fips mode (#674747)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-75" date="1301349600">- improve resseding the prng from /dev/urandom or /dev/random respectively (#681291)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-73" date="1300917600">- periodically ressed the prng from /dev/urandom or /dev/random respectively (#681291)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-72" date="1292450400">- change cipher preferences (#661716)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-71" date="1291932000">- change cipher preferences (#661716)
- enable to run sshd as non root user (#661669)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-70" date="1291759200">- reenable rekeying (#659242)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-69" date="1288735200">- add nss keys to key audit patch (#632402)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-68" date="1288735200">- key audit patch (#632402)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-47" date="1284501600">- supply forced command documentation (#532559)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-46" date="1281996000">- compile in the OpenSSL engine support</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-45" date="1277848800">- record lastlog with big uid (#616396)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-44" date="1277848800">- add OpenSSL engine support (#594815)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-43" date="1277848800">- backport forced command directive (#532559)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-42" date="1277762400">- stderr does not more disturb sftp (#576765)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-41" date="1264197600">- add RAND_cleanup at the exit of each program using RAND (#557166)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-40" date="1259704800">- revert adjustable buffer length patch (#508914)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-39" date="1257976800">- set adjustable buffer length  (#508914)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-38" date="1257458400">- set better buffer length in latency patch (#508914)
- close error file descriptor before running external subsystem (#530358)
- prevent initscript from hanging when generates the keys (#531738)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-37" date="1253052000">- minimize chroot patch to be compatible with upstream (#522141)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-36.1" date="1250632800">- revert latency patch to solve scp stall regression (#508914)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-36" date="1245794400">- tiny change in chroot sftp capability into openssh-server solve ls speed problem (#440240)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-35" date="1243375200">- workaround to plaintext recovery attack against CBC ciphers CVE-2008-5161 (#502230)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-34" date="1242424800">- disable protocol 1 in the FIPS mode</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-33" date="1241128800">- fix scp hangup on exit (#454812)
- call integrity checks only on binaries which are part of the OpenSSH FIPS
  modules</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-32" date="1240264800">- log if FIPS mode is initialized (#492363)
- check the integrity of the binaries in the FIPS mode (#467268)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-31" date="1239228000">- fix ssh hangup on exit (#454812)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-30" date="1238191200">- add chroot sftp capability into openssh-server (#440240)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-29" date="1222984800">- allow options for the sshd subsystem for the sftp logging support (#452619)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-28" date="1221170400">- use OpenSSL RNG directly (needed for FIPS-140-2 compliance)
- when in FIPS mode do not try to use algorithms which are not allowed (#447936)
- improve transfer speed on high latency connections (#227722)
- more correct 'service sshd status' reporting (#430877)
- add logging support to the sftp server (#452619)
- small scp manual page improvement (#433381)</changelog><changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 4.3p2-26.el5_2.1" date="1218837600">- CVE-2007-4752 - Prevent ssh(1) from using a trusted X11 cookie if creation of an
  untrusted cookie fails (#280361)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-26" date="1200434400">- drain acks on sftp write failures (#251565)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-24" date="1184364000">- fixed audit log injection problem (CVE-2007-3102) (#248059)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-23" date="1182463200">- document where the nss certificate and token dbs are looked for</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-22" date="1182376800">- experimental support for PKCS#11 tokens through libnss3 (#183423)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-21" date="1175637600">- fix an information leak in Kerberos password authentication (CVE-2006-5052)
  (#234638)
- correctly setup context when empty level requested (#234951)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-20" date="1174341600">- and always request default level as returned by getseuserbyname (#231695)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-19" date="1174341600">- check requested level context against a context with the same role (#231695)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-18" date="1172613600">- reject connection if requested mls range is not obtained (#229278)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-17" date="1171058400">- allow selecting non-default roles and audit role changes (#227733)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-16" date="1168552800">- support also level selection on unlabeled networks (#220487)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-15" date="1166824800">- make sshd work with mls networking (patch by Klaus Weidner) (#220487)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-14" date="1164924000">- fix gssapi with DNS loadbalanced clusters (#216857)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-13" date="1164751200">- improved pam_session patch so it doesn't regress, the patch is necessary
  for the pam_session_close to be called correctly as uid 0 (#167488)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-10.1" date="1163196000">- CVE-2006-5794 - properly detect failed key verify in monitor (#214642)
- kill all ssh sessions when stop is called in halt or reboot runlevel (#213008)
- remove -TERM option from killproc so we don't race on sshd restart (#213490)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-10" date="1159826400">- improve gssapi-no-spnego patch (#208102)
- CVE-2006-4924 - prevent DoS on deattack detector (#207957)
- CVE-2006-5051 - don't call cleanups from signal handler (#208459)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-9" date="1156370400">- don't report duplicate syslog messages, use correct local time (#189158)
- don't allow spnego as gssapi mechanism (from upstream)
- fixed memleaks found by Coverity (from upstream)
- allow ip options except source routing (#202856) (patch by HP)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-8" date="1155074400">- drop the pam-session patch from the previous build (#201341)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-7" date="1153432800">- dropped old ssh obsoletes
- call the pam_session_open/close from the monitor when privsep is
  enabled so it is always called as root (patch by Darren Tucker)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-6" date="1153173600">- improve selinux patch (by Jan Kiszka)
- upstream patch for buffer append space error (#191940)
- fixed typo in configure.ac (#198986)
- added pam_keyinit to pam configuration (#198628)
- improved error message when askpass dialog cannot grab
  keyboard input (#198332)
- buildrequires xauth instead of xorg-x11-xauth
- fixed a few rpmlint warnings</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 4.3p2-5.1" date="1152741600">- rebuild</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-5" date="1145052000">- don't request pseudoterminal allocation if stdin is not tty (#188983)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-4" date="1141336800">- allow access if audit is not compiled in kernel (#183243)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-3" date="1140818400">- enable the subprocess in chroot to send messages to system log
- sshd should prevent login if audit call fails</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-2" date="1140559200">- print error from scp if not remote (patch by Bjorn Augustsson #178923)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-1" date="1139868000">- new version</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 4.3p1-2.1" date="1139608800">- bump again for double-long bug on ppc(64)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p1-2" date="1139263200">- fixed another place where syslog was called in signal handler
- pass locale environment variables to server, accept them there (#179851)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p1-1" date="1138831200">- new version, dropped obsolete patches</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.2p1-10" date="1135116000">- hopefully make the askpass dialog less confusing (#174765)</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt;" date="1134165600">- rebuilt</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.2p1-9" date="1132696800">- drop x11-ssh-askpass from the package
- drop old build_6x ifs from spec file
- improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
  characters to person looking at the display
- less hackish fix for the __USE_GNU problem</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 4.2p1-8" date="1132351200">- work around missing gccmakedep by wrapping makedepend in a local script
- remove now-obsolete build dependency on "xauth"</changelog><changelog author="Warren Togami &lt;wtogami@redhat.com&gt; - 4.2p1-7" date="1132264800">- xorg-x11-devel -&gt; libXt-devel
- rebuild for new xauth location so X forwarding works
- buildreq audit-libs-devel
- buildreq automake for aclocal
- buildreq imake for xmkmf
-  -D_GNU_SOURCE in flags in order to get it to build
   Ugly hack to workaround openssh defining __USE_GNU which is
   not allowed and causes problems according to Ulrich Drepper
   fix this the correct way after FC5test1</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; - 4.2p1-6" date="1131573600">- rebuild against new openssl</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-5" date="1130536800">- put back the possibility to skip SELinux patch
- add patch for user login auditing by Steve Grubb</changelog><changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; 4.2p1-4" date="1129672800">- Change selinux patch to use get_default_context_with_rolelevel in libselinux.</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-3" date="1129240800">- Update selinux patch to use getseuserbyname</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-2" date="1128722400">- use include instead of pam_stack in pam config
- use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
- upstream patch for displaying authentication errors</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-1" date="1126044000">- upgrade to a new upstream version</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-5" date="1124229600">- use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
- install ssh-copy-id from contrib (#88707)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-4" date="1122501600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-3" date="1120082400">- fix small regression caused by the nologin patch (#161956)
- fix race in getpeername error checking (mindrot #1054)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-2" date="1118354400">- use only pam_nologin for nologin testing</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-1" date="1118095200">- upgrade to a new upstream version
- call pam_loginuid as a pam session module</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.0p1-3" date="1116280800">- link libselinux only to sshd (#157678)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.0p1-2" date="1112652000">- fixed Local/RemoteForward in ssh_config.5 manpage
- fix fatal when Local/RemoteForward is used and scp run (#153258)
- don't leak user validity when using krb5 authentication</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.0p1-1" date="1111701600">- upgrade to 4.0p1
- remove obsolete groups patch</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1111010400">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-12" date="1109628000">- rebuild so that configure can detect that krb5_init_ets is gone now</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-11" date="1109023200">- don't call syslog in signal handler
- allow password authentication when copying from remote
  to remote machine (#103364)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt;" date="1107986400">- add spaces to messages in initscript (#138508)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-10" date="1107900000">- enable trusted forwarding by default if X11 forwarding is 
  required by user (#137685 and duplicates)
- disable protocol 1 support by default in sshd server config (#88329)
- keep the gnome-askpass dialog above others (#69131)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt;" date="1107554400">- change permissions on pam.d/sshd to 0644 (#64697)
- patch initscript so it doesn't kill opened sessions if
  the sshd daemon isn't running anymore (#67624)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-9" date="1104789600">- don't use initlog</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.1" date="1101765600">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096927200">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095717600">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095199200">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095112800">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094162400">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094162400">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094162400">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093989600">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093384800">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091397600">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087336800">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087336800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086818400">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086645600">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086300000">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086127200">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086127200">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079474400">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078351200">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078178400">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077832800">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077832800">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077573600">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076709600">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075154400">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075154400">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074117600">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070488800">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069192800">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068501600">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068156000">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067032800">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066082400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066082400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064008800">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064008800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064008800">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063836000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063836000">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063836000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063836000">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063749600">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063749600">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063749600">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063749600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063749600">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062799200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062799200">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061935200">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060725600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060725600">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059429600">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058911200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055800800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055800800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054850400">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054764000">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048543200">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045260000">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044914400">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043272800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041976800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037138400">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034719200">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033768800">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031868000">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030658400">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029362400">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025215200">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025042400">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024956000">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024696800">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023487200">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022882400">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022623200">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021672800">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021672800">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017784800">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016748000">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015538400">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015538400">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015538400">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015365600">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014242400">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013637600">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011823200">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009663200">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007503200">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005948000">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005688800">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005256800">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005170400">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001628000">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000418400">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999813600">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998344800">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997999200">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997394400">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997308000">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997135200">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996098400">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994888800">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993506400">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992901600">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991951200">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990828000">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990741600">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988927200">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988840800">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987631200">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986767200">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986248800">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985384800">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985298400">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985125600">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983656800">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983570400">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983224800">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982879200">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982706400">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982620000">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982360800">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982101600">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981583200">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980287200">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979941600">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979855200">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977349600">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976053600">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975535200">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975448800">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975362400">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975276000">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974844000">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974757600">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974498400">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973634400">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972943200">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971215200">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970783200">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970524000">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968277600">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967068000">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963871200">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963439200">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962920800">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962834400">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962575200">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962488800">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962316000">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962143200">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960588000">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960069600">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953157600">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946245600">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942703200">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942530400">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942184800">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942098400">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941320800">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941234400">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941148000">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941061600">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="ae4bf26124254361b1a70a88055dbb5bef356ef5" name="openssh-server" arch="i386"><version epoch="0" ver="4.3p2" rel="82.el5.slf"/><changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt; 4.3p2-82.el5.slf" date="1333490400">For SLF we add legacy GSSAPI
  Spec change: Add management of vulnkey
- Added patch FERMI-CHANGES-TO-SPEC-FILE-openssh-4.3p2.patch
- Added patch FERMI-openssh-4.3p2-fermi-pam-sshd.patch
  Configures pam to use kerberos right away
- Added patch FERMI-openssh-4.3p2-fermi-ssh-config.patch
  Turns on GSSAPI by default
- Added patch FERMI-openssh-4.3p2-fermi-sshd-config.patch
  Turns on GSSAPI by default
- Added patch FERMI-openssh-4.3p2-fermi-gss_hostname_for_CMS.patch
  Added for CMS, GSSAPIStrictAcceptorCheck may be better under SL6
- Added patch openssh_4.3p2-8ubuntu1.5-trimmed.diff
  Modified slightly from upstream so it works with RH better
- Added patch openssh_4.3p2-8ubuntu1.5.diff
- Added patch openssh-4.3p2-8ubuntu1.diff
- Added patch openssh-TROYS_CHANGELOG
- Prevented application of patch openssh-4.3p2-gssapi-no-spnego.patch
  conflicts with legacy GSSAPI patch
- Prevented application of patch openssh-4.3p2-gssapi-canohost.patch
  conflicts with legacy GSSAPI patch
- Prevented application of patch openssh-TROYS_CHANGELOG
  History from Troy, not a real patch
- Prevented application of patch openssh-4.3p2-8ubuntu1.diff
  History from Troy
- Prevented application of patch openssh_4.3p2-8ubuntu1.5.diff
  Full upstream patch, unmodified
- Prevented application of patch FERMI-CHANGES-TO-SPEC-FILE-openssh-4.3p2.patch</changelog><changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 4.3p2-82" date="1325628000">- improve RNG seeding from /dev/random (#681291,#708056)</changelog><changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 4.3p2-81" date="1322776800">- make ssh(1)'s ConnectTimeout option apply to both the TCP connection and
  SSH banner exchange (#750725)</changelog><changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 4.3p2-80" date="1322258400">- use IPV6_V6ONLY for sshd inet6 listening socket (#640857)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-79" date="1319234400">- add LANGUAGE to the sent/accepted evvironment (#710229)
- ssh-copy-id copies now id_rsa.pub by default (#731930)
- repairs man pages (#731925)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-78" date="1317852000">- set cloexec on accept socket (#642935)
- add umask to sftp (#720598)
- enable lastolg for big uids (#706315)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-77" date="1314309600">- enable selinux domain transition to passwd_t (#689406)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-76" date="1313186400">- enable pubkey auth in the fips mode (#674747)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-75" date="1301349600">- improve resseding the prng from /dev/urandom or /dev/random respectively (#681291)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-73" date="1300917600">- periodically ressed the prng from /dev/urandom or /dev/random respectively (#681291)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-72" date="1292450400">- change cipher preferences (#661716)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-71" date="1291932000">- change cipher preferences (#661716)
- enable to run sshd as non root user (#661669)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-70" date="1291759200">- reenable rekeying (#659242)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-69" date="1288735200">- add nss keys to key audit patch (#632402)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-68" date="1288735200">- key audit patch (#632402)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-47" date="1284501600">- supply forced command documentation (#532559)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-46" date="1281996000">- compile in the OpenSSL engine support</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-45" date="1277848800">- record lastlog with big uid (#616396)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-44" date="1277848800">- add OpenSSL engine support (#594815)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-43" date="1277848800">- backport forced command directive (#532559)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-42" date="1277762400">- stderr does not more disturb sftp (#576765)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-41" date="1264197600">- add RAND_cleanup at the exit of each program using RAND (#557166)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-40" date="1259704800">- revert adjustable buffer length patch (#508914)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-39" date="1257976800">- set adjustable buffer length  (#508914)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-38" date="1257458400">- set better buffer length in latency patch (#508914)
- close error file descriptor before running external subsystem (#530358)
- prevent initscript from hanging when generates the keys (#531738)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-37" date="1253052000">- minimize chroot patch to be compatible with upstream (#522141)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-36.1" date="1250632800">- revert latency patch to solve scp stall regression (#508914)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-36" date="1245794400">- tiny change in chroot sftp capability into openssh-server solve ls speed problem (#440240)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-35" date="1243375200">- workaround to plaintext recovery attack against CBC ciphers CVE-2008-5161 (#502230)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-34" date="1242424800">- disable protocol 1 in the FIPS mode</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-33" date="1241128800">- fix scp hangup on exit (#454812)
- call integrity checks only on binaries which are part of the OpenSSH FIPS
  modules</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-32" date="1240264800">- log if FIPS mode is initialized (#492363)
- check the integrity of the binaries in the FIPS mode (#467268)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-31" date="1239228000">- fix ssh hangup on exit (#454812)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-30" date="1238191200">- add chroot sftp capability into openssh-server (#440240)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-29" date="1222984800">- allow options for the sshd subsystem for the sftp logging support (#452619)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-28" date="1221170400">- use OpenSSL RNG directly (needed for FIPS-140-2 compliance)
- when in FIPS mode do not try to use algorithms which are not allowed (#447936)
- improve transfer speed on high latency connections (#227722)
- more correct 'service sshd status' reporting (#430877)
- add logging support to the sftp server (#452619)
- small scp manual page improvement (#433381)</changelog><changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 4.3p2-26.el5_2.1" date="1218837600">- CVE-2007-4752 - Prevent ssh(1) from using a trusted X11 cookie if creation of an
  untrusted cookie fails (#280361)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-26" date="1200434400">- drain acks on sftp write failures (#251565)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-24" date="1184364000">- fixed audit log injection problem (CVE-2007-3102) (#248059)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-23" date="1182463200">- document where the nss certificate and token dbs are looked for</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-22" date="1182376800">- experimental support for PKCS#11 tokens through libnss3 (#183423)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-21" date="1175637600">- fix an information leak in Kerberos password authentication (CVE-2006-5052)
  (#234638)
- correctly setup context when empty level requested (#234951)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-20" date="1174341600">- and always request default level as returned by getseuserbyname (#231695)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-19" date="1174341600">- check requested level context against a context with the same role (#231695)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-18" date="1172613600">- reject connection if requested mls range is not obtained (#229278)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-17" date="1171058400">- allow selecting non-default roles and audit role changes (#227733)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-16" date="1168552800">- support also level selection on unlabeled networks (#220487)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-15" date="1166824800">- make sshd work with mls networking (patch by Klaus Weidner) (#220487)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-14" date="1164924000">- fix gssapi with DNS loadbalanced clusters (#216857)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-13" date="1164751200">- improved pam_session patch so it doesn't regress, the patch is necessary
  for the pam_session_close to be called correctly as uid 0 (#167488)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-10.1" date="1163196000">- CVE-2006-5794 - properly detect failed key verify in monitor (#214642)
- kill all ssh sessions when stop is called in halt or reboot runlevel (#213008)
- remove -TERM option from killproc so we don't race on sshd restart (#213490)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-10" date="1159826400">- improve gssapi-no-spnego patch (#208102)
- CVE-2006-4924 - prevent DoS on deattack detector (#207957)
- CVE-2006-5051 - don't call cleanups from signal handler (#208459)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-9" date="1156370400">- don't report duplicate syslog messages, use correct local time (#189158)
- don't allow spnego as gssapi mechanism (from upstream)
- fixed memleaks found by Coverity (from upstream)
- allow ip options except source routing (#202856) (patch by HP)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-8" date="1155074400">- drop the pam-session patch from the previous build (#201341)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-7" date="1153432800">- dropped old ssh obsoletes
- call the pam_session_open/close from the monitor when privsep is
  enabled so it is always called as root (patch by Darren Tucker)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-6" date="1153173600">- improve selinux patch (by Jan Kiszka)
- upstream patch for buffer append space error (#191940)
- fixed typo in configure.ac (#198986)
- added pam_keyinit to pam configuration (#198628)
- improved error message when askpass dialog cannot grab
  keyboard input (#198332)
- buildrequires xauth instead of xorg-x11-xauth
- fixed a few rpmlint warnings</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 4.3p2-5.1" date="1152741600">- rebuild</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-5" date="1145052000">- don't request pseudoterminal allocation if stdin is not tty (#188983)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-4" date="1141336800">- allow access if audit is not compiled in kernel (#183243)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-3" date="1140818400">- enable the subprocess in chroot to send messages to system log
- sshd should prevent login if audit call fails</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-2" date="1140559200">- print error from scp if not remote (patch by Bjorn Augustsson #178923)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-1" date="1139868000">- new version</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 4.3p1-2.1" date="1139608800">- bump again for double-long bug on ppc(64)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p1-2" date="1139263200">- fixed another place where syslog was called in signal handler
- pass locale environment variables to server, accept them there (#179851)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p1-1" date="1138831200">- new version, dropped obsolete patches</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.2p1-10" date="1135116000">- hopefully make the askpass dialog less confusing (#174765)</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt;" date="1134165600">- rebuilt</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.2p1-9" date="1132696800">- drop x11-ssh-askpass from the package
- drop old build_6x ifs from spec file
- improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
  characters to person looking at the display
- less hackish fix for the __USE_GNU problem</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 4.2p1-8" date="1132351200">- work around missing gccmakedep by wrapping makedepend in a local script
- remove now-obsolete build dependency on "xauth"</changelog><changelog author="Warren Togami &lt;wtogami@redhat.com&gt; - 4.2p1-7" date="1132264800">- xorg-x11-devel -&gt; libXt-devel
- rebuild for new xauth location so X forwarding works
- buildreq audit-libs-devel
- buildreq automake for aclocal
- buildreq imake for xmkmf
-  -D_GNU_SOURCE in flags in order to get it to build
   Ugly hack to workaround openssh defining __USE_GNU which is
   not allowed and causes problems according to Ulrich Drepper
   fix this the correct way after FC5test1</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; - 4.2p1-6" date="1131573600">- rebuild against new openssl</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-5" date="1130536800">- put back the possibility to skip SELinux patch
- add patch for user login auditing by Steve Grubb</changelog><changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; 4.2p1-4" date="1129672800">- Change selinux patch to use get_default_context_with_rolelevel in libselinux.</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-3" date="1129240800">- Update selinux patch to use getseuserbyname</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-2" date="1128722400">- use include instead of pam_stack in pam config
- use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
- upstream patch for displaying authentication errors</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-1" date="1126044000">- upgrade to a new upstream version</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-5" date="1124229600">- use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
- install ssh-copy-id from contrib (#88707)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-4" date="1122501600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-3" date="1120082400">- fix small regression caused by the nologin patch (#161956)
- fix race in getpeername error checking (mindrot #1054)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-2" date="1118354400">- use only pam_nologin for nologin testing</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-1" date="1118095200">- upgrade to a new upstream version
- call pam_loginuid as a pam session module</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.0p1-3" date="1116280800">- link libselinux only to sshd (#157678)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.0p1-2" date="1112652000">- fixed Local/RemoteForward in ssh_config.5 manpage
- fix fatal when Local/RemoteForward is used and scp run (#153258)
- don't leak user validity when using krb5 authentication</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.0p1-1" date="1111701600">- upgrade to 4.0p1
- remove obsolete groups patch</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1111010400">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-12" date="1109628000">- rebuild so that configure can detect that krb5_init_ets is gone now</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-11" date="1109023200">- don't call syslog in signal handler
- allow password authentication when copying from remote
  to remote machine (#103364)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt;" date="1107986400">- add spaces to messages in initscript (#138508)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-10" date="1107900000">- enable trusted forwarding by default if X11 forwarding is 
  required by user (#137685 and duplicates)
- disable protocol 1 support by default in sshd server config (#88329)
- keep the gnome-askpass dialog above others (#69131)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt;" date="1107554400">- change permissions on pam.d/sshd to 0644 (#64697)
- patch initscript so it doesn't kill opened sessions if
  the sshd daemon isn't running anymore (#67624)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-9" date="1104789600">- don't use initlog</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.1" date="1101765600">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096927200">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095717600">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095199200">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095112800">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094162400">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094162400">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094162400">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093989600">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093384800">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091397600">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087336800">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087336800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086818400">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086645600">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086300000">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086127200">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086127200">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079474400">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078351200">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078178400">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077832800">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077832800">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077573600">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076709600">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075154400">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075154400">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074117600">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070488800">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069192800">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068501600">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068156000">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067032800">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066082400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066082400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064008800">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064008800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064008800">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063836000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063836000">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063836000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063836000">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063749600">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063749600">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063749600">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063749600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063749600">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062799200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062799200">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061935200">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060725600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060725600">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059429600">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058911200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055800800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055800800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054850400">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054764000">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048543200">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045260000">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044914400">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043272800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041976800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037138400">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034719200">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033768800">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031868000">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030658400">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029362400">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025215200">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025042400">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024956000">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024696800">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023487200">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022882400">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022623200">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021672800">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021672800">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017784800">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016748000">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015538400">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015538400">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015538400">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015365600">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014242400">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013637600">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011823200">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009663200">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007503200">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005948000">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005688800">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005256800">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005170400">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001628000">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000418400">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999813600">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998344800">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997999200">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997394400">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997308000">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997135200">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996098400">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994888800">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993506400">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992901600">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991951200">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990828000">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990741600">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988927200">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988840800">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987631200">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986767200">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986248800">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985384800">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985298400">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985125600">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983656800">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983570400">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983224800">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982879200">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982706400">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982620000">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982360800">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982101600">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981583200">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980287200">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979941600">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979855200">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977349600">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976053600">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975535200">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975448800">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975362400">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975276000">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974844000">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974757600">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974498400">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973634400">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972943200">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971215200">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970783200">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970524000">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968277600">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967068000">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963871200">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963439200">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962920800">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962834400">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962575200">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962488800">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962316000">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962143200">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960588000">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960069600">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953157600">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946245600">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942703200">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942530400">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942184800">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942098400">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941320800">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941234400">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941148000">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941061600">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="994c364f1dada808d7b4d7032794df521db51a23" name="rrdtool-ruby" arch="i386"><version epoch="0" ver="1.3.9" rel="2.sl5"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 1.3.9-2.sl5" date="1259618400">- Added Provides for tcl, perl, python, ruby to be compatable with dag</changelog><changelog author="William R. Lorenz &lt;wrl@express.org&gt; - 1.3.9-1.wrl" date="1256767200">- Update to 1.3.9</changelog><changelog author="William R. Lorenz &lt;wrl@express.org&gt; - 1.3.8-1.wrl" date="1247954400">- Update to 1.3.8</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.7-1 - 6801/cmr" date="1242424800">- Update to 1.3.7</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.6-1" date="1234562400">- Update to 1.3.6</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.5-2" date="1231192800">- Remove fc10 conditionals
- Compile against evolution28 version of pango,cairo,glib on el4</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.5-1" date="1230674400">- Update version
- Add BuildRequires: ruby for macro expansion
- Add BuildRequires: gettext-devel
- Add Requires: gettext
- Add fc10 conditionals</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.4-2" date="1227477600">- Removed 1.2.x patches.
- Removed dependencies cgilib.
- Added dependencies pango, cairo.</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.4-1" date="1227477600">- Updated to release 1.3.4.</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.2.28-1" date="1224108000">- Updated to release 1.2.28.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.23-1" date="1181167200">- Updated to release 1.2.23.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.21-1" date="1178143200">- Updated to release 1.2.21.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.18-1" date="1169848800">- Updated to release 1.2.18.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.15-1" date="1153346400">- Updated to release 1.2.15.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.13-1" date="1146866400">- Updated to release 1.2.13.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.12-1" date="1135029600">- Updated to release 1.2.12.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.11-1" date="1122501600">- Updated to release 1.2.11.
- Fixes for x86_64 and perl/tcl/python bindings.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.9-1" date="1117922400">- Updated to release 1.2.9.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.8-1" date="1116453600">- Updated to release 1.2.8.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.6-1" date="1115762400">- Updated to release 1.2.6.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.2-1" date="1115503200">- Updated to release 1.2.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.1-1" date="1115503200">- Updated to release 1.2.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.0-1" date="1114812000">- Updated to release 1.2.0.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.49-2" date="1112652000">- Fix for the php-rrdtool patch. (Joe Pruett)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.49-1" date="1093471200">- Updated to release 1.0.49.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.48-3" date="1093471200">- Fixes for x86_64. (Garrick Staples)</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.48-3" date="1088805600">- Actually apply the patch for fixing the php module, doh!</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.48-2" date="1085695200">- Added php.d config entry to load the module once installed.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.48-1" date="1084485600">- Updated to release 1.0.48.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.47-1" date="1081288800">- Updated to release 1.0.47.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.46-2" date="1078437600">- Change the strict dependency on perl to fix problem with the recent
  update.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.46-1" date="1073340000">- Update to 1.0.46.
- Use system libpng and zlib instead of bundled ones.
- Added php-rrdtool sub-package for the php4 module.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.45-4" date="1070661600">- Added epoch to the perl dependency to work with rpm &gt; 4.2.
- Fixed the % escaping in the perl dep.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.45-2" date="1069106400">- Rebuild for Fedora Core 1.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1059948000">- Update to 1.0.45.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1050530400">- Update to 1.0.42.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1049148000">- Rebuilt for Red Hat Linux 9.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1046901600">- Added explicit perl version dependency.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1046037600">- Update to 1.0.41.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1044050400">- Update to 1.0.40.
- Spec file cleanup.</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1025906400">- 1.0.39</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1023141600">- 1.0.38</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1019253600">- 1.0.37</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1015970400">- 1.0.34
- rrdtools include zlib 1.1.4 which fix vulnerabilities in 1.1.3</changelog></package>
<package pkgid="53ba056e28e190c0bf15eb94ed80670329c44f57" name="heartbeat" arch="i386"><version epoch="0" ver="2.99.2" rel="6.1.sl5.1"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt;" date="1370469600">- fixed up libnet and libnet-devel dependencies</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1222725600">- version 2.99.1-1
- Update source tarball to revision: d8710f41b9cb
- Includes many fixes to init scripts.
- Add sbd for shared-storage fencing.</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1219356000">- version 2.99.0-1
- Update source tarball to revision: f23531dd23ad</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1207087200">- version 2.1.3-18
- Added two small patches for Bug LF-1833: Do not overwrite op_status depending on op_rc</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1200348000">- version 2.1.3-1
- Update source tarball to revision: 9cdeae333990
- Statistics:
    Changesets:      153
    Diff:            141 files changed, 12279 insertions(+), 3103 deletions(-)
- This is the first release now that the CRM has becme its own project called
  Pacemaker and no longer included with Heartbeat.
- Without the CRM present, the following components are also no longer able to
  be included with Heartbeat (as they require CRM libraries) and are instead
  provided as part of pacemaker or the new pacemaker-pygui project.
   cim
   snmp
   mgmtd
   pygui
   tsa_subagent
- RPM-based distributions also have a new package layout
   heartbeat-resources ::= resource agents
   heartbeat-common    ::= components that are useful regardless of which stack is being used
   heartbeat           ::= components that are specific to the Heartbeat stack
- Changes since obs-2.1.2-24
+ apache RA: remove children in case the top process didn't
+ apcsmart: make message more descriptive
+ build (LF 1803): add -fgnu89-inline to CFLAGS if gcc version is &gt;=4.1.3 and &lt;4.3
+ by request from Andrew - Modified the external/ssh plugin to have a livedangerously flag
+ ccm (LF 1806): restart all instead of exiting (low impact)
+ Changed a test from causing a reboot to not triggering a reboot - because it doesn't seem to any more
+ Changed HIGHLY to STRONGLY in how strongly we recommend STONITH
+ Corrected a warning found on FC8 in the cl_reboot code
+ debian: Add dependancy on libpam-runtime (&gt;= 0.76-14)
+ Debian: add libxml2-utils as a dependancy, because we need xmllint for the BSC
+ Debian: add the new ibmrsa-telnet stonith plugin
+ debian: clean python bytecode
+ debian: clean up stale heartbeat-2 files
+ debian: don't install bytecompiled python modules
+ debian: patches need to be distributed
+ debian: remove chown patch
+ debian: Update standards version from 3.7.2 to 3.7.3
+ debian: update the name of the series file to reflect the new release
+ docs/packaging: reshuffle hb_report documentation and include the html version
+ dopd: don't cl_free variables on local stack
+ dopd: don't hardcode path of drbdadm; it has to be in the PATH, though.
+ dopd: fix potential segfault due to leakage of invalid/freed pointer
+ dopd: make it work with multiple concurrent outdate requests
+ external ipmi plugin caused error messages when getting metadata on machine w/o ipmitool installed.  This somewhat messed up BasicSanityCheck.
+ Filesystem: Make mount point required for the GUI (Hideo Yamauchi)
+ Fix memory leak in external plugin handling
+ fixes for fedora: system(3) function return value cannot be ignored. Also added a missing RPM build dependency.
+ hb_report: add quotes around args to test -f
+ hb_report: don't surprise user by reading the files from the current directory
+ hb_report: include hostcache
+ hb_report: replace arch with uname -m
+ hg: from last changes to recover from media errors, fixed a stupid typo with a reversed boolean condition.
+ hg: LF bug 1794: ComponentFail tests failing
+ hg: Makefile for external stonith commands was missing new stonith plugin in the extra_dist section
+ High: Heartbeat: Include an option to start the CRM in respawn mode
+ init: add should-start/stop $remote_fs to init script
+ init: should-start/stop $remote_fs to init script
+ ipc (LF 1339): enable message compression
+ IPv6addr: Check for netinet/icmp6.h instead of  linux/icmpv6.h
+ IPv6addr: Check for netinet/icmp6.h instead of linux/icmpv6.h
+ iscsi RA: wait for udev to create the links
+ Junko IKEDA reported a problem building on Red Hat with tog-pegasus installed - this fixes that problem - the code half-setup things if pegasus was present but --enable-cim-provider wasn't enabled
+ ldirectord: add forking mode
+ ldirectord: SimpleTCP service check
+ ldirectord: SimpleTCP service check documentation
+ ldirectord: Various updates to OCF compatible RA
+ lf bug 1678: stonith command core dumps with -h option
+ LF bug 1690: there should be a tool to audit (validate) node names in constraints among other things...
+ LF Bug 1732: Error handling is bad for comm media
+ LF bug 1732: restructuring code towards being able to restart (reopen) communication media when they die
+ LF bug 1795 - timeout control for crm_mon --one-shot
+ LF bugzilla 1667:  ppc64 RPMs contain 32-bit binaries
+ LRM (LF 1821): resource timing information
+ lrm reg tests: handle OCF_ROOT, warn about xmllint missing
+ LRM regtest: update filters to match the lrmadmin output
+ lrmadmin: include time.h
+ Monitor timeouts need to increment fail counts
+ OCF-resources: SphinxSearchDaemon is not installed
+ OpenBSD bugs: 1731 1761 1743 1659
+ packaging: include iscsi
+ pgsql RA: handle the missing pg software properly (thanks to Serge)
+ pgsql RA: move check for root down to enable meta-data for regular users (thanks Serge)
+ pgsql RA: postmaster confusion
+ Put the _source_ (.in) file under source control.  Groan...
+ RA Filesystem: add lustre to the list of fs which don't need fsck
+ RA iscsi: dropped complex code in favour of udev and several small cleanups
+ RA iscsi: fix meta-data xml
+ RA iscsi: get rid of one annoying message ("no active sessions")
+ RA iscsi: new iscsi resource agent
+ RA iscsi: support iscsi sles compat mode
+ RA iscsi: two echo statements removed
+ RA mysql: don't look for mysql users in the OS database (thanks to Christian Rishoj)
+ RA SAPDatabase/SAPInstance: report proper exit codes in case required software is not installed
+ RA SphinxSearchDaemon: a new RA thanks to Christian Rishoj
+ recovermgrd: changed the code to look at the return code from fwrite, to make Fedora 8 compiler compile recovermgrd warning-free.
+ Removed bzip2-devel as a build dependency for all but Fedora and RH
+ RPM and specfile changes to fix part of and help diagnose part of Junko IKEDA's problem with tog-pegasus
+ RPM spec file: Added ciblint to installed programs
+ RPM specfile change:  made is_fedora macro turn off is_rhel macro
+ shell scripts: various cases of overquoting in the for statement (thanks to Takekazu Okamoto)
+ stonith ibmrsa-telnet: new stonith plugin
+ stonith ipmi: new external stonith plugin
+ utillib.sh: update finding the binary which coredumped
+ Xen RA: new improved (thanks to Sebastian Reitenbach)
+ [patch] init: add should-start/stop $remote_fs to init script</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1196114400">- version 2.1.2-24
- Update the source tarball to revision ef1be5978d97
- Statistics:
    Changesets:       104
    Diff:             296 files changed, 3464 insertions(+), 3275 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb/vmware stonith) on a single host (opensuse10.3/2Gb/2.66Ghz Quad Core2)
  + 7-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon/ssh stonith)
- All testing was performed with STONITH enabled
- Pending bugs encountered during testing:
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-15
+ High: CIB: Fix the behavior of update_attr() and delete_attr() when the command is ambiguous
+ High: CRM: In ccm_have_quorum(), an OC_EV_MS_PRIMARY_RESTORED event means we _do_ have quorum
+ High: PE: Bug 1765 - Prevent master-master colocation constraints from preventing slaves from starting
+ High: PE: Introduce a new API call for determining the location of complex resources
+ High: PE: Set next_role recursivly so that group promotion will work
+ High: PE: increment_clone() did not overflow correctly 9-&gt;10, 99-&gt;100, etc
+ High: crmd: Prevent shutdown hangs caused by pending ops that can't be cancelled - because the no longer exist in the lrm
+ High: heartbeat: Fix getnodes() compilation with gcc 4.3
+ High: Novell 293922: Don't use non-blocking writers, but instead don't block
+ High: Novell 293922: Heartbeat network processes would block on full buffers.
+ Medium: core: Do not disconnect blocking write processes, but discard traffic.
+ Medium: PE: All other things being equal, prefer to keep non-failed instances alive
+ Medium: PE: Create a syntactic shortcut for the common use-case of "{resource} prefers {node} with {score}"
+ Medium: PE: Dont make changes to location constraints, when applying to groups, persistent
+ Medium: TE: Allow the CRM to limit the number of resource actions the TE can execute in parallel.
+ Medium: TE: Pending operations shouldn't be processed
+ Medium: attrd: Bug 1776 - Attrd doesn't exit or reconnect when the CIB is respawned
+ Medium: crm: Dont generate core files for non-fatal assert (ie. the CRM_CHECK macro).
+ Medium: crmd: Don't remap LRM_OP_PENDING when building full lrm updates
+ Medium: crmd: Prevent shutdowns initiated immediately after a node is removed from the cluster with hb_delnode from stalling.
+ Medium: LF bugzilla 1757: apache resource agent grep methodology can't handle newlines - even if you change the pattern
+ Low: Admin: Do a full simulation when we have the live CIB - since we'll always have a status section
+ Low: Admin: crm_standby - Don't complain about missing values, print the default value instead
+ Low: PE: Actions for stonith agents should never default to requiring fencing or quorum
+ Low: PE: ptest - Handle malformed inputs more gracefully
+ Low: Rename example ha_logd.cf file to the proper name.
+ Low: cib: Increase the retry interval when connecting to the ccm to 3s
+ Low: crmd: Provide a more informative error when DCs detect other DCs during a join
+ Low: heartbeat: Use the correct define when choosing to enable valgrind - Keisuke MORI
+ Low: LF bug 1705 - cl_respawn core dumps when given -h or --help
+ Low: changed configure.in to force 64-bit objects when on gcc-based ppc64 platform
+ Low: configure.in - autoconf spells ppc64 funny...
- Unclassified user impact
+ LF 1766: Heartbeat installs man pages in the wrong directories by default...
+ LF Bug 1662: Put in some RHEL changes provided by Keisuke MORI
+ LF bug 1393 - Cannot rename /var/lib/heartbeat/hostcache.tmp to /var/lib/heartbeat/hostcache (scope, risk and severity: all minor)
+ ccm (LF 1546): ensure that the membership instance number never decrements (thanks to Guochun Shi)
+ ccm: speed up ccm considerably in case a node is alone in the membership (thanks to MATSUDA, Daiki)
+ Debian: Build: Add dependacy on gawk as it is required by the OCF IPaddr resource
+ Debian: Build: rename ha_logd.cf to logd.cf in debian/heartbeat.files
+ hb_report (LF 1763): multiple fixes
+ hb_report: add more packagers support (thanks to Sebastian Reitenbach)
+ hb_report: fix handling of debug option
+ hb_report: fix the previous fix (sorry)
+ hb_report: include package verification
+ hb_report: reduce the number of ssh invocations by 1
+ hb_report: update documentation on extracting CTS tests
+ hb_report: use getopts instead of getopt(1) for the sake of portability
+ hbagent: fix memory leaks on dropping global resources (thanks to Keisuke MORI)
+ hbagent: removed the const qualifier from parameter
+ hbagent: reset gMembershipTable on dropping global resources
+ hbclient: fix memory leaks on signon/signoff (thanks to Keisuke MORI)
+ heartbeat: Increase MAXMSGHIST; reduce debugging output.
+ ldirectord: allow per-virtual checkinterval configuration
+ lvs-users: Patch for ldirectord when using mysql service
+ mgmtd (LF 1719): fix the pam file for suse
+ mysql RA (LF 1760): defaults for OpenBSD (thanks to Sebastian Reitenbach)
+ RA Xinetd (LF 1742): multiple fixes
+ RA tomcat: allow consecutive starts
+ stonithd: (LF 1727): fix dropping privileges
+ stonithd: a copy/paste typo
+ stonithd: check for storage size when copying the host list
+ stonithd: drop root privileges earlier
+ stonithd: shuffle dropping privileges around again</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1193349600">- version 2.1.2-15
- Update the source tarball to revision c492f19cb583
- Statistics:
    Changesets:       158
    Diff:             173 files changed, 8712 insertions(+), 4787 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
  + (lmb)    7-node Xen cluster on a single host
  + (debltc) 6-node ppc64 cluster
- Pending bugs encountered during testing:
  1562 - heartbeat: hostcache file rename error at startup
  1737 - crmd: Inconsistent join state detected (Hard to reproduce, possible fix included)
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-4
+ High: cib: G_main_del_IPC_Channel() doesn't like being called with a NULL pointer and crashes
+ High: crm: Bug 1749 - Make sure the diff-related digests contain the complete CIB, not just the first line
+ High: crmd: Prevent shutdown hangs by allowing the crmd to forget about pending actions for deleted resources
+ High: PE: Bug 1712 - Ensure manditory ordering constraints can cause complex resources to be shut down
+ High: PE: Clone colocation fixes
+ High: PE: Ensure that resources depending (by order) on a master are not promoted if no master is available
+ High: PE: Fix manditory ordering with m/s resources
+ High: PE: Prevent an infinite pe/te loop when reprobing with resources in master mode
+ High: PE: Prevent use-of-NULL in crm_mon when date_expressions are used by ensuring that data_set-&gt;now is always set
+ High: PE: Prevent use-of-NULL when the admin creates a colocaiton constraint with an empty group
+ High: PE: Relax an assumption regarding clones that is not true when they are unmanaged
+ High: PE: Remove an accidental commit that, when called, causes use-of-NULL
+ High: PE: Remove an errant call to exit() than prevented an assert from being triggered
+ High: RA: Novell 329833 - dotted-quad netmask notation broken in findif
+ Medium: cib: Include digests of the cib a diff was made from and verify it when applying
+ Medium: CRM: Re-evaluate appropriate IPC message queue lengths and throtle IPC _clients_ that hit them
+ Medium: crmd: Bug 1737 - Inconsistent join state detected - Possible fix
+ Medium: PE: Bug 1722 - By default, exhibit the old start-failures-are-fatal behaviour regardless of how resource-failure-stickines is set
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: PE: Fix minor memory leak when stopping orphaned resources
+ Medium: PE: Master internal ordering enhancements. Added stopped-&gt;start, stopped-&gt;promote.
+ Medium: Tools: Bug 1738 - the crmd ignores some requests from crm_resource because it exited too quickly
+ Low: contrib: dopd - Remove a pointless and annoying dependancy on the crm
+ Low: crmd: Increase the retry interval when stalling the FSA to 2s (used when connecting to the ccm, lrmd, cib)
+ Low: crmd: Update the CIB with the node's version data when it becomes DC
+ Low: crmd: Use the unaltered rc for timed out operation events from the lrmd
+ Low: Debian: heartbeat doesn't depend on libperl-dev (probably confused by '-lperl' in configure.in)
+ Low: heartbeat: Some compilers feel that the fcli variable could be used uninitialized - shut them up
+ Low: PE: Avoid pointless copying of XML items (actions) during graph creation
+ Low: PE: Convert all the resource's boolean flags into a single bit-field
+ Low: PE: Produce a config error when a clone contains more than one resource/group to clone
+ Low: RA: PureFTPd - Support debian's pure-ftpd-wrapper script.  Patch by Raoul Bhatia
+ Low: Stonith: external/rackpdu - Fix the metadata short descriptions
+ Low: ccm: Bug 1723 - fix logging (thanks to MATSUDA, Daiki)
- Unclassified user impact
+ gui: Add "meta_attributes" support to mgmt
+ gui: Add boolean_op for location rules in mgmt
+ gui: Make several fields of rsc_location editable
+ gui: Prevent clone and master_slave from belonging to group
+ gui: Prevent haclient from falling into an error caused by blank resource metadata
+ gui: Provide "Default" setting for crm configurations
+ gui: Provide complete pengine and crmd configurations with dynamic rendering
+ gui: Rename "Places" to "Locations" to match with the CIB name
+ gui: Resolve target_role problem for sub-resource
+ gui: Specify the default type of added item to correspond to the object that the cursor focused on
+ heartbeat: Remove one unlink() of the temporary hostcache file.
+ LF bug 1502: udpport statement in ha.cf is ignored by heartbeat - trivial fix
+ LF bug 1589: ia64 heartbeat unaligned access messages (SGI965396) - copy fields in structures - minor fix
+ LF bug 1679: hardcoded heartbeat userid and group in init script (minor fix)
+ LF bug 1681: BSC fails to to identify active interface on OpenBSD (minor change)
+ LF bug 1700: HA Signon always reports success - fix has minor scope.
+ LF bug 1702: during emergency restarts, heartbeat doesn't close watchdog correctly.  Fix is minor.
+ LF bug 1712: ha_logd prevented node from shutting down - changed code to use the waitout() primitive - scope fix - trivial-minor
+ LF bug 1731: wrong location of libraries for OpenBSD 64Bit architectures, with patch
+ LF bug 1734 - removed duplicate return statement as per bug report.
+ lrm stonith plugin: fix exit code handling
+ lrmd (LF 1715): increase the max dispatch time for lrmd
+ lrmd (LF 1729): revise return codes
+ Put in a missing include of &lt;memory.h&gt; for the DRBD code.  Change scope: trivial
+ RA: mysql, pgsql - use getent(1) instead of /etc/passwd (thanks to Raoul Bhatia)
+ RA: mysql: According to Geoff Harrison the sql check is broken without this
+ RA: mysql: Allow arbitrary commandline arguments for mysqld (by Raoul Bhatia)
+ RA: Raid1: Allow the homehost setting to be specified.
+ RA: Xinetd: Fix stop/monitor to not fail if service isn't available yet.
+ stonith/ibmrsa: allow ',' in the hostlist
+ STONITH: external/ssh: Disable StrictHostKeyChecking and PasswordAuthentication by default.
+ stonithd (LF 1714,1727): fix a race condition
+ stonithd (LF 1726): a hostlist may be empty
+ stonithd (LF 1727): change attach shmem seg to read only
+ stonithd/lib: replace cookie generation with uuid
+ stonithd: have -a really mean startup alone
+ stonithd: increase the maxdispatchtime
+ stonithd: library code review and cleanup
+ tools: Add hb_report - a reporting utility</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1190757600">- version 2.1.2-4
- Update the source tarball to revision 702e4f418ca8
- Statistics:
    Changesets:       109
    Diff:             188 files changed, 5926 insertions(+), 2003 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
- Pending bugs encountered during testing:
  1377 - llm_get_nodename: index(1719751538) out of range
  1561 - Cluster node c001n03 returning after partition
  1562 - hostcache file rename error at startup
  1700 - HA Signon always reports success
  1711 - Shutdown blocked by call to cl_flush_logs()
  1712 - Shutdown blocked by ha_logd
  1714 - Stonithd core dumps
- Changes since 2.1.2-2
+ High: Core: Prevent logging buffer overflow - ensure the entity is NULL terminated.  Patch from Simon Graham.
+ High: DTD: Remove stray character that made the DTD invalid
+ High: PE: Ensure mandatory ordering constraints behave correctly
+ High: PE: Implement a smarter algorithm for colocation
+ High: PE: Include preferences of colocated resources when promoting masters
+ High: PE: Make sure only the correct number of cloned groups are started
+ High: PE: Make sure the merge_weights function is called for complex resources
+ High: PE: More accurate method of detecting colocation loops in native_merge_weights
+ High: PE: Optimize the merge_weights functionfor groups
+ High: RA: Remove bashism from Filesystem OCF agent
+ High: RA: Filesystem - Fix path reference.
+ High: RA: o2cb - Fix path broken in recent cleanups
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: crmd: Tell the LRM to refresh the resource's default parameters
+ High: core: Bug 1697 - really remove proctrack sources (performance/memory leak fix)
+ High: core: An open call with the O_CREAT flag was missing the file mode.
+ Medium: Core: Ensure heartbeat flushes all its logs before exiting
+ Medium: ipc: Up MAXMSG to match MAXUNCOMPRESSED to allow larger clusters.
+ Medium: Logging: Sanitize and centrally define the log facility used by various subsystems
+ Medium: PE: Bug 1705 - Don't segfault when allocating empty groups
+ Medium: PE: Bug 1710 - A resource's failcount was ignored on nodes with no operations for the resource
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: RA: EvmsSCC - Handle start failures caused by peers starting at the same time (Patch from Jo De Baer)
+ Medium: RA: Treat migrating (status 1) as running to avoid - patch by Per Andreas Buer
+ Medium: Stonith: Remove code-reuse to prevent excessive logging by the LRM
+ Medium: Stonith: ipmilan: fix potential segvfault in options parsing
+ Medium: cib: Improved transparency when in operating in degraded mode
+ Low: Admin: Bug 1691 - crm_resource doesn't complain about empty strings as property values
+ Low: build: configure.in: fix for platforms with libc in /lib/tls
+ Low: CIB: Allow notification to remote clients
+ Low: CRM: DTD - Expand the list of accepted values for boolean fields
+ Low: CRM: DTD - Explicitly specify a default for rsc_colocation.symmetrical
+ Low: DTD: Include helpful comment for rsc_order constraints
+ Low: PE: Downgrade logging when we fallback to default option values
+ Low: PE: More efficient logging of orphan resources
+ Low: PE: Prevent users from trying to use on_fail=fence and stonith-enabled=false
+ Low: PE: Stop the master placement score from affecting the synapse's priority
+ Low: RA: Add a tomcat OCF agent from Yamauchi Hideo
+ Low: RA: ManageVE - Fix status when VE files are not persistent
+ Low: RA: Put in updates to the Informix script as supplied by Lars Forseth
+ Low: RA: apache - drop annoying messages if no configuration files are found
+ Low: Stonith: external/ssh - simplify the reset command and wait the same amount of time as the non-external variant
+ Low: Stonith: Disable ipmilan by default
+ Low: TE: Pause for a moment before trying to reconnect to stonithd
+ Low: Tools: Allow pingd to change identity based on the name of its executable - workaround for Bug #1701
+ Low: logd: Update the default config file to reflect the new default log facility
+ Low: tools: haresources2cib.py: update parameter lists and configuration defaults
- Unclassified impact
+ lrm: Bug 1458 - include timing information in the op data.
+ lrm: Bug 1684 - a meta-data operation fix introducing short sleep on zero reads
+ lrm: log non-recurring operations
+ lrm: performance - replace linear with binary search for msg type.
+ lrm: performance - remove unnecessary memstat
+ lrm: raexecocf: a fix for bug introduced in 2a787bbd73f6; longer sleep in get_resource_meta
+ RA: Bug 1692 -  monitoring fails for apache OCF resource.  Put in simple fix to apache resource agent monitoring from Sebastian Reitenbach
+ RA: eDir88 - fix to allow meta-data to work in case NDS is not installed
+ RA: pgsql - patch to remove bashism
+ Stonith: Put in an APCmastersnmp.c patch from Peter Kruse which makes the plugin work with new APC master switches
+ Stonith: Bug 1615 - get the list of hosts from an RA asynchronously
+ mgmtd: allow old clients to connect</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187301600">- version 2.1.2-2
- Update the source tarball to revision 098c0993b1d0
- Statistics:
    Changesets:	6
    Diff:		11 files changed, 402 insertions(+), 46 deletions(-)
- Changes since 2.1.2-1
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: PE: Bug 1682 - Prevent use-of-NULL when clones have no active children
+ High: TE: target_rc should default to 0 (LRM_OP_DONE) to detect monitor actions that fail the first time they are executed
+ Medium: PE: Bug 1685 - Supply the correct defaults for rsc_order constraints
+ Low: Admin: crmadmin - exit with rc=0 when the command completed successfully</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187042400">- version 2.1.2-1
- Update the source tarball to revision 1ad8497bc55d
- Statistics:
    Changesets:	340
    Diff:		614 files changed, 39588 insertions(+), 32588 deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/1ad8497bc55d
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -r e3c9306b9223:1ad8497bc55d | sort -f
- Testing notes
+ On my underpowered cluster, the CCM borked a number of times on the Stonithd test
  However since the CCM hasn't been touched in an age, its hard to conclude there are regressions from previous releases.
  If anyone would like to volunteer to maintain the CCM (or the GUI for that matter), it would be much appreciated.
- Changes since 2.1.2 (Upstream)
+ High: CRM: Update crm/cib feature sets and the set of tags/attributes used for feature set detection
+ High: CIB: Improved CCM interaction
+ High: CRM: filter_action_parameters() - Make a copy of interval/timeout in as they're about to be free'd
+ High: PE: Break graph loops involving stonith
+ High: PE: Only create _one_ pseudo op per name (all_stopped/stonith_up)
+ High: PE: The all_stopped action should only be part of the graph when the stop actions are runnable
+ High: PE: all_stopped should only depend on native resources to avoid recursion
+ High: PE: check_action_definition() - Ensure the meta attributes are also set so that the digest is calculated correctly (and consistently with the crmd)
+ High: PE: Use failcount to handle failed stops and starts (set default_resource_failure_stickiness &gt; 0 for the old blocking behaviour)
+ High: TE: Allow reconnection to stonithd if it is respawned
+ High: TE: Allow the TE to reconnect if stonithd is killed and respawned
+ High: cib: Allow the CIB to reconnect if the CCM is killed and respawned
+ High: cib: Handle master updates that fail DTD validation
+ High: cib: Support the removal of multiple child objects - required for subsequent commit
+ High: crmd: Improvements to shutdown sequence (particularly in response to failures)
+ High: crmd: Sanitize the maintenance of node_state entries
+ High: crmd: Simplify node_state maintenance
+ High: stonithd: Sanitize the login/logout functions and add the ability to reset the callback IPC channel
+ Medium: cib: Ensure fflush() and fsync() are always called when writing XML digests to disk
+ Medium: crm: Ensure fflush() and fsync() are always called when writing XML to disk
+ Medium: crm: Bug 1680 - parse_xml() can fail to detect mismatching close tags
+ Medium: PE: Dont check the parameter digest of orphan operations
+ Medium: TE: Dont modify the failcount for 'pending' action updates (rc=-1)
+ Medium: admin: Set the exit code to non-zero if crmadmin can't connect to the crmd
+ Low: PE: Warn when multiple nodes have the same uname
+ Low: Stonith: New external plugin for handling 'APC Switched Rack PDU AP7952' devices - contributed by Sergey Maznichenko
+ Low: cib: Enhancements to logging of DTD errors
+ Low: cib: Refactor reading and writing of the CIB to disk
+ Low: crmd: Ensure our assumption that all resources have a class and type is true
+ Low: crmd: Simplify the detection of active actions and resources at shutdown
+ Low: Admin: Bug 1603 - Allow CIB digest files to be verified
+ debian: make heartbeat binNMU safe
+ stonith: ipmilan - accept documented auth and priv values
+ GUI: OSDL 1449 / Novell 291749: GUI should not overwrite more specific settings of contained resources.
+ RA: IPaddr2 - Make the check for the modprobe/iptables utilities conditional on the IP being cloned
+ RA: apache - make status quieter
+ RA: Added Informix resource agent
+ RA: eDir88 resource can't be stopped ?
+ RA: patch to fix bashism in a number of agents
+ Tools: OSDL Bug 1666: in BSC, make sure temp rsc dir exists for RAs
+ Tools: ocf-tester - use the default value for OCF_ROOT if it exists
+ Tools: ocf-tester - add capability to test with lrmadmin/lrmd
- Changes since 2.1.0-2
+ A little cleanup to make the RAs more uniformly not have $OCF_ROOT paths in them
+ Added code to cause logging to be restarted if it dies.
+ Admin: Allow crm_diff to operate on compressed inputs
+ Admin: Bug #1621 - crm_mon should show failed starts of a resource
+ Admin: Bug 1632 - Make sure error messages regarding trailing XML input characters are seen
+ Admin: Bug 1635 - crm_failcount should not complain if the attribute was already deleted
+ Admin: Bug #1622 - crm_attribute: Include --inhibit-policy-engine in the help message
+ Admin: crm_resource - remove an overly simplistic check for when -C can safely be used
+ Admin: crmadmin - include Hg version in --version output
+ Admin: ptest is useful enough to warrent installation to sbindir
+ BSC: 'trap' had been continuing instead of exiting
+ Bug 1612: haresources2cib @substitution@ broken (probably by a global change)
+ Build: No longer generate RAs now that there is a sane way to set directory locations and find binaries
+ CIB: Bug 1602 - Archive invalid/unusable configurations so we can continue
+ CIB: Bug 1633 - Pass the actual error from activateCibXml back to the user
+ CIB: config_changed always needs to be calculated when processing write commands
+ CRM: Bug 1625 - Cannot update an operation's timeout
+ CRM: Clean up processes left over by crm_abort().  Initial patch by DAIKI MATSUDA
+ CRM: Fix compare_version() to actually work correctly on a regular basis (broken since 2.0.2)
+ CRM: Fix matching of objects with an ID when the match-spec has no ID
+ CRM: Make logging setup consistent and do not log the command-line to stderr.
+ CRM: Only detect timeout changes for recurring ops
+ CRM: Remove deBug code that should not have been committed
+ Corrected a typo which only matters on 32-bit machines :-(
+ Corrected so that on *BSD it passes in 2 parameters, instead of 2.
+ DTD: Add helpful comment regarding rsc_colocation objects
+ Fix location of pingd binary
+ Fixed a dangling reference to a former bin directory name.
+ Fixed a fairly-major error in IPaddr - it didn't handle CIDR netmasks correctly.  But ifconfig didn't complain either...
+ Fixed a minor stonithd testing error (not much of a Bug)
+ Fixed a syntax error in Filesystem:  missing then symbol
+ Hopefully fixed a long-time SNMP annoyance.  When the membership layer shuts down (as it does in BSC),
+ LF Bug # 1617 - Miscellaneous RPM and source cleanups
+ LF Bug # 1644 - Pinging loopback in BasicSanityCheck fails with EPERM
+ LF Bug # 960 - rpm: first-time install fails
+ LF Bug 1513 - building RPM from the 2.0.8 tarball fails
+ LF Bug 1527 - inappropriate warnings about core files logged by heartbeat (SGI961667)
+ LF Bug 1534 - compiling/installation error on OpenBSD
+ LF Bug 1576: shutdown hangs under certain shells // LF Bug 1534: compiling/installation error on OpenBSD
+ LF Bug 1654 - HA_SBIN_DIR is not set on ocf scripts
+ LF Bug - compiling/installation error on OpenBSD
+ LF Bug 1522: Strt hb_counter on time_t
+ LF Bug # 1534 - compiling/installation error on OpenBSD
+ LF Bug # 1645 - Minimize arch-dependent differences, maintain compatibility -- More on this Bug...
+ LF Bug # 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1661 - crm_verify aborts checking and reoccurring crm_abort errors in logs
+ LF Bug # 1661 - move symlink creation out of specfile and into Makefile
+ LF Bug 1650: heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1645: Minimize arch-dependent differences, maintain compatibility
+ LF Bug 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug 1665 - fix references to moved scripts - courtesy of Tuomo Soini
+ LRM plugins: skip dot-files.
+ Made the stonith -h core dump go away - by fixing a variety of small things in STONITH.
+ Minor patch to stonith patch - to keep empty result from being seen as out of memory
+ Misc: Move a few shell functions to the only script that uses them
+ More file location tweaks - mostly GUI-related.
+ OCF: Detect and warn of use of deprecated 'ocf-shellfuncs' and 'ocf-returncodes'.
+ OCF: Fixed the check in have_binary. Handle checks for programs with --arguments
+ OCF: Provide the location of /sbin as used by some agents (HA_SBIN_DIR)
+ OCF: Remove unused variables
+ OSDL Bug 1606: okay for stonith plugins to have no parameters
+ PE: Add regression test for previous commit
+ PE: Aggregate the startup of fencing resources into a stonith_up pseudo-action
+ PE: Bug 1628 - Complain about invalid operation intervals
+ PE: Correct the CRM_CHECK comparision
+ PE: Dont log stopped orphaned resources
+ PE: Fix the handling of remove-after-stop=true - it was causing unnecessary restarts
+ PE: Fix two small memory leaks detected by Valgrind
+ PE: Fix up the tests now that compare_version() functions correctly (as of cs: 7d69ef94a258)
+ PE: Handle two new actions in text2task
+ PE: Include description for the remove-after-stop option
+ PE: Make sure ptest always does a POSIX sort
+ PE: Move the creation of stonith shutdown constraints to native_internal_constraints()
+ PE: NoRoleChange shouldn't always call PromoteRsc for master resources
+ PE: Potential use of NULL
+ PE: Regression: Allow M/S resources to be promoted based solely on rsc_location constraints
+ PE: STONITH Shutdown ordering
+ PE: Streamline STONITH ordering. Make sure 'all_stopped' depends on all STONITH ops.
+ PE: Update one more regression test output now that it has been verified as still correct
+ PE: Update testcases to include all_stopped (added in cs: 800c2fec24ee)
+ PE: Use master scores to determine which clones to start where
+ Put deBug in in support of Bug 1154: 2.0.4 BSC failure - select() returns with error
+ Put in a change to allow CTS to run.  There is a sort-of-bug (in BSC/CTS) underlying this that I'll have to file a bug on.
+ RA: Add some extra variables dug out from configure
+ RA: Bug #1630 IPaddr2 - Wrong arguments passed to send_arp (test was mistakenly written as an assignment)
+ RA: Convert a number of checks for required binaries
+ RA: Delay (v1) - Remove extra characters from call to ra_execocf
+ RA: Dummy: Just add a comment to make sure people copying from this
+ RA: Filesystem: Unify coding style to match rest of script.
+ RA: IPaddr2 - Remove bash-isms
+ RA: IPaddr2 - handle IP_CIP not being defined
+ RA: IPaddr: Fix a few trivial bugs in lvs_support pointed out by Michael Stiller.
+ RA: LSBDummy - Make sure the action is passed to ra_execocf
+ RA: MailTo: Remove spurious warning about monitor.
+ RA: Move all remaining autoconf variables into common files that are automatically included
+ RA: Move some helper files to their new names (.files dont show up as RAs)
+ RA: Revised handling of directory locations
+ RA: ServeRAID - remove commented out code
+ RA: Use consistent check for required binaries
+ RA: o2cb: Improve configuration stability.
+ RA: o2cb: Optimize redistribution of cluster.cnf.
+ RA: prefer the 'test' program rather than the builtin for some reason
+ RA: v1: IPaddr: Unconditionally enabling LVS support is a mistake.
+ TE: Log the node's uname instead of UUID for completed actions
+ TE: Set failcount to INFINITY for resources that fail to start or stop
+ Tools: Bug 1653 - Further changes to prevent use of NULL when no attribute is specified
+ Tools: Bug 1653 - Misc attrd/attrd_updater cleanups suggested by Keisuke MORI
+ Tools: Bug 1653 - attrd crashes when no attribute is specified
+ debian: Add new dot-ocf files to the heartbeat package
+ debian: Add the ldirectord OCF resource to the ldirectord package
+ debian: Debian bug #432441 will be closed on the next upload
+ debian: Don't create hb_gui symlink
+ GUI: update path for png images in haclient.py
+ ldirectord: Use globals for service check return values
+ ldirectord: Add OCF wrapper
+ ldirectord: Add Oracle check
+ ldirectord: Add external check
+ ldirectord: Add forwarding mechanism to real server ID
+ ldirectord: Add ld_service_to_port()
+ ldirectord: Call ld_emailalert_send() with correct arguments
+ ldirectord: Clean up execute logic in check_sql
+ ldirectord: Cosmetic spelling and grammar fixes
+ ldirectord: Document expire_quiescent_template
+ ldirectord: Document that checktimeout is for ping checks too
+ ldirectord: Don't access CALLBACK unless it is defined
+ ldirectord: Don't die if Net::FTP times out
+ ldirectord: Enhance ftp check debugging
+ ldirectord: Enhance logging in service_set
+ ldirectord: Fix bogus detection of combined check
+ ldirectord: Fix logic bug in _status_down
+ ldirectord: Handle $dbh-&gt;prepare() failure in check_sql()
+ ldirectord: List checktype and service in alpabetical order in the documentation
+ ldirectord: Make check_sql &lt; 80col wide
+ ldirectord: Make parsing of the output of ipvsadm more robust
+ ldirectord: Note negotiatetimeout in documentation of checkcount
+ ldirectord: Port of last resort for real server checks
+ ldirectord: Remove connecttimeout
+ ldirectord: Remove stale entries on reload
+ ldirectord: Remove trim down very wordy decripton of read_config
+ ldirectord: Set default negotiatetimeout to 30s
+ ldirectord: Status to stdout
+ ldirectord: Tidy up fallback
+ ldirectord: Use $dbh-&gt;errstr instead of $dbh-&gt;err when logging
+ ldirectord: Use an alarm for HTTPS timeouts
+ ldirectord: Use goto for error handling in check_sql
+ ldirectord: Use negotiatetimeout and connecttimeout as mutual defaults
+ ldirectord: Use negotiatetimeout for SIP, DNS and Radius checks
+ ldirectord: Use valid string in log message in check_connect()
+ ldirectord: document port behaviour of real servers
+ ldirectord: rearange parsing of service to make it &lt;= 80col (more often)
+ build: Move ldirector OCF resource into the ldirectord package
+ apache RA (LF 1656): include ServerRoot in relative paths.
+ cib: Fix detection of non-status changes
+ configure: Remove unneeded AC_PATH_PROGS checks
+ crmd: Bug 1575 - crmd cannot exit if lrmd is killed and there are pending ops
+ crmd: Bug 1624 - Fix the delete op for cancelled operations
+ crmd: Bug 1655 - crmd can't exit when the PE or TE is killed from underneath it
+ crmd: Only remap monitor operation status to LRM_OP_DONE under the correct conditions
+ log: avoid handing a null pointer as a '%s' variable
+ pingd: Hard code the name used for logging
+ re-enabled code to make symlinks for moved files.
+ remove is_stable() condition from drbd-outdate-peer daemon
+ shellfuncs: 's%:.:%%' should be 's%:.:%:%'; the '.' should be '\.'
+ stonith: external/riloe - new comment in the xml on how acpid may affect the performance (thanks to Guy Coates).
+ stonith: riloe - fix the xml info.
+ stonith: ibmrsa - fix the xml info.
+ stonith: ibmrsa - allow regular users to use it with 'stonith -n' and similar.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1183154400">- version 2.1.0-2
- Update the source tarball to revision e3c9306b9223
- Statistics:
    Changesets:	259
    Diff:		625 files changed, 13133 insertions(+), 73569^ deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/e3c9306b9223
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -rSTABLE-2.1.0:e3c9306b9223 | sort -f</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.1.0-1
- Update debian packaging files which drop the -2 package suffix
- Change the version number to the one used upstream</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.0.9-2
- Sync with the version supplied in SLES10
- Bugs fixed
+ OSDL #393 - Stonith: Update plugin from OpenHPI 2.2 to OpenHPI 2.6
+ OSDL #393 - Stonith: soft_reset is {true|1|false|0}, not {yes|no}
+ OSDL #393 - Stonith: Rename ibmbc to bladehpi
+ OSDL #393 - Stonith: Enable build of bladehpi plugin if OpenHPI present
+ OSDL #761 - RA: Remove history from heartbeat init script.
+ OSDL #1073 - Tools: Add clone support to crm_resource
+ OSDL #1138 - Long delay before CCM propagates membership event
+ OSDL #1292 - Stonith: Support xSeries STONITH (IBM: 06-R212-175)
+ OSDL #1339 - IPC code limits possible cluster size
+ OSDL #1374 - Tools: Check for sane host names when migrating
+ OSDL #1428 - Stonith: Mixing definitions and code
+ OSDL #1430 - CIB: Allow automatic assignment of object IDs
+ OSDL #1451 - Tools: Allow resource meta attributes to be set with crm_admin
+ OSDL #1457 - RA: Resolve unknown command ha_log
+ OSDL #1462 - Tools: crm_migrate should allow creating temporary rules
+ OSDL #1465 - crmd: crmd gets stuck if shutdown while starting up
+ OSDL #1472 - CIB: Use-after-free in find_attr_details()
+ OSDL #1480 - CIB: Create synchronous r/w connections correctly
+ OSDL #1482 - Stonith: stonith command needs a repeat option to make it a better test tool
+ OSDL #1484 - PE: Repair on_fail=stop.  Patch courtesy of YAMAMOTO Takashi.
+ OSDL #1486 - PE: Fix for potential NULL dereference
+ OSDL #1488 - Stonith: Fix passing password to HMC
+ OSDL #1489 - Stonith: Fix HMC errors in hostlist
+ OSDL #1492 - PE: Set common resource attributes before calling the custom unpack function
+ OSDL #1494 - PE: Add node-&gt;score to the clone stability function
+ OSDL #1499 - PE: Perform #uname comparisions without case
+ OSDL #1500 - Tools: Calls to attrd_updater with dampen=0 not processed correctly
+ OSDL #1505 - Findif parsing is all screwed up unless all the parameters are passed, not defaulted.
+ OSDL #1506 - Stonith: Add optional ibmhmc plugin parameters to meta-data
+ OSDL #1507 - Stonith: Allow "stonith -h" to display help for specific device
+ OSDL #1511 - LRM: running two actions for the same resource parallel
+ OSDL #1514 - CRM: Empty values in cib.xml loses other RA parameters
+ OSDL #1523 - Stonith: bladehpi performance enhancements
+ OSDL #1528 - RA: IPaddr2 gives a spurious warning on stop (SGI961736)
+ OSDL #1532 - crmd: Single node cluster shutdown
+ OSDL #1554 - PE: Probes should not have priority INFINITY
+ OSDL #1534 - LRM: Compiliation error on OpenBSD
+ OSDL #1544 - Comms: mixed versions of 2.x and 1.x not working
+ OSDL #1545 - Stonith: stonithd signoff fixesO
+ OSDL #1548 - logging: Ensure logs are logged using the correct component name
+ OSDL #1550 - Stonith: Suicide plugin returns hostlist containing itself
+ OSDL #1553 - Stonith: suicide plugin lacking ST_DEVICENAME
+ OSDL #1554 - crmd: Wait for the membership to stabilize before starting transitions to prevent unconfirmed actions
+ Debian #420206 - RA: Bashisms in IPaddr2
+ Novell #239075 - Admin: crm_master uses the same IDs for permanent and transient attributes
+ Novell #239079 - PE: Ensure action priority is set correctly to ensure notifcations are not lost
+ Novell #239082 - PE: Order promotions after _all_ demotions have completed
+ Novell #239086 - PE: Stable Master placement
+ Novell #244444 - crmd: Free'ing g_alloc() data with cl_free()
+ Novell #246681 - PE: Teach NoRoleChange() how to migrate resource's in the master role
+ Novell #250207 - Split-brain caused by non-identical ping-node configuration and auto-join
+ Novell #250273 - RA: Provide an RA for managing evmsd as a resource
+ Novell #250625 - RA: Xen: Fix status function for newer Xen versions
+ Novell #251689 - PE: Avoid needlessly restarting changed monitor operations for stopping resources
+ Novell #252693 - PE: Enable migration in more scenarios
+ Novell #252693 - PE: Teach the PE how to migrate resources in a starting stack
+ Novell #266551 - Stonith: getconfignames returned hostname instead of hostlist
+ Novell #266551 - doc: Bring the stonith man page up-to-date
- Build Improvements
+ Add explanatory comment for configure kludge
+ Add lha_internal to c-files that dont include it
+ Allow debian packages to also be built directly from Hg archives
+ Always check for the presence of PAM an TLS headers
+ Configure switch to easily enable Valgrind'ing of the CRM
+ Dont install crm-related man pages when --disable-crm is used
+ dopd doesnt build without the crm, disable it if the crm is disabled
+ Fix typo in configure.in
+ Header-file related cleanup
+ Include the exact version being built even when building an archived tree
+ Make supplying a Valgrind suppression file simpler
+ Misc changes to allow building with crm disabled
+ Not all platforms need -lpam
+ Remove redundant and useless items from the build
+ removed unused library dependancies
+ Use existing accounts when building on OSX
+ debian: correct the location of stonith headers in *.files
+ debian: reflect the new header locations in .files
+ debian: sort out a kink in the configure vs. bootstrap logic
+ debian: Packaging updates for 2.0.8-1 release
+ debian: Add heartbeat-2-gui package control files to Makefile
+ Improved grammar in gui package description
+ Improve portability across versions of 'gcc'.
+ Allow data size to be specified
+ Ensure 'awk' is found in runtime environment
+ Use centrally determined GNUTLS cflags and libs
+ Replace multiple derivations (poor) of locations with direct derivation from configure
+ configure: Add closing information to user about '/etc/passwd' and 'make install'
+ Remove an unnecessary 'include' that broke building on some OSes.  It continues to build OK on various OSes.
+ Bourne shell 'test' does not support '-e' flag.  Using '-r' instead.
+ libgnutls: if no 'libgnutls-config', try 'AC_CHECK_LIB(...)'
+ Determine GNUTLS libs centrally in 'configure.in' rather than in individual Makefiles
+ Correct omission of &lt;lha_internal.h&gt;
+ ipctransient tests: Add some flexibility; rationalise some duplicate code
+ ConfigureMe: make usage info a little clearer
+ Add some defaults to configure.in to reduce buildrequires.
+ Remove a bunch of dead code (Perl/SWIG bindings).
+ configure: Check for more pre-requisites of the mgmt/quorum components.
+ Fix use of a future dates in the changelog
- CRM Library Enhancements and Fixes
+ Fix xml parser bug.
+ Allow retrieval of default config values without a hashtable
+ Changes to fake transition key generation
+ Check the return code from fflush() when writing xml files - AnÃÂ­bal Monsalve Salazar
+ Comprehensive review of error recovery logic for potentially failed calls to fopen()
+ Correctly handle syslog facility == 0
+ Delete dead code, make empty_uuid_cache() safe with NULLs
+ Dont call fflush() or flclose() if the output stream was NULL
+ Ensure the normalized result of (add|subtract)_time is updated before returning
+ Fix a use-after-free in parse_time_duration()
+ Fix replace_xml_child() when neither child nor update have an id
+ Fixes for Coverty issues: 52, 55-58, 61-66, 68-69, 71-73 in run 240
+ Gracefully fail when the target XML file is not writable
+ handle NULL inputs to xml_has_children() gracefully
+ Make the use of valgrind a run-time option
+ Memory leak fixes
+ Prevent a number of potential use-after-free's by zero'ing out free'd loop variables
+ Refactor date printing to allow date -&gt; string conversion
+ Remove noisy and inaccurate memory logging
+ Repair the status_printw macro now that we do logging slightly differently
+ size_t is always positive... broke error handling in XML parser.
+ Use-of-NULL in validate_with_dtd() error path... Only clean up what we created
+ When malloc tracking is enabled, pass through the person that called crm_strdup
- CLI Enhancements and Fixes
+ Uninitialized string in heartbeat/findif.c
+ Allow cluster config options to be queried/modified/deleted.  Broken in cs: 13c450735ba7
+ Allow crm_verify to be used with a named DTD file
+ Auto populate the provider for OCF resources if one is not provided
+ crm_primitive.py: Include all node preferences in the one rsc_location constraint
+ Include rsc_location details in the resource listing
+ map cib_NOTEXISTS to 0 for crm_failcount
+ Use the current node uname by default when invoked as crm_standby
+ Add two new views to crm_mon.  Patch by Christofer Edvardsen.
+ Centrally define CIB call options so that -f always works in crm_resource
+ Compile when malloc checking is off, fix last mem leak
+ crm_verify - dont complain about missing status section
+ Dont do ID checks on cibadmin diff's, duplicates are expected
+ Fix a number of memory leaks in attrd
+ Help text and input sanity checks for ocf-tester
+ Include class/type/provider in resource delete commands
+ Place the lifetime rule in the correct location
+ Set a slightly higher default action timeout
+ Show help text for crm_uuid
+ Teach crm_uuid to write ascii-form UUIDs to hb_uuid
+ Terminate the attrd process if heartbeat exits from under it
+ lrmadmin: fix the provider list function: first free data and then the list member.
+ crm_attribute/master/standby: Always default the uname to the current machine
- CIB Enhancements and Fixes
+ Allow cluster options to be created when the default set is not present
+ Allow the remote connection code to be used with or without PAM/TLS
+ Clean up memory at exit
+ Fix a number of memory leaks
+ Compile when malloc tracking is enabled
+ Don't increase the version number if nothing changed
+ Dont examine the group ownership of cib.xml since we set perms to rw-------
+ Exit the writer process correctly so we'll continue to do write outs
+ Prevent node_uuid from having any effect for &lt;crm_config&gt; changes
+ Remove dead code
+ Support processing of commands sent via remote TLS connections.
  See http://www.linux-ha.org/v2/cib_remote for usage details
+ The decision to log failed connection attempts should be left to the client
+ Warn at startup if important version information is missing
- CRMD Enhancements and Fixes
+ ALL completed actions should be removed from the shutdown_list
+ Correctly parse the shutdown timer option
+ Create the restart digest from an object with the same name that the PE uses
+ Delete the HA connection only at exit
+ Enable Valrind'ing of the PE and TE
+ Indicate the LRM error code if an operation cannot be cancelled
+ No need to create the resource if we're trying to delete it
+ Free memory at shutdown
+ Resolve a number of memory leaks
+ Sort out the whole client deletion business.  Also delete the resources hash at shutdown.
+ Improved Logging
+ Remove dead code
- Policy Engine Enhancements and Fixes
+ Always print the resource's node scores
+ Avoid a potential NULL dereference in an error path
+ Clean up generation of and contents of dot-files
+ Create an implicit "cant run here" constraint if an action returns "not installed"
+ Don't start resources until we can verify they're not still running
+ Dont waste time checking action definitions on nodes that wont be running resources
+ Fix a use-after-free of {key} when the monitor op already existed
+ Fix anti-colocation when the RHS is not running
+ Fix gcc warning - dont ignore the result of mktemp()
+ Fix group recovery when a group it depends on is restarted
+ Have group-group recovery work for the right reasons
+ Memory leak fixes
+ Make clones ever so slightly sticky by default
+ Make internal group ordering of bullet-proof
+ Make sure things that shouldn't be true are never true (added asserts)
+ Move DeleteRsc to a more appropriate location
+ Move Ncurses related defines to a more optimal location and make sure its included by crm_mon
+ Not all pseudo operations should be included in the graph
+ Only show elements of the graph in the dot-file by default
+ Prevent a potential NULL deference in clone allocation
+ Provide useful feedback when a cloned resource is found active somewhere it shouldn't be
+ Re-use StartRsc/StopRsc for consistancy
+ Rename elements of the pe_ordering enum for clarity
+ Rename migration variables for clarity
+ Updated regression tests with the revised consistant format
+ Utility functions for finding node's by uuid/uname
- Transitioner Enhancements and Fixes
+ Clean up memory on exit
+ Detect changes to attributes of the cib object
+ Only a limited number of cib attributes warrent aborting the transition
+ Unpack graph actions correctly
+ Improved logging
+ Removed dead code
- Misc
+ Allow heartbeat to easily run with standard libc malloc-and-friends
+ Allow the malloc tracking code to compile on systems where size_t != int
+ Allow writing to syslog to be turned off
+ Better information about valgrind enablement
+ Sanitize the "crm xyz" option processing.  Dont run valgrind if not using libc malloc
+ The DTD used "integer" instead of "number" (which was used by the code)
+ Stonith: Update the rilo RA with enhacements from Tijl Van den broeck and Guy Coates
+ Moved drbd peer outdater into contrib/
+ clplumbing: We _never_ want to trim memory, use -1 instead of 4*size.
+ clplumbing: Coverity 53: Potential NULL pointer dereference.
+ mgmtd: Certain versions of SWIG do not convert the Python "None" to a
+ initscript: set correct Provides: and Should-Start: entries
+ Stonithd: Relaxed a stonithd timeout so that start will succeed if it completes in a minute
+ Dont log dispatch warnings unless they exceed 30ms instead of 10ms
- LRM Enhancements and Fixes
+ Inform clients when an RA is not installed on the machine
+ Expanded regression testing
+ convert the LSB meta-data to XML.
- Resource Agent Enhancements and Fixes
+ -eq is for integer comparisions
+ Avoid concatination with None in riloe stonith agent
+ Filesystem - When checking ocfs2 is cloned, look for variables that are always set
+ Fix up the Dummy metadata
+ Fix variable initialization in pgsql
+ LVS support should always be enabled for the heartbeat IPaddr wrapper
+ Modify the Xen RA to use the new variable names
+ Return after performing a stop action in the Filesystem agent
+ Use configured scratch locations in ibmrsa stonith agent
+ bladehpi readme update
+ Dummy, mysql and drbd - fix meta-data to conform to XML.
+ Convert SAP* from dos
+ Allow ManageRAID to show meta-data at all times.
+ Enhance Pgsql ocf resource to handle multiple instances
+ Xen: Add a little reminder to the code.
+ drbd: Fix some issues and work-arounds for drbdadm bugs.
+ Filesystem: Prune duplicates from active and starting list.
+ Filesystem: Fix metadata require/unique settings.
+ Xen: Fix status function for newer Xen versions (Novell 250625)
+ Filesystem: Increase default suggested timeouts.
+ drbd: When using the nodename-override, drbdadm likes to print an
+ Xen: Swap migrate_to and _from to match PE.
+ Filesystem: Harmless typo corrected.
+ LVM: Add some hints for future todo items.
+ EvmsSCC: More fixes from Jo (Novell 199730)
+ Filesystem: Move ocfs2_init out of the generic stop path (Novell 250603).
+ pgsql: Several enhancements to by Keisuke MORI
+ drbd: Make parsing of drbdadm output more robust.
+ drbd: If drbd is stopped, demote should fail with NOT_RUNNING.
+ Xen: Advertise migrate_from and _to actions. Mention migrate in meta-data.
+ drbd: Add support for overriding the hostname drbd uses based on the clone
+ Filesystem: Whitespace cleanup and minor fixes ("" for -z arguments, using -ne when
+ IPsrcaddr: Added count of how many inet lines to use for the diff -B
+ external/riloe misspelled RI_LOGIN variable name.
- ldirectord Enhancements and Fixes
+ Use $arrayOfDNs[0] instead of @arrayOfDNs[0] to get rid of the following
+ Remove duplicate $recstr
+ Change the code around a bit to avoid a warning about code following exec
+ Dont use SIGENT, as it doesn't seem to exist.
+ 92d4e521db53 Handle $line more carefully
+ Make sure that frequency is intialised before it is used
+ Use $$ instead of (the uninitialised) $pid
+ Remove useless calls to lc()
+ Make sure that DEBUG is initialised
+ Use implicit variables in read_config()
+ Use the -w flag to perl to find warnings/errors
+ Make ldirectord's version valid
+ If weight is not supplied, set it to 1
+ Fix broken reload command
- Testing Improvements
+ Account for a small timing window in the ResourceRecover test
+ Explain why we're aborting when nodes aren't found in DNS
+ Ignore ResourceRecover testing artifacts
+ Indicate debug log messages
+ Improved Logging
+ Remove resource tied to the DC - the #is_dc comparision is irrelevant
+ Rewrite the LSBDummy RA
+ Rewrite the ResourceRecover to use asynchronous failures
+ BSC: (1) test IPC before its dependencies; (2) signal-handling: improve and catch some more.
+ ocf-tester: Continue if validate-all succeeds.
+ ocf-tester: Exit with appropriate exit code for success or failure.
+ ocf-tester: Various integers were compared as strings.
+ BSC: Test Dummy, IPaddr, IPaddr2, Filesystem RAs.
+ BSC: Skip IPaddr2 test if ip not installed.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1173823200">- version 2.0.9-1
- New Upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1170194400">- version 2.0.8-1
- New Upstream
+ Allow colocation based on node attributes other than #id
+ SAPDatabase and SAPInstance resource agents added.
+ Core/CRM: Improvements to the memory allocation, message, and string
  handling libraries result in an overall speed-up of 65%.
+ CRM: Fix ISO date handling for Jan 01 of any year.
+ CRM: Only update the voted hashtable with no-votes for the current
  election.
+ RA: IPaddr: Support netmask both in CIDR and in dotted-quad notation.
+ logd: Fix trailing random byte in log messages (OSDL 1268).
+ heartbeat:  Work around a glibc/times() bug to prevent failures every
  497 days on 32-bit Linux (OSDL 1407).
+ heartbeat: Retransmits were requested more often than they'd be
  honored (OSDL 1455).
+ CTS/PE: Introduce CRM option "startup_fencing" to disable fencing of
  unseen nodes, because CTS can't handle this.
+ PE: Split-off "network-delay" option from global_timeout to separate
  network delays from action timeouts.
+ PE/CRM: Binaries now support being called with "metadata" command to
  document the complete list of options in the CIB.
+ PE: DTD: Include start_delay as a property of operation objects.
+ PE: Fix implementation of date_spec when no range is specified.
+ PE: Enforce clone_node_max for already running resources.
+ PE: Clones were not being stopped on node shutdown.
+ PE: Allow resource colocation based on node attributes other than #id
  (node_attribute option added to rsc_colocation constraint).
+ PE: Improved handling when timeout &lt; start_delay (OSDL 1421).
+ PE: Pre-notifications for promote occured before start was completed
  (OSDL 1447).
+ PE: Allow any two pairs of actions to be specified for rsc_order (OSDL
  1452).
+ PE: Handle asymmetric clusters where RAs are not installed on all
  nodes.
+ PE: Allow resource stickiness and failure stickiness to change based
  on node attributes.
+ CIB: Fix update_attr() causes attrd to hang at shutdown when there is
  no DC (OSDL 1432).
+ CIB: Corrupted config file prevents heartbeat restart (OSDL 1385).
+ CIB: Startup processing improvements; DTD validation will be
  automatically activated if the CIB on-disk validates.
+ TE: Fix memory leak.
+ TE: Failcount wasn't being updated in all cases.
+ TE: never update the CIB with unconfirmed stop actions (OSDL 1435).
+ CTS/RA: Replace OCFMSDummy with Stateful RA.
+ CCM: Centralize quorum calculation on the transition leader.
+ CCM: Support split-site and external quorum servers.
+ CRM: Ignore status update for non-members (ie, ping nodes).
+ LRM: Don't postpone postponed resources.
+ LRM: Fix restart in case an lrmd is already running (OSDL 1333).
+ LRM: Fix overflow in RA output handling (OSDL 1433).
+ mgmtd: Robustness and memory leak fixes.
+ mgmtd: make the port used configurable (OSDL 1390).
+ haresources2cib.py: Improve v1 to v2 conversion tool (OSDL 1415).
+ GUI: ping nodes appear as failed in gui (OSDL 1394).
+ GUI: Reduce duplicates in RA list by only showing the OCF one if both
  ocf and hb RA exist) (OSDL 1338).
+ GUI: Add new resource to currently selected group (OSDL 1414).
+ GUI: support all attributes of operations (OSDL 1372).
+ GUI: Create first resource along with a new group; delete group when
  last resource is removed (OSDL 1287).
+ GUI: Set defaults for clones and m/s RAs (OSDL 1352).
+ GUI: Use meta-data defaults when creating actions (OSDL 1351).
+ GUI: GUI: start all sub resources when we start a group or a clone
  (OSDL 1449).
+ GUI: support ordered==false or non-collocated==false groups (OSDL
  1257).
+ stonithd: Fix memory leak.
+ stonithd: Remove reliance on farside_pid (OSDL 1412).
+ stonith external/riloe: Make the login name and iLo device address
  configurable.
+ crm_resource: Add manpage.
+ RA: PureFTPd, mysql, ManageVE (to manage an OpenVZ container),
  ManageRAID, WAS6 (Websphere 6) added.
+ RA: Include SAPInstance and SAPDatabase (FATE 2172).
+ RA: IPaddr cleanup to avoid race conditions in the script. Report
  status failure when an IPaddr is active on a different interface but
  allow it to be stopped.
+ RA: IPaddr2 fixes for loopback bound addresses.
+ RA: Filesystem reported wrong status/monitor results for OCFS2 in some
  circumstances (Novell 187080).
+ RA: Improve heartbeat v1 wrappers.
+ RA: Fix db2 monitor operation.
+ RA: ldirectord: Make the emailalert and emailalertfreq options global
  as well as non-global, make checkcount global as well as per-virtual,
  add radius check, improvements to documentation.
+ RA: pgsql: Make server logfile configurable and implement
  validate-all. New parameter ctl_opt added to pgsql to support
  additional options for pg_ctl.
+ CRM: First beginnings of a cluster-wide shell (FATE ...)
+ BEAM / Coverity induced fixes.
+ Minor compatibility fixes (OSDL 1405).
+ Logging improvements all over the place.
+ Extended support for master-slave resources (FATE 300723).
+ OCF RA API compliance checker (FATE 300737).
+ Support weak and uni-directional collocation constraints (FATE
  300792).
+ Many bugfixes.
- errata: CVE-2006-3121 was incorrectly refered to as CVE-2006-3821 in
  the changelog for 2.0.6-2 and 2.0.7-1
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-2-global.patch (introduced in 2.0.6-2)
- Remove alternate dependancy on netkit-ping as it is being removed
  from Debian</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1164924000">- version 2.0.7-2
- Add dependancy and build dependancy on psmisc for fuser
  Thanks to Hans-Joachim Baader
- Acknowldge NMU by Roger Leigh</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155592800">- version 2.0.7-1
- New Upstream
 - Remote Denial of Service attack (#195068, CVE-2006-3121).
 - Bugfixes to the CRM, the LRM and the GUI.
 - GUI failed to connect to and retrieve data from the cluster (#198747).
 - Improved log messages.
 - ptest can now read compressed XML directly. Do not include optional
   actions and dependancies in ptest output by default.
 - crm_resource will now warn and demand exact specification when trying
   to modify an attribute while several sets are present.
 - lrmd now limits itself to a maximum of 4 child processes, to avoid
   overloading the node and causing too long delays.
 - pengine: Processing of pending probes; should not be treated as if the
   resource is running or in a known state.
 - target_role now is only taken into account for managed resources.
 - cib: Detect more cases where the nodes section needs to be refreshed.
 - More accurately determine node status. (OSDL 1369)
 - Filter out stop requests that would require a resource to be added.
   (OSDL 1369)
 - Send filtered resource "stops" as successes as to not block waiting
   for filtered actions.
 - By default pass the TE graph via IPC until its too large for IPC to
   deal with, only then fall back to passing via the disk.
 - Stopping of stonith resources can never require stonith, even if the
   node its running on failed; prevent graph loop. (OSDL 1376)
 - STONITH events need to inputs to start events (not stops), to avoid
   graph loop in combination with "stop before" dependencies (ie,
   groups).
 - crmd: Dont stall the FSA if we try to invoke the TE after we've
   stopped it.
 - Always unpack the correct part of a diff operation; diffs should now
   apply in more cases, reducing the need for full refreshs.
 - Correctly observe --disable-snmp-subagent during build.
 - In some states the membership is invalid and shouldn't be referenced.
   (OSDL 1377)
 - Fix a use-before-null-check issue in lrmd. (Coverity #48)
 - OCF Resource Agents outside the default path were incorrectly found to
   be not executable.
 - ccm: hostcache and delnodecache files should not be authoritative if
   autojoin is disabled. (OSDL 1226)
 - With autojoin, llm_get_nodecount() can't return the real max nodes
   anymore, this may cause memory corruption. (OSDL 1382)
 - Fix a memory corruption in membership layer, more frequently observed
   with larger (&gt;5) clusters.
 - Change the default api-auth for pingd to uid=root
 - Dummy RA now OCF compliant.
 - Fix pingd RA metadata to be XML compliant.
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-1-quiet.patch  (introduced in 2.0.6-2)
  - ldirectord-1.141-readline_workaround.patch (introduced in 2.0.6-2)
  - CVE-2006-3821.patch                        (introduced in 2.0.6-2)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155074400">- version 2.0.6-2
- ldirectord-1.141-emailalert-1-quiet.patch
  Don't send email alerts if the alert address is not configured
- ldirectord-1.141-emailalert-2-global.patch
  Allow emailalert and emailalertfreq directives to be global
  as well as per-virtual service
- ldirectord-1.141-readline_workaround.patch
  readline doesn't seem to return lines after Net::FTP
  has been called, so split them up by hand.
- Added recommends iptables to heartbeat, as it is needed
  for the portblock resource to function correctly
- Added /var/lib/heartbeat/pengine directory
- Replace 02-chown-check.patch with chown-check-2.patch
  - use the environement variable FAKED_MODE instead of FAKEROOTKEY to check
    if code is runing in fakeroot. At some stage around fakeroot 1.5.10
    FAKEROOTKEY disapeared. Ran autoconf manually to effect this change
    after repatching.
  - Updated 02-chown-check.patch: fix typos in comment
- CVE-2006-3821.patch
  Fix remote denial of causes caused by insufficient bounds checking
  on data read from the network.
  CVE-2006-3821
- Python transition - http://wiki.debian.org/DebianPython/NewPolicy
  - Update build dependancy on debhelper from (&gt;= 4.0.0) to (&gt;= 5.0.37.2)
  - Add dh_python call to debian/rules
  - created debian/pycompat with contents of "2"
  - heartebeat: deplaced depenancy on python with one on ${python:Depends}
  - Added XB-Python-Version: ${python:Versions} to each package
  - Replace build dependancy on python2.3-dev with one on python-dev
  - Use python-central
    + Add build depends on python-central (&gt;= 0.5)
    + Add dh_pycentral call right before dh_python in debian/rules
    + Add XS-Python-Version: current in the source stanza of debian/control</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1152136800">- version 2.0.5-8
- ldirectord-2: Add missing dependancy on libmailtools-perl
                (Mail::Send)
- ldirectord-2: Add missing dependancy on libnet-perl
                (Net::SMTP, Net::FTP, Net::POP3)
- ldirectord-2: Remove unneccesary dependancy on adduser
- Automake transition: http://wiki.debian.org/AutomakeTransition
  - Remove unneccesary build-depends on automake1.9 | automaken
  - Remove unneccesary build-conflicts on automake1.4</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1151618400">- version 2.0.5-7
- Don't run deluser and delgroup in postrm
  - These commands may not be available at this time
  - If there are any files left that belong to this user or group
    then they will be left unowned and get inhereited by the
    next user that comes along that happens to have hacluster's
    old userid or the old haclient groupid respectively.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-5
- Reverse the change made in 2.0.5-4
  It turns out that in heartbeat (as opposed to heartbeat)
  is a script which calls a binary that is located in
  /usr/lib/ocf/resource.d/heartbeat/</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-4
- Move IPv6addr from /etc/ha.d/resource.d/ into /usr/lib/heartbeat,
  and then symlink that back into /etc/ha.d/resource.d/ as binaries
  are not allowed in /etc</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1149544800">- version 2.0.5-3
- Fix libgnutls binary dependancy
  - Build-Depends on libgnutls-dev instead of libgnutls13-dev
  - Recompile against libgnutls13 in place of libgnutls11
  -</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1148076000">- version 2.0.5-2
- Make use of invoke-rc.d
- Update from standards versoin from 3.6.2 to 3.7.2</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1147212000">- version 2.0.5-1
- New Upstream
- Removed build depenancy on openssl-devel,
  as heartbeat no longer uses openssl directly.
  (Libraries that heartbeat depends on may in turn
   depend on openssl creating an indirect depenancy
   or build-dependancy).</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1141855200">- version 2.0.4-1
- New Upstream
- Don't try and stop heartbeat in preinst on the first install</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139954400">- version 2.0.3-2
- Add build dependancy on libncurses-dev to allow crm_mon to work
  Thanks to Guy Coates
- Move hacluster user and haclient group creation (don't ask me why the
  user and group names are different) from preinst to postinst.
  Once upon a time there might have been a need for it in preinst,
  but the current packaging changes files to have the hacluster user
  and haclient group as neccessary in the postinst. So there is
  no need to create them before postinst.
  This is a better fix to #352158, and the pre-depends on adduser
  has been changed to a depends accordingly.
- Stop heartbeat in preinst</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139695200">- version 2.0.3-1
- New Upstream
- Make sure adduser is passed the --system flag
- Slightly Enhanced package descriptions
- Add build dependancy on swig
- As PYTHON_PATH has been added to configure.in it seems that autoconf1.4
  can no longer build this tree.  Currently autoconf is provided by
  autoconf1.4, and autoconfn is a virtual package provided by autoconf1.7,
  1.8 and 1.9.  Accordingly, replace the autoconf build dependancy with
  autoconf1.9 | autoconfn.  And add a build conflict on autoconf1.4. This
  way the autoconf command should be autoconf1.7, 1.8 or 1.9, but not 1.4
  as was previously the case.
- Don't apply 00-ssh_scp_path.patch as it should no longer be needed,
  instead add a build dependancy on openssh-client.
  Also removed call to relevant configure options.
- Removed configure option that no longer exists
  --enable-checkpointd
- Removed configure options that are now on by default
  --enable-crm --enable-lrm
- Add build dependancy on libgnutls11-dev, as 1.0 probably doesn't
  compile as _t types don't exist.
  http://lists.gnu.org/archive/html/help-gnutls/2004-08/msg00001.html
- Fix insonsistency between hb_stanby(1) man page, an the wiki
- Make /usr/bin/cl_status setgid
- Make sure that /var/run/heartbeat/{ccm,crm} exist on install
  else postinst, and thus the install will abort.
- Fix inconsistency between hb_standb(1) man page and wiki
- Add Pre-Depends on adduser
- Add management tool
  ./confgure --enable-mgmt
  Build-Depends: python2.3-dev, libpam0g-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1129759200">- version 2.0.2-5
- Change libcurl3-dev dependancy to libcurl3-openssl-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1128031200">- version 2.0.2-4
- Include /var/lib/heartbeat/ccm and /var/run/heartbeat/crm</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-3
- Get rid of bogus touching of config.status and friends in clean target,
  which if run as root causes build failures.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-2
- Add build dependancy on libltdl3-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127772000">- version 2.0.2-1
- New upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127599200">- version 2.0.1-4
- Add /var/run/heartbeat directory to package
  http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=900</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-3
- Restrurctured  provides, conflicts and replaces
- Made heartbeat-dev depend on heartbeat, not heartbeat</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-2
- Uptream initally made the wrong tar ball avaliable for
  2.0.1 and this was used to build 2.0.1-1.
  I have asked 2.0.1-1 not to be accepted into the Debian Archive
  for this reason. 2.0.1-2 uses the updated, correct tarball from
  upstream.
- Note that this package has a binary dependancy on libssl
  only because of linking against libsnmp9 (5.2.1.2-3)
- Add build dependancy on libsensors-dev (for libsnmp9)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1126821600">- version 2.0.1-1
- New upstream
- Add /var/lib/heartbeat/cores/root, /var/lib/heartbeat/cores/hacluster
  and /var/lib/heartbeat/cores/nobody
- Remove usr/lib/stonith/plugins/stonith2/riloe.so, its
  no longer in the tree
- Enable snmp_agent
- Added new libplumbgpl
- Added new ha_logd.cf
- Added new iso8601 executable
- Temporarly remove the drac3 module as GPL code that links
  against OpenSSL is not acceptable to Debian.
  - http://lists.community.tummy.com/pipermail/linux-ha-dev/2005-August/011266.html
  - http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=853
- Update build dependncy from libsnmp5-dev to libsnmp9-dev
- Make configure chown test fakeroot aware to avoid build hang
- Fix syntax error in db OCF resource
- Make crm/test/helper.sh have #! /bin/bash
- Make resources/OCF/ocf-shellfuncs.in have #! /bin/bash
- Update FSF address
- Zero config.status, libltdl/config.log and libltdl/config.status on clean</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1123106400">- version 2.0.0-2
- Add /var/lib/heartbeat/ccm and /var/lib/heartbeat/cores</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1122760800">- version 2.0.0-1
- New upstream
- Added dependancy on libnet-dns-perl to ldirectord
- Added --enable-checkpointd to configure arguments
- Added --disable-snmp-subagent to configure arguments
- Added --disable-swig to configure arguments
- Add build dependancy on uuid-dev
- Readranged packages to allow heartbeat 1.2.X to exist in debian
  and heartebat 2.X to be heartbeat until heartbeat gets
  a bit more testing in the wild. Also consoldidated binary
  packages into heartbeat, and development packages into
  heartbeat-dev, ldirectord is still in its own package,
  ldirectord2, as it drags in a lot of dependancies that
  no other part of the system uses.</changelog></package>
<package pkgid="c8e8d9900dcfb3a697206f8221b1f5ef5d584ae1" name="rrdtool" arch="i386"><version epoch="0" ver="1.3.9" rel="2.sl5"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 1.3.9-2.sl5" date="1259618400">- Added Provides for tcl, perl, python, ruby to be compatable with dag</changelog><changelog author="William R. Lorenz &lt;wrl@express.org&gt; - 1.3.9-1.wrl" date="1256767200">- Update to 1.3.9</changelog><changelog author="William R. Lorenz &lt;wrl@express.org&gt; - 1.3.8-1.wrl" date="1247954400">- Update to 1.3.8</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.7-1 - 6801/cmr" date="1242424800">- Update to 1.3.7</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.6-1" date="1234562400">- Update to 1.3.6</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.5-2" date="1231192800">- Remove fc10 conditionals
- Compile against evolution28 version of pango,cairo,glib on el4</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.5-1" date="1230674400">- Update version
- Add BuildRequires: ruby for macro expansion
- Add BuildRequires: gettext-devel
- Add Requires: gettext
- Add fc10 conditionals</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.4-2" date="1227477600">- Removed 1.2.x patches.
- Removed dependencies cgilib.
- Added dependencies pango, cairo.</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.4-1" date="1227477600">- Updated to release 1.3.4.</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.2.28-1" date="1224108000">- Updated to release 1.2.28.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.23-1" date="1181167200">- Updated to release 1.2.23.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.21-1" date="1178143200">- Updated to release 1.2.21.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.18-1" date="1169848800">- Updated to release 1.2.18.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.15-1" date="1153346400">- Updated to release 1.2.15.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.13-1" date="1146866400">- Updated to release 1.2.13.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.12-1" date="1135029600">- Updated to release 1.2.12.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.11-1" date="1122501600">- Updated to release 1.2.11.
- Fixes for x86_64 and perl/tcl/python bindings.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.9-1" date="1117922400">- Updated to release 1.2.9.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.8-1" date="1116453600">- Updated to release 1.2.8.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.6-1" date="1115762400">- Updated to release 1.2.6.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.2-1" date="1115503200">- Updated to release 1.2.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.1-1" date="1115503200">- Updated to release 1.2.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.0-1" date="1114812000">- Updated to release 1.2.0.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.49-2" date="1112652000">- Fix for the php-rrdtool patch. (Joe Pruett)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.49-1" date="1093471200">- Updated to release 1.0.49.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.48-3" date="1093471200">- Fixes for x86_64. (Garrick Staples)</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.48-3" date="1088805600">- Actually apply the patch for fixing the php module, doh!</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.48-2" date="1085695200">- Added php.d config entry to load the module once installed.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.48-1" date="1084485600">- Updated to release 1.0.48.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.47-1" date="1081288800">- Updated to release 1.0.47.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.46-2" date="1078437600">- Change the strict dependency on perl to fix problem with the recent
  update.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.46-1" date="1073340000">- Update to 1.0.46.
- Use system libpng and zlib instead of bundled ones.
- Added php-rrdtool sub-package for the php4 module.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.45-4" date="1070661600">- Added epoch to the perl dependency to work with rpm &gt; 4.2.
- Fixed the % escaping in the perl dep.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.45-2" date="1069106400">- Rebuild for Fedora Core 1.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1059948000">- Update to 1.0.45.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1050530400">- Update to 1.0.42.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1049148000">- Rebuilt for Red Hat Linux 9.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1046901600">- Added explicit perl version dependency.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1046037600">- Update to 1.0.41.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1044050400">- Update to 1.0.40.
- Spec file cleanup.</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1025906400">- 1.0.39</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1023141600">- 1.0.38</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1019253600">- 1.0.37</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1015970400">- 1.0.34
- rrdtools include zlib 1.1.4 which fix vulnerabilities in 1.1.3</changelog></package>
<package pkgid="7a628f41bff1cc277bad7a31bdd324da91f2e978" name="krb5-fermi-getcert" arch="i386"><version epoch="0" ver="2.0" rel="2"/><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.0-2" date="1334102400">- Merged get-cert.sh versions from SLF5 and SLF6 (which added checks
- for Firefox and/or Seamonkey current running)</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.0-1" date="1334016000">- Build v2 of kx509 which no longer users kxlist, modified get-cert.sh
- to not invoke kxlist</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 1.0-5" date="1256601600">- Add requirements for openssl, nspr, nss and krb5-libs packages</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 1.0-4" date="1256601600">- New version of get-cert script adds -t option to get certificate from test server</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 1.0-3" date="1256169600">- Added missing requirement for krb5-fermi-base and obsoletes krb5-getcert</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 1.0-2" date="1255478400">- Fixed file ownerships and permissions, new get-cert.sh script
- puts password on .globus/*.pem files</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 1.0-1" date="1241136000">- created from krb5-getcert made by Troy Dawson and changed to be a
- complete package with utilities from Mozilla and located in /usr/krb5</changelog></package>
<package pkgid="b9e590135af8cf7e6a9e62fd333cb56a8d5c0f10" name="zz_use_clogger" arch="noarch"><version epoch="0" ver="1.1" rel="4"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.1-4" date="1327968000">- Added rsyslog5 config in line with SLF6.4</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.0-1" date="1240272000">- First go round</changelog></package>
<package pkgid="6570f4e978a03a59070a3440856f568792df0ad9" name="zz_auto_update_kernel" arch="noarch"><version epoch="0" ver="1.0" rel="1"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.0-1" date="1244246400">- First go round
- Remove each part individually so that this can be more general and work 
  on more releases.</changelog></package>
<package pkgid="436d80eeebc199a1c7d3d8e3b03d68426af4f019" name="drbd-bash-completion" arch="i386"><version epoch="0" ver="8.3.7" rel="3.sl"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-3.sl" date="1275429600">- Removed Requires: drbd-xen since this pulls xen onto a system
  that might not want it.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-2.sl" date="1274738400">- Updated to version 8.3.7
- Added Requires: drbd-kernel-module-8.3.7
- Added %config(noreplace) /etc/drbd.d/global_common.conf</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-2" date="1257717600">- Do not build the drbd-xen package on non x86 architectures.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-1" date="1257717600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.5-1" date="1256680800">- New upstream release.</changelog><changelog author="Florian Haas &lt;florian@linbit.com&gt; - 8.3.4-12" date="1256162400">- Packaging makeover.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.4-1" date="1254866400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.3-1" date="1254780000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.2-1" date="1246658400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.1-1" date="1238191200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.0-1" date="1229637600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.7-1" date="1226527200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.6-1" date="1212184800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.5-1" date="1202853600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.4-1" date="1200088800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.3-1" date="1199916000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.1-1" date="1194040800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.0-1" date="1191016800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.6-1" date="1188856800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.5-1" date="1186178400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.4-1" date="1182981600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.3-1" date="1178575200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.2-1" date="1175896800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.1-1" date="1172959200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt;  - 8.0.0-1" date="1169676000">- New upstream release.</changelog></package>
<package pkgid="ee766e75889fc4073a87e09c2562a7bb14513b01" name="drbd-heartbeat" arch="i386"><version epoch="0" ver="8.3.7" rel="3.sl"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-3.sl" date="1275429600">- Removed Requires: drbd-xen since this pulls xen onto a system
  that might not want it.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-2.sl" date="1274738400">- Updated to version 8.3.7
- Added Requires: drbd-kernel-module-8.3.7
- Added %config(noreplace) /etc/drbd.d/global_common.conf</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-2" date="1257717600">- Do not build the drbd-xen package on non x86 architectures.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-1" date="1257717600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.5-1" date="1256680800">- New upstream release.</changelog><changelog author="Florian Haas &lt;florian@linbit.com&gt; - 8.3.4-12" date="1256162400">- Packaging makeover.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.4-1" date="1254866400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.3-1" date="1254780000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.2-1" date="1246658400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.1-1" date="1238191200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.0-1" date="1229637600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.7-1" date="1226527200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.6-1" date="1212184800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.5-1" date="1202853600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.4-1" date="1200088800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.3-1" date="1199916000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.1-1" date="1194040800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.0-1" date="1191016800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.6-1" date="1188856800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.5-1" date="1186178400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.4-1" date="1182981600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.3-1" date="1178575200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.2-1" date="1175896800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.1-1" date="1172959200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt;  - 8.0.0-1" date="1169676000">- New upstream release.</changelog></package>
<package pkgid="67788bd9a8e94a5f4c58b01776e47e25a3fee406" name="heartbeat-devel" arch="i386"><version epoch="0" ver="2.99.2" rel="6.1.sl5.1"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt;" date="1370469600">- fixed up libnet and libnet-devel dependencies</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1222725600">- version 2.99.1-1
- Update source tarball to revision: d8710f41b9cb
- Includes many fixes to init scripts.
- Add sbd for shared-storage fencing.</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1219356000">- version 2.99.0-1
- Update source tarball to revision: f23531dd23ad</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1207087200">- version 2.1.3-18
- Added two small patches for Bug LF-1833: Do not overwrite op_status depending on op_rc</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1200348000">- version 2.1.3-1
- Update source tarball to revision: 9cdeae333990
- Statistics:
    Changesets:      153
    Diff:            141 files changed, 12279 insertions(+), 3103 deletions(-)
- This is the first release now that the CRM has becme its own project called
  Pacemaker and no longer included with Heartbeat.
- Without the CRM present, the following components are also no longer able to
  be included with Heartbeat (as they require CRM libraries) and are instead
  provided as part of pacemaker or the new pacemaker-pygui project.
   cim
   snmp
   mgmtd
   pygui
   tsa_subagent
- RPM-based distributions also have a new package layout
   heartbeat-resources ::= resource agents
   heartbeat-common    ::= components that are useful regardless of which stack is being used
   heartbeat           ::= components that are specific to the Heartbeat stack
- Changes since obs-2.1.2-24
+ apache RA: remove children in case the top process didn't
+ apcsmart: make message more descriptive
+ build (LF 1803): add -fgnu89-inline to CFLAGS if gcc version is &gt;=4.1.3 and &lt;4.3
+ by request from Andrew - Modified the external/ssh plugin to have a livedangerously flag
+ ccm (LF 1806): restart all instead of exiting (low impact)
+ Changed a test from causing a reboot to not triggering a reboot - because it doesn't seem to any more
+ Changed HIGHLY to STRONGLY in how strongly we recommend STONITH
+ Corrected a warning found on FC8 in the cl_reboot code
+ debian: Add dependancy on libpam-runtime (&gt;= 0.76-14)
+ Debian: add libxml2-utils as a dependancy, because we need xmllint for the BSC
+ Debian: add the new ibmrsa-telnet stonith plugin
+ debian: clean python bytecode
+ debian: clean up stale heartbeat-2 files
+ debian: don't install bytecompiled python modules
+ debian: patches need to be distributed
+ debian: remove chown patch
+ debian: Update standards version from 3.7.2 to 3.7.3
+ debian: update the name of the series file to reflect the new release
+ docs/packaging: reshuffle hb_report documentation and include the html version
+ dopd: don't cl_free variables on local stack
+ dopd: don't hardcode path of drbdadm; it has to be in the PATH, though.
+ dopd: fix potential segfault due to leakage of invalid/freed pointer
+ dopd: make it work with multiple concurrent outdate requests
+ external ipmi plugin caused error messages when getting metadata on machine w/o ipmitool installed.  This somewhat messed up BasicSanityCheck.
+ Filesystem: Make mount point required for the GUI (Hideo Yamauchi)
+ Fix memory leak in external plugin handling
+ fixes for fedora: system(3) function return value cannot be ignored. Also added a missing RPM build dependency.
+ hb_report: add quotes around args to test -f
+ hb_report: don't surprise user by reading the files from the current directory
+ hb_report: include hostcache
+ hb_report: replace arch with uname -m
+ hg: from last changes to recover from media errors, fixed a stupid typo with a reversed boolean condition.
+ hg: LF bug 1794: ComponentFail tests failing
+ hg: Makefile for external stonith commands was missing new stonith plugin in the extra_dist section
+ High: Heartbeat: Include an option to start the CRM in respawn mode
+ init: add should-start/stop $remote_fs to init script
+ init: should-start/stop $remote_fs to init script
+ ipc (LF 1339): enable message compression
+ IPv6addr: Check for netinet/icmp6.h instead of  linux/icmpv6.h
+ IPv6addr: Check for netinet/icmp6.h instead of linux/icmpv6.h
+ iscsi RA: wait for udev to create the links
+ Junko IKEDA reported a problem building on Red Hat with tog-pegasus installed - this fixes that problem - the code half-setup things if pegasus was present but --enable-cim-provider wasn't enabled
+ ldirectord: add forking mode
+ ldirectord: SimpleTCP service check
+ ldirectord: SimpleTCP service check documentation
+ ldirectord: Various updates to OCF compatible RA
+ lf bug 1678: stonith command core dumps with -h option
+ LF bug 1690: there should be a tool to audit (validate) node names in constraints among other things...
+ LF Bug 1732: Error handling is bad for comm media
+ LF bug 1732: restructuring code towards being able to restart (reopen) communication media when they die
+ LF bug 1795 - timeout control for crm_mon --one-shot
+ LF bugzilla 1667:  ppc64 RPMs contain 32-bit binaries
+ LRM (LF 1821): resource timing information
+ lrm reg tests: handle OCF_ROOT, warn about xmllint missing
+ LRM regtest: update filters to match the lrmadmin output
+ lrmadmin: include time.h
+ Monitor timeouts need to increment fail counts
+ OCF-resources: SphinxSearchDaemon is not installed
+ OpenBSD bugs: 1731 1761 1743 1659
+ packaging: include iscsi
+ pgsql RA: handle the missing pg software properly (thanks to Serge)
+ pgsql RA: move check for root down to enable meta-data for regular users (thanks Serge)
+ pgsql RA: postmaster confusion
+ Put the _source_ (.in) file under source control.  Groan...
+ RA Filesystem: add lustre to the list of fs which don't need fsck
+ RA iscsi: dropped complex code in favour of udev and several small cleanups
+ RA iscsi: fix meta-data xml
+ RA iscsi: get rid of one annoying message ("no active sessions")
+ RA iscsi: new iscsi resource agent
+ RA iscsi: support iscsi sles compat mode
+ RA iscsi: two echo statements removed
+ RA mysql: don't look for mysql users in the OS database (thanks to Christian Rishoj)
+ RA SAPDatabase/SAPInstance: report proper exit codes in case required software is not installed
+ RA SphinxSearchDaemon: a new RA thanks to Christian Rishoj
+ recovermgrd: changed the code to look at the return code from fwrite, to make Fedora 8 compiler compile recovermgrd warning-free.
+ Removed bzip2-devel as a build dependency for all but Fedora and RH
+ RPM and specfile changes to fix part of and help diagnose part of Junko IKEDA's problem with tog-pegasus
+ RPM spec file: Added ciblint to installed programs
+ RPM specfile change:  made is_fedora macro turn off is_rhel macro
+ shell scripts: various cases of overquoting in the for statement (thanks to Takekazu Okamoto)
+ stonith ibmrsa-telnet: new stonith plugin
+ stonith ipmi: new external stonith plugin
+ utillib.sh: update finding the binary which coredumped
+ Xen RA: new improved (thanks to Sebastian Reitenbach)
+ [patch] init: add should-start/stop $remote_fs to init script</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1196114400">- version 2.1.2-24
- Update the source tarball to revision ef1be5978d97
- Statistics:
    Changesets:       104
    Diff:             296 files changed, 3464 insertions(+), 3275 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb/vmware stonith) on a single host (opensuse10.3/2Gb/2.66Ghz Quad Core2)
  + 7-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon/ssh stonith)
- All testing was performed with STONITH enabled
- Pending bugs encountered during testing:
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-15
+ High: CIB: Fix the behavior of update_attr() and delete_attr() when the command is ambiguous
+ High: CRM: In ccm_have_quorum(), an OC_EV_MS_PRIMARY_RESTORED event means we _do_ have quorum
+ High: PE: Bug 1765 - Prevent master-master colocation constraints from preventing slaves from starting
+ High: PE: Introduce a new API call for determining the location of complex resources
+ High: PE: Set next_role recursivly so that group promotion will work
+ High: PE: increment_clone() did not overflow correctly 9-&gt;10, 99-&gt;100, etc
+ High: crmd: Prevent shutdown hangs caused by pending ops that can't be cancelled - because the no longer exist in the lrm
+ High: heartbeat: Fix getnodes() compilation with gcc 4.3
+ High: Novell 293922: Don't use non-blocking writers, but instead don't block
+ High: Novell 293922: Heartbeat network processes would block on full buffers.
+ Medium: core: Do not disconnect blocking write processes, but discard traffic.
+ Medium: PE: All other things being equal, prefer to keep non-failed instances alive
+ Medium: PE: Create a syntactic shortcut for the common use-case of "{resource} prefers {node} with {score}"
+ Medium: PE: Dont make changes to location constraints, when applying to groups, persistent
+ Medium: TE: Allow the CRM to limit the number of resource actions the TE can execute in parallel.
+ Medium: TE: Pending operations shouldn't be processed
+ Medium: attrd: Bug 1776 - Attrd doesn't exit or reconnect when the CIB is respawned
+ Medium: crm: Dont generate core files for non-fatal assert (ie. the CRM_CHECK macro).
+ Medium: crmd: Don't remap LRM_OP_PENDING when building full lrm updates
+ Medium: crmd: Prevent shutdowns initiated immediately after a node is removed from the cluster with hb_delnode from stalling.
+ Medium: LF bugzilla 1757: apache resource agent grep methodology can't handle newlines - even if you change the pattern
+ Low: Admin: Do a full simulation when we have the live CIB - since we'll always have a status section
+ Low: Admin: crm_standby - Don't complain about missing values, print the default value instead
+ Low: PE: Actions for stonith agents should never default to requiring fencing or quorum
+ Low: PE: ptest - Handle malformed inputs more gracefully
+ Low: Rename example ha_logd.cf file to the proper name.
+ Low: cib: Increase the retry interval when connecting to the ccm to 3s
+ Low: crmd: Provide a more informative error when DCs detect other DCs during a join
+ Low: heartbeat: Use the correct define when choosing to enable valgrind - Keisuke MORI
+ Low: LF bug 1705 - cl_respawn core dumps when given -h or --help
+ Low: changed configure.in to force 64-bit objects when on gcc-based ppc64 platform
+ Low: configure.in - autoconf spells ppc64 funny...
- Unclassified user impact
+ LF 1766: Heartbeat installs man pages in the wrong directories by default...
+ LF Bug 1662: Put in some RHEL changes provided by Keisuke MORI
+ LF bug 1393 - Cannot rename /var/lib/heartbeat/hostcache.tmp to /var/lib/heartbeat/hostcache (scope, risk and severity: all minor)
+ ccm (LF 1546): ensure that the membership instance number never decrements (thanks to Guochun Shi)
+ ccm: speed up ccm considerably in case a node is alone in the membership (thanks to MATSUDA, Daiki)
+ Debian: Build: Add dependacy on gawk as it is required by the OCF IPaddr resource
+ Debian: Build: rename ha_logd.cf to logd.cf in debian/heartbeat.files
+ hb_report (LF 1763): multiple fixes
+ hb_report: add more packagers support (thanks to Sebastian Reitenbach)
+ hb_report: fix handling of debug option
+ hb_report: fix the previous fix (sorry)
+ hb_report: include package verification
+ hb_report: reduce the number of ssh invocations by 1
+ hb_report: update documentation on extracting CTS tests
+ hb_report: use getopts instead of getopt(1) for the sake of portability
+ hbagent: fix memory leaks on dropping global resources (thanks to Keisuke MORI)
+ hbagent: removed the const qualifier from parameter
+ hbagent: reset gMembershipTable on dropping global resources
+ hbclient: fix memory leaks on signon/signoff (thanks to Keisuke MORI)
+ heartbeat: Increase MAXMSGHIST; reduce debugging output.
+ ldirectord: allow per-virtual checkinterval configuration
+ lvs-users: Patch for ldirectord when using mysql service
+ mgmtd (LF 1719): fix the pam file for suse
+ mysql RA (LF 1760): defaults for OpenBSD (thanks to Sebastian Reitenbach)
+ RA Xinetd (LF 1742): multiple fixes
+ RA tomcat: allow consecutive starts
+ stonithd: (LF 1727): fix dropping privileges
+ stonithd: a copy/paste typo
+ stonithd: check for storage size when copying the host list
+ stonithd: drop root privileges earlier
+ stonithd: shuffle dropping privileges around again</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1193349600">- version 2.1.2-15
- Update the source tarball to revision c492f19cb583
- Statistics:
    Changesets:       158
    Diff:             173 files changed, 8712 insertions(+), 4787 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
  + (lmb)    7-node Xen cluster on a single host
  + (debltc) 6-node ppc64 cluster
- Pending bugs encountered during testing:
  1562 - heartbeat: hostcache file rename error at startup
  1737 - crmd: Inconsistent join state detected (Hard to reproduce, possible fix included)
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-4
+ High: cib: G_main_del_IPC_Channel() doesn't like being called with a NULL pointer and crashes
+ High: crm: Bug 1749 - Make sure the diff-related digests contain the complete CIB, not just the first line
+ High: crmd: Prevent shutdown hangs by allowing the crmd to forget about pending actions for deleted resources
+ High: PE: Bug 1712 - Ensure manditory ordering constraints can cause complex resources to be shut down
+ High: PE: Clone colocation fixes
+ High: PE: Ensure that resources depending (by order) on a master are not promoted if no master is available
+ High: PE: Fix manditory ordering with m/s resources
+ High: PE: Prevent an infinite pe/te loop when reprobing with resources in master mode
+ High: PE: Prevent use-of-NULL in crm_mon when date_expressions are used by ensuring that data_set-&gt;now is always set
+ High: PE: Prevent use-of-NULL when the admin creates a colocaiton constraint with an empty group
+ High: PE: Relax an assumption regarding clones that is not true when they are unmanaged
+ High: PE: Remove an accidental commit that, when called, causes use-of-NULL
+ High: PE: Remove an errant call to exit() than prevented an assert from being triggered
+ High: RA: Novell 329833 - dotted-quad netmask notation broken in findif
+ Medium: cib: Include digests of the cib a diff was made from and verify it when applying
+ Medium: CRM: Re-evaluate appropriate IPC message queue lengths and throtle IPC _clients_ that hit them
+ Medium: crmd: Bug 1737 - Inconsistent join state detected - Possible fix
+ Medium: PE: Bug 1722 - By default, exhibit the old start-failures-are-fatal behaviour regardless of how resource-failure-stickines is set
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: PE: Fix minor memory leak when stopping orphaned resources
+ Medium: PE: Master internal ordering enhancements. Added stopped-&gt;start, stopped-&gt;promote.
+ Medium: Tools: Bug 1738 - the crmd ignores some requests from crm_resource because it exited too quickly
+ Low: contrib: dopd - Remove a pointless and annoying dependancy on the crm
+ Low: crmd: Increase the retry interval when stalling the FSA to 2s (used when connecting to the ccm, lrmd, cib)
+ Low: crmd: Update the CIB with the node's version data when it becomes DC
+ Low: crmd: Use the unaltered rc for timed out operation events from the lrmd
+ Low: Debian: heartbeat doesn't depend on libperl-dev (probably confused by '-lperl' in configure.in)
+ Low: heartbeat: Some compilers feel that the fcli variable could be used uninitialized - shut them up
+ Low: PE: Avoid pointless copying of XML items (actions) during graph creation
+ Low: PE: Convert all the resource's boolean flags into a single bit-field
+ Low: PE: Produce a config error when a clone contains more than one resource/group to clone
+ Low: RA: PureFTPd - Support debian's pure-ftpd-wrapper script.  Patch by Raoul Bhatia
+ Low: Stonith: external/rackpdu - Fix the metadata short descriptions
+ Low: ccm: Bug 1723 - fix logging (thanks to MATSUDA, Daiki)
- Unclassified user impact
+ gui: Add "meta_attributes" support to mgmt
+ gui: Add boolean_op for location rules in mgmt
+ gui: Make several fields of rsc_location editable
+ gui: Prevent clone and master_slave from belonging to group
+ gui: Prevent haclient from falling into an error caused by blank resource metadata
+ gui: Provide "Default" setting for crm configurations
+ gui: Provide complete pengine and crmd configurations with dynamic rendering
+ gui: Rename "Places" to "Locations" to match with the CIB name
+ gui: Resolve target_role problem for sub-resource
+ gui: Specify the default type of added item to correspond to the object that the cursor focused on
+ heartbeat: Remove one unlink() of the temporary hostcache file.
+ LF bug 1502: udpport statement in ha.cf is ignored by heartbeat - trivial fix
+ LF bug 1589: ia64 heartbeat unaligned access messages (SGI965396) - copy fields in structures - minor fix
+ LF bug 1679: hardcoded heartbeat userid and group in init script (minor fix)
+ LF bug 1681: BSC fails to to identify active interface on OpenBSD (minor change)
+ LF bug 1700: HA Signon always reports success - fix has minor scope.
+ LF bug 1702: during emergency restarts, heartbeat doesn't close watchdog correctly.  Fix is minor.
+ LF bug 1712: ha_logd prevented node from shutting down - changed code to use the waitout() primitive - scope fix - trivial-minor
+ LF bug 1731: wrong location of libraries for OpenBSD 64Bit architectures, with patch
+ LF bug 1734 - removed duplicate return statement as per bug report.
+ lrm stonith plugin: fix exit code handling
+ lrmd (LF 1715): increase the max dispatch time for lrmd
+ lrmd (LF 1729): revise return codes
+ Put in a missing include of &lt;memory.h&gt; for the DRBD code.  Change scope: trivial
+ RA: mysql, pgsql - use getent(1) instead of /etc/passwd (thanks to Raoul Bhatia)
+ RA: mysql: According to Geoff Harrison the sql check is broken without this
+ RA: mysql: Allow arbitrary commandline arguments for mysqld (by Raoul Bhatia)
+ RA: Raid1: Allow the homehost setting to be specified.
+ RA: Xinetd: Fix stop/monitor to not fail if service isn't available yet.
+ stonith/ibmrsa: allow ',' in the hostlist
+ STONITH: external/ssh: Disable StrictHostKeyChecking and PasswordAuthentication by default.
+ stonithd (LF 1714,1727): fix a race condition
+ stonithd (LF 1726): a hostlist may be empty
+ stonithd (LF 1727): change attach shmem seg to read only
+ stonithd/lib: replace cookie generation with uuid
+ stonithd: have -a really mean startup alone
+ stonithd: increase the maxdispatchtime
+ stonithd: library code review and cleanup
+ tools: Add hb_report - a reporting utility</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1190757600">- version 2.1.2-4
- Update the source tarball to revision 702e4f418ca8
- Statistics:
    Changesets:       109
    Diff:             188 files changed, 5926 insertions(+), 2003 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
- Pending bugs encountered during testing:
  1377 - llm_get_nodename: index(1719751538) out of range
  1561 - Cluster node c001n03 returning after partition
  1562 - hostcache file rename error at startup
  1700 - HA Signon always reports success
  1711 - Shutdown blocked by call to cl_flush_logs()
  1712 - Shutdown blocked by ha_logd
  1714 - Stonithd core dumps
- Changes since 2.1.2-2
+ High: Core: Prevent logging buffer overflow - ensure the entity is NULL terminated.  Patch from Simon Graham.
+ High: DTD: Remove stray character that made the DTD invalid
+ High: PE: Ensure mandatory ordering constraints behave correctly
+ High: PE: Implement a smarter algorithm for colocation
+ High: PE: Include preferences of colocated resources when promoting masters
+ High: PE: Make sure only the correct number of cloned groups are started
+ High: PE: Make sure the merge_weights function is called for complex resources
+ High: PE: More accurate method of detecting colocation loops in native_merge_weights
+ High: PE: Optimize the merge_weights functionfor groups
+ High: RA: Remove bashism from Filesystem OCF agent
+ High: RA: Filesystem - Fix path reference.
+ High: RA: o2cb - Fix path broken in recent cleanups
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: crmd: Tell the LRM to refresh the resource's default parameters
+ High: core: Bug 1697 - really remove proctrack sources (performance/memory leak fix)
+ High: core: An open call with the O_CREAT flag was missing the file mode.
+ Medium: Core: Ensure heartbeat flushes all its logs before exiting
+ Medium: ipc: Up MAXMSG to match MAXUNCOMPRESSED to allow larger clusters.
+ Medium: Logging: Sanitize and centrally define the log facility used by various subsystems
+ Medium: PE: Bug 1705 - Don't segfault when allocating empty groups
+ Medium: PE: Bug 1710 - A resource's failcount was ignored on nodes with no operations for the resource
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: RA: EvmsSCC - Handle start failures caused by peers starting at the same time (Patch from Jo De Baer)
+ Medium: RA: Treat migrating (status 1) as running to avoid - patch by Per Andreas Buer
+ Medium: Stonith: Remove code-reuse to prevent excessive logging by the LRM
+ Medium: Stonith: ipmilan: fix potential segvfault in options parsing
+ Medium: cib: Improved transparency when in operating in degraded mode
+ Low: Admin: Bug 1691 - crm_resource doesn't complain about empty strings as property values
+ Low: build: configure.in: fix for platforms with libc in /lib/tls
+ Low: CIB: Allow notification to remote clients
+ Low: CRM: DTD - Expand the list of accepted values for boolean fields
+ Low: CRM: DTD - Explicitly specify a default for rsc_colocation.symmetrical
+ Low: DTD: Include helpful comment for rsc_order constraints
+ Low: PE: Downgrade logging when we fallback to default option values
+ Low: PE: More efficient logging of orphan resources
+ Low: PE: Prevent users from trying to use on_fail=fence and stonith-enabled=false
+ Low: PE: Stop the master placement score from affecting the synapse's priority
+ Low: RA: Add a tomcat OCF agent from Yamauchi Hideo
+ Low: RA: ManageVE - Fix status when VE files are not persistent
+ Low: RA: Put in updates to the Informix script as supplied by Lars Forseth
+ Low: RA: apache - drop annoying messages if no configuration files are found
+ Low: Stonith: external/ssh - simplify the reset command and wait the same amount of time as the non-external variant
+ Low: Stonith: Disable ipmilan by default
+ Low: TE: Pause for a moment before trying to reconnect to stonithd
+ Low: Tools: Allow pingd to change identity based on the name of its executable - workaround for Bug #1701
+ Low: logd: Update the default config file to reflect the new default log facility
+ Low: tools: haresources2cib.py: update parameter lists and configuration defaults
- Unclassified impact
+ lrm: Bug 1458 - include timing information in the op data.
+ lrm: Bug 1684 - a meta-data operation fix introducing short sleep on zero reads
+ lrm: log non-recurring operations
+ lrm: performance - replace linear with binary search for msg type.
+ lrm: performance - remove unnecessary memstat
+ lrm: raexecocf: a fix for bug introduced in 2a787bbd73f6; longer sleep in get_resource_meta
+ RA: Bug 1692 -  monitoring fails for apache OCF resource.  Put in simple fix to apache resource agent monitoring from Sebastian Reitenbach
+ RA: eDir88 - fix to allow meta-data to work in case NDS is not installed
+ RA: pgsql - patch to remove bashism
+ Stonith: Put in an APCmastersnmp.c patch from Peter Kruse which makes the plugin work with new APC master switches
+ Stonith: Bug 1615 - get the list of hosts from an RA asynchronously
+ mgmtd: allow old clients to connect</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187301600">- version 2.1.2-2
- Update the source tarball to revision 098c0993b1d0
- Statistics:
    Changesets:	6
    Diff:		11 files changed, 402 insertions(+), 46 deletions(-)
- Changes since 2.1.2-1
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: PE: Bug 1682 - Prevent use-of-NULL when clones have no active children
+ High: TE: target_rc should default to 0 (LRM_OP_DONE) to detect monitor actions that fail the first time they are executed
+ Medium: PE: Bug 1685 - Supply the correct defaults for rsc_order constraints
+ Low: Admin: crmadmin - exit with rc=0 when the command completed successfully</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187042400">- version 2.1.2-1
- Update the source tarball to revision 1ad8497bc55d
- Statistics:
    Changesets:	340
    Diff:		614 files changed, 39588 insertions(+), 32588 deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/1ad8497bc55d
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -r e3c9306b9223:1ad8497bc55d | sort -f
- Testing notes
+ On my underpowered cluster, the CCM borked a number of times on the Stonithd test
  However since the CCM hasn't been touched in an age, its hard to conclude there are regressions from previous releases.
  If anyone would like to volunteer to maintain the CCM (or the GUI for that matter), it would be much appreciated.
- Changes since 2.1.2 (Upstream)
+ High: CRM: Update crm/cib feature sets and the set of tags/attributes used for feature set detection
+ High: CIB: Improved CCM interaction
+ High: CRM: filter_action_parameters() - Make a copy of interval/timeout in as they're about to be free'd
+ High: PE: Break graph loops involving stonith
+ High: PE: Only create _one_ pseudo op per name (all_stopped/stonith_up)
+ High: PE: The all_stopped action should only be part of the graph when the stop actions are runnable
+ High: PE: all_stopped should only depend on native resources to avoid recursion
+ High: PE: check_action_definition() - Ensure the meta attributes are also set so that the digest is calculated correctly (and consistently with the crmd)
+ High: PE: Use failcount to handle failed stops and starts (set default_resource_failure_stickiness &gt; 0 for the old blocking behaviour)
+ High: TE: Allow reconnection to stonithd if it is respawned
+ High: TE: Allow the TE to reconnect if stonithd is killed and respawned
+ High: cib: Allow the CIB to reconnect if the CCM is killed and respawned
+ High: cib: Handle master updates that fail DTD validation
+ High: cib: Support the removal of multiple child objects - required for subsequent commit
+ High: crmd: Improvements to shutdown sequence (particularly in response to failures)
+ High: crmd: Sanitize the maintenance of node_state entries
+ High: crmd: Simplify node_state maintenance
+ High: stonithd: Sanitize the login/logout functions and add the ability to reset the callback IPC channel
+ Medium: cib: Ensure fflush() and fsync() are always called when writing XML digests to disk
+ Medium: crm: Ensure fflush() and fsync() are always called when writing XML to disk
+ Medium: crm: Bug 1680 - parse_xml() can fail to detect mismatching close tags
+ Medium: PE: Dont check the parameter digest of orphan operations
+ Medium: TE: Dont modify the failcount for 'pending' action updates (rc=-1)
+ Medium: admin: Set the exit code to non-zero if crmadmin can't connect to the crmd
+ Low: PE: Warn when multiple nodes have the same uname
+ Low: Stonith: New external plugin for handling 'APC Switched Rack PDU AP7952' devices - contributed by Sergey Maznichenko
+ Low: cib: Enhancements to logging of DTD errors
+ Low: cib: Refactor reading and writing of the CIB to disk
+ Low: crmd: Ensure our assumption that all resources have a class and type is true
+ Low: crmd: Simplify the detection of active actions and resources at shutdown
+ Low: Admin: Bug 1603 - Allow CIB digest files to be verified
+ debian: make heartbeat binNMU safe
+ stonith: ipmilan - accept documented auth and priv values
+ GUI: OSDL 1449 / Novell 291749: GUI should not overwrite more specific settings of contained resources.
+ RA: IPaddr2 - Make the check for the modprobe/iptables utilities conditional on the IP being cloned
+ RA: apache - make status quieter
+ RA: Added Informix resource agent
+ RA: eDir88 resource can't be stopped ?
+ RA: patch to fix bashism in a number of agents
+ Tools: OSDL Bug 1666: in BSC, make sure temp rsc dir exists for RAs
+ Tools: ocf-tester - use the default value for OCF_ROOT if it exists
+ Tools: ocf-tester - add capability to test with lrmadmin/lrmd
- Changes since 2.1.0-2
+ A little cleanup to make the RAs more uniformly not have $OCF_ROOT paths in them
+ Added code to cause logging to be restarted if it dies.
+ Admin: Allow crm_diff to operate on compressed inputs
+ Admin: Bug #1621 - crm_mon should show failed starts of a resource
+ Admin: Bug 1632 - Make sure error messages regarding trailing XML input characters are seen
+ Admin: Bug 1635 - crm_failcount should not complain if the attribute was already deleted
+ Admin: Bug #1622 - crm_attribute: Include --inhibit-policy-engine in the help message
+ Admin: crm_resource - remove an overly simplistic check for when -C can safely be used
+ Admin: crmadmin - include Hg version in --version output
+ Admin: ptest is useful enough to warrent installation to sbindir
+ BSC: 'trap' had been continuing instead of exiting
+ Bug 1612: haresources2cib @substitution@ broken (probably by a global change)
+ Build: No longer generate RAs now that there is a sane way to set directory locations and find binaries
+ CIB: Bug 1602 - Archive invalid/unusable configurations so we can continue
+ CIB: Bug 1633 - Pass the actual error from activateCibXml back to the user
+ CIB: config_changed always needs to be calculated when processing write commands
+ CRM: Bug 1625 - Cannot update an operation's timeout
+ CRM: Clean up processes left over by crm_abort().  Initial patch by DAIKI MATSUDA
+ CRM: Fix compare_version() to actually work correctly on a regular basis (broken since 2.0.2)
+ CRM: Fix matching of objects with an ID when the match-spec has no ID
+ CRM: Make logging setup consistent and do not log the command-line to stderr.
+ CRM: Only detect timeout changes for recurring ops
+ CRM: Remove deBug code that should not have been committed
+ Corrected a typo which only matters on 32-bit machines :-(
+ Corrected so that on *BSD it passes in 2 parameters, instead of 2.
+ DTD: Add helpful comment regarding rsc_colocation objects
+ Fix location of pingd binary
+ Fixed a dangling reference to a former bin directory name.
+ Fixed a fairly-major error in IPaddr - it didn't handle CIDR netmasks correctly.  But ifconfig didn't complain either...
+ Fixed a minor stonithd testing error (not much of a Bug)
+ Fixed a syntax error in Filesystem:  missing then symbol
+ Hopefully fixed a long-time SNMP annoyance.  When the membership layer shuts down (as it does in BSC),
+ LF Bug # 1617 - Miscellaneous RPM and source cleanups
+ LF Bug # 1644 - Pinging loopback in BasicSanityCheck fails with EPERM
+ LF Bug # 960 - rpm: first-time install fails
+ LF Bug 1513 - building RPM from the 2.0.8 tarball fails
+ LF Bug 1527 - inappropriate warnings about core files logged by heartbeat (SGI961667)
+ LF Bug 1534 - compiling/installation error on OpenBSD
+ LF Bug 1576: shutdown hangs under certain shells // LF Bug 1534: compiling/installation error on OpenBSD
+ LF Bug 1654 - HA_SBIN_DIR is not set on ocf scripts
+ LF Bug - compiling/installation error on OpenBSD
+ LF Bug 1522: Strt hb_counter on time_t
+ LF Bug # 1534 - compiling/installation error on OpenBSD
+ LF Bug # 1645 - Minimize arch-dependent differences, maintain compatibility -- More on this Bug...
+ LF Bug # 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1661 - crm_verify aborts checking and reoccurring crm_abort errors in logs
+ LF Bug # 1661 - move symlink creation out of specfile and into Makefile
+ LF Bug 1650: heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1645: Minimize arch-dependent differences, maintain compatibility
+ LF Bug 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug 1665 - fix references to moved scripts - courtesy of Tuomo Soini
+ LRM plugins: skip dot-files.
+ Made the stonith -h core dump go away - by fixing a variety of small things in STONITH.
+ Minor patch to stonith patch - to keep empty result from being seen as out of memory
+ Misc: Move a few shell functions to the only script that uses them
+ More file location tweaks - mostly GUI-related.
+ OCF: Detect and warn of use of deprecated 'ocf-shellfuncs' and 'ocf-returncodes'.
+ OCF: Fixed the check in have_binary. Handle checks for programs with --arguments
+ OCF: Provide the location of /sbin as used by some agents (HA_SBIN_DIR)
+ OCF: Remove unused variables
+ OSDL Bug 1606: okay for stonith plugins to have no parameters
+ PE: Add regression test for previous commit
+ PE: Aggregate the startup of fencing resources into a stonith_up pseudo-action
+ PE: Bug 1628 - Complain about invalid operation intervals
+ PE: Correct the CRM_CHECK comparision
+ PE: Dont log stopped orphaned resources
+ PE: Fix the handling of remove-after-stop=true - it was causing unnecessary restarts
+ PE: Fix two small memory leaks detected by Valgrind
+ PE: Fix up the tests now that compare_version() functions correctly (as of cs: 7d69ef94a258)
+ PE: Handle two new actions in text2task
+ PE: Include description for the remove-after-stop option
+ PE: Make sure ptest always does a POSIX sort
+ PE: Move the creation of stonith shutdown constraints to native_internal_constraints()
+ PE: NoRoleChange shouldn't always call PromoteRsc for master resources
+ PE: Potential use of NULL
+ PE: Regression: Allow M/S resources to be promoted based solely on rsc_location constraints
+ PE: STONITH Shutdown ordering
+ PE: Streamline STONITH ordering. Make sure 'all_stopped' depends on all STONITH ops.
+ PE: Update one more regression test output now that it has been verified as still correct
+ PE: Update testcases to include all_stopped (added in cs: 800c2fec24ee)
+ PE: Use master scores to determine which clones to start where
+ Put deBug in in support of Bug 1154: 2.0.4 BSC failure - select() returns with error
+ Put in a change to allow CTS to run.  There is a sort-of-bug (in BSC/CTS) underlying this that I'll have to file a bug on.
+ RA: Add some extra variables dug out from configure
+ RA: Bug #1630 IPaddr2 - Wrong arguments passed to send_arp (test was mistakenly written as an assignment)
+ RA: Convert a number of checks for required binaries
+ RA: Delay (v1) - Remove extra characters from call to ra_execocf
+ RA: Dummy: Just add a comment to make sure people copying from this
+ RA: Filesystem: Unify coding style to match rest of script.
+ RA: IPaddr2 - Remove bash-isms
+ RA: IPaddr2 - handle IP_CIP not being defined
+ RA: IPaddr: Fix a few trivial bugs in lvs_support pointed out by Michael Stiller.
+ RA: LSBDummy - Make sure the action is passed to ra_execocf
+ RA: MailTo: Remove spurious warning about monitor.
+ RA: Move all remaining autoconf variables into common files that are automatically included
+ RA: Move some helper files to their new names (.files dont show up as RAs)
+ RA: Revised handling of directory locations
+ RA: ServeRAID - remove commented out code
+ RA: Use consistent check for required binaries
+ RA: o2cb: Improve configuration stability.
+ RA: o2cb: Optimize redistribution of cluster.cnf.
+ RA: prefer the 'test' program rather than the builtin for some reason
+ RA: v1: IPaddr: Unconditionally enabling LVS support is a mistake.
+ TE: Log the node's uname instead of UUID for completed actions
+ TE: Set failcount to INFINITY for resources that fail to start or stop
+ Tools: Bug 1653 - Further changes to prevent use of NULL when no attribute is specified
+ Tools: Bug 1653 - Misc attrd/attrd_updater cleanups suggested by Keisuke MORI
+ Tools: Bug 1653 - attrd crashes when no attribute is specified
+ debian: Add new dot-ocf files to the heartbeat package
+ debian: Add the ldirectord OCF resource to the ldirectord package
+ debian: Debian bug #432441 will be closed on the next upload
+ debian: Don't create hb_gui symlink
+ GUI: update path for png images in haclient.py
+ ldirectord: Use globals for service check return values
+ ldirectord: Add OCF wrapper
+ ldirectord: Add Oracle check
+ ldirectord: Add external check
+ ldirectord: Add forwarding mechanism to real server ID
+ ldirectord: Add ld_service_to_port()
+ ldirectord: Call ld_emailalert_send() with correct arguments
+ ldirectord: Clean up execute logic in check_sql
+ ldirectord: Cosmetic spelling and grammar fixes
+ ldirectord: Document expire_quiescent_template
+ ldirectord: Document that checktimeout is for ping checks too
+ ldirectord: Don't access CALLBACK unless it is defined
+ ldirectord: Don't die if Net::FTP times out
+ ldirectord: Enhance ftp check debugging
+ ldirectord: Enhance logging in service_set
+ ldirectord: Fix bogus detection of combined check
+ ldirectord: Fix logic bug in _status_down
+ ldirectord: Handle $dbh-&gt;prepare() failure in check_sql()
+ ldirectord: List checktype and service in alpabetical order in the documentation
+ ldirectord: Make check_sql &lt; 80col wide
+ ldirectord: Make parsing of the output of ipvsadm more robust
+ ldirectord: Note negotiatetimeout in documentation of checkcount
+ ldirectord: Port of last resort for real server checks
+ ldirectord: Remove connecttimeout
+ ldirectord: Remove stale entries on reload
+ ldirectord: Remove trim down very wordy decripton of read_config
+ ldirectord: Set default negotiatetimeout to 30s
+ ldirectord: Status to stdout
+ ldirectord: Tidy up fallback
+ ldirectord: Use $dbh-&gt;errstr instead of $dbh-&gt;err when logging
+ ldirectord: Use an alarm for HTTPS timeouts
+ ldirectord: Use goto for error handling in check_sql
+ ldirectord: Use negotiatetimeout and connecttimeout as mutual defaults
+ ldirectord: Use negotiatetimeout for SIP, DNS and Radius checks
+ ldirectord: Use valid string in log message in check_connect()
+ ldirectord: document port behaviour of real servers
+ ldirectord: rearange parsing of service to make it &lt;= 80col (more often)
+ build: Move ldirector OCF resource into the ldirectord package
+ apache RA (LF 1656): include ServerRoot in relative paths.
+ cib: Fix detection of non-status changes
+ configure: Remove unneeded AC_PATH_PROGS checks
+ crmd: Bug 1575 - crmd cannot exit if lrmd is killed and there are pending ops
+ crmd: Bug 1624 - Fix the delete op for cancelled operations
+ crmd: Bug 1655 - crmd can't exit when the PE or TE is killed from underneath it
+ crmd: Only remap monitor operation status to LRM_OP_DONE under the correct conditions
+ log: avoid handing a null pointer as a '%s' variable
+ pingd: Hard code the name used for logging
+ re-enabled code to make symlinks for moved files.
+ remove is_stable() condition from drbd-outdate-peer daemon
+ shellfuncs: 's%:.:%%' should be 's%:.:%:%'; the '.' should be '\.'
+ stonith: external/riloe - new comment in the xml on how acpid may affect the performance (thanks to Guy Coates).
+ stonith: riloe - fix the xml info.
+ stonith: ibmrsa - fix the xml info.
+ stonith: ibmrsa - allow regular users to use it with 'stonith -n' and similar.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1183154400">- version 2.1.0-2
- Update the source tarball to revision e3c9306b9223
- Statistics:
    Changesets:	259
    Diff:		625 files changed, 13133 insertions(+), 73569^ deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/e3c9306b9223
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -rSTABLE-2.1.0:e3c9306b9223 | sort -f</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.1.0-1
- Update debian packaging files which drop the -2 package suffix
- Change the version number to the one used upstream</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.0.9-2
- Sync with the version supplied in SLES10
- Bugs fixed
+ OSDL #393 - Stonith: Update plugin from OpenHPI 2.2 to OpenHPI 2.6
+ OSDL #393 - Stonith: soft_reset is {true|1|false|0}, not {yes|no}
+ OSDL #393 - Stonith: Rename ibmbc to bladehpi
+ OSDL #393 - Stonith: Enable build of bladehpi plugin if OpenHPI present
+ OSDL #761 - RA: Remove history from heartbeat init script.
+ OSDL #1073 - Tools: Add clone support to crm_resource
+ OSDL #1138 - Long delay before CCM propagates membership event
+ OSDL #1292 - Stonith: Support xSeries STONITH (IBM: 06-R212-175)
+ OSDL #1339 - IPC code limits possible cluster size
+ OSDL #1374 - Tools: Check for sane host names when migrating
+ OSDL #1428 - Stonith: Mixing definitions and code
+ OSDL #1430 - CIB: Allow automatic assignment of object IDs
+ OSDL #1451 - Tools: Allow resource meta attributes to be set with crm_admin
+ OSDL #1457 - RA: Resolve unknown command ha_log
+ OSDL #1462 - Tools: crm_migrate should allow creating temporary rules
+ OSDL #1465 - crmd: crmd gets stuck if shutdown while starting up
+ OSDL #1472 - CIB: Use-after-free in find_attr_details()
+ OSDL #1480 - CIB: Create synchronous r/w connections correctly
+ OSDL #1482 - Stonith: stonith command needs a repeat option to make it a better test tool
+ OSDL #1484 - PE: Repair on_fail=stop.  Patch courtesy of YAMAMOTO Takashi.
+ OSDL #1486 - PE: Fix for potential NULL dereference
+ OSDL #1488 - Stonith: Fix passing password to HMC
+ OSDL #1489 - Stonith: Fix HMC errors in hostlist
+ OSDL #1492 - PE: Set common resource attributes before calling the custom unpack function
+ OSDL #1494 - PE: Add node-&gt;score to the clone stability function
+ OSDL #1499 - PE: Perform #uname comparisions without case
+ OSDL #1500 - Tools: Calls to attrd_updater with dampen=0 not processed correctly
+ OSDL #1505 - Findif parsing is all screwed up unless all the parameters are passed, not defaulted.
+ OSDL #1506 - Stonith: Add optional ibmhmc plugin parameters to meta-data
+ OSDL #1507 - Stonith: Allow "stonith -h" to display help for specific device
+ OSDL #1511 - LRM: running two actions for the same resource parallel
+ OSDL #1514 - CRM: Empty values in cib.xml loses other RA parameters
+ OSDL #1523 - Stonith: bladehpi performance enhancements
+ OSDL #1528 - RA: IPaddr2 gives a spurious warning on stop (SGI961736)
+ OSDL #1532 - crmd: Single node cluster shutdown
+ OSDL #1554 - PE: Probes should not have priority INFINITY
+ OSDL #1534 - LRM: Compiliation error on OpenBSD
+ OSDL #1544 - Comms: mixed versions of 2.x and 1.x not working
+ OSDL #1545 - Stonith: stonithd signoff fixesO
+ OSDL #1548 - logging: Ensure logs are logged using the correct component name
+ OSDL #1550 - Stonith: Suicide plugin returns hostlist containing itself
+ OSDL #1553 - Stonith: suicide plugin lacking ST_DEVICENAME
+ OSDL #1554 - crmd: Wait for the membership to stabilize before starting transitions to prevent unconfirmed actions
+ Debian #420206 - RA: Bashisms in IPaddr2
+ Novell #239075 - Admin: crm_master uses the same IDs for permanent and transient attributes
+ Novell #239079 - PE: Ensure action priority is set correctly to ensure notifcations are not lost
+ Novell #239082 - PE: Order promotions after _all_ demotions have completed
+ Novell #239086 - PE: Stable Master placement
+ Novell #244444 - crmd: Free'ing g_alloc() data with cl_free()
+ Novell #246681 - PE: Teach NoRoleChange() how to migrate resource's in the master role
+ Novell #250207 - Split-brain caused by non-identical ping-node configuration and auto-join
+ Novell #250273 - RA: Provide an RA for managing evmsd as a resource
+ Novell #250625 - RA: Xen: Fix status function for newer Xen versions
+ Novell #251689 - PE: Avoid needlessly restarting changed monitor operations for stopping resources
+ Novell #252693 - PE: Enable migration in more scenarios
+ Novell #252693 - PE: Teach the PE how to migrate resources in a starting stack
+ Novell #266551 - Stonith: getconfignames returned hostname instead of hostlist
+ Novell #266551 - doc: Bring the stonith man page up-to-date
- Build Improvements
+ Add explanatory comment for configure kludge
+ Add lha_internal to c-files that dont include it
+ Allow debian packages to also be built directly from Hg archives
+ Always check for the presence of PAM an TLS headers
+ Configure switch to easily enable Valgrind'ing of the CRM
+ Dont install crm-related man pages when --disable-crm is used
+ dopd doesnt build without the crm, disable it if the crm is disabled
+ Fix typo in configure.in
+ Header-file related cleanup
+ Include the exact version being built even when building an archived tree
+ Make supplying a Valgrind suppression file simpler
+ Misc changes to allow building with crm disabled
+ Not all platforms need -lpam
+ Remove redundant and useless items from the build
+ removed unused library dependancies
+ Use existing accounts when building on OSX
+ debian: correct the location of stonith headers in *.files
+ debian: reflect the new header locations in .files
+ debian: sort out a kink in the configure vs. bootstrap logic
+ debian: Packaging updates for 2.0.8-1 release
+ debian: Add heartbeat-2-gui package control files to Makefile
+ Improved grammar in gui package description
+ Improve portability across versions of 'gcc'.
+ Allow data size to be specified
+ Ensure 'awk' is found in runtime environment
+ Use centrally determined GNUTLS cflags and libs
+ Replace multiple derivations (poor) of locations with direct derivation from configure
+ configure: Add closing information to user about '/etc/passwd' and 'make install'
+ Remove an unnecessary 'include' that broke building on some OSes.  It continues to build OK on various OSes.
+ Bourne shell 'test' does not support '-e' flag.  Using '-r' instead.
+ libgnutls: if no 'libgnutls-config', try 'AC_CHECK_LIB(...)'
+ Determine GNUTLS libs centrally in 'configure.in' rather than in individual Makefiles
+ Correct omission of &lt;lha_internal.h&gt;
+ ipctransient tests: Add some flexibility; rationalise some duplicate code
+ ConfigureMe: make usage info a little clearer
+ Add some defaults to configure.in to reduce buildrequires.
+ Remove a bunch of dead code (Perl/SWIG bindings).
+ configure: Check for more pre-requisites of the mgmt/quorum components.
+ Fix use of a future dates in the changelog
- CRM Library Enhancements and Fixes
+ Fix xml parser bug.
+ Allow retrieval of default config values without a hashtable
+ Changes to fake transition key generation
+ Check the return code from fflush() when writing xml files - AnÃÂ­bal Monsalve Salazar
+ Comprehensive review of error recovery logic for potentially failed calls to fopen()
+ Correctly handle syslog facility == 0
+ Delete dead code, make empty_uuid_cache() safe with NULLs
+ Dont call fflush() or flclose() if the output stream was NULL
+ Ensure the normalized result of (add|subtract)_time is updated before returning
+ Fix a use-after-free in parse_time_duration()
+ Fix replace_xml_child() when neither child nor update have an id
+ Fixes for Coverty issues: 52, 55-58, 61-66, 68-69, 71-73 in run 240
+ Gracefully fail when the target XML file is not writable
+ handle NULL inputs to xml_has_children() gracefully
+ Make the use of valgrind a run-time option
+ Memory leak fixes
+ Prevent a number of potential use-after-free's by zero'ing out free'd loop variables
+ Refactor date printing to allow date -&gt; string conversion
+ Remove noisy and inaccurate memory logging
+ Repair the status_printw macro now that we do logging slightly differently
+ size_t is always positive... broke error handling in XML parser.
+ Use-of-NULL in validate_with_dtd() error path... Only clean up what we created
+ When malloc tracking is enabled, pass through the person that called crm_strdup
- CLI Enhancements and Fixes
+ Uninitialized string in heartbeat/findif.c
+ Allow cluster config options to be queried/modified/deleted.  Broken in cs: 13c450735ba7
+ Allow crm_verify to be used with a named DTD file
+ Auto populate the provider for OCF resources if one is not provided
+ crm_primitive.py: Include all node preferences in the one rsc_location constraint
+ Include rsc_location details in the resource listing
+ map cib_NOTEXISTS to 0 for crm_failcount
+ Use the current node uname by default when invoked as crm_standby
+ Add two new views to crm_mon.  Patch by Christofer Edvardsen.
+ Centrally define CIB call options so that -f always works in crm_resource
+ Compile when malloc checking is off, fix last mem leak
+ crm_verify - dont complain about missing status section
+ Dont do ID checks on cibadmin diff's, duplicates are expected
+ Fix a number of memory leaks in attrd
+ Help text and input sanity checks for ocf-tester
+ Include class/type/provider in resource delete commands
+ Place the lifetime rule in the correct location
+ Set a slightly higher default action timeout
+ Show help text for crm_uuid
+ Teach crm_uuid to write ascii-form UUIDs to hb_uuid
+ Terminate the attrd process if heartbeat exits from under it
+ lrmadmin: fix the provider list function: first free data and then the list member.
+ crm_attribute/master/standby: Always default the uname to the current machine
- CIB Enhancements and Fixes
+ Allow cluster options to be created when the default set is not present
+ Allow the remote connection code to be used with or without PAM/TLS
+ Clean up memory at exit
+ Fix a number of memory leaks
+ Compile when malloc tracking is enabled
+ Don't increase the version number if nothing changed
+ Dont examine the group ownership of cib.xml since we set perms to rw-------
+ Exit the writer process correctly so we'll continue to do write outs
+ Prevent node_uuid from having any effect for &lt;crm_config&gt; changes
+ Remove dead code
+ Support processing of commands sent via remote TLS connections.
  See http://www.linux-ha.org/v2/cib_remote for usage details
+ The decision to log failed connection attempts should be left to the client
+ Warn at startup if important version information is missing
- CRMD Enhancements and Fixes
+ ALL completed actions should be removed from the shutdown_list
+ Correctly parse the shutdown timer option
+ Create the restart digest from an object with the same name that the PE uses
+ Delete the HA connection only at exit
+ Enable Valrind'ing of the PE and TE
+ Indicate the LRM error code if an operation cannot be cancelled
+ No need to create the resource if we're trying to delete it
+ Free memory at shutdown
+ Resolve a number of memory leaks
+ Sort out the whole client deletion business.  Also delete the resources hash at shutdown.
+ Improved Logging
+ Remove dead code
- Policy Engine Enhancements and Fixes
+ Always print the resource's node scores
+ Avoid a potential NULL dereference in an error path
+ Clean up generation of and contents of dot-files
+ Create an implicit "cant run here" constraint if an action returns "not installed"
+ Don't start resources until we can verify they're not still running
+ Dont waste time checking action definitions on nodes that wont be running resources
+ Fix a use-after-free of {key} when the monitor op already existed
+ Fix anti-colocation when the RHS is not running
+ Fix gcc warning - dont ignore the result of mktemp()
+ Fix group recovery when a group it depends on is restarted
+ Have group-group recovery work for the right reasons
+ Memory leak fixes
+ Make clones ever so slightly sticky by default
+ Make internal group ordering of bullet-proof
+ Make sure things that shouldn't be true are never true (added asserts)
+ Move DeleteRsc to a more appropriate location
+ Move Ncurses related defines to a more optimal location and make sure its included by crm_mon
+ Not all pseudo operations should be included in the graph
+ Only show elements of the graph in the dot-file by default
+ Prevent a potential NULL deference in clone allocation
+ Provide useful feedback when a cloned resource is found active somewhere it shouldn't be
+ Re-use StartRsc/StopRsc for consistancy
+ Rename elements of the pe_ordering enum for clarity
+ Rename migration variables for clarity
+ Updated regression tests with the revised consistant format
+ Utility functions for finding node's by uuid/uname
- Transitioner Enhancements and Fixes
+ Clean up memory on exit
+ Detect changes to attributes of the cib object
+ Only a limited number of cib attributes warrent aborting the transition
+ Unpack graph actions correctly
+ Improved logging
+ Removed dead code
- Misc
+ Allow heartbeat to easily run with standard libc malloc-and-friends
+ Allow the malloc tracking code to compile on systems where size_t != int
+ Allow writing to syslog to be turned off
+ Better information about valgrind enablement
+ Sanitize the "crm xyz" option processing.  Dont run valgrind if not using libc malloc
+ The DTD used "integer" instead of "number" (which was used by the code)
+ Stonith: Update the rilo RA with enhacements from Tijl Van den broeck and Guy Coates
+ Moved drbd peer outdater into contrib/
+ clplumbing: We _never_ want to trim memory, use -1 instead of 4*size.
+ clplumbing: Coverity 53: Potential NULL pointer dereference.
+ mgmtd: Certain versions of SWIG do not convert the Python "None" to a
+ initscript: set correct Provides: and Should-Start: entries
+ Stonithd: Relaxed a stonithd timeout so that start will succeed if it completes in a minute
+ Dont log dispatch warnings unless they exceed 30ms instead of 10ms
- LRM Enhancements and Fixes
+ Inform clients when an RA is not installed on the machine
+ Expanded regression testing
+ convert the LSB meta-data to XML.
- Resource Agent Enhancements and Fixes
+ -eq is for integer comparisions
+ Avoid concatination with None in riloe stonith agent
+ Filesystem - When checking ocfs2 is cloned, look for variables that are always set
+ Fix up the Dummy metadata
+ Fix variable initialization in pgsql
+ LVS support should always be enabled for the heartbeat IPaddr wrapper
+ Modify the Xen RA to use the new variable names
+ Return after performing a stop action in the Filesystem agent
+ Use configured scratch locations in ibmrsa stonith agent
+ bladehpi readme update
+ Dummy, mysql and drbd - fix meta-data to conform to XML.
+ Convert SAP* from dos
+ Allow ManageRAID to show meta-data at all times.
+ Enhance Pgsql ocf resource to handle multiple instances
+ Xen: Add a little reminder to the code.
+ drbd: Fix some issues and work-arounds for drbdadm bugs.
+ Filesystem: Prune duplicates from active and starting list.
+ Filesystem: Fix metadata require/unique settings.
+ Xen: Fix status function for newer Xen versions (Novell 250625)
+ Filesystem: Increase default suggested timeouts.
+ drbd: When using the nodename-override, drbdadm likes to print an
+ Xen: Swap migrate_to and _from to match PE.
+ Filesystem: Harmless typo corrected.
+ LVM: Add some hints for future todo items.
+ EvmsSCC: More fixes from Jo (Novell 199730)
+ Filesystem: Move ocfs2_init out of the generic stop path (Novell 250603).
+ pgsql: Several enhancements to by Keisuke MORI
+ drbd: Make parsing of drbdadm output more robust.
+ drbd: If drbd is stopped, demote should fail with NOT_RUNNING.
+ Xen: Advertise migrate_from and _to actions. Mention migrate in meta-data.
+ drbd: Add support for overriding the hostname drbd uses based on the clone
+ Filesystem: Whitespace cleanup and minor fixes ("" for -z arguments, using -ne when
+ IPsrcaddr: Added count of how many inet lines to use for the diff -B
+ external/riloe misspelled RI_LOGIN variable name.
- ldirectord Enhancements and Fixes
+ Use $arrayOfDNs[0] instead of @arrayOfDNs[0] to get rid of the following
+ Remove duplicate $recstr
+ Change the code around a bit to avoid a warning about code following exec
+ Dont use SIGENT, as it doesn't seem to exist.
+ 92d4e521db53 Handle $line more carefully
+ Make sure that frequency is intialised before it is used
+ Use $$ instead of (the uninitialised) $pid
+ Remove useless calls to lc()
+ Make sure that DEBUG is initialised
+ Use implicit variables in read_config()
+ Use the -w flag to perl to find warnings/errors
+ Make ldirectord's version valid
+ If weight is not supplied, set it to 1
+ Fix broken reload command
- Testing Improvements
+ Account for a small timing window in the ResourceRecover test
+ Explain why we're aborting when nodes aren't found in DNS
+ Ignore ResourceRecover testing artifacts
+ Indicate debug log messages
+ Improved Logging
+ Remove resource tied to the DC - the #is_dc comparision is irrelevant
+ Rewrite the LSBDummy RA
+ Rewrite the ResourceRecover to use asynchronous failures
+ BSC: (1) test IPC before its dependencies; (2) signal-handling: improve and catch some more.
+ ocf-tester: Continue if validate-all succeeds.
+ ocf-tester: Exit with appropriate exit code for success or failure.
+ ocf-tester: Various integers were compared as strings.
+ BSC: Test Dummy, IPaddr, IPaddr2, Filesystem RAs.
+ BSC: Skip IPaddr2 test if ip not installed.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1173823200">- version 2.0.9-1
- New Upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1170194400">- version 2.0.8-1
- New Upstream
+ Allow colocation based on node attributes other than #id
+ SAPDatabase and SAPInstance resource agents added.
+ Core/CRM: Improvements to the memory allocation, message, and string
  handling libraries result in an overall speed-up of 65%.
+ CRM: Fix ISO date handling for Jan 01 of any year.
+ CRM: Only update the voted hashtable with no-votes for the current
  election.
+ RA: IPaddr: Support netmask both in CIDR and in dotted-quad notation.
+ logd: Fix trailing random byte in log messages (OSDL 1268).
+ heartbeat:  Work around a glibc/times() bug to prevent failures every
  497 days on 32-bit Linux (OSDL 1407).
+ heartbeat: Retransmits were requested more often than they'd be
  honored (OSDL 1455).
+ CTS/PE: Introduce CRM option "startup_fencing" to disable fencing of
  unseen nodes, because CTS can't handle this.
+ PE: Split-off "network-delay" option from global_timeout to separate
  network delays from action timeouts.
+ PE/CRM: Binaries now support being called with "metadata" command to
  document the complete list of options in the CIB.
+ PE: DTD: Include start_delay as a property of operation objects.
+ PE: Fix implementation of date_spec when no range is specified.
+ PE: Enforce clone_node_max for already running resources.
+ PE: Clones were not being stopped on node shutdown.
+ PE: Allow resource colocation based on node attributes other than #id
  (node_attribute option added to rsc_colocation constraint).
+ PE: Improved handling when timeout &lt; start_delay (OSDL 1421).
+ PE: Pre-notifications for promote occured before start was completed
  (OSDL 1447).
+ PE: Allow any two pairs of actions to be specified for rsc_order (OSDL
  1452).
+ PE: Handle asymmetric clusters where RAs are not installed on all
  nodes.
+ PE: Allow resource stickiness and failure stickiness to change based
  on node attributes.
+ CIB: Fix update_attr() causes attrd to hang at shutdown when there is
  no DC (OSDL 1432).
+ CIB: Corrupted config file prevents heartbeat restart (OSDL 1385).
+ CIB: Startup processing improvements; DTD validation will be
  automatically activated if the CIB on-disk validates.
+ TE: Fix memory leak.
+ TE: Failcount wasn't being updated in all cases.
+ TE: never update the CIB with unconfirmed stop actions (OSDL 1435).
+ CTS/RA: Replace OCFMSDummy with Stateful RA.
+ CCM: Centralize quorum calculation on the transition leader.
+ CCM: Support split-site and external quorum servers.
+ CRM: Ignore status update for non-members (ie, ping nodes).
+ LRM: Don't postpone postponed resources.
+ LRM: Fix restart in case an lrmd is already running (OSDL 1333).
+ LRM: Fix overflow in RA output handling (OSDL 1433).
+ mgmtd: Robustness and memory leak fixes.
+ mgmtd: make the port used configurable (OSDL 1390).
+ haresources2cib.py: Improve v1 to v2 conversion tool (OSDL 1415).
+ GUI: ping nodes appear as failed in gui (OSDL 1394).
+ GUI: Reduce duplicates in RA list by only showing the OCF one if both
  ocf and hb RA exist) (OSDL 1338).
+ GUI: Add new resource to currently selected group (OSDL 1414).
+ GUI: support all attributes of operations (OSDL 1372).
+ GUI: Create first resource along with a new group; delete group when
  last resource is removed (OSDL 1287).
+ GUI: Set defaults for clones and m/s RAs (OSDL 1352).
+ GUI: Use meta-data defaults when creating actions (OSDL 1351).
+ GUI: GUI: start all sub resources when we start a group or a clone
  (OSDL 1449).
+ GUI: support ordered==false or non-collocated==false groups (OSDL
  1257).
+ stonithd: Fix memory leak.
+ stonithd: Remove reliance on farside_pid (OSDL 1412).
+ stonith external/riloe: Make the login name and iLo device address
  configurable.
+ crm_resource: Add manpage.
+ RA: PureFTPd, mysql, ManageVE (to manage an OpenVZ container),
  ManageRAID, WAS6 (Websphere 6) added.
+ RA: Include SAPInstance and SAPDatabase (FATE 2172).
+ RA: IPaddr cleanup to avoid race conditions in the script. Report
  status failure when an IPaddr is active on a different interface but
  allow it to be stopped.
+ RA: IPaddr2 fixes for loopback bound addresses.
+ RA: Filesystem reported wrong status/monitor results for OCFS2 in some
  circumstances (Novell 187080).
+ RA: Improve heartbeat v1 wrappers.
+ RA: Fix db2 monitor operation.
+ RA: ldirectord: Make the emailalert and emailalertfreq options global
  as well as non-global, make checkcount global as well as per-virtual,
  add radius check, improvements to documentation.
+ RA: pgsql: Make server logfile configurable and implement
  validate-all. New parameter ctl_opt added to pgsql to support
  additional options for pg_ctl.
+ CRM: First beginnings of a cluster-wide shell (FATE ...)
+ BEAM / Coverity induced fixes.
+ Minor compatibility fixes (OSDL 1405).
+ Logging improvements all over the place.
+ Extended support for master-slave resources (FATE 300723).
+ OCF RA API compliance checker (FATE 300737).
+ Support weak and uni-directional collocation constraints (FATE
  300792).
+ Many bugfixes.
- errata: CVE-2006-3121 was incorrectly refered to as CVE-2006-3821 in
  the changelog for 2.0.6-2 and 2.0.7-1
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-2-global.patch (introduced in 2.0.6-2)
- Remove alternate dependancy on netkit-ping as it is being removed
  from Debian</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1164924000">- version 2.0.7-2
- Add dependancy and build dependancy on psmisc for fuser
  Thanks to Hans-Joachim Baader
- Acknowldge NMU by Roger Leigh</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155592800">- version 2.0.7-1
- New Upstream
 - Remote Denial of Service attack (#195068, CVE-2006-3121).
 - Bugfixes to the CRM, the LRM and the GUI.
 - GUI failed to connect to and retrieve data from the cluster (#198747).
 - Improved log messages.
 - ptest can now read compressed XML directly. Do not include optional
   actions and dependancies in ptest output by default.
 - crm_resource will now warn and demand exact specification when trying
   to modify an attribute while several sets are present.
 - lrmd now limits itself to a maximum of 4 child processes, to avoid
   overloading the node and causing too long delays.
 - pengine: Processing of pending probes; should not be treated as if the
   resource is running or in a known state.
 - target_role now is only taken into account for managed resources.
 - cib: Detect more cases where the nodes section needs to be refreshed.
 - More accurately determine node status. (OSDL 1369)
 - Filter out stop requests that would require a resource to be added.
   (OSDL 1369)
 - Send filtered resource "stops" as successes as to not block waiting
   for filtered actions.
 - By default pass the TE graph via IPC until its too large for IPC to
   deal with, only then fall back to passing via the disk.
 - Stopping of stonith resources can never require stonith, even if the
   node its running on failed; prevent graph loop. (OSDL 1376)
 - STONITH events need to inputs to start events (not stops), to avoid
   graph loop in combination with "stop before" dependencies (ie,
   groups).
 - crmd: Dont stall the FSA if we try to invoke the TE after we've
   stopped it.
 - Always unpack the correct part of a diff operation; diffs should now
   apply in more cases, reducing the need for full refreshs.
 - Correctly observe --disable-snmp-subagent during build.
 - In some states the membership is invalid and shouldn't be referenced.
   (OSDL 1377)
 - Fix a use-before-null-check issue in lrmd. (Coverity #48)
 - OCF Resource Agents outside the default path were incorrectly found to
   be not executable.
 - ccm: hostcache and delnodecache files should not be authoritative if
   autojoin is disabled. (OSDL 1226)
 - With autojoin, llm_get_nodecount() can't return the real max nodes
   anymore, this may cause memory corruption. (OSDL 1382)
 - Fix a memory corruption in membership layer, more frequently observed
   with larger (&gt;5) clusters.
 - Change the default api-auth for pingd to uid=root
 - Dummy RA now OCF compliant.
 - Fix pingd RA metadata to be XML compliant.
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-1-quiet.patch  (introduced in 2.0.6-2)
  - ldirectord-1.141-readline_workaround.patch (introduced in 2.0.6-2)
  - CVE-2006-3821.patch                        (introduced in 2.0.6-2)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155074400">- version 2.0.6-2
- ldirectord-1.141-emailalert-1-quiet.patch
  Don't send email alerts if the alert address is not configured
- ldirectord-1.141-emailalert-2-global.patch
  Allow emailalert and emailalertfreq directives to be global
  as well as per-virtual service
- ldirectord-1.141-readline_workaround.patch
  readline doesn't seem to return lines after Net::FTP
  has been called, so split them up by hand.
- Added recommends iptables to heartbeat, as it is needed
  for the portblock resource to function correctly
- Added /var/lib/heartbeat/pengine directory
- Replace 02-chown-check.patch with chown-check-2.patch
  - use the environement variable FAKED_MODE instead of FAKEROOTKEY to check
    if code is runing in fakeroot. At some stage around fakeroot 1.5.10
    FAKEROOTKEY disapeared. Ran autoconf manually to effect this change
    after repatching.
  - Updated 02-chown-check.patch: fix typos in comment
- CVE-2006-3821.patch
  Fix remote denial of causes caused by insufficient bounds checking
  on data read from the network.
  CVE-2006-3821
- Python transition - http://wiki.debian.org/DebianPython/NewPolicy
  - Update build dependancy on debhelper from (&gt;= 4.0.0) to (&gt;= 5.0.37.2)
  - Add dh_python call to debian/rules
  - created debian/pycompat with contents of "2"
  - heartebeat: deplaced depenancy on python with one on ${python:Depends}
  - Added XB-Python-Version: ${python:Versions} to each package
  - Replace build dependancy on python2.3-dev with one on python-dev
  - Use python-central
    + Add build depends on python-central (&gt;= 0.5)
    + Add dh_pycentral call right before dh_python in debian/rules
    + Add XS-Python-Version: current in the source stanza of debian/control</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1152136800">- version 2.0.5-8
- ldirectord-2: Add missing dependancy on libmailtools-perl
                (Mail::Send)
- ldirectord-2: Add missing dependancy on libnet-perl
                (Net::SMTP, Net::FTP, Net::POP3)
- ldirectord-2: Remove unneccesary dependancy on adduser
- Automake transition: http://wiki.debian.org/AutomakeTransition
  - Remove unneccesary build-depends on automake1.9 | automaken
  - Remove unneccesary build-conflicts on automake1.4</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1151618400">- version 2.0.5-7
- Don't run deluser and delgroup in postrm
  - These commands may not be available at this time
  - If there are any files left that belong to this user or group
    then they will be left unowned and get inhereited by the
    next user that comes along that happens to have hacluster's
    old userid or the old haclient groupid respectively.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-5
- Reverse the change made in 2.0.5-4
  It turns out that in heartbeat (as opposed to heartbeat)
  is a script which calls a binary that is located in
  /usr/lib/ocf/resource.d/heartbeat/</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-4
- Move IPv6addr from /etc/ha.d/resource.d/ into /usr/lib/heartbeat,
  and then symlink that back into /etc/ha.d/resource.d/ as binaries
  are not allowed in /etc</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1149544800">- version 2.0.5-3
- Fix libgnutls binary dependancy
  - Build-Depends on libgnutls-dev instead of libgnutls13-dev
  - Recompile against libgnutls13 in place of libgnutls11
  -</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1148076000">- version 2.0.5-2
- Make use of invoke-rc.d
- Update from standards versoin from 3.6.2 to 3.7.2</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1147212000">- version 2.0.5-1
- New Upstream
- Removed build depenancy on openssl-devel,
  as heartbeat no longer uses openssl directly.
  (Libraries that heartbeat depends on may in turn
   depend on openssl creating an indirect depenancy
   or build-dependancy).</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1141855200">- version 2.0.4-1
- New Upstream
- Don't try and stop heartbeat in preinst on the first install</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139954400">- version 2.0.3-2
- Add build dependancy on libncurses-dev to allow crm_mon to work
  Thanks to Guy Coates
- Move hacluster user and haclient group creation (don't ask me why the
  user and group names are different) from preinst to postinst.
  Once upon a time there might have been a need for it in preinst,
  but the current packaging changes files to have the hacluster user
  and haclient group as neccessary in the postinst. So there is
  no need to create them before postinst.
  This is a better fix to #352158, and the pre-depends on adduser
  has been changed to a depends accordingly.
- Stop heartbeat in preinst</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139695200">- version 2.0.3-1
- New Upstream
- Make sure adduser is passed the --system flag
- Slightly Enhanced package descriptions
- Add build dependancy on swig
- As PYTHON_PATH has been added to configure.in it seems that autoconf1.4
  can no longer build this tree.  Currently autoconf is provided by
  autoconf1.4, and autoconfn is a virtual package provided by autoconf1.7,
  1.8 and 1.9.  Accordingly, replace the autoconf build dependancy with
  autoconf1.9 | autoconfn.  And add a build conflict on autoconf1.4. This
  way the autoconf command should be autoconf1.7, 1.8 or 1.9, but not 1.4
  as was previously the case.
- Don't apply 00-ssh_scp_path.patch as it should no longer be needed,
  instead add a build dependancy on openssh-client.
  Also removed call to relevant configure options.
- Removed configure option that no longer exists
  --enable-checkpointd
- Removed configure options that are now on by default
  --enable-crm --enable-lrm
- Add build dependancy on libgnutls11-dev, as 1.0 probably doesn't
  compile as _t types don't exist.
  http://lists.gnu.org/archive/html/help-gnutls/2004-08/msg00001.html
- Fix insonsistency between hb_stanby(1) man page, an the wiki
- Make /usr/bin/cl_status setgid
- Make sure that /var/run/heartbeat/{ccm,crm} exist on install
  else postinst, and thus the install will abort.
- Fix inconsistency between hb_standb(1) man page and wiki
- Add Pre-Depends on adduser
- Add management tool
  ./confgure --enable-mgmt
  Build-Depends: python2.3-dev, libpam0g-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1129759200">- version 2.0.2-5
- Change libcurl3-dev dependancy to libcurl3-openssl-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1128031200">- version 2.0.2-4
- Include /var/lib/heartbeat/ccm and /var/run/heartbeat/crm</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-3
- Get rid of bogus touching of config.status and friends in clean target,
  which if run as root causes build failures.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-2
- Add build dependancy on libltdl3-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127772000">- version 2.0.2-1
- New upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127599200">- version 2.0.1-4
- Add /var/run/heartbeat directory to package
  http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=900</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-3
- Restrurctured  provides, conflicts and replaces
- Made heartbeat-dev depend on heartbeat, not heartbeat</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-2
- Uptream initally made the wrong tar ball avaliable for
  2.0.1 and this was used to build 2.0.1-1.
  I have asked 2.0.1-1 not to be accepted into the Debian Archive
  for this reason. 2.0.1-2 uses the updated, correct tarball from
  upstream.
- Note that this package has a binary dependancy on libssl
  only because of linking against libsnmp9 (5.2.1.2-3)
- Add build dependancy on libsensors-dev (for libsnmp9)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1126821600">- version 2.0.1-1
- New upstream
- Add /var/lib/heartbeat/cores/root, /var/lib/heartbeat/cores/hacluster
  and /var/lib/heartbeat/cores/nobody
- Remove usr/lib/stonith/plugins/stonith2/riloe.so, its
  no longer in the tree
- Enable snmp_agent
- Added new libplumbgpl
- Added new ha_logd.cf
- Added new iso8601 executable
- Temporarly remove the drac3 module as GPL code that links
  against OpenSSL is not acceptable to Debian.
  - http://lists.community.tummy.com/pipermail/linux-ha-dev/2005-August/011266.html
  - http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=853
- Update build dependncy from libsnmp5-dev to libsnmp9-dev
- Make configure chown test fakeroot aware to avoid build hang
- Fix syntax error in db OCF resource
- Make crm/test/helper.sh have #! /bin/bash
- Make resources/OCF/ocf-shellfuncs.in have #! /bin/bash
- Update FSF address
- Zero config.status, libltdl/config.log and libltdl/config.status on clean</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1123106400">- version 2.0.0-2
- Add /var/lib/heartbeat/ccm and /var/lib/heartbeat/cores</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1122760800">- version 2.0.0-1
- New upstream
- Added dependancy on libnet-dns-perl to ldirectord
- Added --enable-checkpointd to configure arguments
- Added --disable-snmp-subagent to configure arguments
- Added --disable-swig to configure arguments
- Add build dependancy on uuid-dev
- Readranged packages to allow heartbeat 1.2.X to exist in debian
  and heartebat 2.X to be heartbeat until heartbeat gets
  a bit more testing in the wild. Also consoldidated binary
  packages into heartbeat, and development packages into
  heartbeat-dev, ldirectord is still in its own package,
  ldirectord2, as it drags in a lot of dependancies that
  no other part of the system uses.</changelog></package>
<package pkgid="f9dd772e2a5dfd8faab09403faba6484185b8bf1" name="heartbeat-ldirectord" arch="i386"><version epoch="0" ver="2.99.2" rel="6.1.sl5.1"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt;" date="1370469600">- fixed up libnet and libnet-devel dependencies</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1222725600">- version 2.99.1-1
- Update source tarball to revision: d8710f41b9cb
- Includes many fixes to init scripts.
- Add sbd for shared-storage fencing.</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1219356000">- version 2.99.0-1
- Update source tarball to revision: f23531dd23ad</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1207087200">- version 2.1.3-18
- Added two small patches for Bug LF-1833: Do not overwrite op_status depending on op_rc</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1200348000">- version 2.1.3-1
- Update source tarball to revision: 9cdeae333990
- Statistics:
    Changesets:      153
    Diff:            141 files changed, 12279 insertions(+), 3103 deletions(-)
- This is the first release now that the CRM has becme its own project called
  Pacemaker and no longer included with Heartbeat.
- Without the CRM present, the following components are also no longer able to
  be included with Heartbeat (as they require CRM libraries) and are instead
  provided as part of pacemaker or the new pacemaker-pygui project.
   cim
   snmp
   mgmtd
   pygui
   tsa_subagent
- RPM-based distributions also have a new package layout
   heartbeat-resources ::= resource agents
   heartbeat-common    ::= components that are useful regardless of which stack is being used
   heartbeat           ::= components that are specific to the Heartbeat stack
- Changes since obs-2.1.2-24
+ apache RA: remove children in case the top process didn't
+ apcsmart: make message more descriptive
+ build (LF 1803): add -fgnu89-inline to CFLAGS if gcc version is &gt;=4.1.3 and &lt;4.3
+ by request from Andrew - Modified the external/ssh plugin to have a livedangerously flag
+ ccm (LF 1806): restart all instead of exiting (low impact)
+ Changed a test from causing a reboot to not triggering a reboot - because it doesn't seem to any more
+ Changed HIGHLY to STRONGLY in how strongly we recommend STONITH
+ Corrected a warning found on FC8 in the cl_reboot code
+ debian: Add dependancy on libpam-runtime (&gt;= 0.76-14)
+ Debian: add libxml2-utils as a dependancy, because we need xmllint for the BSC
+ Debian: add the new ibmrsa-telnet stonith plugin
+ debian: clean python bytecode
+ debian: clean up stale heartbeat-2 files
+ debian: don't install bytecompiled python modules
+ debian: patches need to be distributed
+ debian: remove chown patch
+ debian: Update standards version from 3.7.2 to 3.7.3
+ debian: update the name of the series file to reflect the new release
+ docs/packaging: reshuffle hb_report documentation and include the html version
+ dopd: don't cl_free variables on local stack
+ dopd: don't hardcode path of drbdadm; it has to be in the PATH, though.
+ dopd: fix potential segfault due to leakage of invalid/freed pointer
+ dopd: make it work with multiple concurrent outdate requests
+ external ipmi plugin caused error messages when getting metadata on machine w/o ipmitool installed.  This somewhat messed up BasicSanityCheck.
+ Filesystem: Make mount point required for the GUI (Hideo Yamauchi)
+ Fix memory leak in external plugin handling
+ fixes for fedora: system(3) function return value cannot be ignored. Also added a missing RPM build dependency.
+ hb_report: add quotes around args to test -f
+ hb_report: don't surprise user by reading the files from the current directory
+ hb_report: include hostcache
+ hb_report: replace arch with uname -m
+ hg: from last changes to recover from media errors, fixed a stupid typo with a reversed boolean condition.
+ hg: LF bug 1794: ComponentFail tests failing
+ hg: Makefile for external stonith commands was missing new stonith plugin in the extra_dist section
+ High: Heartbeat: Include an option to start the CRM in respawn mode
+ init: add should-start/stop $remote_fs to init script
+ init: should-start/stop $remote_fs to init script
+ ipc (LF 1339): enable message compression
+ IPv6addr: Check for netinet/icmp6.h instead of  linux/icmpv6.h
+ IPv6addr: Check for netinet/icmp6.h instead of linux/icmpv6.h
+ iscsi RA: wait for udev to create the links
+ Junko IKEDA reported a problem building on Red Hat with tog-pegasus installed - this fixes that problem - the code half-setup things if pegasus was present but --enable-cim-provider wasn't enabled
+ ldirectord: add forking mode
+ ldirectord: SimpleTCP service check
+ ldirectord: SimpleTCP service check documentation
+ ldirectord: Various updates to OCF compatible RA
+ lf bug 1678: stonith command core dumps with -h option
+ LF bug 1690: there should be a tool to audit (validate) node names in constraints among other things...
+ LF Bug 1732: Error handling is bad for comm media
+ LF bug 1732: restructuring code towards being able to restart (reopen) communication media when they die
+ LF bug 1795 - timeout control for crm_mon --one-shot
+ LF bugzilla 1667:  ppc64 RPMs contain 32-bit binaries
+ LRM (LF 1821): resource timing information
+ lrm reg tests: handle OCF_ROOT, warn about xmllint missing
+ LRM regtest: update filters to match the lrmadmin output
+ lrmadmin: include time.h
+ Monitor timeouts need to increment fail counts
+ OCF-resources: SphinxSearchDaemon is not installed
+ OpenBSD bugs: 1731 1761 1743 1659
+ packaging: include iscsi
+ pgsql RA: handle the missing pg software properly (thanks to Serge)
+ pgsql RA: move check for root down to enable meta-data for regular users (thanks Serge)
+ pgsql RA: postmaster confusion
+ Put the _source_ (.in) file under source control.  Groan...
+ RA Filesystem: add lustre to the list of fs which don't need fsck
+ RA iscsi: dropped complex code in favour of udev and several small cleanups
+ RA iscsi: fix meta-data xml
+ RA iscsi: get rid of one annoying message ("no active sessions")
+ RA iscsi: new iscsi resource agent
+ RA iscsi: support iscsi sles compat mode
+ RA iscsi: two echo statements removed
+ RA mysql: don't look for mysql users in the OS database (thanks to Christian Rishoj)
+ RA SAPDatabase/SAPInstance: report proper exit codes in case required software is not installed
+ RA SphinxSearchDaemon: a new RA thanks to Christian Rishoj
+ recovermgrd: changed the code to look at the return code from fwrite, to make Fedora 8 compiler compile recovermgrd warning-free.
+ Removed bzip2-devel as a build dependency for all but Fedora and RH
+ RPM and specfile changes to fix part of and help diagnose part of Junko IKEDA's problem with tog-pegasus
+ RPM spec file: Added ciblint to installed programs
+ RPM specfile change:  made is_fedora macro turn off is_rhel macro
+ shell scripts: various cases of overquoting in the for statement (thanks to Takekazu Okamoto)
+ stonith ibmrsa-telnet: new stonith plugin
+ stonith ipmi: new external stonith plugin
+ utillib.sh: update finding the binary which coredumped
+ Xen RA: new improved (thanks to Sebastian Reitenbach)
+ [patch] init: add should-start/stop $remote_fs to init script</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1196114400">- version 2.1.2-24
- Update the source tarball to revision ef1be5978d97
- Statistics:
    Changesets:       104
    Diff:             296 files changed, 3464 insertions(+), 3275 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb/vmware stonith) on a single host (opensuse10.3/2Gb/2.66Ghz Quad Core2)
  + 7-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon/ssh stonith)
- All testing was performed with STONITH enabled
- Pending bugs encountered during testing:
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-15
+ High: CIB: Fix the behavior of update_attr() and delete_attr() when the command is ambiguous
+ High: CRM: In ccm_have_quorum(), an OC_EV_MS_PRIMARY_RESTORED event means we _do_ have quorum
+ High: PE: Bug 1765 - Prevent master-master colocation constraints from preventing slaves from starting
+ High: PE: Introduce a new API call for determining the location of complex resources
+ High: PE: Set next_role recursivly so that group promotion will work
+ High: PE: increment_clone() did not overflow correctly 9-&gt;10, 99-&gt;100, etc
+ High: crmd: Prevent shutdown hangs caused by pending ops that can't be cancelled - because the no longer exist in the lrm
+ High: heartbeat: Fix getnodes() compilation with gcc 4.3
+ High: Novell 293922: Don't use non-blocking writers, but instead don't block
+ High: Novell 293922: Heartbeat network processes would block on full buffers.
+ Medium: core: Do not disconnect blocking write processes, but discard traffic.
+ Medium: PE: All other things being equal, prefer to keep non-failed instances alive
+ Medium: PE: Create a syntactic shortcut for the common use-case of "{resource} prefers {node} with {score}"
+ Medium: PE: Dont make changes to location constraints, when applying to groups, persistent
+ Medium: TE: Allow the CRM to limit the number of resource actions the TE can execute in parallel.
+ Medium: TE: Pending operations shouldn't be processed
+ Medium: attrd: Bug 1776 - Attrd doesn't exit or reconnect when the CIB is respawned
+ Medium: crm: Dont generate core files for non-fatal assert (ie. the CRM_CHECK macro).
+ Medium: crmd: Don't remap LRM_OP_PENDING when building full lrm updates
+ Medium: crmd: Prevent shutdowns initiated immediately after a node is removed from the cluster with hb_delnode from stalling.
+ Medium: LF bugzilla 1757: apache resource agent grep methodology can't handle newlines - even if you change the pattern
+ Low: Admin: Do a full simulation when we have the live CIB - since we'll always have a status section
+ Low: Admin: crm_standby - Don't complain about missing values, print the default value instead
+ Low: PE: Actions for stonith agents should never default to requiring fencing or quorum
+ Low: PE: ptest - Handle malformed inputs more gracefully
+ Low: Rename example ha_logd.cf file to the proper name.
+ Low: cib: Increase the retry interval when connecting to the ccm to 3s
+ Low: crmd: Provide a more informative error when DCs detect other DCs during a join
+ Low: heartbeat: Use the correct define when choosing to enable valgrind - Keisuke MORI
+ Low: LF bug 1705 - cl_respawn core dumps when given -h or --help
+ Low: changed configure.in to force 64-bit objects when on gcc-based ppc64 platform
+ Low: configure.in - autoconf spells ppc64 funny...
- Unclassified user impact
+ LF 1766: Heartbeat installs man pages in the wrong directories by default...
+ LF Bug 1662: Put in some RHEL changes provided by Keisuke MORI
+ LF bug 1393 - Cannot rename /var/lib/heartbeat/hostcache.tmp to /var/lib/heartbeat/hostcache (scope, risk and severity: all minor)
+ ccm (LF 1546): ensure that the membership instance number never decrements (thanks to Guochun Shi)
+ ccm: speed up ccm considerably in case a node is alone in the membership (thanks to MATSUDA, Daiki)
+ Debian: Build: Add dependacy on gawk as it is required by the OCF IPaddr resource
+ Debian: Build: rename ha_logd.cf to logd.cf in debian/heartbeat.files
+ hb_report (LF 1763): multiple fixes
+ hb_report: add more packagers support (thanks to Sebastian Reitenbach)
+ hb_report: fix handling of debug option
+ hb_report: fix the previous fix (sorry)
+ hb_report: include package verification
+ hb_report: reduce the number of ssh invocations by 1
+ hb_report: update documentation on extracting CTS tests
+ hb_report: use getopts instead of getopt(1) for the sake of portability
+ hbagent: fix memory leaks on dropping global resources (thanks to Keisuke MORI)
+ hbagent: removed the const qualifier from parameter
+ hbagent: reset gMembershipTable on dropping global resources
+ hbclient: fix memory leaks on signon/signoff (thanks to Keisuke MORI)
+ heartbeat: Increase MAXMSGHIST; reduce debugging output.
+ ldirectord: allow per-virtual checkinterval configuration
+ lvs-users: Patch for ldirectord when using mysql service
+ mgmtd (LF 1719): fix the pam file for suse
+ mysql RA (LF 1760): defaults for OpenBSD (thanks to Sebastian Reitenbach)
+ RA Xinetd (LF 1742): multiple fixes
+ RA tomcat: allow consecutive starts
+ stonithd: (LF 1727): fix dropping privileges
+ stonithd: a copy/paste typo
+ stonithd: check for storage size when copying the host list
+ stonithd: drop root privileges earlier
+ stonithd: shuffle dropping privileges around again</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1193349600">- version 2.1.2-15
- Update the source tarball to revision c492f19cb583
- Statistics:
    Changesets:       158
    Diff:             173 files changed, 8712 insertions(+), 4787 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
  + (lmb)    7-node Xen cluster on a single host
  + (debltc) 6-node ppc64 cluster
- Pending bugs encountered during testing:
  1562 - heartbeat: hostcache file rename error at startup
  1737 - crmd: Inconsistent join state detected (Hard to reproduce, possible fix included)
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-4
+ High: cib: G_main_del_IPC_Channel() doesn't like being called with a NULL pointer and crashes
+ High: crm: Bug 1749 - Make sure the diff-related digests contain the complete CIB, not just the first line
+ High: crmd: Prevent shutdown hangs by allowing the crmd to forget about pending actions for deleted resources
+ High: PE: Bug 1712 - Ensure manditory ordering constraints can cause complex resources to be shut down
+ High: PE: Clone colocation fixes
+ High: PE: Ensure that resources depending (by order) on a master are not promoted if no master is available
+ High: PE: Fix manditory ordering with m/s resources
+ High: PE: Prevent an infinite pe/te loop when reprobing with resources in master mode
+ High: PE: Prevent use-of-NULL in crm_mon when date_expressions are used by ensuring that data_set-&gt;now is always set
+ High: PE: Prevent use-of-NULL when the admin creates a colocaiton constraint with an empty group
+ High: PE: Relax an assumption regarding clones that is not true when they are unmanaged
+ High: PE: Remove an accidental commit that, when called, causes use-of-NULL
+ High: PE: Remove an errant call to exit() than prevented an assert from being triggered
+ High: RA: Novell 329833 - dotted-quad netmask notation broken in findif
+ Medium: cib: Include digests of the cib a diff was made from and verify it when applying
+ Medium: CRM: Re-evaluate appropriate IPC message queue lengths and throtle IPC _clients_ that hit them
+ Medium: crmd: Bug 1737 - Inconsistent join state detected - Possible fix
+ Medium: PE: Bug 1722 - By default, exhibit the old start-failures-are-fatal behaviour regardless of how resource-failure-stickines is set
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: PE: Fix minor memory leak when stopping orphaned resources
+ Medium: PE: Master internal ordering enhancements. Added stopped-&gt;start, stopped-&gt;promote.
+ Medium: Tools: Bug 1738 - the crmd ignores some requests from crm_resource because it exited too quickly
+ Low: contrib: dopd - Remove a pointless and annoying dependancy on the crm
+ Low: crmd: Increase the retry interval when stalling the FSA to 2s (used when connecting to the ccm, lrmd, cib)
+ Low: crmd: Update the CIB with the node's version data when it becomes DC
+ Low: crmd: Use the unaltered rc for timed out operation events from the lrmd
+ Low: Debian: heartbeat doesn't depend on libperl-dev (probably confused by '-lperl' in configure.in)
+ Low: heartbeat: Some compilers feel that the fcli variable could be used uninitialized - shut them up
+ Low: PE: Avoid pointless copying of XML items (actions) during graph creation
+ Low: PE: Convert all the resource's boolean flags into a single bit-field
+ Low: PE: Produce a config error when a clone contains more than one resource/group to clone
+ Low: RA: PureFTPd - Support debian's pure-ftpd-wrapper script.  Patch by Raoul Bhatia
+ Low: Stonith: external/rackpdu - Fix the metadata short descriptions
+ Low: ccm: Bug 1723 - fix logging (thanks to MATSUDA, Daiki)
- Unclassified user impact
+ gui: Add "meta_attributes" support to mgmt
+ gui: Add boolean_op for location rules in mgmt
+ gui: Make several fields of rsc_location editable
+ gui: Prevent clone and master_slave from belonging to group
+ gui: Prevent haclient from falling into an error caused by blank resource metadata
+ gui: Provide "Default" setting for crm configurations
+ gui: Provide complete pengine and crmd configurations with dynamic rendering
+ gui: Rename "Places" to "Locations" to match with the CIB name
+ gui: Resolve target_role problem for sub-resource
+ gui: Specify the default type of added item to correspond to the object that the cursor focused on
+ heartbeat: Remove one unlink() of the temporary hostcache file.
+ LF bug 1502: udpport statement in ha.cf is ignored by heartbeat - trivial fix
+ LF bug 1589: ia64 heartbeat unaligned access messages (SGI965396) - copy fields in structures - minor fix
+ LF bug 1679: hardcoded heartbeat userid and group in init script (minor fix)
+ LF bug 1681: BSC fails to to identify active interface on OpenBSD (minor change)
+ LF bug 1700: HA Signon always reports success - fix has minor scope.
+ LF bug 1702: during emergency restarts, heartbeat doesn't close watchdog correctly.  Fix is minor.
+ LF bug 1712: ha_logd prevented node from shutting down - changed code to use the waitout() primitive - scope fix - trivial-minor
+ LF bug 1731: wrong location of libraries for OpenBSD 64Bit architectures, with patch
+ LF bug 1734 - removed duplicate return statement as per bug report.
+ lrm stonith plugin: fix exit code handling
+ lrmd (LF 1715): increase the max dispatch time for lrmd
+ lrmd (LF 1729): revise return codes
+ Put in a missing include of &lt;memory.h&gt; for the DRBD code.  Change scope: trivial
+ RA: mysql, pgsql - use getent(1) instead of /etc/passwd (thanks to Raoul Bhatia)
+ RA: mysql: According to Geoff Harrison the sql check is broken without this
+ RA: mysql: Allow arbitrary commandline arguments for mysqld (by Raoul Bhatia)
+ RA: Raid1: Allow the homehost setting to be specified.
+ RA: Xinetd: Fix stop/monitor to not fail if service isn't available yet.
+ stonith/ibmrsa: allow ',' in the hostlist
+ STONITH: external/ssh: Disable StrictHostKeyChecking and PasswordAuthentication by default.
+ stonithd (LF 1714,1727): fix a race condition
+ stonithd (LF 1726): a hostlist may be empty
+ stonithd (LF 1727): change attach shmem seg to read only
+ stonithd/lib: replace cookie generation with uuid
+ stonithd: have -a really mean startup alone
+ stonithd: increase the maxdispatchtime
+ stonithd: library code review and cleanup
+ tools: Add hb_report - a reporting utility</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1190757600">- version 2.1.2-4
- Update the source tarball to revision 702e4f418ca8
- Statistics:
    Changesets:       109
    Diff:             188 files changed, 5926 insertions(+), 2003 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
- Pending bugs encountered during testing:
  1377 - llm_get_nodename: index(1719751538) out of range
  1561 - Cluster node c001n03 returning after partition
  1562 - hostcache file rename error at startup
  1700 - HA Signon always reports success
  1711 - Shutdown blocked by call to cl_flush_logs()
  1712 - Shutdown blocked by ha_logd
  1714 - Stonithd core dumps
- Changes since 2.1.2-2
+ High: Core: Prevent logging buffer overflow - ensure the entity is NULL terminated.  Patch from Simon Graham.
+ High: DTD: Remove stray character that made the DTD invalid
+ High: PE: Ensure mandatory ordering constraints behave correctly
+ High: PE: Implement a smarter algorithm for colocation
+ High: PE: Include preferences of colocated resources when promoting masters
+ High: PE: Make sure only the correct number of cloned groups are started
+ High: PE: Make sure the merge_weights function is called for complex resources
+ High: PE: More accurate method of detecting colocation loops in native_merge_weights
+ High: PE: Optimize the merge_weights functionfor groups
+ High: RA: Remove bashism from Filesystem OCF agent
+ High: RA: Filesystem - Fix path reference.
+ High: RA: o2cb - Fix path broken in recent cleanups
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: crmd: Tell the LRM to refresh the resource's default parameters
+ High: core: Bug 1697 - really remove proctrack sources (performance/memory leak fix)
+ High: core: An open call with the O_CREAT flag was missing the file mode.
+ Medium: Core: Ensure heartbeat flushes all its logs before exiting
+ Medium: ipc: Up MAXMSG to match MAXUNCOMPRESSED to allow larger clusters.
+ Medium: Logging: Sanitize and centrally define the log facility used by various subsystems
+ Medium: PE: Bug 1705 - Don't segfault when allocating empty groups
+ Medium: PE: Bug 1710 - A resource's failcount was ignored on nodes with no operations for the resource
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: RA: EvmsSCC - Handle start failures caused by peers starting at the same time (Patch from Jo De Baer)
+ Medium: RA: Treat migrating (status 1) as running to avoid - patch by Per Andreas Buer
+ Medium: Stonith: Remove code-reuse to prevent excessive logging by the LRM
+ Medium: Stonith: ipmilan: fix potential segvfault in options parsing
+ Medium: cib: Improved transparency when in operating in degraded mode
+ Low: Admin: Bug 1691 - crm_resource doesn't complain about empty strings as property values
+ Low: build: configure.in: fix for platforms with libc in /lib/tls
+ Low: CIB: Allow notification to remote clients
+ Low: CRM: DTD - Expand the list of accepted values for boolean fields
+ Low: CRM: DTD - Explicitly specify a default for rsc_colocation.symmetrical
+ Low: DTD: Include helpful comment for rsc_order constraints
+ Low: PE: Downgrade logging when we fallback to default option values
+ Low: PE: More efficient logging of orphan resources
+ Low: PE: Prevent users from trying to use on_fail=fence and stonith-enabled=false
+ Low: PE: Stop the master placement score from affecting the synapse's priority
+ Low: RA: Add a tomcat OCF agent from Yamauchi Hideo
+ Low: RA: ManageVE - Fix status when VE files are not persistent
+ Low: RA: Put in updates to the Informix script as supplied by Lars Forseth
+ Low: RA: apache - drop annoying messages if no configuration files are found
+ Low: Stonith: external/ssh - simplify the reset command and wait the same amount of time as the non-external variant
+ Low: Stonith: Disable ipmilan by default
+ Low: TE: Pause for a moment before trying to reconnect to stonithd
+ Low: Tools: Allow pingd to change identity based on the name of its executable - workaround for Bug #1701
+ Low: logd: Update the default config file to reflect the new default log facility
+ Low: tools: haresources2cib.py: update parameter lists and configuration defaults
- Unclassified impact
+ lrm: Bug 1458 - include timing information in the op data.
+ lrm: Bug 1684 - a meta-data operation fix introducing short sleep on zero reads
+ lrm: log non-recurring operations
+ lrm: performance - replace linear with binary search for msg type.
+ lrm: performance - remove unnecessary memstat
+ lrm: raexecocf: a fix for bug introduced in 2a787bbd73f6; longer sleep in get_resource_meta
+ RA: Bug 1692 -  monitoring fails for apache OCF resource.  Put in simple fix to apache resource agent monitoring from Sebastian Reitenbach
+ RA: eDir88 - fix to allow meta-data to work in case NDS is not installed
+ RA: pgsql - patch to remove bashism
+ Stonith: Put in an APCmastersnmp.c patch from Peter Kruse which makes the plugin work with new APC master switches
+ Stonith: Bug 1615 - get the list of hosts from an RA asynchronously
+ mgmtd: allow old clients to connect</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187301600">- version 2.1.2-2
- Update the source tarball to revision 098c0993b1d0
- Statistics:
    Changesets:	6
    Diff:		11 files changed, 402 insertions(+), 46 deletions(-)
- Changes since 2.1.2-1
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: PE: Bug 1682 - Prevent use-of-NULL when clones have no active children
+ High: TE: target_rc should default to 0 (LRM_OP_DONE) to detect monitor actions that fail the first time they are executed
+ Medium: PE: Bug 1685 - Supply the correct defaults for rsc_order constraints
+ Low: Admin: crmadmin - exit with rc=0 when the command completed successfully</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187042400">- version 2.1.2-1
- Update the source tarball to revision 1ad8497bc55d
- Statistics:
    Changesets:	340
    Diff:		614 files changed, 39588 insertions(+), 32588 deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/1ad8497bc55d
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -r e3c9306b9223:1ad8497bc55d | sort -f
- Testing notes
+ On my underpowered cluster, the CCM borked a number of times on the Stonithd test
  However since the CCM hasn't been touched in an age, its hard to conclude there are regressions from previous releases.
  If anyone would like to volunteer to maintain the CCM (or the GUI for that matter), it would be much appreciated.
- Changes since 2.1.2 (Upstream)
+ High: CRM: Update crm/cib feature sets and the set of tags/attributes used for feature set detection
+ High: CIB: Improved CCM interaction
+ High: CRM: filter_action_parameters() - Make a copy of interval/timeout in as they're about to be free'd
+ High: PE: Break graph loops involving stonith
+ High: PE: Only create _one_ pseudo op per name (all_stopped/stonith_up)
+ High: PE: The all_stopped action should only be part of the graph when the stop actions are runnable
+ High: PE: all_stopped should only depend on native resources to avoid recursion
+ High: PE: check_action_definition() - Ensure the meta attributes are also set so that the digest is calculated correctly (and consistently with the crmd)
+ High: PE: Use failcount to handle failed stops and starts (set default_resource_failure_stickiness &gt; 0 for the old blocking behaviour)
+ High: TE: Allow reconnection to stonithd if it is respawned
+ High: TE: Allow the TE to reconnect if stonithd is killed and respawned
+ High: cib: Allow the CIB to reconnect if the CCM is killed and respawned
+ High: cib: Handle master updates that fail DTD validation
+ High: cib: Support the removal of multiple child objects - required for subsequent commit
+ High: crmd: Improvements to shutdown sequence (particularly in response to failures)
+ High: crmd: Sanitize the maintenance of node_state entries
+ High: crmd: Simplify node_state maintenance
+ High: stonithd: Sanitize the login/logout functions and add the ability to reset the callback IPC channel
+ Medium: cib: Ensure fflush() and fsync() are always called when writing XML digests to disk
+ Medium: crm: Ensure fflush() and fsync() are always called when writing XML to disk
+ Medium: crm: Bug 1680 - parse_xml() can fail to detect mismatching close tags
+ Medium: PE: Dont check the parameter digest of orphan operations
+ Medium: TE: Dont modify the failcount for 'pending' action updates (rc=-1)
+ Medium: admin: Set the exit code to non-zero if crmadmin can't connect to the crmd
+ Low: PE: Warn when multiple nodes have the same uname
+ Low: Stonith: New external plugin for handling 'APC Switched Rack PDU AP7952' devices - contributed by Sergey Maznichenko
+ Low: cib: Enhancements to logging of DTD errors
+ Low: cib: Refactor reading and writing of the CIB to disk
+ Low: crmd: Ensure our assumption that all resources have a class and type is true
+ Low: crmd: Simplify the detection of active actions and resources at shutdown
+ Low: Admin: Bug 1603 - Allow CIB digest files to be verified
+ debian: make heartbeat binNMU safe
+ stonith: ipmilan - accept documented auth and priv values
+ GUI: OSDL 1449 / Novell 291749: GUI should not overwrite more specific settings of contained resources.
+ RA: IPaddr2 - Make the check for the modprobe/iptables utilities conditional on the IP being cloned
+ RA: apache - make status quieter
+ RA: Added Informix resource agent
+ RA: eDir88 resource can't be stopped ?
+ RA: patch to fix bashism in a number of agents
+ Tools: OSDL Bug 1666: in BSC, make sure temp rsc dir exists for RAs
+ Tools: ocf-tester - use the default value for OCF_ROOT if it exists
+ Tools: ocf-tester - add capability to test with lrmadmin/lrmd
- Changes since 2.1.0-2
+ A little cleanup to make the RAs more uniformly not have $OCF_ROOT paths in them
+ Added code to cause logging to be restarted if it dies.
+ Admin: Allow crm_diff to operate on compressed inputs
+ Admin: Bug #1621 - crm_mon should show failed starts of a resource
+ Admin: Bug 1632 - Make sure error messages regarding trailing XML input characters are seen
+ Admin: Bug 1635 - crm_failcount should not complain if the attribute was already deleted
+ Admin: Bug #1622 - crm_attribute: Include --inhibit-policy-engine in the help message
+ Admin: crm_resource - remove an overly simplistic check for when -C can safely be used
+ Admin: crmadmin - include Hg version in --version output
+ Admin: ptest is useful enough to warrent installation to sbindir
+ BSC: 'trap' had been continuing instead of exiting
+ Bug 1612: haresources2cib @substitution@ broken (probably by a global change)
+ Build: No longer generate RAs now that there is a sane way to set directory locations and find binaries
+ CIB: Bug 1602 - Archive invalid/unusable configurations so we can continue
+ CIB: Bug 1633 - Pass the actual error from activateCibXml back to the user
+ CIB: config_changed always needs to be calculated when processing write commands
+ CRM: Bug 1625 - Cannot update an operation's timeout
+ CRM: Clean up processes left over by crm_abort().  Initial patch by DAIKI MATSUDA
+ CRM: Fix compare_version() to actually work correctly on a regular basis (broken since 2.0.2)
+ CRM: Fix matching of objects with an ID when the match-spec has no ID
+ CRM: Make logging setup consistent and do not log the command-line to stderr.
+ CRM: Only detect timeout changes for recurring ops
+ CRM: Remove deBug code that should not have been committed
+ Corrected a typo which only matters on 32-bit machines :-(
+ Corrected so that on *BSD it passes in 2 parameters, instead of 2.
+ DTD: Add helpful comment regarding rsc_colocation objects
+ Fix location of pingd binary
+ Fixed a dangling reference to a former bin directory name.
+ Fixed a fairly-major error in IPaddr - it didn't handle CIDR netmasks correctly.  But ifconfig didn't complain either...
+ Fixed a minor stonithd testing error (not much of a Bug)
+ Fixed a syntax error in Filesystem:  missing then symbol
+ Hopefully fixed a long-time SNMP annoyance.  When the membership layer shuts down (as it does in BSC),
+ LF Bug # 1617 - Miscellaneous RPM and source cleanups
+ LF Bug # 1644 - Pinging loopback in BasicSanityCheck fails with EPERM
+ LF Bug # 960 - rpm: first-time install fails
+ LF Bug 1513 - building RPM from the 2.0.8 tarball fails
+ LF Bug 1527 - inappropriate warnings about core files logged by heartbeat (SGI961667)
+ LF Bug 1534 - compiling/installation error on OpenBSD
+ LF Bug 1576: shutdown hangs under certain shells // LF Bug 1534: compiling/installation error on OpenBSD
+ LF Bug 1654 - HA_SBIN_DIR is not set on ocf scripts
+ LF Bug - compiling/installation error on OpenBSD
+ LF Bug 1522: Strt hb_counter on time_t
+ LF Bug # 1534 - compiling/installation error on OpenBSD
+ LF Bug # 1645 - Minimize arch-dependent differences, maintain compatibility -- More on this Bug...
+ LF Bug # 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1661 - crm_verify aborts checking and reoccurring crm_abort errors in logs
+ LF Bug # 1661 - move symlink creation out of specfile and into Makefile
+ LF Bug 1650: heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1645: Minimize arch-dependent differences, maintain compatibility
+ LF Bug 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug 1665 - fix references to moved scripts - courtesy of Tuomo Soini
+ LRM plugins: skip dot-files.
+ Made the stonith -h core dump go away - by fixing a variety of small things in STONITH.
+ Minor patch to stonith patch - to keep empty result from being seen as out of memory
+ Misc: Move a few shell functions to the only script that uses them
+ More file location tweaks - mostly GUI-related.
+ OCF: Detect and warn of use of deprecated 'ocf-shellfuncs' and 'ocf-returncodes'.
+ OCF: Fixed the check in have_binary. Handle checks for programs with --arguments
+ OCF: Provide the location of /sbin as used by some agents (HA_SBIN_DIR)
+ OCF: Remove unused variables
+ OSDL Bug 1606: okay for stonith plugins to have no parameters
+ PE: Add regression test for previous commit
+ PE: Aggregate the startup of fencing resources into a stonith_up pseudo-action
+ PE: Bug 1628 - Complain about invalid operation intervals
+ PE: Correct the CRM_CHECK comparision
+ PE: Dont log stopped orphaned resources
+ PE: Fix the handling of remove-after-stop=true - it was causing unnecessary restarts
+ PE: Fix two small memory leaks detected by Valgrind
+ PE: Fix up the tests now that compare_version() functions correctly (as of cs: 7d69ef94a258)
+ PE: Handle two new actions in text2task
+ PE: Include description for the remove-after-stop option
+ PE: Make sure ptest always does a POSIX sort
+ PE: Move the creation of stonith shutdown constraints to native_internal_constraints()
+ PE: NoRoleChange shouldn't always call PromoteRsc for master resources
+ PE: Potential use of NULL
+ PE: Regression: Allow M/S resources to be promoted based solely on rsc_location constraints
+ PE: STONITH Shutdown ordering
+ PE: Streamline STONITH ordering. Make sure 'all_stopped' depends on all STONITH ops.
+ PE: Update one more regression test output now that it has been verified as still correct
+ PE: Update testcases to include all_stopped (added in cs: 800c2fec24ee)
+ PE: Use master scores to determine which clones to start where
+ Put deBug in in support of Bug 1154: 2.0.4 BSC failure - select() returns with error
+ Put in a change to allow CTS to run.  There is a sort-of-bug (in BSC/CTS) underlying this that I'll have to file a bug on.
+ RA: Add some extra variables dug out from configure
+ RA: Bug #1630 IPaddr2 - Wrong arguments passed to send_arp (test was mistakenly written as an assignment)
+ RA: Convert a number of checks for required binaries
+ RA: Delay (v1) - Remove extra characters from call to ra_execocf
+ RA: Dummy: Just add a comment to make sure people copying from this
+ RA: Filesystem: Unify coding style to match rest of script.
+ RA: IPaddr2 - Remove bash-isms
+ RA: IPaddr2 - handle IP_CIP not being defined
+ RA: IPaddr: Fix a few trivial bugs in lvs_support pointed out by Michael Stiller.
+ RA: LSBDummy - Make sure the action is passed to ra_execocf
+ RA: MailTo: Remove spurious warning about monitor.
+ RA: Move all remaining autoconf variables into common files that are automatically included
+ RA: Move some helper files to their new names (.files dont show up as RAs)
+ RA: Revised handling of directory locations
+ RA: ServeRAID - remove commented out code
+ RA: Use consistent check for required binaries
+ RA: o2cb: Improve configuration stability.
+ RA: o2cb: Optimize redistribution of cluster.cnf.
+ RA: prefer the 'test' program rather than the builtin for some reason
+ RA: v1: IPaddr: Unconditionally enabling LVS support is a mistake.
+ TE: Log the node's uname instead of UUID for completed actions
+ TE: Set failcount to INFINITY for resources that fail to start or stop
+ Tools: Bug 1653 - Further changes to prevent use of NULL when no attribute is specified
+ Tools: Bug 1653 - Misc attrd/attrd_updater cleanups suggested by Keisuke MORI
+ Tools: Bug 1653 - attrd crashes when no attribute is specified
+ debian: Add new dot-ocf files to the heartbeat package
+ debian: Add the ldirectord OCF resource to the ldirectord package
+ debian: Debian bug #432441 will be closed on the next upload
+ debian: Don't create hb_gui symlink
+ GUI: update path for png images in haclient.py
+ ldirectord: Use globals for service check return values
+ ldirectord: Add OCF wrapper
+ ldirectord: Add Oracle check
+ ldirectord: Add external check
+ ldirectord: Add forwarding mechanism to real server ID
+ ldirectord: Add ld_service_to_port()
+ ldirectord: Call ld_emailalert_send() with correct arguments
+ ldirectord: Clean up execute logic in check_sql
+ ldirectord: Cosmetic spelling and grammar fixes
+ ldirectord: Document expire_quiescent_template
+ ldirectord: Document that checktimeout is for ping checks too
+ ldirectord: Don't access CALLBACK unless it is defined
+ ldirectord: Don't die if Net::FTP times out
+ ldirectord: Enhance ftp check debugging
+ ldirectord: Enhance logging in service_set
+ ldirectord: Fix bogus detection of combined check
+ ldirectord: Fix logic bug in _status_down
+ ldirectord: Handle $dbh-&gt;prepare() failure in check_sql()
+ ldirectord: List checktype and service in alpabetical order in the documentation
+ ldirectord: Make check_sql &lt; 80col wide
+ ldirectord: Make parsing of the output of ipvsadm more robust
+ ldirectord: Note negotiatetimeout in documentation of checkcount
+ ldirectord: Port of last resort for real server checks
+ ldirectord: Remove connecttimeout
+ ldirectord: Remove stale entries on reload
+ ldirectord: Remove trim down very wordy decripton of read_config
+ ldirectord: Set default negotiatetimeout to 30s
+ ldirectord: Status to stdout
+ ldirectord: Tidy up fallback
+ ldirectord: Use $dbh-&gt;errstr instead of $dbh-&gt;err when logging
+ ldirectord: Use an alarm for HTTPS timeouts
+ ldirectord: Use goto for error handling in check_sql
+ ldirectord: Use negotiatetimeout and connecttimeout as mutual defaults
+ ldirectord: Use negotiatetimeout for SIP, DNS and Radius checks
+ ldirectord: Use valid string in log message in check_connect()
+ ldirectord: document port behaviour of real servers
+ ldirectord: rearange parsing of service to make it &lt;= 80col (more often)
+ build: Move ldirector OCF resource into the ldirectord package
+ apache RA (LF 1656): include ServerRoot in relative paths.
+ cib: Fix detection of non-status changes
+ configure: Remove unneeded AC_PATH_PROGS checks
+ crmd: Bug 1575 - crmd cannot exit if lrmd is killed and there are pending ops
+ crmd: Bug 1624 - Fix the delete op for cancelled operations
+ crmd: Bug 1655 - crmd can't exit when the PE or TE is killed from underneath it
+ crmd: Only remap monitor operation status to LRM_OP_DONE under the correct conditions
+ log: avoid handing a null pointer as a '%s' variable
+ pingd: Hard code the name used for logging
+ re-enabled code to make symlinks for moved files.
+ remove is_stable() condition from drbd-outdate-peer daemon
+ shellfuncs: 's%:.:%%' should be 's%:.:%:%'; the '.' should be '\.'
+ stonith: external/riloe - new comment in the xml on how acpid may affect the performance (thanks to Guy Coates).
+ stonith: riloe - fix the xml info.
+ stonith: ibmrsa - fix the xml info.
+ stonith: ibmrsa - allow regular users to use it with 'stonith -n' and similar.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1183154400">- version 2.1.0-2
- Update the source tarball to revision e3c9306b9223
- Statistics:
    Changesets:	259
    Diff:		625 files changed, 13133 insertions(+), 73569^ deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/e3c9306b9223
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -rSTABLE-2.1.0:e3c9306b9223 | sort -f</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.1.0-1
- Update debian packaging files which drop the -2 package suffix
- Change the version number to the one used upstream</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.0.9-2
- Sync with the version supplied in SLES10
- Bugs fixed
+ OSDL #393 - Stonith: Update plugin from OpenHPI 2.2 to OpenHPI 2.6
+ OSDL #393 - Stonith: soft_reset is {true|1|false|0}, not {yes|no}
+ OSDL #393 - Stonith: Rename ibmbc to bladehpi
+ OSDL #393 - Stonith: Enable build of bladehpi plugin if OpenHPI present
+ OSDL #761 - RA: Remove history from heartbeat init script.
+ OSDL #1073 - Tools: Add clone support to crm_resource
+ OSDL #1138 - Long delay before CCM propagates membership event
+ OSDL #1292 - Stonith: Support xSeries STONITH (IBM: 06-R212-175)
+ OSDL #1339 - IPC code limits possible cluster size
+ OSDL #1374 - Tools: Check for sane host names when migrating
+ OSDL #1428 - Stonith: Mixing definitions and code
+ OSDL #1430 - CIB: Allow automatic assignment of object IDs
+ OSDL #1451 - Tools: Allow resource meta attributes to be set with crm_admin
+ OSDL #1457 - RA: Resolve unknown command ha_log
+ OSDL #1462 - Tools: crm_migrate should allow creating temporary rules
+ OSDL #1465 - crmd: crmd gets stuck if shutdown while starting up
+ OSDL #1472 - CIB: Use-after-free in find_attr_details()
+ OSDL #1480 - CIB: Create synchronous r/w connections correctly
+ OSDL #1482 - Stonith: stonith command needs a repeat option to make it a better test tool
+ OSDL #1484 - PE: Repair on_fail=stop.  Patch courtesy of YAMAMOTO Takashi.
+ OSDL #1486 - PE: Fix for potential NULL dereference
+ OSDL #1488 - Stonith: Fix passing password to HMC
+ OSDL #1489 - Stonith: Fix HMC errors in hostlist
+ OSDL #1492 - PE: Set common resource attributes before calling the custom unpack function
+ OSDL #1494 - PE: Add node-&gt;score to the clone stability function
+ OSDL #1499 - PE: Perform #uname comparisions without case
+ OSDL #1500 - Tools: Calls to attrd_updater with dampen=0 not processed correctly
+ OSDL #1505 - Findif parsing is all screwed up unless all the parameters are passed, not defaulted.
+ OSDL #1506 - Stonith: Add optional ibmhmc plugin parameters to meta-data
+ OSDL #1507 - Stonith: Allow "stonith -h" to display help for specific device
+ OSDL #1511 - LRM: running two actions for the same resource parallel
+ OSDL #1514 - CRM: Empty values in cib.xml loses other RA parameters
+ OSDL #1523 - Stonith: bladehpi performance enhancements
+ OSDL #1528 - RA: IPaddr2 gives a spurious warning on stop (SGI961736)
+ OSDL #1532 - crmd: Single node cluster shutdown
+ OSDL #1554 - PE: Probes should not have priority INFINITY
+ OSDL #1534 - LRM: Compiliation error on OpenBSD
+ OSDL #1544 - Comms: mixed versions of 2.x and 1.x not working
+ OSDL #1545 - Stonith: stonithd signoff fixesO
+ OSDL #1548 - logging: Ensure logs are logged using the correct component name
+ OSDL #1550 - Stonith: Suicide plugin returns hostlist containing itself
+ OSDL #1553 - Stonith: suicide plugin lacking ST_DEVICENAME
+ OSDL #1554 - crmd: Wait for the membership to stabilize before starting transitions to prevent unconfirmed actions
+ Debian #420206 - RA: Bashisms in IPaddr2
+ Novell #239075 - Admin: crm_master uses the same IDs for permanent and transient attributes
+ Novell #239079 - PE: Ensure action priority is set correctly to ensure notifcations are not lost
+ Novell #239082 - PE: Order promotions after _all_ demotions have completed
+ Novell #239086 - PE: Stable Master placement
+ Novell #244444 - crmd: Free'ing g_alloc() data with cl_free()
+ Novell #246681 - PE: Teach NoRoleChange() how to migrate resource's in the master role
+ Novell #250207 - Split-brain caused by non-identical ping-node configuration and auto-join
+ Novell #250273 - RA: Provide an RA for managing evmsd as a resource
+ Novell #250625 - RA: Xen: Fix status function for newer Xen versions
+ Novell #251689 - PE: Avoid needlessly restarting changed monitor operations for stopping resources
+ Novell #252693 - PE: Enable migration in more scenarios
+ Novell #252693 - PE: Teach the PE how to migrate resources in a starting stack
+ Novell #266551 - Stonith: getconfignames returned hostname instead of hostlist
+ Novell #266551 - doc: Bring the stonith man page up-to-date
- Build Improvements
+ Add explanatory comment for configure kludge
+ Add lha_internal to c-files that dont include it
+ Allow debian packages to also be built directly from Hg archives
+ Always check for the presence of PAM an TLS headers
+ Configure switch to easily enable Valgrind'ing of the CRM
+ Dont install crm-related man pages when --disable-crm is used
+ dopd doesnt build without the crm, disable it if the crm is disabled
+ Fix typo in configure.in
+ Header-file related cleanup
+ Include the exact version being built even when building an archived tree
+ Make supplying a Valgrind suppression file simpler
+ Misc changes to allow building with crm disabled
+ Not all platforms need -lpam
+ Remove redundant and useless items from the build
+ removed unused library dependancies
+ Use existing accounts when building on OSX
+ debian: correct the location of stonith headers in *.files
+ debian: reflect the new header locations in .files
+ debian: sort out a kink in the configure vs. bootstrap logic
+ debian: Packaging updates for 2.0.8-1 release
+ debian: Add heartbeat-2-gui package control files to Makefile
+ Improved grammar in gui package description
+ Improve portability across versions of 'gcc'.
+ Allow data size to be specified
+ Ensure 'awk' is found in runtime environment
+ Use centrally determined GNUTLS cflags and libs
+ Replace multiple derivations (poor) of locations with direct derivation from configure
+ configure: Add closing information to user about '/etc/passwd' and 'make install'
+ Remove an unnecessary 'include' that broke building on some OSes.  It continues to build OK on various OSes.
+ Bourne shell 'test' does not support '-e' flag.  Using '-r' instead.
+ libgnutls: if no 'libgnutls-config', try 'AC_CHECK_LIB(...)'
+ Determine GNUTLS libs centrally in 'configure.in' rather than in individual Makefiles
+ Correct omission of &lt;lha_internal.h&gt;
+ ipctransient tests: Add some flexibility; rationalise some duplicate code
+ ConfigureMe: make usage info a little clearer
+ Add some defaults to configure.in to reduce buildrequires.
+ Remove a bunch of dead code (Perl/SWIG bindings).
+ configure: Check for more pre-requisites of the mgmt/quorum components.
+ Fix use of a future dates in the changelog
- CRM Library Enhancements and Fixes
+ Fix xml parser bug.
+ Allow retrieval of default config values without a hashtable
+ Changes to fake transition key generation
+ Check the return code from fflush() when writing xml files - AnÃÂ­bal Monsalve Salazar
+ Comprehensive review of error recovery logic for potentially failed calls to fopen()
+ Correctly handle syslog facility == 0
+ Delete dead code, make empty_uuid_cache() safe with NULLs
+ Dont call fflush() or flclose() if the output stream was NULL
+ Ensure the normalized result of (add|subtract)_time is updated before returning
+ Fix a use-after-free in parse_time_duration()
+ Fix replace_xml_child() when neither child nor update have an id
+ Fixes for Coverty issues: 52, 55-58, 61-66, 68-69, 71-73 in run 240
+ Gracefully fail when the target XML file is not writable
+ handle NULL inputs to xml_has_children() gracefully
+ Make the use of valgrind a run-time option
+ Memory leak fixes
+ Prevent a number of potential use-after-free's by zero'ing out free'd loop variables
+ Refactor date printing to allow date -&gt; string conversion
+ Remove noisy and inaccurate memory logging
+ Repair the status_printw macro now that we do logging slightly differently
+ size_t is always positive... broke error handling in XML parser.
+ Use-of-NULL in validate_with_dtd() error path... Only clean up what we created
+ When malloc tracking is enabled, pass through the person that called crm_strdup
- CLI Enhancements and Fixes
+ Uninitialized string in heartbeat/findif.c
+ Allow cluster config options to be queried/modified/deleted.  Broken in cs: 13c450735ba7
+ Allow crm_verify to be used with a named DTD file
+ Auto populate the provider for OCF resources if one is not provided
+ crm_primitive.py: Include all node preferences in the one rsc_location constraint
+ Include rsc_location details in the resource listing
+ map cib_NOTEXISTS to 0 for crm_failcount
+ Use the current node uname by default when invoked as crm_standby
+ Add two new views to crm_mon.  Patch by Christofer Edvardsen.
+ Centrally define CIB call options so that -f always works in crm_resource
+ Compile when malloc checking is off, fix last mem leak
+ crm_verify - dont complain about missing status section
+ Dont do ID checks on cibadmin diff's, duplicates are expected
+ Fix a number of memory leaks in attrd
+ Help text and input sanity checks for ocf-tester
+ Include class/type/provider in resource delete commands
+ Place the lifetime rule in the correct location
+ Set a slightly higher default action timeout
+ Show help text for crm_uuid
+ Teach crm_uuid to write ascii-form UUIDs to hb_uuid
+ Terminate the attrd process if heartbeat exits from under it
+ lrmadmin: fix the provider list function: first free data and then the list member.
+ crm_attribute/master/standby: Always default the uname to the current machine
- CIB Enhancements and Fixes
+ Allow cluster options to be created when the default set is not present
+ Allow the remote connection code to be used with or without PAM/TLS
+ Clean up memory at exit
+ Fix a number of memory leaks
+ Compile when malloc tracking is enabled
+ Don't increase the version number if nothing changed
+ Dont examine the group ownership of cib.xml since we set perms to rw-------
+ Exit the writer process correctly so we'll continue to do write outs
+ Prevent node_uuid from having any effect for &lt;crm_config&gt; changes
+ Remove dead code
+ Support processing of commands sent via remote TLS connections.
  See http://www.linux-ha.org/v2/cib_remote for usage details
+ The decision to log failed connection attempts should be left to the client
+ Warn at startup if important version information is missing
- CRMD Enhancements and Fixes
+ ALL completed actions should be removed from the shutdown_list
+ Correctly parse the shutdown timer option
+ Create the restart digest from an object with the same name that the PE uses
+ Delete the HA connection only at exit
+ Enable Valrind'ing of the PE and TE
+ Indicate the LRM error code if an operation cannot be cancelled
+ No need to create the resource if we're trying to delete it
+ Free memory at shutdown
+ Resolve a number of memory leaks
+ Sort out the whole client deletion business.  Also delete the resources hash at shutdown.
+ Improved Logging
+ Remove dead code
- Policy Engine Enhancements and Fixes
+ Always print the resource's node scores
+ Avoid a potential NULL dereference in an error path
+ Clean up generation of and contents of dot-files
+ Create an implicit "cant run here" constraint if an action returns "not installed"
+ Don't start resources until we can verify they're not still running
+ Dont waste time checking action definitions on nodes that wont be running resources
+ Fix a use-after-free of {key} when the monitor op already existed
+ Fix anti-colocation when the RHS is not running
+ Fix gcc warning - dont ignore the result of mktemp()
+ Fix group recovery when a group it depends on is restarted
+ Have group-group recovery work for the right reasons
+ Memory leak fixes
+ Make clones ever so slightly sticky by default
+ Make internal group ordering of bullet-proof
+ Make sure things that shouldn't be true are never true (added asserts)
+ Move DeleteRsc to a more appropriate location
+ Move Ncurses related defines to a more optimal location and make sure its included by crm_mon
+ Not all pseudo operations should be included in the graph
+ Only show elements of the graph in the dot-file by default
+ Prevent a potential NULL deference in clone allocation
+ Provide useful feedback when a cloned resource is found active somewhere it shouldn't be
+ Re-use StartRsc/StopRsc for consistancy
+ Rename elements of the pe_ordering enum for clarity
+ Rename migration variables for clarity
+ Updated regression tests with the revised consistant format
+ Utility functions for finding node's by uuid/uname
- Transitioner Enhancements and Fixes
+ Clean up memory on exit
+ Detect changes to attributes of the cib object
+ Only a limited number of cib attributes warrent aborting the transition
+ Unpack graph actions correctly
+ Improved logging
+ Removed dead code
- Misc
+ Allow heartbeat to easily run with standard libc malloc-and-friends
+ Allow the malloc tracking code to compile on systems where size_t != int
+ Allow writing to syslog to be turned off
+ Better information about valgrind enablement
+ Sanitize the "crm xyz" option processing.  Dont run valgrind if not using libc malloc
+ The DTD used "integer" instead of "number" (which was used by the code)
+ Stonith: Update the rilo RA with enhacements from Tijl Van den broeck and Guy Coates
+ Moved drbd peer outdater into contrib/
+ clplumbing: We _never_ want to trim memory, use -1 instead of 4*size.
+ clplumbing: Coverity 53: Potential NULL pointer dereference.
+ mgmtd: Certain versions of SWIG do not convert the Python "None" to a
+ initscript: set correct Provides: and Should-Start: entries
+ Stonithd: Relaxed a stonithd timeout so that start will succeed if it completes in a minute
+ Dont log dispatch warnings unless they exceed 30ms instead of 10ms
- LRM Enhancements and Fixes
+ Inform clients when an RA is not installed on the machine
+ Expanded regression testing
+ convert the LSB meta-data to XML.
- Resource Agent Enhancements and Fixes
+ -eq is for integer comparisions
+ Avoid concatination with None in riloe stonith agent
+ Filesystem - When checking ocfs2 is cloned, look for variables that are always set
+ Fix up the Dummy metadata
+ Fix variable initialization in pgsql
+ LVS support should always be enabled for the heartbeat IPaddr wrapper
+ Modify the Xen RA to use the new variable names
+ Return after performing a stop action in the Filesystem agent
+ Use configured scratch locations in ibmrsa stonith agent
+ bladehpi readme update
+ Dummy, mysql and drbd - fix meta-data to conform to XML.
+ Convert SAP* from dos
+ Allow ManageRAID to show meta-data at all times.
+ Enhance Pgsql ocf resource to handle multiple instances
+ Xen: Add a little reminder to the code.
+ drbd: Fix some issues and work-arounds for drbdadm bugs.
+ Filesystem: Prune duplicates from active and starting list.
+ Filesystem: Fix metadata require/unique settings.
+ Xen: Fix status function for newer Xen versions (Novell 250625)
+ Filesystem: Increase default suggested timeouts.
+ drbd: When using the nodename-override, drbdadm likes to print an
+ Xen: Swap migrate_to and _from to match PE.
+ Filesystem: Harmless typo corrected.
+ LVM: Add some hints for future todo items.
+ EvmsSCC: More fixes from Jo (Novell 199730)
+ Filesystem: Move ocfs2_init out of the generic stop path (Novell 250603).
+ pgsql: Several enhancements to by Keisuke MORI
+ drbd: Make parsing of drbdadm output more robust.
+ drbd: If drbd is stopped, demote should fail with NOT_RUNNING.
+ Xen: Advertise migrate_from and _to actions. Mention migrate in meta-data.
+ drbd: Add support for overriding the hostname drbd uses based on the clone
+ Filesystem: Whitespace cleanup and minor fixes ("" for -z arguments, using -ne when
+ IPsrcaddr: Added count of how many inet lines to use for the diff -B
+ external/riloe misspelled RI_LOGIN variable name.
- ldirectord Enhancements and Fixes
+ Use $arrayOfDNs[0] instead of @arrayOfDNs[0] to get rid of the following
+ Remove duplicate $recstr
+ Change the code around a bit to avoid a warning about code following exec
+ Dont use SIGENT, as it doesn't seem to exist.
+ 92d4e521db53 Handle $line more carefully
+ Make sure that frequency is intialised before it is used
+ Use $$ instead of (the uninitialised) $pid
+ Remove useless calls to lc()
+ Make sure that DEBUG is initialised
+ Use implicit variables in read_config()
+ Use the -w flag to perl to find warnings/errors
+ Make ldirectord's version valid
+ If weight is not supplied, set it to 1
+ Fix broken reload command
- Testing Improvements
+ Account for a small timing window in the ResourceRecover test
+ Explain why we're aborting when nodes aren't found in DNS
+ Ignore ResourceRecover testing artifacts
+ Indicate debug log messages
+ Improved Logging
+ Remove resource tied to the DC - the #is_dc comparision is irrelevant
+ Rewrite the LSBDummy RA
+ Rewrite the ResourceRecover to use asynchronous failures
+ BSC: (1) test IPC before its dependencies; (2) signal-handling: improve and catch some more.
+ ocf-tester: Continue if validate-all succeeds.
+ ocf-tester: Exit with appropriate exit code for success or failure.
+ ocf-tester: Various integers were compared as strings.
+ BSC: Test Dummy, IPaddr, IPaddr2, Filesystem RAs.
+ BSC: Skip IPaddr2 test if ip not installed.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1173823200">- version 2.0.9-1
- New Upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1170194400">- version 2.0.8-1
- New Upstream
+ Allow colocation based on node attributes other than #id
+ SAPDatabase and SAPInstance resource agents added.
+ Core/CRM: Improvements to the memory allocation, message, and string
  handling libraries result in an overall speed-up of 65%.
+ CRM: Fix ISO date handling for Jan 01 of any year.
+ CRM: Only update the voted hashtable with no-votes for the current
  election.
+ RA: IPaddr: Support netmask both in CIDR and in dotted-quad notation.
+ logd: Fix trailing random byte in log messages (OSDL 1268).
+ heartbeat:  Work around a glibc/times() bug to prevent failures every
  497 days on 32-bit Linux (OSDL 1407).
+ heartbeat: Retransmits were requested more often than they'd be
  honored (OSDL 1455).
+ CTS/PE: Introduce CRM option "startup_fencing" to disable fencing of
  unseen nodes, because CTS can't handle this.
+ PE: Split-off "network-delay" option from global_timeout to separate
  network delays from action timeouts.
+ PE/CRM: Binaries now support being called with "metadata" command to
  document the complete list of options in the CIB.
+ PE: DTD: Include start_delay as a property of operation objects.
+ PE: Fix implementation of date_spec when no range is specified.
+ PE: Enforce clone_node_max for already running resources.
+ PE: Clones were not being stopped on node shutdown.
+ PE: Allow resource colocation based on node attributes other than #id
  (node_attribute option added to rsc_colocation constraint).
+ PE: Improved handling when timeout &lt; start_delay (OSDL 1421).
+ PE: Pre-notifications for promote occured before start was completed
  (OSDL 1447).
+ PE: Allow any two pairs of actions to be specified for rsc_order (OSDL
  1452).
+ PE: Handle asymmetric clusters where RAs are not installed on all
  nodes.
+ PE: Allow resource stickiness and failure stickiness to change based
  on node attributes.
+ CIB: Fix update_attr() causes attrd to hang at shutdown when there is
  no DC (OSDL 1432).
+ CIB: Corrupted config file prevents heartbeat restart (OSDL 1385).
+ CIB: Startup processing improvements; DTD validation will be
  automatically activated if the CIB on-disk validates.
+ TE: Fix memory leak.
+ TE: Failcount wasn't being updated in all cases.
+ TE: never update the CIB with unconfirmed stop actions (OSDL 1435).
+ CTS/RA: Replace OCFMSDummy with Stateful RA.
+ CCM: Centralize quorum calculation on the transition leader.
+ CCM: Support split-site and external quorum servers.
+ CRM: Ignore status update for non-members (ie, ping nodes).
+ LRM: Don't postpone postponed resources.
+ LRM: Fix restart in case an lrmd is already running (OSDL 1333).
+ LRM: Fix overflow in RA output handling (OSDL 1433).
+ mgmtd: Robustness and memory leak fixes.
+ mgmtd: make the port used configurable (OSDL 1390).
+ haresources2cib.py: Improve v1 to v2 conversion tool (OSDL 1415).
+ GUI: ping nodes appear as failed in gui (OSDL 1394).
+ GUI: Reduce duplicates in RA list by only showing the OCF one if both
  ocf and hb RA exist) (OSDL 1338).
+ GUI: Add new resource to currently selected group (OSDL 1414).
+ GUI: support all attributes of operations (OSDL 1372).
+ GUI: Create first resource along with a new group; delete group when
  last resource is removed (OSDL 1287).
+ GUI: Set defaults for clones and m/s RAs (OSDL 1352).
+ GUI: Use meta-data defaults when creating actions (OSDL 1351).
+ GUI: GUI: start all sub resources when we start a group or a clone
  (OSDL 1449).
+ GUI: support ordered==false or non-collocated==false groups (OSDL
  1257).
+ stonithd: Fix memory leak.
+ stonithd: Remove reliance on farside_pid (OSDL 1412).
+ stonith external/riloe: Make the login name and iLo device address
  configurable.
+ crm_resource: Add manpage.
+ RA: PureFTPd, mysql, ManageVE (to manage an OpenVZ container),
  ManageRAID, WAS6 (Websphere 6) added.
+ RA: Include SAPInstance and SAPDatabase (FATE 2172).
+ RA: IPaddr cleanup to avoid race conditions in the script. Report
  status failure when an IPaddr is active on a different interface but
  allow it to be stopped.
+ RA: IPaddr2 fixes for loopback bound addresses.
+ RA: Filesystem reported wrong status/monitor results for OCFS2 in some
  circumstances (Novell 187080).
+ RA: Improve heartbeat v1 wrappers.
+ RA: Fix db2 monitor operation.
+ RA: ldirectord: Make the emailalert and emailalertfreq options global
  as well as non-global, make checkcount global as well as per-virtual,
  add radius check, improvements to documentation.
+ RA: pgsql: Make server logfile configurable and implement
  validate-all. New parameter ctl_opt added to pgsql to support
  additional options for pg_ctl.
+ CRM: First beginnings of a cluster-wide shell (FATE ...)
+ BEAM / Coverity induced fixes.
+ Minor compatibility fixes (OSDL 1405).
+ Logging improvements all over the place.
+ Extended support for master-slave resources (FATE 300723).
+ OCF RA API compliance checker (FATE 300737).
+ Support weak and uni-directional collocation constraints (FATE
  300792).
+ Many bugfixes.
- errata: CVE-2006-3121 was incorrectly refered to as CVE-2006-3821 in
  the changelog for 2.0.6-2 and 2.0.7-1
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-2-global.patch (introduced in 2.0.6-2)
- Remove alternate dependancy on netkit-ping as it is being removed
  from Debian</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1164924000">- version 2.0.7-2
- Add dependancy and build dependancy on psmisc for fuser
  Thanks to Hans-Joachim Baader
- Acknowldge NMU by Roger Leigh</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155592800">- version 2.0.7-1
- New Upstream
 - Remote Denial of Service attack (#195068, CVE-2006-3121).
 - Bugfixes to the CRM, the LRM and the GUI.
 - GUI failed to connect to and retrieve data from the cluster (#198747).
 - Improved log messages.
 - ptest can now read compressed XML directly. Do not include optional
   actions and dependancies in ptest output by default.
 - crm_resource will now warn and demand exact specification when trying
   to modify an attribute while several sets are present.
 - lrmd now limits itself to a maximum of 4 child processes, to avoid
   overloading the node and causing too long delays.
 - pengine: Processing of pending probes; should not be treated as if the
   resource is running or in a known state.
 - target_role now is only taken into account for managed resources.
 - cib: Detect more cases where the nodes section needs to be refreshed.
 - More accurately determine node status. (OSDL 1369)
 - Filter out stop requests that would require a resource to be added.
   (OSDL 1369)
 - Send filtered resource "stops" as successes as to not block waiting
   for filtered actions.
 - By default pass the TE graph via IPC until its too large for IPC to
   deal with, only then fall back to passing via the disk.
 - Stopping of stonith resources can never require stonith, even if the
   node its running on failed; prevent graph loop. (OSDL 1376)
 - STONITH events need to inputs to start events (not stops), to avoid
   graph loop in combination with "stop before" dependencies (ie,
   groups).
 - crmd: Dont stall the FSA if we try to invoke the TE after we've
   stopped it.
 - Always unpack the correct part of a diff operation; diffs should now
   apply in more cases, reducing the need for full refreshs.
 - Correctly observe --disable-snmp-subagent during build.
 - In some states the membership is invalid and shouldn't be referenced.
   (OSDL 1377)
 - Fix a use-before-null-check issue in lrmd. (Coverity #48)
 - OCF Resource Agents outside the default path were incorrectly found to
   be not executable.
 - ccm: hostcache and delnodecache files should not be authoritative if
   autojoin is disabled. (OSDL 1226)
 - With autojoin, llm_get_nodecount() can't return the real max nodes
   anymore, this may cause memory corruption. (OSDL 1382)
 - Fix a memory corruption in membership layer, more frequently observed
   with larger (&gt;5) clusters.
 - Change the default api-auth for pingd to uid=root
 - Dummy RA now OCF compliant.
 - Fix pingd RA metadata to be XML compliant.
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-1-quiet.patch  (introduced in 2.0.6-2)
  - ldirectord-1.141-readline_workaround.patch (introduced in 2.0.6-2)
  - CVE-2006-3821.patch                        (introduced in 2.0.6-2)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155074400">- version 2.0.6-2
- ldirectord-1.141-emailalert-1-quiet.patch
  Don't send email alerts if the alert address is not configured
- ldirectord-1.141-emailalert-2-global.patch
  Allow emailalert and emailalertfreq directives to be global
  as well as per-virtual service
- ldirectord-1.141-readline_workaround.patch
  readline doesn't seem to return lines after Net::FTP
  has been called, so split them up by hand.
- Added recommends iptables to heartbeat, as it is needed
  for the portblock resource to function correctly
- Added /var/lib/heartbeat/pengine directory
- Replace 02-chown-check.patch with chown-check-2.patch
  - use the environement variable FAKED_MODE instead of FAKEROOTKEY to check
    if code is runing in fakeroot. At some stage around fakeroot 1.5.10
    FAKEROOTKEY disapeared. Ran autoconf manually to effect this change
    after repatching.
  - Updated 02-chown-check.patch: fix typos in comment
- CVE-2006-3821.patch
  Fix remote denial of causes caused by insufficient bounds checking
  on data read from the network.
  CVE-2006-3821
- Python transition - http://wiki.debian.org/DebianPython/NewPolicy
  - Update build dependancy on debhelper from (&gt;= 4.0.0) to (&gt;= 5.0.37.2)
  - Add dh_python call to debian/rules
  - created debian/pycompat with contents of "2"
  - heartebeat: deplaced depenancy on python with one on ${python:Depends}
  - Added XB-Python-Version: ${python:Versions} to each package
  - Replace build dependancy on python2.3-dev with one on python-dev
  - Use python-central
    + Add build depends on python-central (&gt;= 0.5)
    + Add dh_pycentral call right before dh_python in debian/rules
    + Add XS-Python-Version: current in the source stanza of debian/control</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1152136800">- version 2.0.5-8
- ldirectord-2: Add missing dependancy on libmailtools-perl
                (Mail::Send)
- ldirectord-2: Add missing dependancy on libnet-perl
                (Net::SMTP, Net::FTP, Net::POP3)
- ldirectord-2: Remove unneccesary dependancy on adduser
- Automake transition: http://wiki.debian.org/AutomakeTransition
  - Remove unneccesary build-depends on automake1.9 | automaken
  - Remove unneccesary build-conflicts on automake1.4</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1151618400">- version 2.0.5-7
- Don't run deluser and delgroup in postrm
  - These commands may not be available at this time
  - If there are any files left that belong to this user or group
    then they will be left unowned and get inhereited by the
    next user that comes along that happens to have hacluster's
    old userid or the old haclient groupid respectively.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-5
- Reverse the change made in 2.0.5-4
  It turns out that in heartbeat (as opposed to heartbeat)
  is a script which calls a binary that is located in
  /usr/lib/ocf/resource.d/heartbeat/</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-4
- Move IPv6addr from /etc/ha.d/resource.d/ into /usr/lib/heartbeat,
  and then symlink that back into /etc/ha.d/resource.d/ as binaries
  are not allowed in /etc</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1149544800">- version 2.0.5-3
- Fix libgnutls binary dependancy
  - Build-Depends on libgnutls-dev instead of libgnutls13-dev
  - Recompile against libgnutls13 in place of libgnutls11
  -</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1148076000">- version 2.0.5-2
- Make use of invoke-rc.d
- Update from standards versoin from 3.6.2 to 3.7.2</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1147212000">- version 2.0.5-1
- New Upstream
- Removed build depenancy on openssl-devel,
  as heartbeat no longer uses openssl directly.
  (Libraries that heartbeat depends on may in turn
   depend on openssl creating an indirect depenancy
   or build-dependancy).</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1141855200">- version 2.0.4-1
- New Upstream
- Don't try and stop heartbeat in preinst on the first install</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139954400">- version 2.0.3-2
- Add build dependancy on libncurses-dev to allow crm_mon to work
  Thanks to Guy Coates
- Move hacluster user and haclient group creation (don't ask me why the
  user and group names are different) from preinst to postinst.
  Once upon a time there might have been a need for it in preinst,
  but the current packaging changes files to have the hacluster user
  and haclient group as neccessary in the postinst. So there is
  no need to create them before postinst.
  This is a better fix to #352158, and the pre-depends on adduser
  has been changed to a depends accordingly.
- Stop heartbeat in preinst</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139695200">- version 2.0.3-1
- New Upstream
- Make sure adduser is passed the --system flag
- Slightly Enhanced package descriptions
- Add build dependancy on swig
- As PYTHON_PATH has been added to configure.in it seems that autoconf1.4
  can no longer build this tree.  Currently autoconf is provided by
  autoconf1.4, and autoconfn is a virtual package provided by autoconf1.7,
  1.8 and 1.9.  Accordingly, replace the autoconf build dependancy with
  autoconf1.9 | autoconfn.  And add a build conflict on autoconf1.4. This
  way the autoconf command should be autoconf1.7, 1.8 or 1.9, but not 1.4
  as was previously the case.
- Don't apply 00-ssh_scp_path.patch as it should no longer be needed,
  instead add a build dependancy on openssh-client.
  Also removed call to relevant configure options.
- Removed configure option that no longer exists
  --enable-checkpointd
- Removed configure options that are now on by default
  --enable-crm --enable-lrm
- Add build dependancy on libgnutls11-dev, as 1.0 probably doesn't
  compile as _t types don't exist.
  http://lists.gnu.org/archive/html/help-gnutls/2004-08/msg00001.html
- Fix insonsistency between hb_stanby(1) man page, an the wiki
- Make /usr/bin/cl_status setgid
- Make sure that /var/run/heartbeat/{ccm,crm} exist on install
  else postinst, and thus the install will abort.
- Fix inconsistency between hb_standb(1) man page and wiki
- Add Pre-Depends on adduser
- Add management tool
  ./confgure --enable-mgmt
  Build-Depends: python2.3-dev, libpam0g-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1129759200">- version 2.0.2-5
- Change libcurl3-dev dependancy to libcurl3-openssl-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1128031200">- version 2.0.2-4
- Include /var/lib/heartbeat/ccm and /var/run/heartbeat/crm</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-3
- Get rid of bogus touching of config.status and friends in clean target,
  which if run as root causes build failures.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-2
- Add build dependancy on libltdl3-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127772000">- version 2.0.2-1
- New upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127599200">- version 2.0.1-4
- Add /var/run/heartbeat directory to package
  http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=900</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-3
- Restrurctured  provides, conflicts and replaces
- Made heartbeat-dev depend on heartbeat, not heartbeat</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-2
- Uptream initally made the wrong tar ball avaliable for
  2.0.1 and this was used to build 2.0.1-1.
  I have asked 2.0.1-1 not to be accepted into the Debian Archive
  for this reason. 2.0.1-2 uses the updated, correct tarball from
  upstream.
- Note that this package has a binary dependancy on libssl
  only because of linking against libsnmp9 (5.2.1.2-3)
- Add build dependancy on libsensors-dev (for libsnmp9)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1126821600">- version 2.0.1-1
- New upstream
- Add /var/lib/heartbeat/cores/root, /var/lib/heartbeat/cores/hacluster
  and /var/lib/heartbeat/cores/nobody
- Remove usr/lib/stonith/plugins/stonith2/riloe.so, its
  no longer in the tree
- Enable snmp_agent
- Added new libplumbgpl
- Added new ha_logd.cf
- Added new iso8601 executable
- Temporarly remove the drac3 module as GPL code that links
  against OpenSSL is not acceptable to Debian.
  - http://lists.community.tummy.com/pipermail/linux-ha-dev/2005-August/011266.html
  - http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=853
- Update build dependncy from libsnmp5-dev to libsnmp9-dev
- Make configure chown test fakeroot aware to avoid build hang
- Fix syntax error in db OCF resource
- Make crm/test/helper.sh have #! /bin/bash
- Make resources/OCF/ocf-shellfuncs.in have #! /bin/bash
- Update FSF address
- Zero config.status, libltdl/config.log and libltdl/config.status on clean</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1123106400">- version 2.0.0-2
- Add /var/lib/heartbeat/ccm and /var/lib/heartbeat/cores</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1122760800">- version 2.0.0-1
- New upstream
- Added dependancy on libnet-dns-perl to ldirectord
- Added --enable-checkpointd to configure arguments
- Added --disable-snmp-subagent to configure arguments
- Added --disable-swig to configure arguments
- Add build dependancy on uuid-dev
- Readranged packages to allow heartbeat 1.2.X to exist in debian
  and heartebat 2.X to be heartbeat until heartbeat gets
  a bit more testing in the wild. Also consoldidated binary
  packages into heartbeat, and development packages into
  heartbeat-dev, ldirectord is still in its own package,
  ldirectord2, as it drags in a lot of dependancies that
  no other part of the system uses.</changelog></package>
<package pkgid="5b2ab863d867c93c03d2649de300424c6d306044" name="krb5-fermi-krb5.conf" arch="noarch"><version epoch="0" ver="5.0a" rel="1"/><changelog author="Olga Terlyga &lt;terlyga@fnal.gov&gt; 5.0-1" date="1410825600">- Update krb5.conf to remove i-krb-3 from KDC list</changelog><changelog author="Olga Terlyga &lt;terlyga@fnal.gov&gt; 5.0-1" date="1409788800">- Update krb5.conf to v5.0 adding new enctypes        
- Added aes256-cts-hmac-sha1-96  aes128-cts-hmac-sha1-96 des3-cbc-sha1
- to default tgs,tkt and permitted enctypes</changelog><changelog author="Olga Terlyga &lt;terlyga@fnal.gov&gt; 4.8-1" date="1401926400">- Update  krb5.conf to v4.8 adding kdc to PILOT realm 
- Added i-krb-22 and added pilot KDCs t domain-realm section</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.7-1" date="1372809600">- Update krb5.conf to v4.7 changing KDC search order to
- put the FCC3 Slave KDC first by default</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.6-1" date="1357344000">- Update krb5.conf to v4.6 updating list of Accelerator Division servers
- Fixed bug in make-cron-keytab so it will take error exit if run
- in shared account via ksu rather than ssh into the account.</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.5-1" date="1349136000">- Added Nova Far Detector KDC to search list, edit and re-format
- SysAdmin HowTo instructions for a local KDC search list and
- set so krb5-fermi-config and krb5-fermi-krb5.conf conflict with
- each other so only one gets installed</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.4-6" date="1334707200">- Cleanup after debugging config-krb5.conf</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.4-5" date="1334707200">- Debugging config-krb5.conf, fixed path from krb5/cnof to krb5/config</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.4-4" date="1334707200">- Debugging config-krb5.conf</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.4-3" date="1334707200">- Debugging config-krb5.conf</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.4-2" date="1334016000">- Rebuilt tarball to make sure .template file is there</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.4-1" date="1328745600">- Fixed order of paramter statements in the
- [capaths] section of v4.4 of krb5.conf</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.3-1" date="1319155200">- V4.2 added PSC.EDU and EXTENCI.ORG realms to the [realms] section
- and V4.3 changed the KDC defintions for the CERN.CN realm</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.1-2" date="1309305600">- Fixed typo in KDC search names (d0online)</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.1-1" date="1307491200">- Added permitted_enctypes line to [libdefaults] section
- Removed obsolete AD nodes from [domain_realms]</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.0-1" date="1306886400">- Changed to krb5.conf V4.0 with expanded KDC list, removed
- Kerberos4 ticket generation from login/pam sections and
- other minor changes.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.1-3" date="1293494400">- Changed Copyrite to License in spec file
- Changed PreReq to Requires in spec file</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 3.1-2" date="1284681600">- Remove igore_afs = true line from pam section</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 3.1-1" date="1284681600">- Emergency fix due to PAM mishandling comments on lines
- in [appdefults]pam section causing long login times</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 3.0-1" date="1282348800">- Installation scripts modified to drop obsolete edits and support
- local saved FNAL.GOV KDC list
- Added 3DEC to default encoding types and allow Wek Encryption in
- [libdefaults] addded commented tag linges around FNAL.GOV KDC list</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.14-1" date="1266624000">- Added mappings for Windows file servers to [domain_realm] section</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.13-1" date="1262822400">- Added entries to [domain_realm] section of krb5.conf for AD</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.12-5" date="1252627200">- Added make-cron-keytab script and fix permissions on makehostkeys</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.12-4" date="1247529600">- Release 3 did not work so use %attr in the %files section</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.12-3" date="1247529600">- Explicitly set file owner on install command</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.12-2" date="1247270400">- Corrected file owner in tarball to root:root</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.12-1" date="1247097600">- Updated to version 2.12 which added FERMITEST definitions
and mappings</changelog><changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 2.11-1" date="1244505600">- Updated to version 2.11</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 2.8-1" date="1214611200">- Updated to version 2.8
- kept the ignore_afs change</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 2.7a-1" date="1193356800">- Removed the "ignore_afs = true" from the pam section</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 2.7.1" date="1188259200">- Updated to krb5.conf 2.7 - fixing cryptocard problems</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 2.5-4" date="1186617600">- Made it generic, to work with both SLF3 and SLF4</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 2.5-3" date="1186617600">- Updated the name to match the krb5.conf version - 2.5
- updated the config script to say 2.5
- Made it so that it moves the old krb5.conf out of the way</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.25-1.LTS4" date="1183420800">- updated the krb5.conf.template file to version 1.25</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.24a-1.LTS4" date="1182988800">- updated the krb5.conf.template file to version 1.24a</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.16-1.LTS4" date="1159920000">- updated the krb5.conf.template file to version 1.16</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.15-1.LTS4" date="1157068800">- updated the krb5.conf.template file to version 1.15</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.10-1.LTS4" date="1123286400">- updated the krb5.conf.template file to version 1.10</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-3.LTS" date="1096675200">- fixed script that says it's 1.8a
- made the rpm a noarch</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-1.LTS" date="1096416000">- updated to 1.9</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1081296000">- added .sdsc.edu to the FNAL.GOV realm</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1080950400">- Changed krb5.conf.template to put PAM section at top.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1076371200">- Fixed it so that it no longer moves the current krb5.conf out of the way
if it does not have to.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1065398400">- Created krb5-fermi-krb5.conf from krb5-fermi-config.</changelog></package>
<package pkgid="de9b8fdbee286bb32d42b542bac31953a19a7258" name="clamtk" arch="i386"><version epoch="0" ver="3.09" rel="1.rf"/><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 3.09-1 - 6137+/dag" date="1211932800">- Updated to release 3.09.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 3.08-1" date="1202428800">- Updated to release 3.08.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 2.32-1" date="1179100800">- Updated to release 2.32.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 2.30-1" date="1174262400">- Updated to release 2.30.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 2.28-1" date="1172275200">- Updated to release 2.28.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 2.27-1" date="1168819200">- Updated to release 2.27.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 2.26-1" date="1163376000">- Updated to release 2.26.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 2.19-1" date="1147910400">- Updated to release 2.19.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 2.14-1" date="1147132800">- Updated to release 2.14.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 2.13-1" date="1136160000">- Updated to release 2.13.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 2.10-1" date="1133395200">- Updated to release 2.10.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 2.05-1" date="1124668800">- Updated to release 2.05.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 2.03-1" date="1121126400">- Updated to release 2.03.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.99-1" date="1116547200">- Updated to release 1.99.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.97-1" date="1115337600">- Updated to release 1.97.
- Added changes from Dave M.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.10-1" date="1112227200">- Initial package. (using DAR)</changelog></package>
<package pkgid="d7287ce2f19c080e11e77c7e76706bc6e63a3c3b" name="zz_tex_tweaks" arch="noarch"><version epoch="0" ver="1.0" rel="1"/></package>
<package pkgid="e925a855df615c089787bf9fa14bb14d03fc46a6" name="clamd" arch="i386"><version epoch="0" ver="0.97.3" rel="3.el5"/><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97.3-3" date="1325455200">- Revert patch from 0.97.3-2</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97.3-1" date="1318975200">- Update to 0.97.3
- Fix CVE-2011-3627 clamav: Recursion level crash fixed in v0.97.3</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-5" date="1312495200">- Configure MilterSocket, PidFile and MilterSocket in clamav-milter.conf.
  (bz#727894)</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-3" date="1311804000">- Handle xz archives in rpmbuilds &lt; RHEL6.
- include updated clamd-wrapper which get the PidFile setting from the
  service configuration file.</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-3" date="1311804000">- Handle xz archives in rpmbuilds &lt; RHEL6.</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-2" date="1311804000">- updated to 0.97.2
- Build-require xz
- CVE-2011-2721 Off-by-one error by scanning message hashes (#725694)</changelog><changelog author="Jeroen van Meeuwen &lt;kanarip@kanarip.com&gt; - 0.97-14" date="1310680800">- Make clamd-wrapper get the PidFile setting from the service
  configuration file.</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97-14" date="1309384800">- Require /usr/sbin/sendmail instead of sendmail</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-13" date="1303855200">- Obsolete and provide clamav-milter-sysvinit (bz#696856)</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-12" date="1301522400">- Move deletion of /var/lib/clamav/mirrors.dat to db package.
- Don't enable NotifyClamd in freshclam config and cronjob, as not
  everybody is running clamd. Running clamd's will anyway notice
  when db is updated.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-11" date="1300485600">- Delete /var/lib/clamav/mirrors.dat, it will be recreated on first run.
- clamav-milter config cleanups.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-10" date="1300312800">- Make sure /var/lib/clamav/mirrors.dat has owner fixed on upgrade.
- Don't start clamd or milter service by default.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-7" date="1300226400">- rpm-provide all old package names that are now obsoleted</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-6" date="1300140000">- clam-db obsoletes old clamav-data-empty.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-4" date="1300053600">- Add back clamd-wrapper to stay compatible with users
  of old packaging (amavisd-new).</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.097-3" date="1298498400">- Move db to /var/lib/clamav
- Ship empty directory /etc/clamd.d for amavisd-new</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.97-2" date="1297980000">- Disable llvm.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.97-1" date="1297202400">- Update to 0.97
- Fix up for current guidelines.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.91.2-3" date="1195855200">- Change username to get upgrades from fedora versions working.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.91.2-2" date="1195768800">- Initial changes for EPEL version.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91.2-1" date="1187733600">- Updated to release 0.91.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91.1-1" date="1184709600">- Updated to release 0.91.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91-1" date="1184191200">- Updated to release 0.91.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.3-1" date="1180648800">- Updated to release 0.90.3.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.2-2" date="1177711200">- Added clamav-milter support for EL2.1 now that it comes with a newer sendmail. (Tom G. Christensen)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.2-1" date="1176674400">- Updated to release 0.90.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-4" date="1173477600">- Removed circular dependency.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-3" date="1173391200">- Cleaned up default options to clamav-milter. (Adam T. Bowen)
- Removed -b/--bounce as it is no longer recognized. (Gerald Teschl)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-2" date="1173132000">- Removed the erroneous --dont-clean-log from the clamav-milter sysconfig. (Gerald Teschl)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-1" date="1172872800">- Updated to release 0.90.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-3" date="1172008800">- Do the right thing...</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-2" date="1171922400">- The tarball was re-rolled before public release. Sigh.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-1" date="1171404000">- Updated to release 0.90.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.7-1" date="1165960800">- Updated to release 0.88.7.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.6-1" date="1162764000">- Updated to release 0.88.6.
- Added condrestart to sysv scripts. (Tsai Li Ming)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.5-2" date="1162072800">- Added missing clamav dependency to clamav-db.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.5-1" date="1160949600">- Updated to release 0.88.5.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.4-1" date="1154988000">- Updated to release 0.88.4.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.3-2" date="1154988000">- Incorporated UPX heap overflow fix.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.3-1" date="1151791200">- Updated to release 0.88.3.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.2-1" date="1146434400">- Updated to release 0.88.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.1-1" date="1144188000">- Updated to release 0.88.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88-1" date="1136844000">- Updated to release 0.88.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.87.1-1" date="1131919200">- Updated to release 0.87.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.87-1" date="1126994400">- Updated to release 0.87.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.86.2-1" date="1122328800">- Updated to release 0.86.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.86.1-1" date="1121119200">- Updated to release 0.86.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.85.1-1" date="1116280800">- Updated to release 0.85.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.84-1" date="1114812000">- Updated to release 0.84.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.83-1" date="1108418400">- Updated to release 0.83.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.82-2" date="1108072800">- Fix for false positive on RIFF files. (Roger Jochem)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.82-1" date="1107813600">- Updated to release 0.82.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.81-1" date="1106863200">- Improved logrotate scripts. (Filippo Grassilli)
- Updated to release 0.81.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.80-2" date="1101938400">- Added %dir /var/clamav/log. (Adam Bowns)
- Changed logrotate script to use clamd.log. (Stuart Schneider)
- Added curl dependency. (Petr Kristof)
- Synchronized some options from Petr. (Petr Kristof)
- Fixed another clamav.conf reference. (Michael Best)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.80-1" date="1099346400">- Updated package description. (Arvin Troels)
- Incorporated fixes from Jima. (Jima)
- Config clamav.conf renamed to clamd.conf.
- Removed obsolete patch.
- Added macros for building without milter.
- Updated to release 0.80.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75.1-1" date="1091224800">- Added obsoletes for fedora.us.
- Updated to release 0.75.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75-2" date="1090879200">- Fixed a problem where $CODE was empty.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75-1" date="1090620000">- Updated to release 0.75.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.74-1" date="1088632800">- Updated to release 0.74.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.73-1" date="1087336800">- Updated to release 0.73.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.72-1" date="1086300000">- Updated to release 0.72.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.71-1" date="1085090400">- Updated to release 0.71.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.70-2" date="1083535200">- Fixed the installation check for conf files. (Richard Soderberg, Udo Ruecker)
- Changed the init-order of the sysv scripts. (Will McCutcheon)
- Changes to the default configuration files.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.70-1" date="1079560800">- Updated to release 0.70.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.68-1" date="1079474400">- Updated to release 0.68.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.67.1-1" date="1079128800">- Updated to release 0.67-1.
- Added clamdwatch and trashcan to clamd.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.67-1" date="1078783200">- Personalized SPEC file.</changelog><changelog author="Matthias Saou/Che" date="1061589600">- Added "--without milter" build option. (Matthias Saou)
- Fixed freshclam cron (Matthias Saou)
- Built the new package. (Che)</changelog><changelog author="Che" date="1056492000">- clamav-milter introduced.
- a few more smaller fixes.</changelog><changelog author="Che" date="1056319200">- version upgrade</changelog><changelog author="Che" date="1055800800">- rh9 build
- various fixes
- got rid of rpm-helper prereq</changelog><changelog author="Che" date="1048543200">- some cleanups and fixes
- new patch added</changelog><changelog author="Che" date="1038002400">- fixed a config patch issue</changelog><changelog author="Che" date="1038002400">- version upgrade and some fixes</changelog><changelog author="Che" date="1036274400">- version upgrade</changelog><changelog author="Che" date="1035496800">- some important changes for lsb compliance</changelog><changelog author="Che" date="1035410400">- initial rpm release</changelog></package>
<package pkgid="5ddf4731f6ee0cb2b9f4b47e3fe56efdbde8b79d" name="clamav-milter" arch="i386"><version epoch="0" ver="0.97.3" rel="3.el5"/><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97.3-3" date="1325455200">- Revert patch from 0.97.3-2</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97.3-1" date="1318975200">- Update to 0.97.3
- Fix CVE-2011-3627 clamav: Recursion level crash fixed in v0.97.3</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-5" date="1312495200">- Configure MilterSocket, PidFile and MilterSocket in clamav-milter.conf.
  (bz#727894)</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-3" date="1311804000">- Handle xz archives in rpmbuilds &lt; RHEL6.
- include updated clamd-wrapper which get the PidFile setting from the
  service configuration file.</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-3" date="1311804000">- Handle xz archives in rpmbuilds &lt; RHEL6.</changelog><changelog author="Jan-Frode Myklebuust &lt;janfrode@tanso.net&gt; - 0.97.2-2" date="1311804000">- updated to 0.97.2
- Build-require xz
- CVE-2011-2721 Off-by-one error by scanning message hashes (#725694)</changelog><changelog author="Jeroen van Meeuwen &lt;kanarip@kanarip.com&gt; - 0.97-14" date="1310680800">- Make clamd-wrapper get the PidFile setting from the service
  configuration file.</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.97-14" date="1309384800">- Require /usr/sbin/sendmail instead of sendmail</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-13" date="1303855200">- Obsolete and provide clamav-milter-sysvinit (bz#696856)</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-12" date="1301522400">- Move deletion of /var/lib/clamav/mirrors.dat to db package.
- Don't enable NotifyClamd in freshclam config and cronjob, as not
  everybody is running clamd. Running clamd's will anyway notice
  when db is updated.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-11" date="1300485600">- Delete /var/lib/clamav/mirrors.dat, it will be recreated on first run.
- clamav-milter config cleanups.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-10" date="1300312800">- Make sure /var/lib/clamav/mirrors.dat has owner fixed on upgrade.
- Don't start clamd or milter service by default.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-7" date="1300226400">- rpm-provide all old package names that are now obsoleted</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-6" date="1300140000">- clam-db obsoletes old clamav-data-empty.</changelog><changelog author="Jan-Frode Myklebust &lt;janfrode@tanso.net&gt; - 0.97-4" date="1300053600">- Add back clamd-wrapper to stay compatible with users
  of old packaging (amavisd-new).</changelog><changelog author="Nick Bebout &lt;nb@fedoraproject.org&gt; - 0.097-3" date="1298498400">- Move db to /var/lib/clamav
- Ship empty directory /etc/clamd.d for amavisd-new</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.97-2" date="1297980000">- Disable llvm.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.97-1" date="1297202400">- Update to 0.97
- Fix up for current guidelines.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.91.2-3" date="1195855200">- Change username to get upgrades from fedora versions working.</changelog><changelog author="Kevin Fenzi &lt;kevin@tummy.com&gt; - 0.91.2-2" date="1195768800">- Initial changes for EPEL version.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91.2-1" date="1187733600">- Updated to release 0.91.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91.1-1" date="1184709600">- Updated to release 0.91.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.91-1" date="1184191200">- Updated to release 0.91.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.3-1" date="1180648800">- Updated to release 0.90.3.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.2-2" date="1177711200">- Added clamav-milter support for EL2.1 now that it comes with a newer sendmail. (Tom G. Christensen)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.2-1" date="1176674400">- Updated to release 0.90.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-4" date="1173477600">- Removed circular dependency.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-3" date="1173391200">- Cleaned up default options to clamav-milter. (Adam T. Bowen)
- Removed -b/--bounce as it is no longer recognized. (Gerald Teschl)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-2" date="1173132000">- Removed the erroneous --dont-clean-log from the clamav-milter sysconfig. (Gerald Teschl)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90.1-1" date="1172872800">- Updated to release 0.90.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-3" date="1172008800">- Do the right thing...</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-2" date="1171922400">- The tarball was re-rolled before public release. Sigh.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.90-1" date="1171404000">- Updated to release 0.90.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.7-1" date="1165960800">- Updated to release 0.88.7.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.6-1" date="1162764000">- Updated to release 0.88.6.
- Added condrestart to sysv scripts. (Tsai Li Ming)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.5-2" date="1162072800">- Added missing clamav dependency to clamav-db.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.5-1" date="1160949600">- Updated to release 0.88.5.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.4-1" date="1154988000">- Updated to release 0.88.4.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.3-2" date="1154988000">- Incorporated UPX heap overflow fix.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.3-1" date="1151791200">- Updated to release 0.88.3.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.2-1" date="1146434400">- Updated to release 0.88.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88.1-1" date="1144188000">- Updated to release 0.88.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.88-1" date="1136844000">- Updated to release 0.88.</changelog><changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.87.1-1" date="1131919200">- Updated to release 0.87.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.87-1" date="1126994400">- Updated to release 0.87.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.86.2-1" date="1122328800">- Updated to release 0.86.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.86.1-1" date="1121119200">- Updated to release 0.86.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.85.1-1" date="1116280800">- Updated to release 0.85.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.84-1" date="1114812000">- Updated to release 0.84.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.83-1" date="1108418400">- Updated to release 0.83.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.82-2" date="1108072800">- Fix for false positive on RIFF files. (Roger Jochem)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.82-1" date="1107813600">- Updated to release 0.82.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.81-1" date="1106863200">- Improved logrotate scripts. (Filippo Grassilli)
- Updated to release 0.81.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.80-2" date="1101938400">- Added %dir /var/clamav/log. (Adam Bowns)
- Changed logrotate script to use clamd.log. (Stuart Schneider)
- Added curl dependency. (Petr Kristof)
- Synchronized some options from Petr. (Petr Kristof)
- Fixed another clamav.conf reference. (Michael Best)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.80-1" date="1099346400">- Updated package description. (Arvin Troels)
- Incorporated fixes from Jima. (Jima)
- Config clamav.conf renamed to clamd.conf.
- Removed obsolete patch.
- Added macros for building without milter.
- Updated to release 0.80.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75.1-1" date="1091224800">- Added obsoletes for fedora.us.
- Updated to release 0.75.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75-2" date="1090879200">- Fixed a problem where $CODE was empty.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.75-1" date="1090620000">- Updated to release 0.75.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.74-1" date="1088632800">- Updated to release 0.74.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.73-1" date="1087336800">- Updated to release 0.73.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.72-1" date="1086300000">- Updated to release 0.72.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.71-1" date="1085090400">- Updated to release 0.71.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.70-2" date="1083535200">- Fixed the installation check for conf files. (Richard Soderberg, Udo Ruecker)
- Changed the init-order of the sysv scripts. (Will McCutcheon)
- Changes to the default configuration files.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.70-1" date="1079560800">- Updated to release 0.70.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.68-1" date="1079474400">- Updated to release 0.68.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.67.1-1" date="1079128800">- Updated to release 0.67-1.
- Added clamdwatch and trashcan to clamd.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 0.67-1" date="1078783200">- Personalized SPEC file.</changelog><changelog author="Matthias Saou/Che" date="1061589600">- Added "--without milter" build option. (Matthias Saou)
- Fixed freshclam cron (Matthias Saou)
- Built the new package. (Che)</changelog><changelog author="Che" date="1056492000">- clamav-milter introduced.
- a few more smaller fixes.</changelog><changelog author="Che" date="1056319200">- version upgrade</changelog><changelog author="Che" date="1055800800">- rh9 build
- various fixes
- got rid of rpm-helper prereq</changelog><changelog author="Che" date="1048543200">- some cleanups and fixes
- new patch added</changelog><changelog author="Che" date="1038002400">- fixed a config patch issue</changelog><changelog author="Che" date="1038002400">- version upgrade and some fixes</changelog><changelog author="Che" date="1036274400">- version upgrade</changelog><changelog author="Che" date="1035496800">- some important changes for lsb compliance</changelog><changelog author="Che" date="1035410400">- initial rpm release</changelog></package>
<package pkgid="6abc95be1e0ce2c24592fdc97e9506b3980256a8" name="zz_pine_user_domain" arch="noarch"><version epoch="0" ver="1.0" rel="3"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt;" date="1333497600">- Changed to use alpine instead of pine</changelog></package>
<package pkgid="f7b5f52bb7cd62f686f238f2e19531778fa09c5d" name="redhat-logos" arch="noarch"><version epoch="50" ver="4.9.16" rel="1.SLF.6"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 4.9.16-1.SLF.6" date="1186444800">- Final tweaking of pictures</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 4.9.16-1.SLF.5" date="1186444800">- Updated pictures so that they say SLF 5.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 4.9.16-1.SLF.4" date="1186444800">- updated rnotes pictures
- Added copyright notices associated with pictures</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 4.9.16-1.SLF.3" date="1183680000">- updated grub boot graphic
- updated other minor graphics.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 4.9.16-1.SLF.2" date="1177632000">- Actually put the graphics in this time.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 4.9.16-1.SLF.1" date="1177632000">- Redid Graphics from the last SL version</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 4.9.16-1.SL.6" date="1177632000">- Re-ordered the rnotes picture, and added one more
- Put in the final release of the grub picture
- Put in the final release of the syslinux-splash.png picture</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 4.9.16-1.SL.5" date="1177113600">- Changed some more rnotes pictures</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 4.9.16-1.SL.4" date="1176854400">- Tweeked the rnotes images so they aren't squished
- tweeked the rhgb graphics
- Change the grub bootscreen</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 4.9.16-1.SL.3" date="1175817600">- Changed the anaconda Makefile to install the rnotes
- Changed the rnotes pictures to png</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 4.9.16-1.SL.2" date="1175817600">- Changed rhgb/main-logo.png
- Changed firstboot/splash-small.png
- Added anaconda/rnotes</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 4.9.16-1.SL.1" date="1174089600">- Removed all redhat logos, replaced them with Scientific Linux ones</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; - 4.9.16-1" date="1167955200">- Fix syslinux splash conversion, Resolves: #209201</changelog><changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.9.15-1" date="1165017600">- Readd rhgb/main-logo.png, Resolves: #214868</changelog><changelog author="David Zeuthen &lt;davidz@redhat.com&gt; - 4.9.14-1" date="1164758400">- Don't include LILO splash. Resolves: #216748
- New syslinux-splash from Diana Fong. Resolves: #217493</changelog><changelog author="David Zeuthen &lt;davidz@redhat.com&gt; - 4.9.13-1" date="1164153600">- Make firstboot/splash-small.png completely transparent
- Fix up date for last commit
- Resolves: #216501</changelog><changelog author="David Zeuthen &lt;davidz@redhat.com&gt; - 4.9.12-1" date="1164067200">- New shadowman gdm logo from Diana Fong (#216370)</changelog><changelog author="David Zeuthen &lt;davidz@redhat.com&gt; - 4.9.10-1" date="1163635200">- New shadowman logos from Diana Fong (#215614)</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; - 4.9.9-1" date="1163203200">- add missing KDE splash (#212130)</changelog><changelog author="David Zeuthen &lt;davidz@redhat.com&gt; - 4.9.8-1" date="1161820800">- Add new shadowman logos (#211837)</changelog><changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.9.7-1 " date="1161648000">- Include the xml file in the tarball</changelog><changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.9.6-1" date="1161648000">- Add names for the default background (#211556)</changelog><changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.9.5-1" date="1161129600">- Update the url pointing to the trademark policy (#187124)</changelog><changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.9.4-1" date="1160092800">- Fix some colormap issues in the syslinux-splash (#209201)</changelog><changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 4.9.2-1" date="1158796800">- ship new artwork from Diana Fong for login screen</changelog><changelog author="John (J5) Palmieri &lt;johnp@redhat.com&gt; - 1.2.8-1" date="1158710400">- Fix packager to dist the xml background file</changelog><changelog author="John (J5) Palmieri &lt;johnp@redhat.com&gt; - 1.2.7-1" date="1158710400">- Add background xml file for the new backgrounds
- Add po directory for translating the background xml</changelog><changelog author="John (J5) Palmieri &lt;johnp@redhat.com&gt; - 1.2.6-1" date="1158710400">- Add new RHEL graphics</changelog><changelog author="John (J5) Palmieri &lt;johnp@redhat.com&gt; - 1.2.5-1" date="1156550400">- Modify the anaconda/splash.png file to say Beta instead of Alpha</changelog><changelog author="John (J5) Palmieri &lt;johnp@redhat.com&gt; - 1.2.4-1" date="1154476800">- Add firstboot-left to the firstboot images</changelog><changelog author="John (J5) Palmieri &lt;johnp@redhat.com&gt; - 1.2.3-1" date="1154131200">- Add attributions to the background graphics metadata
- Add a 4:3 asspect ratio version of the default background graphic</changelog><changelog author="John (J5) Palmieri &lt;johnp@redhat.com&gt; - 1.2.2-1" date="1154044800">- Add default backgrounds</changelog><changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.2.1-1" date="1152748800">- Add system lock dialog</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; - 1.2.0-1" date="1150416000">- alpha graphics</changelog><changelog author="David Zeuthen &lt;davidz@redhat.com&gt; - 1.1.26-1" date="1123113600">- Add russian localisation for rnotes (#160738)</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; - 1.1.25-1" date="1102032000">- add rnotes</changelog><changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 1.1.24-1" date="1100908800">- Add rhgb logo (#139788)</changelog><changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 1.1.22-1" date="1099353600">- Move rh logo from redhat-artwork here (#137593)</changelog><changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 1.1.21-1" date="1099094400">- Fix alignment of gnome splash screen (#137360)</changelog><changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 1.1.20-1" date="1096675200">- New gnome splash</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; - 1.1.19-1" date="1093392000">- update firstboot splash</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; - 1.1.18-1" date="1086480000">- provides: system-logos</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; - 1.1.17-1" date="1086307200">- add anaconda bits</changelog><changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; 1.1.16-1" date="1080086400">- fix the logos in the gdm theme</changelog><changelog author="Havoc Pennington &lt;hp@redhat.com&gt; 1.1.15-1" date="1058572800">- build new stuff from garrett</changelog><changelog author="Havoc Pennington &lt;hp@redhat.com&gt; 1.1.14-1" date="1046304000">- build new stuff in cvs</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; 1.1.12-1" date="1046131200">- updated again
- actually update the grub splash</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; 1.1.11-1" date="1045872000">- updated splash screens from Garrett</changelog><changelog author="Havoc Pennington &lt;hp@redhat.com&gt; 1.1.10-1" date="1045612800">- move in a logo from gdm theme #84543</changelog><changelog author="Havoc Pennington &lt;hp@redhat.com&gt; 1.1.9-1" date="1044316800">- rebuild</changelog><changelog author="Brent Fox &lt;bfox@redhat.com&gt; 1.1.8-1" date="1042675200">- rebuild for completeness</changelog><changelog author="Havoc Pennington &lt;hp@redhat.com&gt;" date="1040083200">- rebuild</changelog><changelog author="Havoc Pennington &lt;hp@redhat.com&gt;" date="1031270400">- add firstboot images to makefile/specfile
- add /usr/share/pixmaps stuff
- add splash screen images
- add COPYING</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt;" date="1031270400">- add boot loader images</changelog><changelog author="Havoc Pennington &lt;hp@redhat.com&gt;" date="1031270400">- move package to CVS</changelog><changelog author="Owen Taylor &lt;otaylor@redhat.com&gt;" date="1025049600">- Add a shadowman-only derived from redhat-transparent.png</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1022198400">- automated rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1010620800">- automated rebuild</changelog><changelog author="Owen Taylor &lt;otaylor@redhat.com&gt;" date="991353600">- Fix alpha channel in redhat-transparent.png</changelog><changelog author="Prospector &lt;bugzilla@redhat.com&gt;" date="963446400">- automatic rebuild</changelog><changelog author="Owen Taylor &lt;otaylor@redhat.com&gt;" date="961459200">- Add %defattr</changelog><changelog author="Owen Taylor &lt;otaylor@redhat.com&gt;" date="961459200">- Add version of logo for embossing on the desktop</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="958521600">- add black and white version of our logo (for screensaver).</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="949968000">- rebuild for new description.</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="938304000">- different.</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="937267200">- added transparent mini and 32x32 round icons</changelog><changelog author="Michael Fulbright &lt;drmike@redhat.com&gt;" date="923788800">- added rhad logos</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="923616000">- added smaller redhat logo for use on web page</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="923529600">- added transparent large redhat logo</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="923443200">- added mini-* links to make AnotherLevel happy</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="923356800">- added copyright</changelog><changelog author="Michael Fulbright &lt;drmike@redhat.com&gt;" date="922838400">- added 48 pixel rounded logo image for gmc use</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="922752000">- package created</changelog></package>
<package pkgid="f82f394d73b25453607d7a78d3bc1619a8f2c4f0" name="upsupdbootstrap-fnal" arch="i386"><version epoch="0" ver="5.0" rel="0"/></package>
<package pkgid="f136a50a6012ee7bb9c5a9e63d87a3781aa985a2" name="zz_lang_collate" arch="noarch"><version epoch="0" ver="1.0" rel="4"/></package>
<package pkgid="12d73915787291a70adbd1dd73ee50cadb3e37a7" name="upsupdbootstrap-local" arch="i386"><version epoch="0" ver="5.0" rel="0"/></package>
<package pkgid="29211019b7e0a50bb7d508a7016d314a91549563" name="rrdtool-python" arch="i386"><version epoch="0" ver="1.3.9" rel="2.sl5"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 1.3.9-2.sl5" date="1259618400">- Added Provides for tcl, perl, python, ruby to be compatable with dag</changelog><changelog author="William R. Lorenz &lt;wrl@express.org&gt; - 1.3.9-1.wrl" date="1256767200">- Update to 1.3.9</changelog><changelog author="William R. Lorenz &lt;wrl@express.org&gt; - 1.3.8-1.wrl" date="1247954400">- Update to 1.3.8</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.7-1 - 6801/cmr" date="1242424800">- Update to 1.3.7</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.6-1" date="1234562400">- Update to 1.3.6</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.5-2" date="1231192800">- Remove fc10 conditionals
- Compile against evolution28 version of pango,cairo,glib on el4</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.5-1" date="1230674400">- Update version
- Add BuildRequires: ruby for macro expansion
- Add BuildRequires: gettext-devel
- Add Requires: gettext
- Add fc10 conditionals</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.4-2" date="1227477600">- Removed 1.2.x patches.
- Removed dependencies cgilib.
- Added dependencies pango, cairo.</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.4-1" date="1227477600">- Updated to release 1.3.4.</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.2.28-1" date="1224108000">- Updated to release 1.2.28.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.23-1" date="1181167200">- Updated to release 1.2.23.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.21-1" date="1178143200">- Updated to release 1.2.21.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.18-1" date="1169848800">- Updated to release 1.2.18.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.15-1" date="1153346400">- Updated to release 1.2.15.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.13-1" date="1146866400">- Updated to release 1.2.13.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.12-1" date="1135029600">- Updated to release 1.2.12.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.11-1" date="1122501600">- Updated to release 1.2.11.
- Fixes for x86_64 and perl/tcl/python bindings.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.9-1" date="1117922400">- Updated to release 1.2.9.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.8-1" date="1116453600">- Updated to release 1.2.8.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.6-1" date="1115762400">- Updated to release 1.2.6.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.2-1" date="1115503200">- Updated to release 1.2.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.1-1" date="1115503200">- Updated to release 1.2.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.0-1" date="1114812000">- Updated to release 1.2.0.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.49-2" date="1112652000">- Fix for the php-rrdtool patch. (Joe Pruett)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.49-1" date="1093471200">- Updated to release 1.0.49.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.48-3" date="1093471200">- Fixes for x86_64. (Garrick Staples)</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.48-3" date="1088805600">- Actually apply the patch for fixing the php module, doh!</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.48-2" date="1085695200">- Added php.d config entry to load the module once installed.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.48-1" date="1084485600">- Updated to release 1.0.48.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.47-1" date="1081288800">- Updated to release 1.0.47.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.46-2" date="1078437600">- Change the strict dependency on perl to fix problem with the recent
  update.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.46-1" date="1073340000">- Update to 1.0.46.
- Use system libpng and zlib instead of bundled ones.
- Added php-rrdtool sub-package for the php4 module.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.45-4" date="1070661600">- Added epoch to the perl dependency to work with rpm &gt; 4.2.
- Fixed the % escaping in the perl dep.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.45-2" date="1069106400">- Rebuild for Fedora Core 1.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1059948000">- Update to 1.0.45.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1050530400">- Update to 1.0.42.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1049148000">- Rebuilt for Red Hat Linux 9.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1046901600">- Added explicit perl version dependency.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1046037600">- Update to 1.0.41.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1044050400">- Update to 1.0.40.
- Spec file cleanup.</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1025906400">- 1.0.39</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1023141600">- 1.0.38</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1019253600">- 1.0.37</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1015970400">- 1.0.34
- rrdtools include zlib 1.1.4 which fix vulnerabilities in 1.1.3</changelog></package>
<package pkgid="163006ee3d2ed797a69a2b792adef8a8e9f6cf74" name="yum-conf-fermi-internal" arch="noarch"><version epoch="0" ver="5" rel="1"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5-1" date="1274745600">- created spec file from the yum-conf-epel spec</changelog></package>
<package pkgid="1e48c5d31fcc4ab6d8f04a2a43dbf21071d00c41" name="drbd-xen" arch="i386"><version epoch="0" ver="8.3.7" rel="3.sl"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-3.sl" date="1275429600">- Removed Requires: drbd-xen since this pulls xen onto a system
  that might not want it.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-2.sl" date="1274738400">- Updated to version 8.3.7
- Added Requires: drbd-kernel-module-8.3.7
- Added %config(noreplace) /etc/drbd.d/global_common.conf</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-2" date="1257717600">- Do not build the drbd-xen package on non x86 architectures.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-1" date="1257717600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.5-1" date="1256680800">- New upstream release.</changelog><changelog author="Florian Haas &lt;florian@linbit.com&gt; - 8.3.4-12" date="1256162400">- Packaging makeover.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.4-1" date="1254866400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.3-1" date="1254780000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.2-1" date="1246658400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.1-1" date="1238191200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.0-1" date="1229637600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.7-1" date="1226527200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.6-1" date="1212184800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.5-1" date="1202853600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.4-1" date="1200088800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.3-1" date="1199916000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.1-1" date="1194040800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.0-1" date="1191016800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.6-1" date="1188856800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.5-1" date="1186178400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.4-1" date="1182981600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.3-1" date="1178575200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.2-1" date="1175896800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.1-1" date="1172959200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt;  - 8.0.0-1" date="1169676000">- New upstream release.</changelog></package>
<package pkgid="dff9a7c8faf6ebd845d0c941bc00a7dae31861fc" name="drbd-udev" arch="i386"><version epoch="0" ver="8.3.7" rel="3.sl"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-3.sl" date="1275429600">- Removed Requires: drbd-xen since this pulls xen onto a system
  that might not want it.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-2.sl" date="1274738400">- Updated to version 8.3.7
- Added Requires: drbd-kernel-module-8.3.7
- Added %config(noreplace) /etc/drbd.d/global_common.conf</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-2" date="1257717600">- Do not build the drbd-xen package on non x86 architectures.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-1" date="1257717600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.5-1" date="1256680800">- New upstream release.</changelog><changelog author="Florian Haas &lt;florian@linbit.com&gt; - 8.3.4-12" date="1256162400">- Packaging makeover.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.4-1" date="1254866400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.3-1" date="1254780000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.2-1" date="1246658400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.1-1" date="1238191200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.0-1" date="1229637600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.7-1" date="1226527200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.6-1" date="1212184800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.5-1" date="1202853600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.4-1" date="1200088800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.3-1" date="1199916000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.1-1" date="1194040800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.0-1" date="1191016800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.6-1" date="1188856800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.5-1" date="1186178400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.4-1" date="1182981600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.3-1" date="1178575200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.2-1" date="1175896800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.1-1" date="1172959200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt;  - 8.0.0-1" date="1169676000">- New upstream release.</changelog></package>
<package pkgid="49b20466545a2ee2113875178cfea7b219a91e50" name="drbd-utils" arch="i386"><version epoch="0" ver="8.3.7" rel="3.sl"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-3.sl" date="1275429600">- Removed Requires: drbd-xen since this pulls xen onto a system
  that might not want it.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-2.sl" date="1274738400">- Updated to version 8.3.7
- Added Requires: drbd-kernel-module-8.3.7
- Added %config(noreplace) /etc/drbd.d/global_common.conf</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-2" date="1257717600">- Do not build the drbd-xen package on non x86 architectures.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-1" date="1257717600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.5-1" date="1256680800">- New upstream release.</changelog><changelog author="Florian Haas &lt;florian@linbit.com&gt; - 8.3.4-12" date="1256162400">- Packaging makeover.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.4-1" date="1254866400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.3-1" date="1254780000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.2-1" date="1246658400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.1-1" date="1238191200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.0-1" date="1229637600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.7-1" date="1226527200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.6-1" date="1212184800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.5-1" date="1202853600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.4-1" date="1200088800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.3-1" date="1199916000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.1-1" date="1194040800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.0-1" date="1191016800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.6-1" date="1188856800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.5-1" date="1186178400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.4-1" date="1182981600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.3-1" date="1178575200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.2-1" date="1175896800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.1-1" date="1172959200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt;  - 8.0.0-1" date="1169676000">- New upstream release.</changelog></package>
<package pkgid="cb5b79cb7578cb36b3f278c5379090983f68e3f6" name="drbd-pacemaker" arch="i386"><version epoch="0" ver="8.3.7" rel="3.sl"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-3.sl" date="1275429600">- Removed Requires: drbd-xen since this pulls xen onto a system
  that might not want it.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-2.sl" date="1274738400">- Updated to version 8.3.7
- Added Requires: drbd-kernel-module-8.3.7
- Added %config(noreplace) /etc/drbd.d/global_common.conf</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-2" date="1257717600">- Do not build the drbd-xen package on non x86 architectures.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.6-1" date="1257717600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.5-1" date="1256680800">- New upstream release.</changelog><changelog author="Florian Haas &lt;florian@linbit.com&gt; - 8.3.4-12" date="1256162400">- Packaging makeover.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.4-1" date="1254866400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.3-1" date="1254780000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.2-1" date="1246658400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.1-1" date="1238191200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.3.0-1" date="1229637600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.7-1" date="1226527200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.6-1" date="1212184800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.5-1" date="1202853600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.4-1" date="1200088800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.3-1" date="1199916000">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.1-1" date="1194040800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.2.0-1" date="1191016800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.6-1" date="1188856800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.5-1" date="1186178400">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.4-1" date="1182981600">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.3-1" date="1178575200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.2-1" date="1175896800">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt; - 8.0.1-1" date="1172959200">- New upstream release.</changelog><changelog author="Philipp Reisner &lt;phil@linbit.com&gt;  - 8.0.0-1" date="1169676000">- New upstream release.</changelog></package>
<package pkgid="c5776394b6b340e128f7362e29c1fcda572718e1" name="zz_apache_use_clogger" arch="noarch"><version epoch="0" ver="1.0" rel="1.el5"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.0-1" date="1359590400">- Initial build</changelog></package>
<package pkgid="9c74369b8b91712b758c7a64aba5d23250858b37" name="yum-conf-epel" arch="noarch"><version epoch="0" ver="5" rel="1.1"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; - 5-1.1" date="1323216000">- Initial build for SL5</changelog></package>
<package pkgid="5c107f409e9d8de694dd20aefe227c53ff25d099" name="rrdtool-perl" arch="i386"><version epoch="0" ver="1.3.9" rel="2.sl5"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 1.3.9-2.sl5" date="1259618400">- Added Provides for tcl, perl, python, ruby to be compatable with dag</changelog><changelog author="William R. Lorenz &lt;wrl@express.org&gt; - 1.3.9-1.wrl" date="1256767200">- Update to 1.3.9</changelog><changelog author="William R. Lorenz &lt;wrl@express.org&gt; - 1.3.8-1.wrl" date="1247954400">- Update to 1.3.8</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.7-1 - 6801/cmr" date="1242424800">- Update to 1.3.7</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.6-1" date="1234562400">- Update to 1.3.6</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.5-2" date="1231192800">- Remove fc10 conditionals
- Compile against evolution28 version of pango,cairo,glib on el4</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.5-1" date="1230674400">- Update version
- Add BuildRequires: ruby for macro expansion
- Add BuildRequires: gettext-devel
- Add Requires: gettext
- Add fc10 conditionals</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.4-2" date="1227477600">- Removed 1.2.x patches.
- Removed dependencies cgilib.
- Added dependencies pango, cairo.</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.3.4-1" date="1227477600">- Updated to release 1.3.4.</changelog><changelog author="Christoph Maser &lt;cmr@financial.com&gt; - 1.2.28-1" date="1224108000">- Updated to release 1.2.28.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.23-1" date="1181167200">- Updated to release 1.2.23.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.21-1" date="1178143200">- Updated to release 1.2.21.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.18-1" date="1169848800">- Updated to release 1.2.18.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.15-1" date="1153346400">- Updated to release 1.2.15.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.13-1" date="1146866400">- Updated to release 1.2.13.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.12-1" date="1135029600">- Updated to release 1.2.12.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.11-1" date="1122501600">- Updated to release 1.2.11.
- Fixes for x86_64 and perl/tcl/python bindings.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.9-1" date="1117922400">- Updated to release 1.2.9.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.8-1" date="1116453600">- Updated to release 1.2.8.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.6-1" date="1115762400">- Updated to release 1.2.6.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.2-1" date="1115503200">- Updated to release 1.2.2.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.1-1" date="1115503200">- Updated to release 1.2.1.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.2.0-1" date="1114812000">- Updated to release 1.2.0.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.49-2" date="1112652000">- Fix for the php-rrdtool patch. (Joe Pruett)</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.49-1" date="1093471200">- Updated to release 1.0.49.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.48-3" date="1093471200">- Fixes for x86_64. (Garrick Staples)</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.48-3" date="1088805600">- Actually apply the patch for fixing the php module, doh!</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.48-2" date="1085695200">- Added php.d config entry to load the module once installed.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.48-1" date="1084485600">- Updated to release 1.0.48.</changelog><changelog author="Dag Wieers &lt;dag@wieers.com&gt; - 1.0.47-1" date="1081288800">- Updated to release 1.0.47.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.46-2" date="1078437600">- Change the strict dependency on perl to fix problem with the recent
  update.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.46-1" date="1073340000">- Update to 1.0.46.
- Use system libpng and zlib instead of bundled ones.
- Added php-rrdtool sub-package for the php4 module.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.45-4" date="1070661600">- Added epoch to the perl dependency to work with rpm &gt; 4.2.
- Fixed the % escaping in the perl dep.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt; 1.0.45-2" date="1069106400">- Rebuild for Fedora Core 1.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1059948000">- Update to 1.0.45.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1050530400">- Update to 1.0.42.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1049148000">- Rebuilt for Red Hat Linux 9.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1046901600">- Added explicit perl version dependency.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1046037600">- Update to 1.0.41.</changelog><changelog author="Matthias Saou &lt;http://freshrpms.net/&gt;" date="1044050400">- Update to 1.0.40.
- Spec file cleanup.</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1025906400">- 1.0.39</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1023141600">- 1.0.38</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1019253600">- 1.0.37</changelog><changelog author="Henri Gomez &lt;hgomez@users.sourceforge.net&gt;" date="1015970400">- 1.0.34
- rrdtools include zlib 1.1.4 which fix vulnerabilities in 1.1.3</changelog></package>
<package pkgid="fae7085f9a67e6060b57e5db443f9930c33cf70e" name="libpacemaker3" arch="i386"><version epoch="0" ver="1.0.1" rel="6.2.sl5"/><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1227045600">- version 1.0.1-1
- Update source tarball to revision: 6fc5ce8302ab (stable-1.0) tip
- Statistics:
    Changesets:      170
    Diff:            816 files changed, 7633 insertions(+), 6286 deletions(-)
- Changes since Pacemaker-1.0.1
+ High: ais: Allow the crmd to get callbacks whenever a node's state changes
+ High: ais: Create an option for starting the mgmtd daemon automatically
+ High: ais: Ensure HA_RSCTMP exists for use by resource agents
+ High: ais: Hook up the openais.conf config logging options
+ High: ais: Zero out the PID of disconnecting clients
+ High: cib: Ensure global updates cause a disk write when appropriate
+ High: Core: Add an extra snaity check to getXpathResults() to prevent segfaults
+ High: Core: Don't redefine __FUNCTION__ unnecessarily
+ High: Core: Repair the ability to have comments in the configuration
+ High: crmd: Bug:1975 - crmd should wait indefinitely for stonith operations to complete
+ High: crmd: Ensure PE processing does not occur for all error cases in do_pe_invoke_callback
+ High: crmd: Requests to the CIB should cause any prior PE calculations to be ignored
+ High: heartbeat: Wait for membership 'up' events before removing stale node status data
+ High: PE: Bug LF:1988 - Ensure recurring operations always have the correct target-rc set
+ High: PE: Bug LF:1988 - For unmanaged resources we need to skip the usual can_run_resources() checks
+ High: PE: Ensure the terminate node attribute is handled correctly
+ High: PE: Fix optional colocation
+ High: PE: Improve up the detection of 'new' nodes joining the cluster
+ High: PE: Prevent assert failures in master_color() by ensuring unmanaged masters are always reallocated to their current location
+ High: Tools: crm cli: parser: return False on syntax error and None for comments
+ High: Tools: crm cli: unify template and edit commands
+ High: Tools: crm_shadow - Show more line number information after validation failures
+ High: Tools: hb2openais: add option to upgrade the CIB to v3.0
+ High: Tools: hb2openais: add U option to getopts and update usage
+ High: Tools: hb2openais: backup improved and multiple fixes
+ High: Tools: hb2openais: fix class/provider reversal
+ High: Tools: hb2openais: fix testing
+ High: Tools: hb2openais: move the CIB update to the end
+ High: Tools: hb2openais: update logging and set logfile appropriately
+ High: Tools: LF:1969 - Attrd never sets any properties in the cib
+ High: Tools: Make attrd functional on OpenAIS
+ Medium: ais: Hook up the options for specifying the expected number of nodes and total quorum votes
+ Medium: ais: Look for pacemaker options inside the service block with 'name: pacemaker' instead of creating an addtional configuration block
+ Medium: ais: Provide better feedback when nodes change nodeid's (in openais.conf)
+ Medium: cib: Always store cib contents on disk with num_updates=0
+ Medium: cib: Ensure remote access ports are cleaned up on shutdown
+ Medium: crmd: Detect deleted resource operations automatically
+ Medium: crmd: Erase a node's resource operations and transient attributes after a successful STONITH
+ Medium: crmd: Find a more appropriate place to update quorum and refresh attrd attributes
+ Medium: crmd: Fix the handling of unexpected PE exits to ensure the current CIB is stored
+ Medium: crmd: Fix the recording of pending operations in the CIB
+ Medium: crmd: Initiate an attrd refresh _after_ the status section has been fully repopulated
+ Medium: crmd: Only the DC should update quorum in an openais cluster
+ Medium: Ensure meta attributes are used consistantly
+ Medium: PE: Allow group and clone level resource attributes
+ Medium: PE: Bug N:437719 - Ensure scores from colocated resources count when allocating groups
+ Medium: PE: Prevent lsb scripts from being used in globally unique clones
+ Medium: PE: Make a best-effort guess at a migration threshold for people with 0.6 configs
+ Medium: Resources: controld - ensure we are part of a clone with globally_unique=false
+ Medium: Tools: attrd - Automatically refresh all attributes after a CIB replace operation
+ Medium: Tools: Bug LF:1985 - crm_mon - Correctly process failed cib queries to allow reconnection after cluster restarts
+ Medium: Tools: Bug LF:1987 - crm_verify incorrectly warns of configuration upgrades for the most recent version
+ Medium: Tools: crm (bnc#441028): check for key error in attributes management
+ Medium: Tools: crm_mon - display the meaning of the operation's rc code instead of the status
+ Medium: Tools: crm_mon - Fix the display of timing data
+ Medium: Tools: crm_verify - check that we're being asked to validate a complete config
+ Medium: xml: Relax the restriction on the contents of rsc_locaiton.node</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1224194400">- version 1.0.0-1
- Update source tarball to revision: 388654dfef8f tip
- Statistics:
    Changesets:      261
    Diff:            3021 files changed, 244985 insertions(+), 111596 deletions(-)
- Changes since f805e1b30103
+ High: add the crm cli program
+ High: ais: Move the service id definition to a common location and make sure it is always used
+ High: build: rename hb2openais.sh to .in and replace paths with vars
+ High: cib: Implement --create for crm_shadow
+ High: cib: Remove dead files
+ High: Core: Allow the expected number of quorum votes to be configrable
+ High: Core: cl_malloc and friends were removed from Heartbeat
+ High: Core: Only call xmlCleanupParser() if we parsed anything.  Doing so unconditionally seems to cause a segfault
+ High: hb2openais.sh: improve pingd handling; several bugs fixed
+ High: hb2openais: fix clone creation; replace EVMS strings
+ High: new hb2openais.sh conversion script
+ High: PE: Bug LF:1950 - Ensure the current values for all notification variables are always set (even if empty)
+ High: PE: Bug LF:1955 - Ensure unmanaged masters are unconditionally repromoted to ensure they are monitored correctly.
+ High: PE: Bug LF:1955 - Fix another case of filtering causing unmanaged master failures
+ High: PE: Bug LF:1955 - Umanaged mode prevents master resources from being allocated correctly
+ High: PE: Bug N:420538 - Anit-colocation caused a positive node preference
+ High: PE: Correctly handle unmanaged resources to prevent them from being started elsewhere
+ High: PE: crm_resource - Fix the --migrate command
+ High: PE: MAke stonith-enabled default to true and warn if no STONITH resources are found
+ High: PE: Make sure orphaned clone children are created correctly
+ High: PE: Monitors for unmanaged resources don't need to wait for start/promote/demote actions to complete
+ High: stonithd (LF 1951): fix remote stonith operations
+ High: stonithd: fix handling of timeouts
+ High: stonithd: fix logic for stonith resource priorities
+ High: stonithd: implement the fence-timeout instance attribute
+ High: stonithd: initialize value before reading fence-timeout
+ High: stonithd: set timeouts for fencing ops to the timeout of the start op
+ High: stonithd: stonith rsc priorities (new feature)
+ High: Tools: Add hb2openais - a tool for upgrading a Heartbeat cluster to use OpenAIS instead
+ High: Tools: crm_verify - clean up the upgrade logic to prevent crash on invalid configurations
+ High: Tools: Make pingd functional on Linux
+ High: Update version numbers for 1.0 candidates
+ Medium: ais: Add support for a synchronous call to retrieve the node's nodeid
+ Medium: ais: Use the agreed service number
+ Medium: Build: Reliably detect heartbeat libraries during configure
+ Medium: Build: Supply prototypes for libreplace functions when needed
+ Medium: Build: Teach configure how to find corosync
+ Medium: Core: Provide better feedback if Pacemaker is started by a stack it doesn't support
+ Medium: crmd: Avoid calling GHashTable functions with NULL
+ Medium: crmd: Delay raising I_ERROR when the PE exits until we've had a chance to save the current CIB
+ Medium: crmd: Hook up the stonith-timeout option to stonithd
+ Medium: crmd: Prevent potential use-of-NULL in global_timer_callback
+ Medium: crmd: Rationalize the logging of graph aborts
+ Medium: PE: Add a stonith_timeout option and remove new options that are better set in rsc_defaults
+ Medium: PE: Allow external entities to ask for a node to be shot by creating a terminate=true transient node attribute
+ Medium: PE: Bug LF:1950 - Notifications do not contain all documented resource state fields
+ Medium: PE: Bug N:417585 - Don't restart group children who's individual score drops below zero
+ Medium: PE: Detect clients that disconnect before receiving their reply
+ Medium: PE: Implement a true maintenance mode
+ Medium: PE: Implement on-fail=standby for NTT.  Derived from a patch by Satomi TANIGUCHI
+ Medium: PE: Print the correct message when stonith is disabled
+ Medium: PE: ptest - check the input is valid before proceeding
+ Medium: PE: Revert group stickiness to the 'old way'
+ Medium: PE: Use the correct attribute for action 'requires' (was prereq)
+ Medium: stonithd: Fix compilation without full heartbeat install
+ Medium: stonithd: exit with better code on empty host list
+ Medium: tools: Add a new regression test for CLI tools
+ Medium: tools: crm_resource - return with non-zero when a resource migration command is invalid
+ Medium: tools: crm_shadow - Allow the admin to start with an empty CIB (and no cluster connection)
+ Medium: xml: pacemaker-0.7 is now an alias for the 1.0 schema</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1222120800">- version 0.7.3-1
- Update source tarball to revision: 33e677ab7764+ tip
- Statistics:
    Changesets:      133
    Diff:            89 files changed, 7492 insertions(+), 1125 deletions(-)
- Changes since f805e1b30103
+ High: Tools: add the crm cli program
+ High: Core: cl_malloc and friends were removed from Heartbeat
+ High: Core: Only call xmlCleanupParser() if we parsed anything.  Doing so unconditionally seems to cause a segfault
+ High: new hb2openais.sh conversion script
+ High: PE: Bug LF:1950 - Ensure the current values for all notification variables are always set (even if empty)
+ High: PE: Bug LF:1955 - Ensure unmanaged masters are unconditionally repromoted to ensure they are monitored correctly.
+ High: PE: Bug LF:1955 - Fix another case of filtering causing unmanaged master failures
+ High: PE: Bug LF:1955 - Umanaged mode prevents master resources from being allocated correctly
+ High: PE: Bug N:420538 - Anit-colocation caused a positive node preference
+ High: PE: Correctly handle unmanaged resources to prevent them from being started elsewhere
+ High: PE: crm_resource - Fix the --migrate command
+ High: PE: MAke stonith-enabled default to true and warn if no STONITH resources are found
+ High: PE: Make sure orphaned clone children are created correctly
+ High: PE: Monitors for unmanaged resources don't need to wait for start/promote/demote actions to complete
+ High: stonithd (LF 1951): fix remote stonith operations
+ High: Tools: crm_verify - clean up the upgrade logic to prevent crash on invalid configurations
+ Medium: ais: Add support for a synchronous call to retrieve the node's nodeid
+ Medium: ais: Use the agreed service number
+ Medium: PE: Allow external entities to ask for a node to be shot by creating a terminate=true transient node attribute
+ Medium: PE: Bug LF:1950 - Notifications do not contain all documented resource state fields
+ Medium: PE: Bug N:417585 - Don't restart group children who's individual score drops below zero
+ Medium: PE: Implement a true maintenance mode
+ Medium: PE: Print the correct message when stonith is disabled
+ Medium: stonithd: exit with better code on empty host list
+ Medium: xml: pacemaker-0.7 is now an alias for the 1.0 schema</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1219269600">- version 0.7.1-1
- Update source tarball to revision: f805e1b30103+ tip
- Statistics:
    Changesets:      184
    Diff:            513 files changed, 43408 insertions(+), 43783 deletions(-)
- Testing Notes:
+ Test hardware:
+ All testing was performed with STONITH enabled
+ Pending bugs encountered during testing:
- Changes since 0.7.0-19
+ Fix compilation when GNUTLS isnt found
+ Hg: Use the default branch name for dev
+ High: admin: Fix use-after-free in crm_mon
+ High: Build: Remove testing code that prevented heartbeat-only builds
+ High: cib: Use single quotes so that the xpath queries for nvpairs will succeed
+ High: crmd: Always connect to stonithd when the TE starts and ensure we notice if it dies
+ High: crmd: Correctly handle a dead PE process
+ High: crmd: Make sure async-failures cause the failcount to be incrimented
+ High: PE: Bug LF:1941 - Handle failed clone instance probes when clone-max &lt; #nodes
+ High: PE: Parse resource ordering sets correctly
+ High: PE: Prevent use-of-NULL - order-&gt;rsc_rh will not always be non-NULL
+ High: PE: Unpack colocation sets correctly
+ High: Tools: crm_mon - Prevent use-of-NULL for orphaned resources
+ Medium: ais: Add support for a synchronous call to retrieve the node's nodeid
+ Medium: ais: Allow transient clients to receive membership updates
+ Medium: ais: Avoid double-free in error path
+ Medium: ais: Include in the mebership nodes for which we haven't determined their hostname
+ Medium: ais: Spawn the PE from the ais plugin instead of the crmd
+ Medium: cib: By default, new configurations use the latest schema
+ Medium: cib: Clean up the CIB if it was already disconnected
+ Medium: cib: Only incriment num_updates if something actually changed
+ Medium: cib: Prevent use-after-free in client after abnormal termination of the CIB
+ Medium: Core: Fix memory leak in xpath searches
+ Medium: Core: Get more details regarding parser errors
+ Medium: Core: Repair expand_plus_plus - don't call char2score on unexpanded values
+ Medium: Core: Switch to the libxml2 parser - its significantly faster
+ Medium: Core: Use a libxml2 library function for xml -&gt; text conversion
+ Medium: crmd: Asynchronous failure actions have no parameters
+ Medium: crmd: Avoid calling glib functions with NULL
+ Medium: crmd: Do not allow an election to promote a node from S_STARTING
+ Medium: crmd: Do not vote if we've not completed the local startup
+ Medium: crmd: Fix te_update_diff() now that get_object_root() functions differently
+ Medium: crmd: Fix the lrmd xpath expressions to not contain quotes
+ Medium: crmd: If we get a join offer during an election, better restart the election
+ Medium: crmd: No further processing is needed when using the LRM's API call for failing resources
+ Medium: crmd: Only update have-quorum if the value changed
+ Medium: crmd: Repair the input validation logic in do_te_invoke
+ Medium: cts: CIB's can no longer contain comments
+ Medium: cts: Enable a bunch of tests that were incorrectly disabled
+ Medium: cts: The libxml2 parser wont allow v1 resources to use integers as parameter names
+ Medium: Don't use the cluster UID and GID directly.  Look them up based on the configured value of HA_CCMUSER
+ Medium: Fix compilation when heartbeat is not supported
+ Medium: PE: Allow groups to be involved in optional ordering constraints
+ Medium: PE: Allow sets of operations to be reused by multiple resources
+ Medium: PE: Bug LF:1941 - Mark extra clone instances as orphans and don't show inactive ones
+ Medium: PE: Determin the correct migration-threshold during resource expansion
+ Medium: PE: Implement no-quorum-policy=suicide (FATE #303619)
+ Medium: pengine: Clean up resources after stopping old copies of the PE
+ Medium: pengine: Teach the PE how to stop old copies of itself
+ Medium: Tools: Backport hb_report updates
+ Medium: Tools: cib_shadow - On create, spawn a new shell with CIB_shadow and PS1 set accordingly
+ Medium: Tools: Rename cib_shadow to crm_shadow</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1216418400">- version 0.7.0-19
- Update source tarball to revision: 007c3a1c50f5 (unstable) tip
- Statistics:
    Changesets:      108
    Diff:            216 files changed, 4632 insertions(+), 4173 deletions(-)
- Changes added since unstable-0.7
+ High: admin: Fix use-after-free in crm_mon
+ High: ais: Change the tag for the ais plugin to "pacemaker" (used in openais.conf)
+ High: ais: Log terminated processes as an error
+ High: cib: Performance - Reorganize things to avoid calculating the XML diff twice
+ High: PE: Bug LF:1941 - Handle failed clone instance probes when clone-max &lt; #nodes
+ High: PE: Fix memory leak in action2xml
+ High: PE: Make OCF_ERR_ARGS a node-level error rather than a cluster-level one
+ High: PE: Properly handle clones that are not installed on all nodes
+ Medium: admin: cibadmin - Show any validation errors if the upgrade failed
+ Medium: admin: cib_shadow - Implement --locate to display the underlying filename
+ Medium: admin: cib_shadow - Implement a --diff option
+ Medium: admin: cib_shadow - Implement a --switch option
+ Medium: admin: crm_resource - create more compact constraints that don't use lifetime (which is deprecated)
+ Medium: ais: Approximate born_on for OpenAIS based clusters
+ Medium: cib: Remove do_id_check, it is a poor substitute for ID validation by a schema
+ Medium: cib: Skip construction of pre-notify messages if no-one wants one
+ Medium: Core: Attempt to streamline some key functions to increase performance
+ Medium: Core: Clean up XML parser after validation
+ Medium: crmd: Detect and optimize the crm's behavior when processing diffs of an LRM refresh
+ Medium: Fix memory leaks when resetting the name of an XML object
+ Medium: PE: Prefer the current location if it is one of a group of nodes with the same (highest) score</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1214431200">- version 0.7.0-1
- Update source tarball to revision: bde0c7db74fb tip
- Statistics:
    Changesets:      439
    Diff:            676 files changed, 41310 insertions(+), 52071 deletions(-)
- Changes added since stable-0.6
+ High: A new tool for setting up and invoking CTS
+ High: Admin: All tools now use --node (-N) for specifying node unames
+ High: Admin: All tools now use --xml-file (-x) and --xml-text (-X) for specifying where to find XML blobs
+ High: cib: Cleanup the API - remove redundant input fields
+ High: cib: Implement CIB_shadow - a facility for making and testing changes before uploading them to the cluster
+ High: cib: Make registering per-op callbacks an API call and renamed (for clarity) the API call for requesting notifications
+ High: Core: Add a facility for automatically upgrading old configurations
+ High: Core: Adopt libxml2 as the XML processing library - all external clients need to be recompiled
+ High: Core: Allow sending TLS messages larger than the MTU
+ High: Core: Fix parsing of time-only ISO dates
+ High: Core: Smarter handling of XML values containing quotes
+ High: Core: XML memory corruption - catch, and handle, cases where we're overwriting an attribute value with itself
+ High: Core: The xml ID type doesn't allow UUIDs that start with a number
+ High: Core: Implement XPath based versions of query/delete/replace/modify
+ High: Core: Remove some HA2.0.(3,4) compatability code
+ High: crmd: Overhaul the detection of nodes that are starting vs. failed
+ High: PE: Bug LF:1459 - Allow failures to expire
+ High: PE: Have the PE do non-persistent configuration upgrades before performing calculations
+ High: PE: Replace failure-stickiness with a simple 'migration-threshold'
+ High: TE: Simplify the design by folding the tengine process into the crmd
+ Medium: Admin: Bug LF:1438 - Allow the list of all/active resource operations to be queried by crm_resource
+ Medium: Admin: Bug LF:1708 - crm_resource should print a warning if an attribute is already set as a meta attribute
+ Medium: Admin: Bug LF:1883 - crm_mon should display fail-count and operation history
+ Medium: Admin: Bug LF:1883 - crm_mon should display operation timing data
+ Medium: Admin: Bug N:371785 - crm_resource -C doesn't also clean up fail-count attributes
+ Medium: Admin: crm_mon - include timing data for failed actions
+ Medium: ais: Read options from the environment since objdb isn't completely usable yet
+ Medium: cib: Add sections for op_defaults and rsc_defaults
+ Medium: cib: Better matching notification callbacks (for detecting duplicates and removal)
+ Medium: cib: Bug LF:1348 - Allow rules and attribute sets to be referenced for use in other objects
+ Medium: cib: BUG LF:1918 - By default, all cib calls now timeout after 30s
+ Medium: cib: Detect updates that decrease the version tuple
+ Medium: cib: Implement a client-side operation timeout - Requires LHA update
+ Medium: cib: Implement callbacks and async notifications for remote connections
+ Medium: cib: Make cib-&gt;cmds-&gt;update() an alias for modify at the API level (also implemented in cibadmin)
+ Medium: cib: Mark the CIB as disconnected if the IPC connection is terminated
+ Medium: cib: New call option 'cib_can_create' which can be passed to modify actions - allows the object to be created if it doesn't exist yet
+ Medium: cib: Reimplement get|set|delete attributes using XPath
+ Medium: cib: Remove some useless parts of the API
+ Medium: cib: Remove the 'attributes' scaffolding from the new format
+ Medium: cib: Implement the ability for clients to connect to remote servers
+ Medium: Core: Add support for validating xml against RelaxNG schemas
+ Medium: Core: Allow more than one item to be modified/deleted in XPath based operations
+ Medium: Core: Fix the sort_pairs function for creating sorted xml objects
+ Medium: Core: iso8601 - Implement subtract_duration and fix subtract_time
+ Medium: Core: Reduce the amount of xml copying occuring
+ Medium: Core: Support value='value+=N' XML updates (in addtion to value='value++')
+ Medium: crmd: Add support for lrm_ops-&gt;fail_rsc if its available
+ Medium: crmd: HB - watch link status for node leaving events
+ Medium: crmd: Bug LF:1924 - Improved handling of lrmd disconnects and shutdowns
+ Medium: crmd: Do not wait for actions with a start_delay over 5 minutes. Confirm them immediately
+ Medium: PE: Bug LF:1328 - Don't fencing nodes in clusters without managed resources
+ Medium: PE: Bug LF:1461 - Give transient node attributes (in &lt;status/&gt;) preference over persistent ones (in &lt;nodes/&gt;)
+ Medium: PE: Bug LF:1884, Bug LF:1885 - Implement N:M ordering and colocation constraints
+ Medium: PE: Bug LF:1886 - Create a resource and operation 'defaults' config section
+ Medium: PE: Bug LF:1892 - Allow recurring actions to be triggered at known times
+ Medium: PE: Bug LF:1926 - Probes should complete before stop actions are invoked
+ Medium: PE: Fix the standby when it's set as a transient attribute
+ Medium: PE: Implement a global 'stop-all-resources' option
+ Medium: PE: Implement cibpipe, a tool for performing/simulating config changes "offline"
+ Medium: PE: We don't allow colocation with specific clone instances
+ Medium: Tools: pingd - Implement a stack-independant version of pingd
+ Medium: xml: Ship an xslt for upgrading from 0.6 to 0.7</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1213912800">- version 0.6.5-1
- Update source tarball to revision: b9fe723d1ac5 tip
- Statistics:
    Changesets:      48
    Diff:            37 files changed, 1204 insertions(+), 234 deletions(-)
- Changes since Pacemaker-0.6.4
+ High: Admin: Repair the ability to delete failcounts
+ High: ais: Audit IPC handling between the AIS plugin and CRM processes
+ High: ais: Have the plugin create needed /var/lib directories
+ High: ais: Make sure the sync and async connections are assigned correctly (not swapped)
+ High: cib: Correctly detect configuration changes - num_updates does not count
+ High: PE: Apply stickiness values to the whole group, not the individual resources
+ High: PE: Bug N:385265 - Ensure groups are migrated instead of remaining partially active on the current node
+ High: PE: Bug N:396293 - Enforce manditory group restarts due to ordering constraints
+ High: PE: Correctly recover master instances found active on more than one node
+ High: PE: Fix memory leaks reported by Valgrind
+ Medium: Admin: crm_mon - Misc improvements from Satomi Taniguchi
+ Medium: Bug LF:1900 - Resource stickiness should not allow placement in asynchronous clusters
+ Medium: crmd: Ensure joins are completed promptly when a node taking part dies
+ Medium: PE: Avoid clone instance shuffling in more cases
+ Medium: PE: Bug LF:1906 - Remove an optimization in native_merge_weights() causing group scores to behave eratically
+ Medium: PE: Make use of target_rc data to correctly process resource operations
+ Medium: PE: Prevent a possible use of NULL in sort_clone_instance()
+ Medium: TE: Include target rc in the transition key - used to correctly determin operation failure</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1211493600">- version 0.6.4-1
- Update source tarball to revision: 226d8e356924 tip
- Statistics:
    Changesets:       55
    Diff:             199 files changed, 7103 insertions(+), 12378 deletions(-)
- Changes since Pacemaker-0.6.3
+ High: crmd: Bug LF:1881 LF:1882 - Overhaul the logic for operation cancelation and deletion
+ High: crmd: Bug LF:1894 - Make sure cancelled recurring operations are cleaned out from the CIB
+ High: PE: Bug N:387749 - Colocation with clones causes unnecessary clone instance shuffling
+ High: PE: Ensure 'master' monitor actions are cancelled _before_ we demote the resource
+ High: PE: Fix assert failure leading to core dump - make sure variable is properly initialized
+ High: PE: Make sure 'slave' monitoring happens after the resource has been demoted
+ High: PE: Prevent failure stickiness underflows (where too many failures become a _positive_ preference)
+ Medium: Admin: crm_mon - Only complain if the output file could not be opened
+ Medium: Common: filter_action_parameters - enable legacy handling only for older versions
+ Medium: PE: Bug N:385265 - The failure stickiness of group children is ignored until it reaches -INFINITY
+ Medium: PE: Implement master and clone colocation by exlcuding nodes rather than setting one's score to INFINITY (similar to cs: 756afc42dc51)
+ Medium: TE: Bug LF:1875 - Correctly find actions to cancel when their node leaves the cluster</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1208988000">- version 0.6.3-1
- Update source tarball to revision: fd8904c9bc67 tip
- Statistics:
    Changesets:      117
    Diff:            354 files changed, 19094 insertions(+), 11338 deletions(-)
- Changes since Pacemaker-0.6.2
+ High: Admin: Bug LF:1848 - crm_resource - Pass set name and id to delete_resource_attr() in the correct order
+ High: Build: SNMP has been moved to the management/pygui project
+ High: crmd: Bug LF1837 - Unmanaged resources prevent crmd from shutting down
+ High: crmd: Prevent use-after-free in lrm interface code (Patch based on work by Keisuke MORI)
+ High: PE: Allow the cluster to make progress by not retrying failed demote actions
+ High: PE: Anti-colocation with slave shouldn't prevent master colocation
+ High: PE: Bug LF 1768 - Wait more often for STONITH ops to complete before starting resources
+ High: PE: Bug LF1836 - Allow is-managed-default=false to be overridden by individual resources
+ High: PE: Bug LF185 - Prevent pointless master/slave instance shuffling by ignoring the master-pref of stopped instances
+ High: PE: Bug N-191176 - Implement interleaved ordering for clone-to-clone scenarios
+ High: PE: Bug N-347004 - Ensure clone notifications are always sent when an instance is stopped/started
+ High: PE: Bug N-347004 - Include notification ordering is correct for interleaved clones
+ High: PE: Bug PM-11 - Directly link probe_complete to starting clone instances
+ High: PE: Bug PM1 - Fix setting failcounts when applied to complex resources
+ High: PE: Bug PM12, LF1648 - Extensive revision of group ordering
+ High: PE: Bug PM7 - Ensure masters are always demoted before they are stopped
+ High: PE: Create probes after allocation to allow smarter handling of anonymous clones
+ High: PE: Don't prioritize clone instances that must be moved
+ High: PE: Fix error in previous commit that allowed more than the required number of masters to be promoted
+ High: PE: Group start ordering fixes
+ High: PE: Implement promote/demote ordering for cloned groups
+ High: TE: Repair failcount updates
+ High: TE: Use the correct offset when updating failcount
+ Medium: Admin: Add a summary output that can be easily parsed by CTS for audit purposes
+ Medium: Build: Make configure fail if bz2 or libxml2 are not present
+ Medium: Build: Re-instate a better default for LCRSODIR
+ Medium: CIB: Bug LF-1861 - Filter irrelvant error status from synchronous CIB clients
+ Medium: Core: Bug 1849 - Invalid conversion of ordinal leap year to gregorian date
+ Medium: Core: Drop compataibility code for 2.0.4 and 2.0.5 clusters
+ Medium: crmd: Bug LF-1860 - Automatically cancel recurring ops before demote and promote operations (not only stops)
+ Medium: crmd: Save the current CIB contents if we detect the PE crashed
+ Medium: PE: Bug LF:1866 - Fix version check when applying compatability handling for failed start operations
+ Medium: PE: Bug LF:1866 - Restore the ability to have start failures not be fatal
+ Medium: PE: Bug PM1 - Failcount applies to all instances of non-unique clone
+ Medium: PE: Correctly set the state of partially active master/slave groups
+ Medium: PE: Don't claim to be stopping an already stopped orphan
+ Medium: PE: Ensure implies_left ordering constraints are always effective
+ Medium: PE: Indicate each resource's 'promotion' score
+ Medium: PE: Prevent a possible use-of-NULL
+ Medium: PE: Reprocess the current action if it changed (so that any prior dependancies are updated)
+ Medium: TE: Bug LF-1859 - Wait for fail-count updates to complete before terminating the transition
+ Medium: TE: Bug LF:1859 - Don't abort graphs due to our own failcount updates
+ Medium: TE: Bug LF:1859 - Prevent the TE from interupting itself</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1203026400">- version 0.6.2-1
- Update source tarball to revision: 28b1a8c1868b tip
- Statistics:
    Changesets:    11
    Diff:          7 files changed, 58 insertions(+), 18 deletions(-)
- Changes since Pacemaker-0.6.1
+ haresources2cib.py: set default-action-timeout to the default (20s)
+ haresources2cib.py: update ra parameters lists
+ Medium: SNMP: Allow the snmp subagent to be built (patch from MATSUDA, Daiki)
+ Medium: Tools: Make sure the autoconf variables in haresources2cib are expanded</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1202853600">- version 0.6.1-1
- Update source tarball to revision: e7152d1be933 tip
- Statistics:
    Changesets:    25
    Diff:          37 files changed, 1323 insertions(+), 227 deletions(-)
- Changes since Pacemaker-0.6.0
+ High: CIB: Ensure changes to top-level attributes (like admin_epoch) cause a disk write
+ High: CIB: Ensure the archived file hits the disk before returning
+ High: CIB: Repair the ability to do 'atomic incriment' updates (value="value++")
+ High: crmd: Bug #7 - Connecting to the crmd immediately after startup causes use-of-NULL
+ Medium: CIB: Mask cib_diff_resync results from the caller - they don't need to know
+ Medium: crmd: Delay starting the IPC server until we're fully functional
+ Medium: CTS: Fix the startup patterns
+ Medium: PE: Bug 1820 - Allow the first resource in a group to be migrated
+ Medium: PE: Bug 1820 - Check the colocation dependancies of resources to be migrated</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1200348000">- version 0.6.0-2
- This is the first release of the Pacemaker Cluster Resource Manager formerly part of Heartbeat.
- For those looking for the GUI, mgmtd, CIM or TSA components, they are now found in
  the new pacemaker-pygui project.  Build dependancies prevent them from being
  included in Heartbeat (since the built-in CRM is no longer supported) and,
  being non-core components, are not included with Pacemaker.
- Update source tarball to revision: c94b92d550cf
- Statistics:
    Changesets:      347
    Diff:            2272 files changed, 132508 insertions(+), 305991 deletions(-)
- Test hardware:
  + 6-node vmware cluster (sles10-sp1/256Mb/vmware stonith) on a single host (opensuse10.3/2Gb/2.66Ghz Quad Core2)
  + 7-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon/ssh stonith)
- Notes: Heartbeat Stack
  + All testing was performed with STONITH enabled
  + The CRM was enabled using the "crm respawn" directive
  + Testing
    2-nodes ::= 1000 CTS iterations (passed)
    4-nodes ::= 1000 CTS iterations (passed)
    6-nodes ::= 2000 CTS iterations (passed)
  + Total estimated cluster transitions: 18000
- Notes: OpenAIS Stack
  + This release contains a preview of support for the OpenAIS cluster stack
  + The current release of the OpenAIS project is missing two important
    patches that we require.  OpenAIS packages containing these patches are
    available for most major distributions at:
      http://download.opensuse.org/repositories/server:/ha-clustering
  + The OpenAIS stack is not currently recommended for use in clusters that
    have shared data as STONITH support is not yet implimented
  + pingd is not yet available for use with the OpenAIS stack
  + 3 significant OpenAIS issues were found during testing of 4 and 6 node
    clusters.  We are activly working together with the OpenAIS project to
    get these resolved.
  + Testing
    2-nodes ::= 1000 CTS iterations (passed)
    4-nodes ::= 1000 CTS iterations (sporadic problems - see pending bugs)
    6-nodes ::= 1000 CTS iterations (significant problems - see pending bugs)
  + Total estimated cluster transitions: 12000
- Pending bugs encountered during testing:
  + OpenAIS   #1736 - Openais membership took 20s to stabilize
  + Heartbeat #1750 - ipc_bufpool_update: magic number in head does not match
  + OpenAIS   #1793 - Assertion failure in memb_state_gather_enter()
  + OpenAIS   #1796 - Cluster message corruption
- Changes since Heartbeat-2.1.2-24
+ High: Add OpenAIS support
+ High: Admin: crm_uuid - Look in the right place for Heartbeat UUID files
+ High: admin: Exit and indicate a problem if the crmd exits while crmadmin is performing a query
+ High: cib: Fix CIB_OP_UPDATE calls that modify the whole CIB
+ High: cib: Fix compilation when supporting the heartbeat stack
+ High: cib: Fix memory leaks caused by the switch to get_message_xml()
+ High: cib: HA_VALGRIND_ENABLED needs to be set _and_ set to 1|yes|true
+ High: cib: Use get_message_xml() in preference to cl_get_struct()
+ High: cib: Use the return value from call to write() in cib_send_plaintext()
+ High: Core: ccm nodes can legitimately have a node id of 0
+ High: Core: Fix peer-process tracking for the Heartbeat stack
+ High: Core: Heartbeat doesn't send status notifications for nodes that were already part of the cluster.  Fake them instead
+ High: CRM: Add children to HA_Messages such that the field name matches F_XML_TAGNAME
+ High: crm: Adopt a more flexible appraoch to enabling Valgrind
+ High: crm: Fix compilation when bzip2 is not installed
+ High: CRM: Future-proof get_message_xml()
+ High: crmd: Filter election responses based on time not FSA state
+ High: crmd: Handle all possible peer states in crmd_ha_status_callback()
+ High: crmd: Make sure the current date/time is set - prevents use-of-NULL when evaluating rules
+ High: crmd: Relax an assertion regrading  ccm membership instances
+ High: crmd: Use (node-&gt;processes&amp;crm_proc_ais) to accurately update the CIB after replace operations
+ High: crmd: Heartbeat: Accurately record peer client status
+ High: PE: Bug 1777 - Allow colocation with a resource in the Stopped state
+ High: PE: Bug 1822 - Prevent use-of-NULL in PromoteRsc()
+ High: PE: Implement three recovery policies based on op_status and op_rc
+ High: PE: Parse fail-count correctly (it may be set to ININFITY)
+ High: PE: Prevent graph-loop when stonith agents need to be moved around before a STONITH op
+ High: PE: Prevent graph-loops when two operations have the same name+interval
+ High: te: Cancel active timers when destroying graphs
+ High: TE: Ensure failcount is set correctly for failed stops/starts
+ High: TE: Update failcount for oeprations that time out
+ Medium: admin: Prevent hang in crm_mon -1 when there is no cib connection - Patch from Junko IKEDA
+ Medium: cib: Require --force|-f when performing potentially dangerous commands with cibadmin
+ Medium: cib: Tweak the shutdown code
+ Medium: Common: Only count peer processes of active nodes
+ Medium: Core: Create generic cluster sign-in method
+ Medium: core: Fix compilation when Heartbeat support is disabled
+ Medium: Core: General cleanup for supporting two stacks
+ Medium: Core: iso6601 - Support parsing of time-only strings
+ Medium: core: Isolate more code that's only needed when SUPPORT_HEARTBEAT is enabled
+ Medium: crm: Improved logging of errors in the XML parser
+ Medium: crmd: Fix potential use-of-NULL in string comparison
+ Medium: crmd: Reimpliment syncronizing of CIB queries and updates when invoking the PE
+ Medium: crm_mon: Indicate when a node is both in standby mode and offline
+ Medium: PE: Bug 1822 - Don't try an promote groups if not all of it is active
+ Medium: PE: on_fail=nothing is an alias for 'ignore' not 'restart'
+ Medium: PE: Prevent a potential use-of-NULL in cron_range_satisfied()
+ snmp subagent: fix a problem on displaying an unmanaged group
+ snmp subagent: use the syslog setting
+ snmp: v2 support (thanks to Keisuke MORI)
+ snmp_subagent - made it not complain about some things if shutting down</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1197324000">- version 0.6.0-1
- Initial package check-in</changelog></package>
<package pkgid="6d0bc26550a1a9f8ec7bab7c2ae2dd0b7191a919" name="kernel-module-drbd-2.6.18-398.el5" arch="i686"><version epoch="0" ver="8.3.7" rel="1.sl5"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-1" date="1271116800">- Update to 8.3.7
- Separated the kernel module out to a separate rpm
  This is because the driver is now in the generic kernel
- Combined spec files from atrpms and normal SL kernel module specs</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.3.6-27" date="1259539200">- Update to 8.3.6.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.3.2-25" date="1252454400">- Update to 8.3.2.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.3.1-24" date="1240272000">- Update to 8.3.1.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.2.7-23" date="1228694400">- Update to 8.2.7.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.2.6-22" date="1223078400">- Update to 8.2.6.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.2.5-21" date="1206230400">- Update to 8.2.5.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.2.1-20" date="1195862400">- Update to 8.2.1.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.0.4-18" date="1185926400">- Update to 8.0.4.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.24-17" date="1185926400">- Update to 0.7.24.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.23-15" date="1168732800">- Update to 0.7.23.
- Fix summary (#1110).</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.22-14" date="1167782400">- Update to 0.7.22.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.21-13" date="1161561600">- Update to 0.7.21.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.20-12" date="1153180800">- Update to 0.7.20.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1143331200">- Update to 0.7.17.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1141776000">- Update to 0.7.16.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1121212800">- Update to 0.7.11.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1114128000">- Update to 0.7.10.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1106524800">- Update to 0.7.8.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1105574400">- Update to 0.7.7.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1096848000">- Update to 0.7.5.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1087689600">- Initial build.</changelog></package>
<package pkgid="dcafa2fce8e3bb4ce4fce12c48af881d6b76c7e7" name="yum-conf" arch="noarch"><version epoch="35" ver="511" rel="3.slf"/><changelog author="csieh &lt;csieh@fnal.gov&gt; 511-1.slf" date="1416960000">- changed to non-rolling tree</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 58-2.sl" date="1334102400">- changed to non-rolling tree</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 58-0.rolling.sl" date="1329955200">- refactored to be more like what we are doing in SL6</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 57-1.SL" date="1312502400">- Moved everything from rolling to 57</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 57-0.2.rolling.SL" date="1312502400">- Fixed the sl.repo, which was still pointing to 56</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 57-0.1.rolling.SL" date="1312502400">- Moved everything to rolling</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 56-1.SL" date="1307491200">- Updated everything to say 56 instead of 5rolling</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 56-0.1.rolling.SL" date="1296518400">- Updated sl-srpms.repo to read [sl-source] instead of [sl-srpms]
- Moved everything to rolling</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 53-3.SL" date="1247702400">- Updated yum.conf to say the default installonly_limit is 4</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 53-2.SL" date="1247529600">- Updated gpg keys to include sl and sl5
- Updated download server list to include ftp1.scientificlinux.org</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 53-1.SL" date="1235520000">- Move everything from 5rolling to 53</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 53-0.1.rolling.SL" date="1233100800">- Changed all the 52's to 5rolling</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 52-2.SL" date="1214265600">- Added priorities to the repos.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 52-1.SL" date="1213401600">- Move everything from 5rolling to 52</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 52-0.2.rolling.SL" date="1213228800">- Added comments in yum.conf for installonlyn</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 52-0.1.rolling.SL" date="1203638400">- Moved everything from 51 to 5rolling</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 51-0.2.rolling.SL" date="1197590400">- Changed /etc/yum.conf to noreplace</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 51-0.1.rolling.SL" date="1195084800">- Changed the repos from 50 to 5rolling
- Changed the default from ftp to http, with ftp as the fallback</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 50-3.SL" date="1177718400">- Added commented out mirrorlist to sl.repo, sl-security.repo, sl-fastbugs.repo</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 50-2.SL" date="1177200000">- Fixed contrib, fastbugs, debuginfo, bugfix-51 repo's</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 50-1.SL" date="1177113600">- Change repositories from 5rolling to 50
- Added sl-fastbugs, sl-bugfix-51, sl-contrib, sl-debuginfo, sl-srpms repositories</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 50-0.5.rolling.SL" date="1175558400">- Changed sl repos to reflect the new directory structure</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 50-0.4.rolling.SL" date="1175126400">- Separated the stuff for yum-autoupdate
- added Provides: yum-conf</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 50-0.3.rolling.SL" date="1166745600">- Changed yum repositories to reflect the new current reality</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 50-0.2.rolling.SL" date="1166745600">- Changed yum repositories to reflect current reality</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 50-0.1.rolling.SL" date="1165622400">- Created 50 from the last 44 release</changelog></package>
<package pkgid="e1cf32746fdbf9680f98a4a22b0ff44026ea6720" name="krb5-auth-dialog" arch="i386"><version epoch="0" ver="0.7" rel="1.slf5"/><changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1410566400">- Added Source: krb5-auth-dialog.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*) =&gt; \1.slf5
--&gt;  Modify release string to note changes for SLF5
- Added Patch: fix-session-manager.patch
--&gt;  Fix Session bug, see BZ1140848/RITM0115117</changelog><changelog author="Christopher Aillon &lt;caillon@redhat.com&gt; - 0.7-1" date="1153785600">- Update to 0.7
- Don't peg the network and CPU when the KDC is unavailable</changelog><changelog author="John (J5) Palmieri &lt;johnp@redhat.com&gt; - 0.6.cvs20060212-4" date="1153353600">- rebuild for dbus</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 0.6.cvs20060212-3.1" date="1152748800">- rebuild</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 0.6.cvs20060212-3" date="1151193600">- Add missing BRs perl-XML-Parser, gettext
- Work around no network manager stuff on z900s</changelog><changelog author="Christopher Aillon &lt;caillon@redhat.com&gt; - 0.6.cvs20060212-1" date="1139788800">- Update to latest CVS to get some of Nalin's fixes</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 0.6-1.1" date="1139356800">- rebuilt for new gcc4.1 snapshot and glibc changes</changelog><changelog author="Christopher Aillon &lt;caillon@redhat.com&gt; 0.6-1" date="1138752000">- Update to 0.6, adding an autostart file</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 0.5-2.1" date="1134172800">- rebuilt</changelog><changelog author="John (J5) Palmieri &lt;johnp@redhat.com&gt; - 0.5-2" date="1133481600">- rebuild for new dbus</changelog><changelog author="Christopher Aillon &lt;caillon@redhat.com&gt; 0.5-1" date="1131494400">- Update to 0.5</changelog><changelog author="Christopher Aillon &lt;caillon@redhat.com&gt; 0.4-1" date="1130889600">- Update to 0.4</changelog><changelog author="Christopher Aillon &lt;caillon@redhat.com&gt; 0.3-1" date="1130803200">- Update to 0.3, working with newer versions of krb5 and NetworkManager</changelog><changelog author="David Zeuthen &lt;davidz@redhat.com&gt;" date="1124236800">- Rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.2-5" date="1111536000">- Change Requires: krb5 to krb5-libs, repeat $ -&gt; % fix for build requirements.</changelog><changelog author="Dan Williams &lt;dcbw@redhat.com&gt; 0.2-4" date="1111536000">- Fix $ -&gt; % for Requires: krb5 &gt;= ...</changelog><changelog author="David Zeuthen &lt;davidz@redhat.com&gt; 0.2-3" date="1111449600">- Fix up BuildRequires and Requires (#134704)</changelog><changelog author="David Zeuthen &lt;davidz@redhat.com&gt; 0.2-2" date="1109980800">- Rebuild</changelog><changelog author="GNOME &lt;jrb@redhat.com&gt; - auth-dialog" date="1092700800">- Initial build.</changelog></package>
<package pkgid="91704c4951ebabcb1815526bfcd45e9eb30e393b" name="heartbeat-common" arch="i386"><version epoch="0" ver="2.99.2" rel="6.1.sl5.1"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt;" date="1370469600">- fixed up libnet and libnet-devel dependencies</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1222725600">- version 2.99.1-1
- Update source tarball to revision: d8710f41b9cb
- Includes many fixes to init scripts.
- Add sbd for shared-storage fencing.</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1219356000">- version 2.99.0-1
- Update source tarball to revision: f23531dd23ad</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1207087200">- version 2.1.3-18
- Added two small patches for Bug LF-1833: Do not overwrite op_status depending on op_rc</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1200348000">- version 2.1.3-1
- Update source tarball to revision: 9cdeae333990
- Statistics:
    Changesets:      153
    Diff:            141 files changed, 12279 insertions(+), 3103 deletions(-)
- This is the first release now that the CRM has becme its own project called
  Pacemaker and no longer included with Heartbeat.
- Without the CRM present, the following components are also no longer able to
  be included with Heartbeat (as they require CRM libraries) and are instead
  provided as part of pacemaker or the new pacemaker-pygui project.
   cim
   snmp
   mgmtd
   pygui
   tsa_subagent
- RPM-based distributions also have a new package layout
   heartbeat-resources ::= resource agents
   heartbeat-common    ::= components that are useful regardless of which stack is being used
   heartbeat           ::= components that are specific to the Heartbeat stack
- Changes since obs-2.1.2-24
+ apache RA: remove children in case the top process didn't
+ apcsmart: make message more descriptive
+ build (LF 1803): add -fgnu89-inline to CFLAGS if gcc version is &gt;=4.1.3 and &lt;4.3
+ by request from Andrew - Modified the external/ssh plugin to have a livedangerously flag
+ ccm (LF 1806): restart all instead of exiting (low impact)
+ Changed a test from causing a reboot to not triggering a reboot - because it doesn't seem to any more
+ Changed HIGHLY to STRONGLY in how strongly we recommend STONITH
+ Corrected a warning found on FC8 in the cl_reboot code
+ debian: Add dependancy on libpam-runtime (&gt;= 0.76-14)
+ Debian: add libxml2-utils as a dependancy, because we need xmllint for the BSC
+ Debian: add the new ibmrsa-telnet stonith plugin
+ debian: clean python bytecode
+ debian: clean up stale heartbeat-2 files
+ debian: don't install bytecompiled python modules
+ debian: patches need to be distributed
+ debian: remove chown patch
+ debian: Update standards version from 3.7.2 to 3.7.3
+ debian: update the name of the series file to reflect the new release
+ docs/packaging: reshuffle hb_report documentation and include the html version
+ dopd: don't cl_free variables on local stack
+ dopd: don't hardcode path of drbdadm; it has to be in the PATH, though.
+ dopd: fix potential segfault due to leakage of invalid/freed pointer
+ dopd: make it work with multiple concurrent outdate requests
+ external ipmi plugin caused error messages when getting metadata on machine w/o ipmitool installed.  This somewhat messed up BasicSanityCheck.
+ Filesystem: Make mount point required for the GUI (Hideo Yamauchi)
+ Fix memory leak in external plugin handling
+ fixes for fedora: system(3) function return value cannot be ignored. Also added a missing RPM build dependency.
+ hb_report: add quotes around args to test -f
+ hb_report: don't surprise user by reading the files from the current directory
+ hb_report: include hostcache
+ hb_report: replace arch with uname -m
+ hg: from last changes to recover from media errors, fixed a stupid typo with a reversed boolean condition.
+ hg: LF bug 1794: ComponentFail tests failing
+ hg: Makefile for external stonith commands was missing new stonith plugin in the extra_dist section
+ High: Heartbeat: Include an option to start the CRM in respawn mode
+ init: add should-start/stop $remote_fs to init script
+ init: should-start/stop $remote_fs to init script
+ ipc (LF 1339): enable message compression
+ IPv6addr: Check for netinet/icmp6.h instead of  linux/icmpv6.h
+ IPv6addr: Check for netinet/icmp6.h instead of linux/icmpv6.h
+ iscsi RA: wait for udev to create the links
+ Junko IKEDA reported a problem building on Red Hat with tog-pegasus installed - this fixes that problem - the code half-setup things if pegasus was present but --enable-cim-provider wasn't enabled
+ ldirectord: add forking mode
+ ldirectord: SimpleTCP service check
+ ldirectord: SimpleTCP service check documentation
+ ldirectord: Various updates to OCF compatible RA
+ lf bug 1678: stonith command core dumps with -h option
+ LF bug 1690: there should be a tool to audit (validate) node names in constraints among other things...
+ LF Bug 1732: Error handling is bad for comm media
+ LF bug 1732: restructuring code towards being able to restart (reopen) communication media when they die
+ LF bug 1795 - timeout control for crm_mon --one-shot
+ LF bugzilla 1667:  ppc64 RPMs contain 32-bit binaries
+ LRM (LF 1821): resource timing information
+ lrm reg tests: handle OCF_ROOT, warn about xmllint missing
+ LRM regtest: update filters to match the lrmadmin output
+ lrmadmin: include time.h
+ Monitor timeouts need to increment fail counts
+ OCF-resources: SphinxSearchDaemon is not installed
+ OpenBSD bugs: 1731 1761 1743 1659
+ packaging: include iscsi
+ pgsql RA: handle the missing pg software properly (thanks to Serge)
+ pgsql RA: move check for root down to enable meta-data for regular users (thanks Serge)
+ pgsql RA: postmaster confusion
+ Put the _source_ (.in) file under source control.  Groan...
+ RA Filesystem: add lustre to the list of fs which don't need fsck
+ RA iscsi: dropped complex code in favour of udev and several small cleanups
+ RA iscsi: fix meta-data xml
+ RA iscsi: get rid of one annoying message ("no active sessions")
+ RA iscsi: new iscsi resource agent
+ RA iscsi: support iscsi sles compat mode
+ RA iscsi: two echo statements removed
+ RA mysql: don't look for mysql users in the OS database (thanks to Christian Rishoj)
+ RA SAPDatabase/SAPInstance: report proper exit codes in case required software is not installed
+ RA SphinxSearchDaemon: a new RA thanks to Christian Rishoj
+ recovermgrd: changed the code to look at the return code from fwrite, to make Fedora 8 compiler compile recovermgrd warning-free.
+ Removed bzip2-devel as a build dependency for all but Fedora and RH
+ RPM and specfile changes to fix part of and help diagnose part of Junko IKEDA's problem with tog-pegasus
+ RPM spec file: Added ciblint to installed programs
+ RPM specfile change:  made is_fedora macro turn off is_rhel macro
+ shell scripts: various cases of overquoting in the for statement (thanks to Takekazu Okamoto)
+ stonith ibmrsa-telnet: new stonith plugin
+ stonith ipmi: new external stonith plugin
+ utillib.sh: update finding the binary which coredumped
+ Xen RA: new improved (thanks to Sebastian Reitenbach)
+ [patch] init: add should-start/stop $remote_fs to init script</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1196114400">- version 2.1.2-24
- Update the source tarball to revision ef1be5978d97
- Statistics:
    Changesets:       104
    Diff:             296 files changed, 3464 insertions(+), 3275 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb/vmware stonith) on a single host (opensuse10.3/2Gb/2.66Ghz Quad Core2)
  + 7-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon/ssh stonith)
- All testing was performed with STONITH enabled
- Pending bugs encountered during testing:
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-15
+ High: CIB: Fix the behavior of update_attr() and delete_attr() when the command is ambiguous
+ High: CRM: In ccm_have_quorum(), an OC_EV_MS_PRIMARY_RESTORED event means we _do_ have quorum
+ High: PE: Bug 1765 - Prevent master-master colocation constraints from preventing slaves from starting
+ High: PE: Introduce a new API call for determining the location of complex resources
+ High: PE: Set next_role recursivly so that group promotion will work
+ High: PE: increment_clone() did not overflow correctly 9-&gt;10, 99-&gt;100, etc
+ High: crmd: Prevent shutdown hangs caused by pending ops that can't be cancelled - because the no longer exist in the lrm
+ High: heartbeat: Fix getnodes() compilation with gcc 4.3
+ High: Novell 293922: Don't use non-blocking writers, but instead don't block
+ High: Novell 293922: Heartbeat network processes would block on full buffers.
+ Medium: core: Do not disconnect blocking write processes, but discard traffic.
+ Medium: PE: All other things being equal, prefer to keep non-failed instances alive
+ Medium: PE: Create a syntactic shortcut for the common use-case of "{resource} prefers {node} with {score}"
+ Medium: PE: Dont make changes to location constraints, when applying to groups, persistent
+ Medium: TE: Allow the CRM to limit the number of resource actions the TE can execute in parallel.
+ Medium: TE: Pending operations shouldn't be processed
+ Medium: attrd: Bug 1776 - Attrd doesn't exit or reconnect when the CIB is respawned
+ Medium: crm: Dont generate core files for non-fatal assert (ie. the CRM_CHECK macro).
+ Medium: crmd: Don't remap LRM_OP_PENDING when building full lrm updates
+ Medium: crmd: Prevent shutdowns initiated immediately after a node is removed from the cluster with hb_delnode from stalling.
+ Medium: LF bugzilla 1757: apache resource agent grep methodology can't handle newlines - even if you change the pattern
+ Low: Admin: Do a full simulation when we have the live CIB - since we'll always have a status section
+ Low: Admin: crm_standby - Don't complain about missing values, print the default value instead
+ Low: PE: Actions for stonith agents should never default to requiring fencing or quorum
+ Low: PE: ptest - Handle malformed inputs more gracefully
+ Low: Rename example ha_logd.cf file to the proper name.
+ Low: cib: Increase the retry interval when connecting to the ccm to 3s
+ Low: crmd: Provide a more informative error when DCs detect other DCs during a join
+ Low: heartbeat: Use the correct define when choosing to enable valgrind - Keisuke MORI
+ Low: LF bug 1705 - cl_respawn core dumps when given -h or --help
+ Low: changed configure.in to force 64-bit objects when on gcc-based ppc64 platform
+ Low: configure.in - autoconf spells ppc64 funny...
- Unclassified user impact
+ LF 1766: Heartbeat installs man pages in the wrong directories by default...
+ LF Bug 1662: Put in some RHEL changes provided by Keisuke MORI
+ LF bug 1393 - Cannot rename /var/lib/heartbeat/hostcache.tmp to /var/lib/heartbeat/hostcache (scope, risk and severity: all minor)
+ ccm (LF 1546): ensure that the membership instance number never decrements (thanks to Guochun Shi)
+ ccm: speed up ccm considerably in case a node is alone in the membership (thanks to MATSUDA, Daiki)
+ Debian: Build: Add dependacy on gawk as it is required by the OCF IPaddr resource
+ Debian: Build: rename ha_logd.cf to logd.cf in debian/heartbeat.files
+ hb_report (LF 1763): multiple fixes
+ hb_report: add more packagers support (thanks to Sebastian Reitenbach)
+ hb_report: fix handling of debug option
+ hb_report: fix the previous fix (sorry)
+ hb_report: include package verification
+ hb_report: reduce the number of ssh invocations by 1
+ hb_report: update documentation on extracting CTS tests
+ hb_report: use getopts instead of getopt(1) for the sake of portability
+ hbagent: fix memory leaks on dropping global resources (thanks to Keisuke MORI)
+ hbagent: removed the const qualifier from parameter
+ hbagent: reset gMembershipTable on dropping global resources
+ hbclient: fix memory leaks on signon/signoff (thanks to Keisuke MORI)
+ heartbeat: Increase MAXMSGHIST; reduce debugging output.
+ ldirectord: allow per-virtual checkinterval configuration
+ lvs-users: Patch for ldirectord when using mysql service
+ mgmtd (LF 1719): fix the pam file for suse
+ mysql RA (LF 1760): defaults for OpenBSD (thanks to Sebastian Reitenbach)
+ RA Xinetd (LF 1742): multiple fixes
+ RA tomcat: allow consecutive starts
+ stonithd: (LF 1727): fix dropping privileges
+ stonithd: a copy/paste typo
+ stonithd: check for storage size when copying the host list
+ stonithd: drop root privileges earlier
+ stonithd: shuffle dropping privileges around again</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1193349600">- version 2.1.2-15
- Update the source tarball to revision c492f19cb583
- Statistics:
    Changesets:       158
    Diff:             173 files changed, 8712 insertions(+), 4787 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
  + (lmb)    7-node Xen cluster on a single host
  + (debltc) 6-node ppc64 cluster
- Pending bugs encountered during testing:
  1562 - heartbeat: hostcache file rename error at startup
  1737 - crmd: Inconsistent join state detected (Hard to reproduce, possible fix included)
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-4
+ High: cib: G_main_del_IPC_Channel() doesn't like being called with a NULL pointer and crashes
+ High: crm: Bug 1749 - Make sure the diff-related digests contain the complete CIB, not just the first line
+ High: crmd: Prevent shutdown hangs by allowing the crmd to forget about pending actions for deleted resources
+ High: PE: Bug 1712 - Ensure manditory ordering constraints can cause complex resources to be shut down
+ High: PE: Clone colocation fixes
+ High: PE: Ensure that resources depending (by order) on a master are not promoted if no master is available
+ High: PE: Fix manditory ordering with m/s resources
+ High: PE: Prevent an infinite pe/te loop when reprobing with resources in master mode
+ High: PE: Prevent use-of-NULL in crm_mon when date_expressions are used by ensuring that data_set-&gt;now is always set
+ High: PE: Prevent use-of-NULL when the admin creates a colocaiton constraint with an empty group
+ High: PE: Relax an assumption regarding clones that is not true when they are unmanaged
+ High: PE: Remove an accidental commit that, when called, causes use-of-NULL
+ High: PE: Remove an errant call to exit() than prevented an assert from being triggered
+ High: RA: Novell 329833 - dotted-quad netmask notation broken in findif
+ Medium: cib: Include digests of the cib a diff was made from and verify it when applying
+ Medium: CRM: Re-evaluate appropriate IPC message queue lengths and throtle IPC _clients_ that hit them
+ Medium: crmd: Bug 1737 - Inconsistent join state detected - Possible fix
+ Medium: PE: Bug 1722 - By default, exhibit the old start-failures-are-fatal behaviour regardless of how resource-failure-stickines is set
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: PE: Fix minor memory leak when stopping orphaned resources
+ Medium: PE: Master internal ordering enhancements. Added stopped-&gt;start, stopped-&gt;promote.
+ Medium: Tools: Bug 1738 - the crmd ignores some requests from crm_resource because it exited too quickly
+ Low: contrib: dopd - Remove a pointless and annoying dependancy on the crm
+ Low: crmd: Increase the retry interval when stalling the FSA to 2s (used when connecting to the ccm, lrmd, cib)
+ Low: crmd: Update the CIB with the node's version data when it becomes DC
+ Low: crmd: Use the unaltered rc for timed out operation events from the lrmd
+ Low: Debian: heartbeat doesn't depend on libperl-dev (probably confused by '-lperl' in configure.in)
+ Low: heartbeat: Some compilers feel that the fcli variable could be used uninitialized - shut them up
+ Low: PE: Avoid pointless copying of XML items (actions) during graph creation
+ Low: PE: Convert all the resource's boolean flags into a single bit-field
+ Low: PE: Produce a config error when a clone contains more than one resource/group to clone
+ Low: RA: PureFTPd - Support debian's pure-ftpd-wrapper script.  Patch by Raoul Bhatia
+ Low: Stonith: external/rackpdu - Fix the metadata short descriptions
+ Low: ccm: Bug 1723 - fix logging (thanks to MATSUDA, Daiki)
- Unclassified user impact
+ gui: Add "meta_attributes" support to mgmt
+ gui: Add boolean_op for location rules in mgmt
+ gui: Make several fields of rsc_location editable
+ gui: Prevent clone and master_slave from belonging to group
+ gui: Prevent haclient from falling into an error caused by blank resource metadata
+ gui: Provide "Default" setting for crm configurations
+ gui: Provide complete pengine and crmd configurations with dynamic rendering
+ gui: Rename "Places" to "Locations" to match with the CIB name
+ gui: Resolve target_role problem for sub-resource
+ gui: Specify the default type of added item to correspond to the object that the cursor focused on
+ heartbeat: Remove one unlink() of the temporary hostcache file.
+ LF bug 1502: udpport statement in ha.cf is ignored by heartbeat - trivial fix
+ LF bug 1589: ia64 heartbeat unaligned access messages (SGI965396) - copy fields in structures - minor fix
+ LF bug 1679: hardcoded heartbeat userid and group in init script (minor fix)
+ LF bug 1681: BSC fails to to identify active interface on OpenBSD (minor change)
+ LF bug 1700: HA Signon always reports success - fix has minor scope.
+ LF bug 1702: during emergency restarts, heartbeat doesn't close watchdog correctly.  Fix is minor.
+ LF bug 1712: ha_logd prevented node from shutting down - changed code to use the waitout() primitive - scope fix - trivial-minor
+ LF bug 1731: wrong location of libraries for OpenBSD 64Bit architectures, with patch
+ LF bug 1734 - removed duplicate return statement as per bug report.
+ lrm stonith plugin: fix exit code handling
+ lrmd (LF 1715): increase the max dispatch time for lrmd
+ lrmd (LF 1729): revise return codes
+ Put in a missing include of &lt;memory.h&gt; for the DRBD code.  Change scope: trivial
+ RA: mysql, pgsql - use getent(1) instead of /etc/passwd (thanks to Raoul Bhatia)
+ RA: mysql: According to Geoff Harrison the sql check is broken without this
+ RA: mysql: Allow arbitrary commandline arguments for mysqld (by Raoul Bhatia)
+ RA: Raid1: Allow the homehost setting to be specified.
+ RA: Xinetd: Fix stop/monitor to not fail if service isn't available yet.
+ stonith/ibmrsa: allow ',' in the hostlist
+ STONITH: external/ssh: Disable StrictHostKeyChecking and PasswordAuthentication by default.
+ stonithd (LF 1714,1727): fix a race condition
+ stonithd (LF 1726): a hostlist may be empty
+ stonithd (LF 1727): change attach shmem seg to read only
+ stonithd/lib: replace cookie generation with uuid
+ stonithd: have -a really mean startup alone
+ stonithd: increase the maxdispatchtime
+ stonithd: library code review and cleanup
+ tools: Add hb_report - a reporting utility</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1190757600">- version 2.1.2-4
- Update the source tarball to revision 702e4f418ca8
- Statistics:
    Changesets:       109
    Diff:             188 files changed, 5926 insertions(+), 2003 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
- Pending bugs encountered during testing:
  1377 - llm_get_nodename: index(1719751538) out of range
  1561 - Cluster node c001n03 returning after partition
  1562 - hostcache file rename error at startup
  1700 - HA Signon always reports success
  1711 - Shutdown blocked by call to cl_flush_logs()
  1712 - Shutdown blocked by ha_logd
  1714 - Stonithd core dumps
- Changes since 2.1.2-2
+ High: Core: Prevent logging buffer overflow - ensure the entity is NULL terminated.  Patch from Simon Graham.
+ High: DTD: Remove stray character that made the DTD invalid
+ High: PE: Ensure mandatory ordering constraints behave correctly
+ High: PE: Implement a smarter algorithm for colocation
+ High: PE: Include preferences of colocated resources when promoting masters
+ High: PE: Make sure only the correct number of cloned groups are started
+ High: PE: Make sure the merge_weights function is called for complex resources
+ High: PE: More accurate method of detecting colocation loops in native_merge_weights
+ High: PE: Optimize the merge_weights functionfor groups
+ High: RA: Remove bashism from Filesystem OCF agent
+ High: RA: Filesystem - Fix path reference.
+ High: RA: o2cb - Fix path broken in recent cleanups
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: crmd: Tell the LRM to refresh the resource's default parameters
+ High: core: Bug 1697 - really remove proctrack sources (performance/memory leak fix)
+ High: core: An open call with the O_CREAT flag was missing the file mode.
+ Medium: Core: Ensure heartbeat flushes all its logs before exiting
+ Medium: ipc: Up MAXMSG to match MAXUNCOMPRESSED to allow larger clusters.
+ Medium: Logging: Sanitize and centrally define the log facility used by various subsystems
+ Medium: PE: Bug 1705 - Don't segfault when allocating empty groups
+ Medium: PE: Bug 1710 - A resource's failcount was ignored on nodes with no operations for the resource
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: RA: EvmsSCC - Handle start failures caused by peers starting at the same time (Patch from Jo De Baer)
+ Medium: RA: Treat migrating (status 1) as running to avoid - patch by Per Andreas Buer
+ Medium: Stonith: Remove code-reuse to prevent excessive logging by the LRM
+ Medium: Stonith: ipmilan: fix potential segvfault in options parsing
+ Medium: cib: Improved transparency when in operating in degraded mode
+ Low: Admin: Bug 1691 - crm_resource doesn't complain about empty strings as property values
+ Low: build: configure.in: fix for platforms with libc in /lib/tls
+ Low: CIB: Allow notification to remote clients
+ Low: CRM: DTD - Expand the list of accepted values for boolean fields
+ Low: CRM: DTD - Explicitly specify a default for rsc_colocation.symmetrical
+ Low: DTD: Include helpful comment for rsc_order constraints
+ Low: PE: Downgrade logging when we fallback to default option values
+ Low: PE: More efficient logging of orphan resources
+ Low: PE: Prevent users from trying to use on_fail=fence and stonith-enabled=false
+ Low: PE: Stop the master placement score from affecting the synapse's priority
+ Low: RA: Add a tomcat OCF agent from Yamauchi Hideo
+ Low: RA: ManageVE - Fix status when VE files are not persistent
+ Low: RA: Put in updates to the Informix script as supplied by Lars Forseth
+ Low: RA: apache - drop annoying messages if no configuration files are found
+ Low: Stonith: external/ssh - simplify the reset command and wait the same amount of time as the non-external variant
+ Low: Stonith: Disable ipmilan by default
+ Low: TE: Pause for a moment before trying to reconnect to stonithd
+ Low: Tools: Allow pingd to change identity based on the name of its executable - workaround for Bug #1701
+ Low: logd: Update the default config file to reflect the new default log facility
+ Low: tools: haresources2cib.py: update parameter lists and configuration defaults
- Unclassified impact
+ lrm: Bug 1458 - include timing information in the op data.
+ lrm: Bug 1684 - a meta-data operation fix introducing short sleep on zero reads
+ lrm: log non-recurring operations
+ lrm: performance - replace linear with binary search for msg type.
+ lrm: performance - remove unnecessary memstat
+ lrm: raexecocf: a fix for bug introduced in 2a787bbd73f6; longer sleep in get_resource_meta
+ RA: Bug 1692 -  monitoring fails for apache OCF resource.  Put in simple fix to apache resource agent monitoring from Sebastian Reitenbach
+ RA: eDir88 - fix to allow meta-data to work in case NDS is not installed
+ RA: pgsql - patch to remove bashism
+ Stonith: Put in an APCmastersnmp.c patch from Peter Kruse which makes the plugin work with new APC master switches
+ Stonith: Bug 1615 - get the list of hosts from an RA asynchronously
+ mgmtd: allow old clients to connect</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187301600">- version 2.1.2-2
- Update the source tarball to revision 098c0993b1d0
- Statistics:
    Changesets:	6
    Diff:		11 files changed, 402 insertions(+), 46 deletions(-)
- Changes since 2.1.2-1
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: PE: Bug 1682 - Prevent use-of-NULL when clones have no active children
+ High: TE: target_rc should default to 0 (LRM_OP_DONE) to detect monitor actions that fail the first time they are executed
+ Medium: PE: Bug 1685 - Supply the correct defaults for rsc_order constraints
+ Low: Admin: crmadmin - exit with rc=0 when the command completed successfully</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187042400">- version 2.1.2-1
- Update the source tarball to revision 1ad8497bc55d
- Statistics:
    Changesets:	340
    Diff:		614 files changed, 39588 insertions(+), 32588 deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/1ad8497bc55d
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -r e3c9306b9223:1ad8497bc55d | sort -f
- Testing notes
+ On my underpowered cluster, the CCM borked a number of times on the Stonithd test
  However since the CCM hasn't been touched in an age, its hard to conclude there are regressions from previous releases.
  If anyone would like to volunteer to maintain the CCM (or the GUI for that matter), it would be much appreciated.
- Changes since 2.1.2 (Upstream)
+ High: CRM: Update crm/cib feature sets and the set of tags/attributes used for feature set detection
+ High: CIB: Improved CCM interaction
+ High: CRM: filter_action_parameters() - Make a copy of interval/timeout in as they're about to be free'd
+ High: PE: Break graph loops involving stonith
+ High: PE: Only create _one_ pseudo op per name (all_stopped/stonith_up)
+ High: PE: The all_stopped action should only be part of the graph when the stop actions are runnable
+ High: PE: all_stopped should only depend on native resources to avoid recursion
+ High: PE: check_action_definition() - Ensure the meta attributes are also set so that the digest is calculated correctly (and consistently with the crmd)
+ High: PE: Use failcount to handle failed stops and starts (set default_resource_failure_stickiness &gt; 0 for the old blocking behaviour)
+ High: TE: Allow reconnection to stonithd if it is respawned
+ High: TE: Allow the TE to reconnect if stonithd is killed and respawned
+ High: cib: Allow the CIB to reconnect if the CCM is killed and respawned
+ High: cib: Handle master updates that fail DTD validation
+ High: cib: Support the removal of multiple child objects - required for subsequent commit
+ High: crmd: Improvements to shutdown sequence (particularly in response to failures)
+ High: crmd: Sanitize the maintenance of node_state entries
+ High: crmd: Simplify node_state maintenance
+ High: stonithd: Sanitize the login/logout functions and add the ability to reset the callback IPC channel
+ Medium: cib: Ensure fflush() and fsync() are always called when writing XML digests to disk
+ Medium: crm: Ensure fflush() and fsync() are always called when writing XML to disk
+ Medium: crm: Bug 1680 - parse_xml() can fail to detect mismatching close tags
+ Medium: PE: Dont check the parameter digest of orphan operations
+ Medium: TE: Dont modify the failcount for 'pending' action updates (rc=-1)
+ Medium: admin: Set the exit code to non-zero if crmadmin can't connect to the crmd
+ Low: PE: Warn when multiple nodes have the same uname
+ Low: Stonith: New external plugin for handling 'APC Switched Rack PDU AP7952' devices - contributed by Sergey Maznichenko
+ Low: cib: Enhancements to logging of DTD errors
+ Low: cib: Refactor reading and writing of the CIB to disk
+ Low: crmd: Ensure our assumption that all resources have a class and type is true
+ Low: crmd: Simplify the detection of active actions and resources at shutdown
+ Low: Admin: Bug 1603 - Allow CIB digest files to be verified
+ debian: make heartbeat binNMU safe
+ stonith: ipmilan - accept documented auth and priv values
+ GUI: OSDL 1449 / Novell 291749: GUI should not overwrite more specific settings of contained resources.
+ RA: IPaddr2 - Make the check for the modprobe/iptables utilities conditional on the IP being cloned
+ RA: apache - make status quieter
+ RA: Added Informix resource agent
+ RA: eDir88 resource can't be stopped ?
+ RA: patch to fix bashism in a number of agents
+ Tools: OSDL Bug 1666: in BSC, make sure temp rsc dir exists for RAs
+ Tools: ocf-tester - use the default value for OCF_ROOT if it exists
+ Tools: ocf-tester - add capability to test with lrmadmin/lrmd
- Changes since 2.1.0-2
+ A little cleanup to make the RAs more uniformly not have $OCF_ROOT paths in them
+ Added code to cause logging to be restarted if it dies.
+ Admin: Allow crm_diff to operate on compressed inputs
+ Admin: Bug #1621 - crm_mon should show failed starts of a resource
+ Admin: Bug 1632 - Make sure error messages regarding trailing XML input characters are seen
+ Admin: Bug 1635 - crm_failcount should not complain if the attribute was already deleted
+ Admin: Bug #1622 - crm_attribute: Include --inhibit-policy-engine in the help message
+ Admin: crm_resource - remove an overly simplistic check for when -C can safely be used
+ Admin: crmadmin - include Hg version in --version output
+ Admin: ptest is useful enough to warrent installation to sbindir
+ BSC: 'trap' had been continuing instead of exiting
+ Bug 1612: haresources2cib @substitution@ broken (probably by a global change)
+ Build: No longer generate RAs now that there is a sane way to set directory locations and find binaries
+ CIB: Bug 1602 - Archive invalid/unusable configurations so we can continue
+ CIB: Bug 1633 - Pass the actual error from activateCibXml back to the user
+ CIB: config_changed always needs to be calculated when processing write commands
+ CRM: Bug 1625 - Cannot update an operation's timeout
+ CRM: Clean up processes left over by crm_abort().  Initial patch by DAIKI MATSUDA
+ CRM: Fix compare_version() to actually work correctly on a regular basis (broken since 2.0.2)
+ CRM: Fix matching of objects with an ID when the match-spec has no ID
+ CRM: Make logging setup consistent and do not log the command-line to stderr.
+ CRM: Only detect timeout changes for recurring ops
+ CRM: Remove deBug code that should not have been committed
+ Corrected a typo which only matters on 32-bit machines :-(
+ Corrected so that on *BSD it passes in 2 parameters, instead of 2.
+ DTD: Add helpful comment regarding rsc_colocation objects
+ Fix location of pingd binary
+ Fixed a dangling reference to a former bin directory name.
+ Fixed a fairly-major error in IPaddr - it didn't handle CIDR netmasks correctly.  But ifconfig didn't complain either...
+ Fixed a minor stonithd testing error (not much of a Bug)
+ Fixed a syntax error in Filesystem:  missing then symbol
+ Hopefully fixed a long-time SNMP annoyance.  When the membership layer shuts down (as it does in BSC),
+ LF Bug # 1617 - Miscellaneous RPM and source cleanups
+ LF Bug # 1644 - Pinging loopback in BasicSanityCheck fails with EPERM
+ LF Bug # 960 - rpm: first-time install fails
+ LF Bug 1513 - building RPM from the 2.0.8 tarball fails
+ LF Bug 1527 - inappropriate warnings about core files logged by heartbeat (SGI961667)
+ LF Bug 1534 - compiling/installation error on OpenBSD
+ LF Bug 1576: shutdown hangs under certain shells // LF Bug 1534: compiling/installation error on OpenBSD
+ LF Bug 1654 - HA_SBIN_DIR is not set on ocf scripts
+ LF Bug - compiling/installation error on OpenBSD
+ LF Bug 1522: Strt hb_counter on time_t
+ LF Bug # 1534 - compiling/installation error on OpenBSD
+ LF Bug # 1645 - Minimize arch-dependent differences, maintain compatibility -- More on this Bug...
+ LF Bug # 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1661 - crm_verify aborts checking and reoccurring crm_abort errors in logs
+ LF Bug # 1661 - move symlink creation out of specfile and into Makefile
+ LF Bug 1650: heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1645: Minimize arch-dependent differences, maintain compatibility
+ LF Bug 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug 1665 - fix references to moved scripts - courtesy of Tuomo Soini
+ LRM plugins: skip dot-files.
+ Made the stonith -h core dump go away - by fixing a variety of small things in STONITH.
+ Minor patch to stonith patch - to keep empty result from being seen as out of memory
+ Misc: Move a few shell functions to the only script that uses them
+ More file location tweaks - mostly GUI-related.
+ OCF: Detect and warn of use of deprecated 'ocf-shellfuncs' and 'ocf-returncodes'.
+ OCF: Fixed the check in have_binary. Handle checks for programs with --arguments
+ OCF: Provide the location of /sbin as used by some agents (HA_SBIN_DIR)
+ OCF: Remove unused variables
+ OSDL Bug 1606: okay for stonith plugins to have no parameters
+ PE: Add regression test for previous commit
+ PE: Aggregate the startup of fencing resources into a stonith_up pseudo-action
+ PE: Bug 1628 - Complain about invalid operation intervals
+ PE: Correct the CRM_CHECK comparision
+ PE: Dont log stopped orphaned resources
+ PE: Fix the handling of remove-after-stop=true - it was causing unnecessary restarts
+ PE: Fix two small memory leaks detected by Valgrind
+ PE: Fix up the tests now that compare_version() functions correctly (as of cs: 7d69ef94a258)
+ PE: Handle two new actions in text2task
+ PE: Include description for the remove-after-stop option
+ PE: Make sure ptest always does a POSIX sort
+ PE: Move the creation of stonith shutdown constraints to native_internal_constraints()
+ PE: NoRoleChange shouldn't always call PromoteRsc for master resources
+ PE: Potential use of NULL
+ PE: Regression: Allow M/S resources to be promoted based solely on rsc_location constraints
+ PE: STONITH Shutdown ordering
+ PE: Streamline STONITH ordering. Make sure 'all_stopped' depends on all STONITH ops.
+ PE: Update one more regression test output now that it has been verified as still correct
+ PE: Update testcases to include all_stopped (added in cs: 800c2fec24ee)
+ PE: Use master scores to determine which clones to start where
+ Put deBug in in support of Bug 1154: 2.0.4 BSC failure - select() returns with error
+ Put in a change to allow CTS to run.  There is a sort-of-bug (in BSC/CTS) underlying this that I'll have to file a bug on.
+ RA: Add some extra variables dug out from configure
+ RA: Bug #1630 IPaddr2 - Wrong arguments passed to send_arp (test was mistakenly written as an assignment)
+ RA: Convert a number of checks for required binaries
+ RA: Delay (v1) - Remove extra characters from call to ra_execocf
+ RA: Dummy: Just add a comment to make sure people copying from this
+ RA: Filesystem: Unify coding style to match rest of script.
+ RA: IPaddr2 - Remove bash-isms
+ RA: IPaddr2 - handle IP_CIP not being defined
+ RA: IPaddr: Fix a few trivial bugs in lvs_support pointed out by Michael Stiller.
+ RA: LSBDummy - Make sure the action is passed to ra_execocf
+ RA: MailTo: Remove spurious warning about monitor.
+ RA: Move all remaining autoconf variables into common files that are automatically included
+ RA: Move some helper files to their new names (.files dont show up as RAs)
+ RA: Revised handling of directory locations
+ RA: ServeRAID - remove commented out code
+ RA: Use consistent check for required binaries
+ RA: o2cb: Improve configuration stability.
+ RA: o2cb: Optimize redistribution of cluster.cnf.
+ RA: prefer the 'test' program rather than the builtin for some reason
+ RA: v1: IPaddr: Unconditionally enabling LVS support is a mistake.
+ TE: Log the node's uname instead of UUID for completed actions
+ TE: Set failcount to INFINITY for resources that fail to start or stop
+ Tools: Bug 1653 - Further changes to prevent use of NULL when no attribute is specified
+ Tools: Bug 1653 - Misc attrd/attrd_updater cleanups suggested by Keisuke MORI
+ Tools: Bug 1653 - attrd crashes when no attribute is specified
+ debian: Add new dot-ocf files to the heartbeat package
+ debian: Add the ldirectord OCF resource to the ldirectord package
+ debian: Debian bug #432441 will be closed on the next upload
+ debian: Don't create hb_gui symlink
+ GUI: update path for png images in haclient.py
+ ldirectord: Use globals for service check return values
+ ldirectord: Add OCF wrapper
+ ldirectord: Add Oracle check
+ ldirectord: Add external check
+ ldirectord: Add forwarding mechanism to real server ID
+ ldirectord: Add ld_service_to_port()
+ ldirectord: Call ld_emailalert_send() with correct arguments
+ ldirectord: Clean up execute logic in check_sql
+ ldirectord: Cosmetic spelling and grammar fixes
+ ldirectord: Document expire_quiescent_template
+ ldirectord: Document that checktimeout is for ping checks too
+ ldirectord: Don't access CALLBACK unless it is defined
+ ldirectord: Don't die if Net::FTP times out
+ ldirectord: Enhance ftp check debugging
+ ldirectord: Enhance logging in service_set
+ ldirectord: Fix bogus detection of combined check
+ ldirectord: Fix logic bug in _status_down
+ ldirectord: Handle $dbh-&gt;prepare() failure in check_sql()
+ ldirectord: List checktype and service in alpabetical order in the documentation
+ ldirectord: Make check_sql &lt; 80col wide
+ ldirectord: Make parsing of the output of ipvsadm more robust
+ ldirectord: Note negotiatetimeout in documentation of checkcount
+ ldirectord: Port of last resort for real server checks
+ ldirectord: Remove connecttimeout
+ ldirectord: Remove stale entries on reload
+ ldirectord: Remove trim down very wordy decripton of read_config
+ ldirectord: Set default negotiatetimeout to 30s
+ ldirectord: Status to stdout
+ ldirectord: Tidy up fallback
+ ldirectord: Use $dbh-&gt;errstr instead of $dbh-&gt;err when logging
+ ldirectord: Use an alarm for HTTPS timeouts
+ ldirectord: Use goto for error handling in check_sql
+ ldirectord: Use negotiatetimeout and connecttimeout as mutual defaults
+ ldirectord: Use negotiatetimeout for SIP, DNS and Radius checks
+ ldirectord: Use valid string in log message in check_connect()
+ ldirectord: document port behaviour of real servers
+ ldirectord: rearange parsing of service to make it &lt;= 80col (more often)
+ build: Move ldirector OCF resource into the ldirectord package
+ apache RA (LF 1656): include ServerRoot in relative paths.
+ cib: Fix detection of non-status changes
+ configure: Remove unneeded AC_PATH_PROGS checks
+ crmd: Bug 1575 - crmd cannot exit if lrmd is killed and there are pending ops
+ crmd: Bug 1624 - Fix the delete op for cancelled operations
+ crmd: Bug 1655 - crmd can't exit when the PE or TE is killed from underneath it
+ crmd: Only remap monitor operation status to LRM_OP_DONE under the correct conditions
+ log: avoid handing a null pointer as a '%s' variable
+ pingd: Hard code the name used for logging
+ re-enabled code to make symlinks for moved files.
+ remove is_stable() condition from drbd-outdate-peer daemon
+ shellfuncs: 's%:.:%%' should be 's%:.:%:%'; the '.' should be '\.'
+ stonith: external/riloe - new comment in the xml on how acpid may affect the performance (thanks to Guy Coates).
+ stonith: riloe - fix the xml info.
+ stonith: ibmrsa - fix the xml info.
+ stonith: ibmrsa - allow regular users to use it with 'stonith -n' and similar.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1183154400">- version 2.1.0-2
- Update the source tarball to revision e3c9306b9223
- Statistics:
    Changesets:	259
    Diff:		625 files changed, 13133 insertions(+), 73569^ deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/e3c9306b9223
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -rSTABLE-2.1.0:e3c9306b9223 | sort -f</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.1.0-1
- Update debian packaging files which drop the -2 package suffix
- Change the version number to the one used upstream</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.0.9-2
- Sync with the version supplied in SLES10
- Bugs fixed
+ OSDL #393 - Stonith: Update plugin from OpenHPI 2.2 to OpenHPI 2.6
+ OSDL #393 - Stonith: soft_reset is {true|1|false|0}, not {yes|no}
+ OSDL #393 - Stonith: Rename ibmbc to bladehpi
+ OSDL #393 - Stonith: Enable build of bladehpi plugin if OpenHPI present
+ OSDL #761 - RA: Remove history from heartbeat init script.
+ OSDL #1073 - Tools: Add clone support to crm_resource
+ OSDL #1138 - Long delay before CCM propagates membership event
+ OSDL #1292 - Stonith: Support xSeries STONITH (IBM: 06-R212-175)
+ OSDL #1339 - IPC code limits possible cluster size
+ OSDL #1374 - Tools: Check for sane host names when migrating
+ OSDL #1428 - Stonith: Mixing definitions and code
+ OSDL #1430 - CIB: Allow automatic assignment of object IDs
+ OSDL #1451 - Tools: Allow resource meta attributes to be set with crm_admin
+ OSDL #1457 - RA: Resolve unknown command ha_log
+ OSDL #1462 - Tools: crm_migrate should allow creating temporary rules
+ OSDL #1465 - crmd: crmd gets stuck if shutdown while starting up
+ OSDL #1472 - CIB: Use-after-free in find_attr_details()
+ OSDL #1480 - CIB: Create synchronous r/w connections correctly
+ OSDL #1482 - Stonith: stonith command needs a repeat option to make it a better test tool
+ OSDL #1484 - PE: Repair on_fail=stop.  Patch courtesy of YAMAMOTO Takashi.
+ OSDL #1486 - PE: Fix for potential NULL dereference
+ OSDL #1488 - Stonith: Fix passing password to HMC
+ OSDL #1489 - Stonith: Fix HMC errors in hostlist
+ OSDL #1492 - PE: Set common resource attributes before calling the custom unpack function
+ OSDL #1494 - PE: Add node-&gt;score to the clone stability function
+ OSDL #1499 - PE: Perform #uname comparisions without case
+ OSDL #1500 - Tools: Calls to attrd_updater with dampen=0 not processed correctly
+ OSDL #1505 - Findif parsing is all screwed up unless all the parameters are passed, not defaulted.
+ OSDL #1506 - Stonith: Add optional ibmhmc plugin parameters to meta-data
+ OSDL #1507 - Stonith: Allow "stonith -h" to display help for specific device
+ OSDL #1511 - LRM: running two actions for the same resource parallel
+ OSDL #1514 - CRM: Empty values in cib.xml loses other RA parameters
+ OSDL #1523 - Stonith: bladehpi performance enhancements
+ OSDL #1528 - RA: IPaddr2 gives a spurious warning on stop (SGI961736)
+ OSDL #1532 - crmd: Single node cluster shutdown
+ OSDL #1554 - PE: Probes should not have priority INFINITY
+ OSDL #1534 - LRM: Compiliation error on OpenBSD
+ OSDL #1544 - Comms: mixed versions of 2.x and 1.x not working
+ OSDL #1545 - Stonith: stonithd signoff fixesO
+ OSDL #1548 - logging: Ensure logs are logged using the correct component name
+ OSDL #1550 - Stonith: Suicide plugin returns hostlist containing itself
+ OSDL #1553 - Stonith: suicide plugin lacking ST_DEVICENAME
+ OSDL #1554 - crmd: Wait for the membership to stabilize before starting transitions to prevent unconfirmed actions
+ Debian #420206 - RA: Bashisms in IPaddr2
+ Novell #239075 - Admin: crm_master uses the same IDs for permanent and transient attributes
+ Novell #239079 - PE: Ensure action priority is set correctly to ensure notifcations are not lost
+ Novell #239082 - PE: Order promotions after _all_ demotions have completed
+ Novell #239086 - PE: Stable Master placement
+ Novell #244444 - crmd: Free'ing g_alloc() data with cl_free()
+ Novell #246681 - PE: Teach NoRoleChange() how to migrate resource's in the master role
+ Novell #250207 - Split-brain caused by non-identical ping-node configuration and auto-join
+ Novell #250273 - RA: Provide an RA for managing evmsd as a resource
+ Novell #250625 - RA: Xen: Fix status function for newer Xen versions
+ Novell #251689 - PE: Avoid needlessly restarting changed monitor operations for stopping resources
+ Novell #252693 - PE: Enable migration in more scenarios
+ Novell #252693 - PE: Teach the PE how to migrate resources in a starting stack
+ Novell #266551 - Stonith: getconfignames returned hostname instead of hostlist
+ Novell #266551 - doc: Bring the stonith man page up-to-date
- Build Improvements
+ Add explanatory comment for configure kludge
+ Add lha_internal to c-files that dont include it
+ Allow debian packages to also be built directly from Hg archives
+ Always check for the presence of PAM an TLS headers
+ Configure switch to easily enable Valgrind'ing of the CRM
+ Dont install crm-related man pages when --disable-crm is used
+ dopd doesnt build without the crm, disable it if the crm is disabled
+ Fix typo in configure.in
+ Header-file related cleanup
+ Include the exact version being built even when building an archived tree
+ Make supplying a Valgrind suppression file simpler
+ Misc changes to allow building with crm disabled
+ Not all platforms need -lpam
+ Remove redundant and useless items from the build
+ removed unused library dependancies
+ Use existing accounts when building on OSX
+ debian: correct the location of stonith headers in *.files
+ debian: reflect the new header locations in .files
+ debian: sort out a kink in the configure vs. bootstrap logic
+ debian: Packaging updates for 2.0.8-1 release
+ debian: Add heartbeat-2-gui package control files to Makefile
+ Improved grammar in gui package description
+ Improve portability across versions of 'gcc'.
+ Allow data size to be specified
+ Ensure 'awk' is found in runtime environment
+ Use centrally determined GNUTLS cflags and libs
+ Replace multiple derivations (poor) of locations with direct derivation from configure
+ configure: Add closing information to user about '/etc/passwd' and 'make install'
+ Remove an unnecessary 'include' that broke building on some OSes.  It continues to build OK on various OSes.
+ Bourne shell 'test' does not support '-e' flag.  Using '-r' instead.
+ libgnutls: if no 'libgnutls-config', try 'AC_CHECK_LIB(...)'
+ Determine GNUTLS libs centrally in 'configure.in' rather than in individual Makefiles
+ Correct omission of &lt;lha_internal.h&gt;
+ ipctransient tests: Add some flexibility; rationalise some duplicate code
+ ConfigureMe: make usage info a little clearer
+ Add some defaults to configure.in to reduce buildrequires.
+ Remove a bunch of dead code (Perl/SWIG bindings).
+ configure: Check for more pre-requisites of the mgmt/quorum components.
+ Fix use of a future dates in the changelog
- CRM Library Enhancements and Fixes
+ Fix xml parser bug.
+ Allow retrieval of default config values without a hashtable
+ Changes to fake transition key generation
+ Check the return code from fflush() when writing xml files - AnÃÂ­bal Monsalve Salazar
+ Comprehensive review of error recovery logic for potentially failed calls to fopen()
+ Correctly handle syslog facility == 0
+ Delete dead code, make empty_uuid_cache() safe with NULLs
+ Dont call fflush() or flclose() if the output stream was NULL
+ Ensure the normalized result of (add|subtract)_time is updated before returning
+ Fix a use-after-free in parse_time_duration()
+ Fix replace_xml_child() when neither child nor update have an id
+ Fixes for Coverty issues: 52, 55-58, 61-66, 68-69, 71-73 in run 240
+ Gracefully fail when the target XML file is not writable
+ handle NULL inputs to xml_has_children() gracefully
+ Make the use of valgrind a run-time option
+ Memory leak fixes
+ Prevent a number of potential use-after-free's by zero'ing out free'd loop variables
+ Refactor date printing to allow date -&gt; string conversion
+ Remove noisy and inaccurate memory logging
+ Repair the status_printw macro now that we do logging slightly differently
+ size_t is always positive... broke error handling in XML parser.
+ Use-of-NULL in validate_with_dtd() error path... Only clean up what we created
+ When malloc tracking is enabled, pass through the person that called crm_strdup
- CLI Enhancements and Fixes
+ Uninitialized string in heartbeat/findif.c
+ Allow cluster config options to be queried/modified/deleted.  Broken in cs: 13c450735ba7
+ Allow crm_verify to be used with a named DTD file
+ Auto populate the provider for OCF resources if one is not provided
+ crm_primitive.py: Include all node preferences in the one rsc_location constraint
+ Include rsc_location details in the resource listing
+ map cib_NOTEXISTS to 0 for crm_failcount
+ Use the current node uname by default when invoked as crm_standby
+ Add two new views to crm_mon.  Patch by Christofer Edvardsen.
+ Centrally define CIB call options so that -f always works in crm_resource
+ Compile when malloc checking is off, fix last mem leak
+ crm_verify - dont complain about missing status section
+ Dont do ID checks on cibadmin diff's, duplicates are expected
+ Fix a number of memory leaks in attrd
+ Help text and input sanity checks for ocf-tester
+ Include class/type/provider in resource delete commands
+ Place the lifetime rule in the correct location
+ Set a slightly higher default action timeout
+ Show help text for crm_uuid
+ Teach crm_uuid to write ascii-form UUIDs to hb_uuid
+ Terminate the attrd process if heartbeat exits from under it
+ lrmadmin: fix the provider list function: first free data and then the list member.
+ crm_attribute/master/standby: Always default the uname to the current machine
- CIB Enhancements and Fixes
+ Allow cluster options to be created when the default set is not present
+ Allow the remote connection code to be used with or without PAM/TLS
+ Clean up memory at exit
+ Fix a number of memory leaks
+ Compile when malloc tracking is enabled
+ Don't increase the version number if nothing changed
+ Dont examine the group ownership of cib.xml since we set perms to rw-------
+ Exit the writer process correctly so we'll continue to do write outs
+ Prevent node_uuid from having any effect for &lt;crm_config&gt; changes
+ Remove dead code
+ Support processing of commands sent via remote TLS connections.
  See http://www.linux-ha.org/v2/cib_remote for usage details
+ The decision to log failed connection attempts should be left to the client
+ Warn at startup if important version information is missing
- CRMD Enhancements and Fixes
+ ALL completed actions should be removed from the shutdown_list
+ Correctly parse the shutdown timer option
+ Create the restart digest from an object with the same name that the PE uses
+ Delete the HA connection only at exit
+ Enable Valrind'ing of the PE and TE
+ Indicate the LRM error code if an operation cannot be cancelled
+ No need to create the resource if we're trying to delete it
+ Free memory at shutdown
+ Resolve a number of memory leaks
+ Sort out the whole client deletion business.  Also delete the resources hash at shutdown.
+ Improved Logging
+ Remove dead code
- Policy Engine Enhancements and Fixes
+ Always print the resource's node scores
+ Avoid a potential NULL dereference in an error path
+ Clean up generation of and contents of dot-files
+ Create an implicit "cant run here" constraint if an action returns "not installed"
+ Don't start resources until we can verify they're not still running
+ Dont waste time checking action definitions on nodes that wont be running resources
+ Fix a use-after-free of {key} when the monitor op already existed
+ Fix anti-colocation when the RHS is not running
+ Fix gcc warning - dont ignore the result of mktemp()
+ Fix group recovery when a group it depends on is restarted
+ Have group-group recovery work for the right reasons
+ Memory leak fixes
+ Make clones ever so slightly sticky by default
+ Make internal group ordering of bullet-proof
+ Make sure things that shouldn't be true are never true (added asserts)
+ Move DeleteRsc to a more appropriate location
+ Move Ncurses related defines to a more optimal location and make sure its included by crm_mon
+ Not all pseudo operations should be included in the graph
+ Only show elements of the graph in the dot-file by default
+ Prevent a potential NULL deference in clone allocation
+ Provide useful feedback when a cloned resource is found active somewhere it shouldn't be
+ Re-use StartRsc/StopRsc for consistancy
+ Rename elements of the pe_ordering enum for clarity
+ Rename migration variables for clarity
+ Updated regression tests with the revised consistant format
+ Utility functions for finding node's by uuid/uname
- Transitioner Enhancements and Fixes
+ Clean up memory on exit
+ Detect changes to attributes of the cib object
+ Only a limited number of cib attributes warrent aborting the transition
+ Unpack graph actions correctly
+ Improved logging
+ Removed dead code
- Misc
+ Allow heartbeat to easily run with standard libc malloc-and-friends
+ Allow the malloc tracking code to compile on systems where size_t != int
+ Allow writing to syslog to be turned off
+ Better information about valgrind enablement
+ Sanitize the "crm xyz" option processing.  Dont run valgrind if not using libc malloc
+ The DTD used "integer" instead of "number" (which was used by the code)
+ Stonith: Update the rilo RA with enhacements from Tijl Van den broeck and Guy Coates
+ Moved drbd peer outdater into contrib/
+ clplumbing: We _never_ want to trim memory, use -1 instead of 4*size.
+ clplumbing: Coverity 53: Potential NULL pointer dereference.
+ mgmtd: Certain versions of SWIG do not convert the Python "None" to a
+ initscript: set correct Provides: and Should-Start: entries
+ Stonithd: Relaxed a stonithd timeout so that start will succeed if it completes in a minute
+ Dont log dispatch warnings unless they exceed 30ms instead of 10ms
- LRM Enhancements and Fixes
+ Inform clients when an RA is not installed on the machine
+ Expanded regression testing
+ convert the LSB meta-data to XML.
- Resource Agent Enhancements and Fixes
+ -eq is for integer comparisions
+ Avoid concatination with None in riloe stonith agent
+ Filesystem - When checking ocfs2 is cloned, look for variables that are always set
+ Fix up the Dummy metadata
+ Fix variable initialization in pgsql
+ LVS support should always be enabled for the heartbeat IPaddr wrapper
+ Modify the Xen RA to use the new variable names
+ Return after performing a stop action in the Filesystem agent
+ Use configured scratch locations in ibmrsa stonith agent
+ bladehpi readme update
+ Dummy, mysql and drbd - fix meta-data to conform to XML.
+ Convert SAP* from dos
+ Allow ManageRAID to show meta-data at all times.
+ Enhance Pgsql ocf resource to handle multiple instances
+ Xen: Add a little reminder to the code.
+ drbd: Fix some issues and work-arounds for drbdadm bugs.
+ Filesystem: Prune duplicates from active and starting list.
+ Filesystem: Fix metadata require/unique settings.
+ Xen: Fix status function for newer Xen versions (Novell 250625)
+ Filesystem: Increase default suggested timeouts.
+ drbd: When using the nodename-override, drbdadm likes to print an
+ Xen: Swap migrate_to and _from to match PE.
+ Filesystem: Harmless typo corrected.
+ LVM: Add some hints for future todo items.
+ EvmsSCC: More fixes from Jo (Novell 199730)
+ Filesystem: Move ocfs2_init out of the generic stop path (Novell 250603).
+ pgsql: Several enhancements to by Keisuke MORI
+ drbd: Make parsing of drbdadm output more robust.
+ drbd: If drbd is stopped, demote should fail with NOT_RUNNING.
+ Xen: Advertise migrate_from and _to actions. Mention migrate in meta-data.
+ drbd: Add support for overriding the hostname drbd uses based on the clone
+ Filesystem: Whitespace cleanup and minor fixes ("" for -z arguments, using -ne when
+ IPsrcaddr: Added count of how many inet lines to use for the diff -B
+ external/riloe misspelled RI_LOGIN variable name.
- ldirectord Enhancements and Fixes
+ Use $arrayOfDNs[0] instead of @arrayOfDNs[0] to get rid of the following
+ Remove duplicate $recstr
+ Change the code around a bit to avoid a warning about code following exec
+ Dont use SIGENT, as it doesn't seem to exist.
+ 92d4e521db53 Handle $line more carefully
+ Make sure that frequency is intialised before it is used
+ Use $$ instead of (the uninitialised) $pid
+ Remove useless calls to lc()
+ Make sure that DEBUG is initialised
+ Use implicit variables in read_config()
+ Use the -w flag to perl to find warnings/errors
+ Make ldirectord's version valid
+ If weight is not supplied, set it to 1
+ Fix broken reload command
- Testing Improvements
+ Account for a small timing window in the ResourceRecover test
+ Explain why we're aborting when nodes aren't found in DNS
+ Ignore ResourceRecover testing artifacts
+ Indicate debug log messages
+ Improved Logging
+ Remove resource tied to the DC - the #is_dc comparision is irrelevant
+ Rewrite the LSBDummy RA
+ Rewrite the ResourceRecover to use asynchronous failures
+ BSC: (1) test IPC before its dependencies; (2) signal-handling: improve and catch some more.
+ ocf-tester: Continue if validate-all succeeds.
+ ocf-tester: Exit with appropriate exit code for success or failure.
+ ocf-tester: Various integers were compared as strings.
+ BSC: Test Dummy, IPaddr, IPaddr2, Filesystem RAs.
+ BSC: Skip IPaddr2 test if ip not installed.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1173823200">- version 2.0.9-1
- New Upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1170194400">- version 2.0.8-1
- New Upstream
+ Allow colocation based on node attributes other than #id
+ SAPDatabase and SAPInstance resource agents added.
+ Core/CRM: Improvements to the memory allocation, message, and string
  handling libraries result in an overall speed-up of 65%.
+ CRM: Fix ISO date handling for Jan 01 of any year.
+ CRM: Only update the voted hashtable with no-votes for the current
  election.
+ RA: IPaddr: Support netmask both in CIDR and in dotted-quad notation.
+ logd: Fix trailing random byte in log messages (OSDL 1268).
+ heartbeat:  Work around a glibc/times() bug to prevent failures every
  497 days on 32-bit Linux (OSDL 1407).
+ heartbeat: Retransmits were requested more often than they'd be
  honored (OSDL 1455).
+ CTS/PE: Introduce CRM option "startup_fencing" to disable fencing of
  unseen nodes, because CTS can't handle this.
+ PE: Split-off "network-delay" option from global_timeout to separate
  network delays from action timeouts.
+ PE/CRM: Binaries now support being called with "metadata" command to
  document the complete list of options in the CIB.
+ PE: DTD: Include start_delay as a property of operation objects.
+ PE: Fix implementation of date_spec when no range is specified.
+ PE: Enforce clone_node_max for already running resources.
+ PE: Clones were not being stopped on node shutdown.
+ PE: Allow resource colocation based on node attributes other than #id
  (node_attribute option added to rsc_colocation constraint).
+ PE: Improved handling when timeout &lt; start_delay (OSDL 1421).
+ PE: Pre-notifications for promote occured before start was completed
  (OSDL 1447).
+ PE: Allow any two pairs of actions to be specified for rsc_order (OSDL
  1452).
+ PE: Handle asymmetric clusters where RAs are not installed on all
  nodes.
+ PE: Allow resource stickiness and failure stickiness to change based
  on node attributes.
+ CIB: Fix update_attr() causes attrd to hang at shutdown when there is
  no DC (OSDL 1432).
+ CIB: Corrupted config file prevents heartbeat restart (OSDL 1385).
+ CIB: Startup processing improvements; DTD validation will be
  automatically activated if the CIB on-disk validates.
+ TE: Fix memory leak.
+ TE: Failcount wasn't being updated in all cases.
+ TE: never update the CIB with unconfirmed stop actions (OSDL 1435).
+ CTS/RA: Replace OCFMSDummy with Stateful RA.
+ CCM: Centralize quorum calculation on the transition leader.
+ CCM: Support split-site and external quorum servers.
+ CRM: Ignore status update for non-members (ie, ping nodes).
+ LRM: Don't postpone postponed resources.
+ LRM: Fix restart in case an lrmd is already running (OSDL 1333).
+ LRM: Fix overflow in RA output handling (OSDL 1433).
+ mgmtd: Robustness and memory leak fixes.
+ mgmtd: make the port used configurable (OSDL 1390).
+ haresources2cib.py: Improve v1 to v2 conversion tool (OSDL 1415).
+ GUI: ping nodes appear as failed in gui (OSDL 1394).
+ GUI: Reduce duplicates in RA list by only showing the OCF one if both
  ocf and hb RA exist) (OSDL 1338).
+ GUI: Add new resource to currently selected group (OSDL 1414).
+ GUI: support all attributes of operations (OSDL 1372).
+ GUI: Create first resource along with a new group; delete group when
  last resource is removed (OSDL 1287).
+ GUI: Set defaults for clones and m/s RAs (OSDL 1352).
+ GUI: Use meta-data defaults when creating actions (OSDL 1351).
+ GUI: GUI: start all sub resources when we start a group or a clone
  (OSDL 1449).
+ GUI: support ordered==false or non-collocated==false groups (OSDL
  1257).
+ stonithd: Fix memory leak.
+ stonithd: Remove reliance on farside_pid (OSDL 1412).
+ stonith external/riloe: Make the login name and iLo device address
  configurable.
+ crm_resource: Add manpage.
+ RA: PureFTPd, mysql, ManageVE (to manage an OpenVZ container),
  ManageRAID, WAS6 (Websphere 6) added.
+ RA: Include SAPInstance and SAPDatabase (FATE 2172).
+ RA: IPaddr cleanup to avoid race conditions in the script. Report
  status failure when an IPaddr is active on a different interface but
  allow it to be stopped.
+ RA: IPaddr2 fixes for loopback bound addresses.
+ RA: Filesystem reported wrong status/monitor results for OCFS2 in some
  circumstances (Novell 187080).
+ RA: Improve heartbeat v1 wrappers.
+ RA: Fix db2 monitor operation.
+ RA: ldirectord: Make the emailalert and emailalertfreq options global
  as well as non-global, make checkcount global as well as per-virtual,
  add radius check, improvements to documentation.
+ RA: pgsql: Make server logfile configurable and implement
  validate-all. New parameter ctl_opt added to pgsql to support
  additional options for pg_ctl.
+ CRM: First beginnings of a cluster-wide shell (FATE ...)
+ BEAM / Coverity induced fixes.
+ Minor compatibility fixes (OSDL 1405).
+ Logging improvements all over the place.
+ Extended support for master-slave resources (FATE 300723).
+ OCF RA API compliance checker (FATE 300737).
+ Support weak and uni-directional collocation constraints (FATE
  300792).
+ Many bugfixes.
- errata: CVE-2006-3121 was incorrectly refered to as CVE-2006-3821 in
  the changelog for 2.0.6-2 and 2.0.7-1
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-2-global.patch (introduced in 2.0.6-2)
- Remove alternate dependancy on netkit-ping as it is being removed
  from Debian</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1164924000">- version 2.0.7-2
- Add dependancy and build dependancy on psmisc for fuser
  Thanks to Hans-Joachim Baader
- Acknowldge NMU by Roger Leigh</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155592800">- version 2.0.7-1
- New Upstream
 - Remote Denial of Service attack (#195068, CVE-2006-3121).
 - Bugfixes to the CRM, the LRM and the GUI.
 - GUI failed to connect to and retrieve data from the cluster (#198747).
 - Improved log messages.
 - ptest can now read compressed XML directly. Do not include optional
   actions and dependancies in ptest output by default.
 - crm_resource will now warn and demand exact specification when trying
   to modify an attribute while several sets are present.
 - lrmd now limits itself to a maximum of 4 child processes, to avoid
   overloading the node and causing too long delays.
 - pengine: Processing of pending probes; should not be treated as if the
   resource is running or in a known state.
 - target_role now is only taken into account for managed resources.
 - cib: Detect more cases where the nodes section needs to be refreshed.
 - More accurately determine node status. (OSDL 1369)
 - Filter out stop requests that would require a resource to be added.
   (OSDL 1369)
 - Send filtered resource "stops" as successes as to not block waiting
   for filtered actions.
 - By default pass the TE graph via IPC until its too large for IPC to
   deal with, only then fall back to passing via the disk.
 - Stopping of stonith resources can never require stonith, even if the
   node its running on failed; prevent graph loop. (OSDL 1376)
 - STONITH events need to inputs to start events (not stops), to avoid
   graph loop in combination with "stop before" dependencies (ie,
   groups).
 - crmd: Dont stall the FSA if we try to invoke the TE after we've
   stopped it.
 - Always unpack the correct part of a diff operation; diffs should now
   apply in more cases, reducing the need for full refreshs.
 - Correctly observe --disable-snmp-subagent during build.
 - In some states the membership is invalid and shouldn't be referenced.
   (OSDL 1377)
 - Fix a use-before-null-check issue in lrmd. (Coverity #48)
 - OCF Resource Agents outside the default path were incorrectly found to
   be not executable.
 - ccm: hostcache and delnodecache files should not be authoritative if
   autojoin is disabled. (OSDL 1226)
 - With autojoin, llm_get_nodecount() can't return the real max nodes
   anymore, this may cause memory corruption. (OSDL 1382)
 - Fix a memory corruption in membership layer, more frequently observed
   with larger (&gt;5) clusters.
 - Change the default api-auth for pingd to uid=root
 - Dummy RA now OCF compliant.
 - Fix pingd RA metadata to be XML compliant.
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-1-quiet.patch  (introduced in 2.0.6-2)
  - ldirectord-1.141-readline_workaround.patch (introduced in 2.0.6-2)
  - CVE-2006-3821.patch                        (introduced in 2.0.6-2)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155074400">- version 2.0.6-2
- ldirectord-1.141-emailalert-1-quiet.patch
  Don't send email alerts if the alert address is not configured
- ldirectord-1.141-emailalert-2-global.patch
  Allow emailalert and emailalertfreq directives to be global
  as well as per-virtual service
- ldirectord-1.141-readline_workaround.patch
  readline doesn't seem to return lines after Net::FTP
  has been called, so split them up by hand.
- Added recommends iptables to heartbeat, as it is needed
  for the portblock resource to function correctly
- Added /var/lib/heartbeat/pengine directory
- Replace 02-chown-check.patch with chown-check-2.patch
  - use the environement variable FAKED_MODE instead of FAKEROOTKEY to check
    if code is runing in fakeroot. At some stage around fakeroot 1.5.10
    FAKEROOTKEY disapeared. Ran autoconf manually to effect this change
    after repatching.
  - Updated 02-chown-check.patch: fix typos in comment
- CVE-2006-3821.patch
  Fix remote denial of causes caused by insufficient bounds checking
  on data read from the network.
  CVE-2006-3821
- Python transition - http://wiki.debian.org/DebianPython/NewPolicy
  - Update build dependancy on debhelper from (&gt;= 4.0.0) to (&gt;= 5.0.37.2)
  - Add dh_python call to debian/rules
  - created debian/pycompat with contents of "2"
  - heartebeat: deplaced depenancy on python with one on ${python:Depends}
  - Added XB-Python-Version: ${python:Versions} to each package
  - Replace build dependancy on python2.3-dev with one on python-dev
  - Use python-central
    + Add build depends on python-central (&gt;= 0.5)
    + Add dh_pycentral call right before dh_python in debian/rules
    + Add XS-Python-Version: current in the source stanza of debian/control</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1152136800">- version 2.0.5-8
- ldirectord-2: Add missing dependancy on libmailtools-perl
                (Mail::Send)
- ldirectord-2: Add missing dependancy on libnet-perl
                (Net::SMTP, Net::FTP, Net::POP3)
- ldirectord-2: Remove unneccesary dependancy on adduser
- Automake transition: http://wiki.debian.org/AutomakeTransition
  - Remove unneccesary build-depends on automake1.9 | automaken
  - Remove unneccesary build-conflicts on automake1.4</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1151618400">- version 2.0.5-7
- Don't run deluser and delgroup in postrm
  - These commands may not be available at this time
  - If there are any files left that belong to this user or group
    then they will be left unowned and get inhereited by the
    next user that comes along that happens to have hacluster's
    old userid or the old haclient groupid respectively.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-5
- Reverse the change made in 2.0.5-4
  It turns out that in heartbeat (as opposed to heartbeat)
  is a script which calls a binary that is located in
  /usr/lib/ocf/resource.d/heartbeat/</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-4
- Move IPv6addr from /etc/ha.d/resource.d/ into /usr/lib/heartbeat,
  and then symlink that back into /etc/ha.d/resource.d/ as binaries
  are not allowed in /etc</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1149544800">- version 2.0.5-3
- Fix libgnutls binary dependancy
  - Build-Depends on libgnutls-dev instead of libgnutls13-dev
  - Recompile against libgnutls13 in place of libgnutls11
  -</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1148076000">- version 2.0.5-2
- Make use of invoke-rc.d
- Update from standards versoin from 3.6.2 to 3.7.2</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1147212000">- version 2.0.5-1
- New Upstream
- Removed build depenancy on openssl-devel,
  as heartbeat no longer uses openssl directly.
  (Libraries that heartbeat depends on may in turn
   depend on openssl creating an indirect depenancy
   or build-dependancy).</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1141855200">- version 2.0.4-1
- New Upstream
- Don't try and stop heartbeat in preinst on the first install</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139954400">- version 2.0.3-2
- Add build dependancy on libncurses-dev to allow crm_mon to work
  Thanks to Guy Coates
- Move hacluster user and haclient group creation (don't ask me why the
  user and group names are different) from preinst to postinst.
  Once upon a time there might have been a need for it in preinst,
  but the current packaging changes files to have the hacluster user
  and haclient group as neccessary in the postinst. So there is
  no need to create them before postinst.
  This is a better fix to #352158, and the pre-depends on adduser
  has been changed to a depends accordingly.
- Stop heartbeat in preinst</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139695200">- version 2.0.3-1
- New Upstream
- Make sure adduser is passed the --system flag
- Slightly Enhanced package descriptions
- Add build dependancy on swig
- As PYTHON_PATH has been added to configure.in it seems that autoconf1.4
  can no longer build this tree.  Currently autoconf is provided by
  autoconf1.4, and autoconfn is a virtual package provided by autoconf1.7,
  1.8 and 1.9.  Accordingly, replace the autoconf build dependancy with
  autoconf1.9 | autoconfn.  And add a build conflict on autoconf1.4. This
  way the autoconf command should be autoconf1.7, 1.8 or 1.9, but not 1.4
  as was previously the case.
- Don't apply 00-ssh_scp_path.patch as it should no longer be needed,
  instead add a build dependancy on openssh-client.
  Also removed call to relevant configure options.
- Removed configure option that no longer exists
  --enable-checkpointd
- Removed configure options that are now on by default
  --enable-crm --enable-lrm
- Add build dependancy on libgnutls11-dev, as 1.0 probably doesn't
  compile as _t types don't exist.
  http://lists.gnu.org/archive/html/help-gnutls/2004-08/msg00001.html
- Fix insonsistency between hb_stanby(1) man page, an the wiki
- Make /usr/bin/cl_status setgid
- Make sure that /var/run/heartbeat/{ccm,crm} exist on install
  else postinst, and thus the install will abort.
- Fix inconsistency between hb_standb(1) man page and wiki
- Add Pre-Depends on adduser
- Add management tool
  ./confgure --enable-mgmt
  Build-Depends: python2.3-dev, libpam0g-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1129759200">- version 2.0.2-5
- Change libcurl3-dev dependancy to libcurl3-openssl-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1128031200">- version 2.0.2-4
- Include /var/lib/heartbeat/ccm and /var/run/heartbeat/crm</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-3
- Get rid of bogus touching of config.status and friends in clean target,
  which if run as root causes build failures.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-2
- Add build dependancy on libltdl3-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127772000">- version 2.0.2-1
- New upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127599200">- version 2.0.1-4
- Add /var/run/heartbeat directory to package
  http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=900</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-3
- Restrurctured  provides, conflicts and replaces
- Made heartbeat-dev depend on heartbeat, not heartbeat</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-2
- Uptream initally made the wrong tar ball avaliable for
  2.0.1 and this was used to build 2.0.1-1.
  I have asked 2.0.1-1 not to be accepted into the Debian Archive
  for this reason. 2.0.1-2 uses the updated, correct tarball from
  upstream.
- Note that this package has a binary dependancy on libssl
  only because of linking against libsnmp9 (5.2.1.2-3)
- Add build dependancy on libsensors-dev (for libsnmp9)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1126821600">- version 2.0.1-1
- New upstream
- Add /var/lib/heartbeat/cores/root, /var/lib/heartbeat/cores/hacluster
  and /var/lib/heartbeat/cores/nobody
- Remove usr/lib/stonith/plugins/stonith2/riloe.so, its
  no longer in the tree
- Enable snmp_agent
- Added new libplumbgpl
- Added new ha_logd.cf
- Added new iso8601 executable
- Temporarly remove the drac3 module as GPL code that links
  against OpenSSL is not acceptable to Debian.
  - http://lists.community.tummy.com/pipermail/linux-ha-dev/2005-August/011266.html
  - http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=853
- Update build dependncy from libsnmp5-dev to libsnmp9-dev
- Make configure chown test fakeroot aware to avoid build hang
- Fix syntax error in db OCF resource
- Make crm/test/helper.sh have #! /bin/bash
- Make resources/OCF/ocf-shellfuncs.in have #! /bin/bash
- Update FSF address
- Zero config.status, libltdl/config.log and libltdl/config.status on clean</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1123106400">- version 2.0.0-2
- Add /var/lib/heartbeat/ccm and /var/lib/heartbeat/cores</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1122760800">- version 2.0.0-1
- New upstream
- Added dependancy on libnet-dns-perl to ldirectord
- Added --enable-checkpointd to configure arguments
- Added --disable-snmp-subagent to configure arguments
- Added --disable-swig to configure arguments
- Add build dependancy on uuid-dev
- Readranged packages to allow heartbeat 1.2.X to exist in debian
  and heartebat 2.X to be heartbeat until heartbeat gets
  a bit more testing in the wild. Also consoldidated binary
  packages into heartbeat, and development packages into
  heartbeat-dev, ldirectord is still in its own package,
  ldirectord2, as it drags in a lot of dependancies that
  no other part of the system uses.</changelog></package>
<package pkgid="51fb69abfa574bf3f0c5db6f9cb020d6a27afc05" name="libnet" arch="i386"><version epoch="0" ver="1.1.5" rel="1.el5"/><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.5-1" date="1293573600">- Upgrade to 1.1.5</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.4-4" date="1278712800">- Added patch for capability support rather UID check (#589770)</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.4-3" date="1250892000">- Move libnet.so.* to /lib[64] to avoid static linking (#518150)</changelog><changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.1.4-2" date="1248472800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.4-1" date="1244757600">- Upgrade to 1.1.4</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.3-2" date="1244325600">- Added upstream patch to solve HAVE_CONFIG_H (#501633, #502400)</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.3-1" date="1242511200">- Upgrade to 1.1.3</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.2.1-14" date="1240178400">- Enabled a shared library and made lots of spec file cleanups</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.2.1-13" date="1235426400">- Rebuild against gcc 4.4 and rpm 4.6</changelog><changelog author="Fedora Release Engineering &lt;rel-eng@fedoraproject.org&gt; - 1.1.2.1-12" date="1203458400">- Autorebuild for GCC 4.3</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-11" date="1186005600">- build with -fPIC (#250296)</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-10" date="1168639200">- add debian patch to correct bad checksums</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-9" date="1156888800">- rebuild for FC6</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-8" date="1140213600">- rebuild for fc5</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-7" date="1135288800">- rebuild</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-6" date="1126562400">- bump release and add dist tag</changelog><changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.1.2.1-5" date="1125439200">- spec file cleanup</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-4" date="1125093600">- use pushd and popd (from Oliver Falk)</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-3" date="1124748000">- Correct dos end of lines
- add in devel: Provides: %{name} = %{version}-%{release}</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-2" date="1123884000">- put everything in a devel subpackage
- add smpflags
- clean in sample</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-1" date="1123884000">- rebuild changing only name</changelog><changelog author="Marcin Garski &lt;garski@poczta.onet.pl&gt; 1.1.2.1-2.fc2" date="1086213600">- Rebuild for Fedora Core 2</changelog><changelog author="Marcin Garski &lt;garski@poczta.onet.pl&gt; 1.1.2.1-1" date="1084053600">- Initial specfile</changelog></package>
<package pkgid="c3d56956970c51e6b5ba6868b65e90fbde58cce3" name="krb5-server-ldap" arch="i386"><version epoch="0" ver="1.6.1" rel="80.el5.slf5"/><changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1413244800">- Ran Regex: (Release: .*) =&gt; \1.slf5
--&gt;  Modify release string to note changes for SLF5
- Added Source: krb5.ini
--&gt;  Config file for automated patch script
- Added Patch: krb5_krb5-mwm-kshd.patch
--&gt;  Fix sync bug, see BZ#658217</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-80.el5" date="1409270400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-79.el5" date="1408752000">- incorporate fix for MITKRB5-SA-2014-001 (CVE-2014-4345, #1132785)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592000">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-77.el5" date="1406592000">- fix what appears to be a cosmetic error in the patch for self-tests
  for CVE-2014-4341</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-76.el5" date="1406160000">- run the backported self-tests, such as they are, for CVE-2014-4341</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-75.el5" date="1406160000">- pull in backported fix for denial of service by injection of malformed
  GSSAPI tokens (CVE-2014-4341, #1121509)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-74.el5" date="1399334400">- add patch based on one from Filip Krska to not call poll() with a negative
  timeout when the caller's intent is for us to just stop calling it (#1089732)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-73.el5" date="1398211200">- incorporate backported upstream patch for remote crash of KDCs which serve
  multiple realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-72.el5" date="1395792000">- add part-backported fix to avoid possible use-after-free when encrypting
  delegated creds (Jatin Nansi, #1004632)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-71.el5" date="1370044800">- add backported fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325030400">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-69.el5" date="1320278400">- ftp: fix a static analysis should-never-happen NULL dereference (#750823)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-68.el5" date="1319068800">- backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
  to talk to a KDC by using poll() if it's detected at compile-time, revised
  (#701444, RT#6905)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-67.el5" date="1318982400">- add backported patch by way of jbarbuc to free subkeys created by the
  KDC while processing TGS requests (#708516)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-66.el5" date="1318982400">- add backported patch by way of several people to better avoid false
  detection of replay attacks when talking to systems with coarse time
  resolution (#713500)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-65.el5" date="1318982400">- ftpd: add backported patch to check for errors when calling setegid
  (MITKRB5-SA-2011-005, CVE-2011-1526, #719098)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-64.el5" date="1318982400">- klist: don't trip over referral entries when invoked with -s (#729067,
  RT#6915)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-63.el5" date="1318982400">- unbreak processing of multi-line macros (#735363,#736132), broken by the
  original fix for #665833</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-62.el5" date="1308355200">- incorporate a fix to teach the file labeling bits about when replay caches
  are expunged (#712453)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-61.el5" date="1305072000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1303948800">- ftp: handle larger command inputs (#665833)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-60.el5" date="1303862400">- don't bail halfway through an unlock operation when the result will
  be discarded and the end-result not cleaned up (Martin Osvald, #586032)
- add a versioned dependency between krb5-server-ldap and krb5-libs (internal
  tooling)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-59.el5" date="1301961600">- don't discard the error code from an error message received in response
  to a change-password request (#658871, RT#6893)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-58.el5" date="1301529600">- ftpd: add patch from Jatin Nansi to correctly match "$user restrict"
  lines in /etc/ftpusers (#644215, RT#6889)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-57.el5" date="1300406400">- ftp: add modified patch from Rogan Kyuseok Lee to report the number of
  bytes transferred correctly when transferring large files on 32-bit
  systems (#648404)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-56.el5" date="1297987200">- backport fix for RT#6514: memory leak freeing rcache type "none" (#678205)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1297987200">- add upstream patch to fix hang or crash in the KDC when using the LDAP kdb
  backend (CVE-2011-0281, CVE-2011-0282, #671097)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-55.el5" date="1291161600">- incorporate upstream patch for checksum acceptance issues from
  MITKRB5-SA-2010-007 (CVE-2010-1323, #652308)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-54.el5" date="1286236800">- backport a fix to the previous change (#539423)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-53.el5" date="1285977600">- backport the k5login_directory and k5login_authoritative settings (#539423)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-52.el5" date="1284076800">- krshd: don't limit user names to 16 chars when utmp can handle names
  at least a bit longer than that (#611713)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-51.el5" date="1283558400">- fix a logic bug in computing key expiration times (RT#6762, #627038)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-50.el5" date="1283385600">- correct the post-rotate scriptlet in the kadmind logrotate config (more
  of #462658)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-49.el5" date="1278979200">- ftpd: backport changes to modify behavior to match telnetd,rshd,rlogind and
  accept GSSAPI auth to any service for which we have a matching key (#538075)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-47.el5" date="1278547200">- pull in fix for RT#5551 to treat the referral realm when seen in a ticket
  as though it were the local realm (#498554, also very likely #450122)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-46.el5" date="1278547200">- add aes256-cts:normal and aes128-cts:normal to the list of keysalts
  in the default kdc.conf (part of #565941)
- add a note to kdc.conf(5) pointing to the admin guide for the list of
  recognized key and salt types (the rest of #565941)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-45.el5" date="1278547200">- add logrotate configuration files for krb5kdc and kadmind (#462658)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-44.el5" date="1278547200">- libgssapi: backport patch from svn to stop returning context-expired errors
  when the ticket which was used to set up the context expires (#605367,
  upstream #6739)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-43.el5" date="1277856000">- enable building the -server-ldap subpackage (#514362)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-42.el5" date="1276214400">- stop caring about the endianness of stash files (#514741), which will be
  replaced by proper keytab files in later releases
- don't crash in krb5_get_init_creds_password() if the passed-in options
  struct is NULL and the client's keys have expired (#555875)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-41.el5" date="1275609600">- ksu: perform PAM account and session management before dropping privileges
  to those of the target user (#540769 and #596887, respectively)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1275004800">- add candidate patch to correct libgssapi null pointer dereference which
  could be triggered by malformed client requests (CVE-2010-1321, #583704)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-40.el5" date="1271116800">- fix a null pointer dereference and crash introduced in our PAM patch that
  would happen if ftpd was given the name of a user who wasn't known to the
  local system, limited to being triggerable by gssapi-authenticated clients by
  the default xinetd config (Olivier Fourdan, #569472)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-39.el5" date="1270598400">- add upstream patch to fix a few use-after-free bugs, including one in
  kadmind (CVE-2010-0629, #578186)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-38.el5" date="1268784000">- merge patch to correct KDC integer overflows which could be triggered by
  malformed RC4 and AES ciphertexts (CVE-2009-4212, #546348)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-37.el5" date="1268784000">- pull changes to libkrb5 to properly handle and chase "off-path" referrals
  back from 1.7 (#546538)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-36.el5" date="1242777600">- add an auth stack to ksu's PAM configuration so that it can successfully
  pam_setcred()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-35.el5" date="1242086400">- also set PAM_RUSER in ksu for completeness (#479071+#477033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-34.el5" date="1241568000">- fix various typos, except for bits pertaining to licensing (#499190)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-33.el5" date="1241568000">- kdb5_util: when renaming a database, if the new name's associated lock
  files don't exist, go ahead and create them (#442879)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1240531200">- ksu: perform PAM account and session management for the target user;
  authentication is still performed as before (#477033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1240358400">- fix typo in ksu's reporting of errors getting credentials (#462890)
- kadmind.init: stop setting up a keytab, as kadmind's been able to use
  the database directly for a while now (#473151)
- pull up patch to set PAM_RHOST (James Leddy, #479071)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5.3" date="1238803200">- update to revised patch for CVE-2009-0844/CVE-2009-0845</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5.2" date="1238198400">- add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism
  (#490636, CVE-2009-0844)
- add fix for NULL pointer dereference when handling certain error cases
  in the SPNEGO GSSAPI mechanism (#490636, CVE-2009-0845)
- add fix for attempt to free uninitialized pointer in the ASN.1 decoder
  (#491036, CVE-2009-0846)
- add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-32.el5" date="1231977600">- add patch to also report an error in rcp if close() returns an error,
  which could indicate an out-of-space error on an NFS filesystem (Tomas
  Smetana, #461902)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5" date="1227657600">- add a backported patch which adds a check on credentials obtained from
  a foreign realm to make sure that they're of an acceptable type, and
  if not, retry to the request to get one of the right type (Sadique Puthen,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-30.el5" date="1225843200">- backport fix from 1.6.3 to register file-based ccaches created with
  the krb5_cc_new_unique() function with the global list, so that we
  don't crash when we go to close the ccache (#468729)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-29.el5" date="1220572800">- backport fix from 1.6.3 to abort a sequential scan of a keytab if the
  handle to the keytab has become invalidated during the scan (via Vince
  Worthington, #460911)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-28.el5" date="1220486400">- if we successfully change the user's password during an attempt to get
  initial credentials, but then fail to get initial creds from a non-master
  using the new password, retry against the master (#432334)
- telnet: remove the proviso in the man page which says that the "z" command
  only works in csh, as this is only true on systems where other shells don't
  implement job control (#433947)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1220054400">- avoid double-logging by not parsing /etc/krb5.conf twice (#434858)
- ftp: fix to not incorrectly reuse target filenames during mget when case-
  mapping is enabled (#442716)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-27.el5" date="1215820800">- don't forget to label the principal.ok lock file (#455033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-26.el5" date="1213315200">- build with -fno-strict-aliasing (#451043)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-25.el5" date="1204761600">- add preliminary patch to fix use of uninitialized pointer / double-free in
  KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
- add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
  (#415321)
- add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
  (#415351)
- add preliminary patch to fix incorrect handling of high-numbered descriptors
  in the RPC library (CVE-2008-0947) (#433596)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-24.el5" date="1202515200">- kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
  an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
  interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-23.el5" date="1201824000">- backport changes from 1.6.3 which allow callers of the the sendto-kdc
  functions to override the failover behavior on a per-response basis, and
  default to failing over on service-unavailable errors (#230384)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-22.el5" date="1201737600">- add patch to fall back to TCP kpasswd servers for kdc-unreachable,
  can't-resolve-server, and response-too-big errors (#392631)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1201219200">- fold in some more changes to account for differing definitions of %{dist}
  (more of #427790)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-21.el5" date="1200441600">- add conditional logic to allow building only the krb5-server-ldap subpackage
  (#427790)
- use the right sequence numbers when generating password-set/change requests
  for kpasswd servers after the first one (#427789)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-20.el5" date="1198022400">- allocate space for the relative path including the nul-terminator (Jose
  Plans, #426085)
- fix a couple of spots where a file context wouldn't be freed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-19.el5" date="1197417600">- backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
  structure the same way we would one which was allocated by the calling
  application, to restore kinit's traditional behavior of doing a password
  change right when it detects an expired password (#413051)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-18.el5" date="1194652800">- fix syntax error in kadmin init script (#373011,#381011)
- turn off content/size/date verification on krb5.conf (#329771)
- fix storage of delegated krb5 credentials when they've been wrapped up in
  spnego (#319351)
- return a delegated credential handle even if the application didn't pass a
  location to store the flags which would be used to indicate that credentials
  were delegated (#314651)
- in login, allow PAM to interact with the user when they've been strongly
  authenticated (#309951)
- signal PAM when we're changing an expired password that it's an expired
  password, so that when cracklib flags a password as being weak it's treated
  as an error even if we're running as root (#308131)
- set the key expiration time in an AS-REP using the sooner of the client's
  entry's key expiration time and the entry's expiration time, instead of
  just the entry's expiration time (#250257)
- in ftp, don't lose track of a client socket when a server-side error
  causes a download to fail (#248618)
- in ftp, fix runique when mget is used (#247633)
- add the snippet documenting the kdc_tcp_ports option to kdc.conf's man
  page, using text taken from the administrator's guide (#282191)
- in kpasswd, when reading the client's principal name from the ccache fails
  for any reason, fall back to the user's name (#248631)
- init script cleanups (Michal Marciniszyn, #242500)
- tweak the telnet man page to refer to the telnet rlogin escape character
  as such instead of rereferring to it simly as the escape character or the
  telnet escape character (#247741)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-17.el5" date="1189555200">- ftpd: also do PAM session and credential management when ftp clients use
  strong authentication (#286291)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-16" date="1189123200">- update to revised patch for CVE-2007-3999</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-15" date="1189123200">- fix omission of files created by the db2 plugin when labeling (#228157)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-14" date="1188000000">- make krb5-workstation depend on the PAM configuration file used by login.krb5
- fix omission of kadmin log file when labeling (#253558)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-13" date="1187654400">- add preliminary patch to fix buffer overflow in rpcsec_gss implementation
  in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
  pointer in kadmind (#250976, CVE-2007-4000)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-12" date="1185494400">- kdc: default to listening for TCP clients as well (#248415)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-11" date="1184198400">- login: change to the user's home directory after dropping privileges,
  not before (#248050)
- turn off the ldap features</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-10" date="1182988800">- add a patch to allow applications to try to use a key with kvno=0, if
  found, in place of the "right" version for a request (Luke Howard, #230379)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-9" date="1182988800">- incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
  and MITKRB5-SA-2007-005 (CVE-2007-2798) (#239073)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-7" date="1182816000">- reintroduce missing %postun for the non-split_workstation case</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-6" date="1182816000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-5.1" date="1182816000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-5" date="1182729600">- add missing pam-devel build requirement, force selinux-or-fail build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-4" date="1182729600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-3" date="1182729600">- label all files at creation-time according to the SELinux policy (#228157)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- perform PAM account / session management in krshd (#182195,#195922)
- perform PAM authentication and account / session management in ftpd
- perform PAM authentication, account / session management, and password-
  changing in login.krb5 (#182195,#195922)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- preprocess kerberos.ldif into a format FDS will like better, and include
  that as a doc file as well</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- switch man pages to being generated with the right paths in them
- drop old, incomplete SELinux patch
- add patch from Greg Hudson to make srvtab routines report missing-file errors
  at same point that keytab routines do (#241805)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-2" date="1180051200">- pull patch from svn to undo unintentional chattiness in ftp
- pull patch from svn to handle NULL krb5_get_init_creds_opt structures
  better in a couple of places where they're expected</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-1" date="1179964800">- update to 1.6.1
  - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
  - drop patch for sendto bug in 1.6, fixed in 1.6.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1179532800">- kadmind.init: don't fail outright if the default principal database
  isn't there if it looks like we might be using the kldap plugin
- kadmind.init: attempt to extract the key for the host-specific kadmin
  service when we try to create the keytab</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-6" date="1179360000">- omit dependent libraries from the krb5-config --libs output, as using
  shared libraries (no more static libraries) makes them unnecessary and
  they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
  (strips out libkeyutils, libresolv, libdl)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-5" date="1178323200">- pull in keyutils as a build requirement to get the "KEYRING:" ccache type,
  because we've merged</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-4" date="1178323200">- fix an uninitialized length value which could cause a crash when parsing
  key data coming from a directory server
- correct a typo in the krb5.conf man page ("ldap_server"-&gt;"ldap_servers")</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1176508800">- move the default acl_file, dict_file, and admin_keytab settings to
  the part of the default/example kdc.conf where they'll actually have
  an effect (#236417)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-24" date="1175817600">- merge security fixes from RHSA-2007:0095</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-3" date="1175644800">- add patch to correct unauthorized access via krb5-aware telnet
  daemon (#229782, CVE-2007-0956)
- add patch to fix buffer overflow in krb5kdc and kadmind
  (#231528, CVE-2007-0957)
- add patch to fix double-free in kadmind (#231537, CVE-2007-1216)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1174608000">- back out buildrequires: keyutils-libs-devel for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-2" date="1174608000">- add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
  dragging keyutils-libs in as a dependency</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-23" date="1174348800">- fix bug ID in changelog</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-22" date="1174003200">* Thu Mar 15 2007 Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-21
- add preliminary patch to fix buffer overflow in krb5kdc and kadmind
  (#231528, CVE-2007-0957)
- add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1172707200">- add patch to build semi-useful static libraries, but don't apply it unless
  we need them</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-20" date="1172620800">- temporarily back out %post changes, fix for #143289 for security update
- add preliminary patch to correct unauthorized access via krb5-aware telnet</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1171929600">- make profile.d scriptlets mode 644 instead of 755 (part of #225974)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-1" date="1170201600">- clean up quoting of command-line arguments passed to the krsh/krlogin
  wrapper scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-19" date="1169769600">- refrain from killing any lingering members of our child's process group when
  logging that the child process has exited (Jose Plans, #143289)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1169510400">- initial update to 1.6, pre-package-reorg
- move workstation daemons to a new subpackage (#81836, #216356, #217301), and
  make the new subpackage require xinetd (#211885)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-18" date="1169510400">- make use of install-info more failsafe (Ville Skyttä, #223704)
- preserve timestamps on shell scriptlets at %install-time</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-17" date="1168992000">- move to using pregenerated PDF docs to cure multilib conflicts (#222721)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-16" date="1168646400">- update backport of the preauth module interface (part of #194654)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-14" date="1168387200">- apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
- apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-12" date="1166659200">- update backport of the preauth module interface</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1162252800">- update backport of the preauth module interface
- add proposed patches 4566, 4567
- add proposed edata reporting interface for KDC
- add temporary placeholder for module global context fixes</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-11" date="1161648000">- don't bail from the KDC init script if there's no database, it may be in
  a different location than the default (fenlason)
- remove the [kdc] section from the default krb5.conf -- doesn't seem to have
  been applicable for a while</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-10" date="1161216000">- rename krb5.sh and krb5.csh so that they don't overlap (#210623)
- way-late application of added error info in kadmind.init (#65853)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-9.pal_18695" date="1161216000">- add backport of in-development preauth module interface (#208643)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-9" date="1160438400">- provide docs in PDF format instead of as tex source (Enrico Scholz, #209943)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-8" date="1160006400">- add missing shebang headers to krsh and krlogin wrapper scripts (#209238)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-7" date="1157587200">- set SS_LIB at configure-time so that libss-using apps get working readline
  support (#197044)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-6" date="1155945600">- switch to the updated patch for MITKRB-SA-2006-001</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-5" date="1155081600">- apply patch to address MITKRB-SA-2006-001 (CVE-2006-3084)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-4" date="1154995200">- ensure that the gssapi library's been initialized before walking the
  internal mechanism list in gss_release_oid(), needed if called from
  gss_release_name() right after a gss_import_name() (#198092)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-3" date="1153872000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-2" date="1153872000">- pull up latest revision of patch to reduce lockups in rsh/rshd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-1.2" date="1153180800">- rebuild</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 1.5-1.1" date="1152748800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-1" date="1152230400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-0" date="1152144000">- update to 1.5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-9" date="1151107200">- mark profile.d config files noreplace (Laurent Rineau, #196447)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-8" date="1149811200">- add buildprereq for autoconf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-7" date="1148342400">- further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
  architectures, to avoid multilib conflicts; other changes will conspire to
  strip out the -L flag which uses this, so it should be harmless (#192692)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-6" date="1146268800">- adjust the patch which removes the use of rpath to also produce a
  krb5-config which is okay in multilib environments (#190118)
- make the name-of-the-tempfile comment which compile_et adds to error code
  headers always list the same file to avoid conflicts on multilib installations
- strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
- strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
  boxes</changelog><changelog author="Stepan Kasal &lt;skasal@redhat.com&gt; 1.4.3-5" date="1145059200">- Fix formatting typo in kinit.1 (krb5-kinit-man-typo.patch)</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; 1.4.3-4.1" date="1139616000">- bump again for double-long bug on ppc(64)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-4" date="1139270400">- give a little bit more information to the user when kinit gets the catch-all
  I/O error (#180175)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-3" date="1137715200">- rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
  declared, such as with recent glibc when _GNU_SOURCE isn't being used</changelog><changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; 1.4.3-2" date="1137715200">- Use full paths in krb5.sh to avoid path lookups</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt;" date="1134172800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1133481600">- login: don't truncate passwords before passing them into crypt(), in
  case they're significant (#149476)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-1" date="1132272000">- update to 1.4.3
- make ksu setuid again (#137934, others)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-4" date="1126656000">- mark %{krb5prefix}/man so that files which are packaged within it are
  flagged as %doc (#168163)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-3" date="1126051200">- add an xinetd configuration file for encryption-only telnetd, parallelling
  the kshell/ekshell pair (#167535)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-2" date="1125532800">- change the default configured encryption type for KDC databases to the
  compiled-in default of des3-hmac-sha1 (#57847)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-1" date="1123804800">- update to 1.4.2, incorporating the fixes for MIT-KRB5-SA-2005-002 and
  MIT-KRB5-SA-2005-003</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-6" date="1120089600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-5" date="1120089600">- fix telnet client environment variable disclosure the same way NetKit's
  telnet client did (CAN-2005-0488) (#159305)
- keep apps which call krb5_principal_compare() or krb5_realm_compare() with
  malformed or NULL principal structures from crashing outright (Thomas Biege)
  (#161475)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1120003200">- apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
  (#157104)
- apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-4" date="1119657600">- fix double-close in keytab handling
- add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-3" date="1116028800">- prevent spurious EBADF in krshd when stdin is closed by the client while
  the command is running (#151111)</changelog><changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 1.4.1-2" date="1116028800">- add deadlock patch, removed old patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-1" date="1115424000">- update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
- when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
  file for the service, pass it as an argument for the -r flag</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-3" date="1111622400">- drop krshd patch for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1111104000">- add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
- add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-2" date="1111017600">- don't include &lt;term.h&gt; into the telnet client when we're not using curses</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-1" date="1109289600">- update to 1.4
  - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
    flag to specify that it should communicate with the server using the older
    protocol
  - new libkrb5support library
  - v5passwdd and kadmind4 are gone
  - versioned symbols
- pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
  it on to krb5kdc
- pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
  it on to kadmind
- pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
  it on to krb524d *instead of* "-m"
- set "forwardable" in [libdefaults] in the default krb5.conf to match the
  default setting which we supply for pam_krb5
- set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
  compiled-in default</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-3" date="1103587200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-2" date="1103587200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-1" date="1103587200">- update to 1.3.6, which includes the previous fix</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-8" date="1103587200">- apply fix from Tom Yu for MITKRB5-SA-2004-004 (CAN-2004-1189)</changelog><changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 1.3.5-7" date="1103328000">- fix deadlock during file transfer via rsync/krsh
- thanks goes to James Antill for hint</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-6" date="1101513600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-3" date="1101168000">- fix predictable-tempfile-name bug in krb5-send-pr (CAN-2004-0971, #140036)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1100649600">- silence compiler warning in kprop by using an in-memory ccache with a fixed
  name instead of an on-disk ccache with a name generated by tmpnam()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-2" date="1100649600">- fix globbing patch port mode (#139075)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-1" date="1099353600">- fix segfault in telnet due to incorrect checking of gethostbyname_r result
  codes (#129059)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1097884800">- remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
  supported keytypes in kdc.conf -- they produce exactly the same keys as
  rc4-hmac:normal because rc4 string-to-key ignores salts
- nuke kdcrotate -- there are better ways to balance the load on KDCs, and
  the SELinux policy for it would have been scary-looking
- update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-7" date="1093996800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-6" date="1093392000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-5" date="1093392000">- incorporate revised fixes from Tom Yu for CAN-2004-0642, CAN-2004-0644,
  CAN-2004-0772</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-4" date="1093305600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-3" date="1093305600">- incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
  (MITKRB5-SA-2004-002, #130732)
- incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-2" date="1090972800">- fix indexing error in server sorting patch (#127336)</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-0.1" date="1087257600">- update to 1.3.4 final</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-0" date="1086652800">- update to 1.3.4 beta1
- remove MITKRB5-SA-2004-001, included in 1.3.4</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-8" date="1086652800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-7" date="1086393600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-6" date="1086393600">- apply updated patch from MITKRB5-SA-2004-001 (revision 2004-06-02)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-5" date="1086134400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-4" date="1086134400">- apply patch from MITKRB5-SA-2004-001 (#125001)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.3.3-3" date="1084406400">- removed rpath</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-2" date="1082073600">- re-enable large file support, fell out in 1.3-1
- patch rcp to use long long and %lld format specifiers when reporting file
  sizes on large files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-1" date="1081900800">- update to 1.3.3</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.2-1" date="1078963200">- update to 1.3.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-12" date="1078790400">- rebuild</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt; 1.3.1-11.1" date="1078272000">- rebuilt</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt; 1.3.1-11" date="1076716800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-10" date="1076371200">- catch krb4 send_to_kdc cases in kdc preference patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-9" date="1075766400">- remove patch to set TERM in klogind which, combined with the upstream fix in
  1.3.1, actually produces the bug now (#114762)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-8" date="1074556800">- when iterating over lists of interfaces which are "up" from getifaddrs(),
  skip over those which have no address (#113347)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1073952000">- prefer the kdc which last replied to a request when sending requests to kdcs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-7" date="1069718400">- fix combination of --with-netlib and --enable-dns (#82176)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- remove libdefault ticket_lifetime option from the default krb5.conf, it is
  ignored by libkrb5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-6" date="1064534400">- fix bug in patch to make rlogind start login with a clean environment a la
  netkit rlogin, spotted and fixed by Scott McClung</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-5" date="1064361600">- include profile.d scriptlets in krb5-devel so that krb5-config will be in
  the path if krb5-workstation isn't installed, reported by Kir Kolyshkin</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1063065600">- add more etypes (arcfour) to the default enctype list in kdc.conf
- don't apply previous patch, refused upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-4" date="1062806400">- fix 32/64-bit bug storing and retrieving the issue_date in v4 credentials</changelog><changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; 1.3.1-3" date="1062633600">- Don't check for write access on /etc/krb5.conf if SELinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-2" date="1061942400">- fixup some int/pointer varargs wackiness</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-1" date="1060128000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-0" date="1060041600">- update to 1.3.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-2" date="1059091200">- pull fix for non-compliant encoding of salt field in etype-info2 preauth
  data from 1.3.1 beta 1, until 1.3.1 is released.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-1" date="1058832000">- update to 1.3</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.8-4" date="1057622400">- correctly use stdargs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-0.beta.4" date="1055980800">- test update to 1.3 beta 4
- ditch statglue build option
- krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; 1.2.8-2" date="1053561600">- gcc 3.3 doesn't implement varargs.h, include stdarg.h instead</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.8-1" date="1049932800">- update to 1.2.8</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-14" date="1049155200">- fix double-free of enc_part2 in krb524d</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-13" date="1048291200">- update to latest patch kit for MITKRB5-SA-2003-004</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-12" date="1048118400">- add patch included in MITKRB5-SA-2003-003 (CAN-2003-0028)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-11" date="1047945600">- add patches from patchkit from MITKRB5-SA-2003-004 (CAN-2003-0138 and
  CAN-2003-0139)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-10" date="1046995200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-9" date="1046995200">- fix buffer underrun in unparsing certain principals (CAN-2003-0082)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-8" date="1044403200">- add patch to document the reject-bad-transited option in kdc.conf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1044316800">- add patch to fix server-side crashes when principals have no
  components (CAN-2003-0072)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-7" date="1043366400">- add patch from Mark Cox for exploitable bugs in ftp client</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-5" date="1042675200">- use PICFLAGS when building code from the ktany patch</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 1.2.7-4" date="1042156800">- debloat</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; 1.2.7-3" date="1041984000">- include .so.* symlinks as well as .so.*.*</changelog><changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 1.2.7-2" date="1039478400">- always #include &lt;errno.h&gt; to access errno, never do it directly
- enable LFS on a bunch of other 32-bit arches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1039046400">- increase the maximum name length allowed by kuserok() to the higher value
  used in development versions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1038873600">- install src/krb524/README as README.krb524 in the -servers package,
  includes information about converting for AFS principals</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-1" date="1037404800">- update to 1.2.7
- disable use of tcl</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1037059200">- update to 1.2.7-beta2 (internal only, not for release), dropping dnsparse
  and kadmind4 fixes</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-5" date="1035417600">- add patch for buffer overflow in kadmind4 (not used by default)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-4" date="1034380800">- drop a hunk from the dnsparse patch which is actually redundant (thanks to
  Tom Yu)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-3" date="1034208000">- patch to handle truncated dns responses</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-2" date="1034035200">- remove hashless key types from the default kdc.conf, they're not supposed to
  be there, noted by Sam Hartman on krbdev</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-1" date="1033171200">- update to 1.2.6</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-7" date="1031961600">- use %{_lib} for the sake of multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-6" date="1028332800">- add patch from Tom Yu for exploitable bugs in rpc code used in kadmind</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-5" date="1027468800">- fix bug in krb5.csh which would cause the path check to always succeed</changelog><changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 1.2.5-4" date="1027123200">- build even libdb.a with -fPIC and $RPM_OPT_FLAGS.</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1022457600">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-1" date="1020297600">- update to 1.2.5
- disable statglue</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.4-1" date="1015027200">- update to 1.2.4</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-5" date="1014249600">- rebuild in new environment
- reenable statglue</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1012089600">- prereq chkconfig for the server subpackage</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-3" date="1011225600">- build without -g3, which gives us large static libraries in -devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-2" date="1011139200">- reintroduce ld.so.conf munging in the -libs %post</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-1" date="1010707200">- rename the krb5 package back to krb5-libs; the previous rename caused
  something of an uproar
- update to 1.2.3, which includes the FTP and telnetd fixes
- configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
  the default behavior instead of enabling the feature (the feature is enabled
  by --enable-dns, which we still use)
- reenable optimizations on Alpha
- support more encryption types in the default kdc.conf (heads-up from post
  to comp.protocols.kerberos by Jason Heiss)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.2-14" date="996883200">- rename the krb5-libs package to krb5 (naming a subpackage -libs when there
  is no main package is silly)
- move defaults for PAM to the appdefaults section of krb5.conf -- this is
  the area where the krb5_appdefault_* functions look for settings)
- disable statglue (warning: breaks binary compatibility with previous
  packages, but has to be broken at some point to work correctly with
  unpatched versions built with newer versions of glibc)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.2-13" date="996883200">- bump release number and rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996710400">- add patch to fix telnetd vulnerability</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="995673600">- tweak statglue.c to fix stat/stat64 aliasing problems
- be cleaner in use of gcc to build shlibs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- use gcc to build shared libraries</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993686400">- add patch to support "ANY" keytab type (i.e.,
  "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
  patch from Gerald Britton, #42551)
- build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
- patch ftpd to use long long and %lld format specifiers to support the SIZE
  command on large files (also #30697)
- don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
- implement reload in krb5kdc and kadmind init scripts (#41911)
- lose the krb5server init script (not using it any more)</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="993427200">- Bump release + rebuild.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991180800">- pass some structures by address instead of on the stack in krb5kdc</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990576000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988329600">- add patch from Tom Yu to fix ftpd overflows (#37731)</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt;" date="987638400">- disable optimizations on the alpha again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985996800">- add in glue code to make sure that libkrb5 continues to provide a
  weak copy of stat()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="984700800">- build alpha with -O0 for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="984096000">- fix the kpropd init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983836800">- update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
- re-enable optimization on Alpha</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="981676800">- build alpha with -O0 for now
- own /var/kerberos</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="981504000">- own the directories which are created for each package (#26342)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- gettextize init scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- add some comments to the ksu patches for the curious
- re-enable optimization on alphas</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979603200">- fix krb5-send-pr (#18932) and move it from -server to -workstation
- buildprereq libtermcap-devel
- temporariliy disable optimization on alphas
- gettextize init scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- force -fPIC</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975715200">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973036800">- add bison as a BuildPrereq (#20091)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- change /usr/dict/words to /usr/share/dict/words in default kdc.conf (#20000)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- apply kpasswd bug fixes from David Wragg</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970704000">- make krb5-libs obsolete the old krb5-configs package (#18351)
- don't quit from the kpropd init script if there's no principal database so
  that you can propagate the first time without running kpropd manually
- don't complain if /etc/ld.so.conf doesn't exist in the -libs %post</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968803200">- fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
  (#11588)
- fix heap corruption bug in FTP client (#14301)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966470400">- fix summaries and descriptions
- switched the default transfer protocol from PORT to PASV as proposed on
  bugzilla (#16134), and to match the regular ftp package's behavior</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="964051200">- rebuild to compress man pages.</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="963705600">- move initscript back</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963619200">- disable servers by default to keep linuxconf from thinking they need to be
  started when they don't</changelog><changelog author="Prospector &lt;bugzilla@redhat.com&gt;" date="963532800">- automatic rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963273600">- change cleanup code in post to not tickle chkconfig
- add grep as a Prereq: for -libs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- move condrestarts to postun
- make xinetd configs noreplace
- add descriptions to xinetd configs
- add /etc/init.d as a prereq for the -server package
- patch to properly truncate $TERM in krlogind</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962409600">- update to 1.2.1
- back out Tom Yu's patch, which is a big chunk of the 1.2 -&gt; 1.2.1 update
- start using the official source tarball instead of its contents</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
- pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
  compatible with other stuff in 6.2, so no need)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962236800">- tweak graceful start/stop logic in post and preun</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962064000">- update to the 1.2 release
- ditch a lot of our patches which went upstream
- enable use of DNS to look up things at build-time
- disable use of DNS to look up things at run-time in default krb5.conf
- change ownership of the convert-config-files script to root.root
- compress PS docs
- fix some typos in the kinit man page
- run condrestart in server post, and shut down in preun</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961459200">- only remove old krb5server init script links if the init script is there</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961286400">- disable kshell and eklogin by default</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961113600">- patch mkdir/rmdir problem in ftpcmd.y
- add condrestart option to init script
- split the server init script into three pieces and add one for kpropd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961027200">- make sure workstation servers are all disabled by default
- clean up krb5server init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- apply second set of buffer overflow fixes from Tom Yu
- fix from Dirk Husung for a bug in buffer cleanups in the test suite
- work around possibly broken rev binary in running test suite
- move default realm configs from /var/kerberos to /var/kerberos</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960336000">- make ksu and v4rcp owned by root</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- use %{_infodir} to better comply with FHS
- move .so files to -devel subpackage
- tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
- fix package descriptions again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="959212800">- change a LINE_MAX to 1024, fix from Ken Raeburn
- add fix for login vulnerability in case anyone rebuilds without krb4 compat
- add tweaks for byte-swapping macros in krb.h, also from Ken
- add xinetd config files
- make rsh and rlogin quieter
- build with debug to fix credential forwarding
- add rsh as a build-time req because the configure scripts look for it to
  determine paths</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958608000">- fix config_subpackage logic</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958521600">- remove setuid bit on v4rcp and ksu in case the checks previously added
  don't close all of the problems in ksu
- apply patches from Jeffrey Schiller to fix overruns Chris Evans found
- reintroduce configs subpackage for use in the errata
- add PreReq: sh-utils</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958435200">- fix double-free in the kdc (patch merged into MIT tree)
- include convert-config-files script as a documentation file</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="957398400">- patch ksu man page because the -C option never works
- add access() checks and disable debug mode in ksu
- modify default ksu build arguments to specify more directories in CMD_PATH
  and to use getusershell()</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="957398400">- fix configure stuff for ia64</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="955411200">- add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
- change Requires: for/in subpackages to include 1.6.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954979200">- add man pages for kerberos(1), kvno(1), .k5login(5)
- add kvno to -workstation</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954806400">- Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
  a %config file anyway.
- Make krb5.conf a noreplace config file.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954460800">- Make klogind pass a clean environment to children, like NetKit's rlogind does.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952560000">- Don't enable the server by default.
- Compress info pages.
- Add defaults for the PAM module to krb5.conf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952387200">- Correct copyright: it's exportable now, provided the proper paperwork is
  filed with the government.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952128000">- apply Mike Friedman's patch to fix format string problems
- don't strip off argv[0] when invoking regular rsh/rlogin</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952041600">- run kadmin.local correctly at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="951782400">- pass absolute path to kadm5.keytab if/when extracting keys at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="951004800">- fix info page insertions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="950140800">- tweak server init script to automatically extract kadm5 keys if
  /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
- adjust package descriptions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="949622400">- fix for potentially gzipped man pages</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="948499200">- fix comments in krb5-configs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="947289600">- move /usr/kerberos/bin to end of PATH</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="946425600">- install kadmin header files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="945820800">- patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
- add installation of info docs
- remove krb4 compat patch because it doesn't fix workstation-side servers</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="945734400">- remove hesiod dependency at build-time</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="945648000">- rebuild on 1.1.1</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="939340800">- clean up init script for server, verify that it works [jlkatz]
- clean up rotation script so that rc likes it better
- add clean stanza</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="939081600">- backed out ncurses and makeshlib patches
- update for krb5-1.1
- add KDC rotation to rc.boot, based on ideas from Michael's C version</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="938390400">- added -lncurses to telnet and telnetd makefiles</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="931219200">- added krb5.csh and krb5.sh to /etc/profile.d</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="930096000">- broke out configuration files</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="929404800">- fixed server package so that it works now</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="926812800">- started changelog (previous package from zedz.net)
- updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
- added --force to makeinfo commands to skip errors during build</changelog></package>
<package pkgid="8fc652c5b1b30cbfbc48aecc7852d525bde7d1ed" name="krb5-workstation" arch="i386"><version epoch="0" ver="1.6.1" rel="80.el5.slf5"/><changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1413244800">- Ran Regex: (Release: .*) =&gt; \1.slf5
--&gt;  Modify release string to note changes for SLF5
- Added Source: krb5.ini
--&gt;  Config file for automated patch script
- Added Patch: krb5_krb5-mwm-kshd.patch
--&gt;  Fix sync bug, see BZ#658217</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-80.el5" date="1409270400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-79.el5" date="1408752000">- incorporate fix for MITKRB5-SA-2014-001 (CVE-2014-4345, #1132785)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592000">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-77.el5" date="1406592000">- fix what appears to be a cosmetic error in the patch for self-tests
  for CVE-2014-4341</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-76.el5" date="1406160000">- run the backported self-tests, such as they are, for CVE-2014-4341</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-75.el5" date="1406160000">- pull in backported fix for denial of service by injection of malformed
  GSSAPI tokens (CVE-2014-4341, #1121509)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-74.el5" date="1399334400">- add patch based on one from Filip Krska to not call poll() with a negative
  timeout when the caller's intent is for us to just stop calling it (#1089732)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-73.el5" date="1398211200">- incorporate backported upstream patch for remote crash of KDCs which serve
  multiple realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-72.el5" date="1395792000">- add part-backported fix to avoid possible use-after-free when encrypting
  delegated creds (Jatin Nansi, #1004632)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-71.el5" date="1370044800">- add backported fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325030400">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-69.el5" date="1320278400">- ftp: fix a static analysis should-never-happen NULL dereference (#750823)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-68.el5" date="1319068800">- backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
  to talk to a KDC by using poll() if it's detected at compile-time, revised
  (#701444, RT#6905)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-67.el5" date="1318982400">- add backported patch by way of jbarbuc to free subkeys created by the
  KDC while processing TGS requests (#708516)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-66.el5" date="1318982400">- add backported patch by way of several people to better avoid false
  detection of replay attacks when talking to systems with coarse time
  resolution (#713500)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-65.el5" date="1318982400">- ftpd: add backported patch to check for errors when calling setegid
  (MITKRB5-SA-2011-005, CVE-2011-1526, #719098)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-64.el5" date="1318982400">- klist: don't trip over referral entries when invoked with -s (#729067,
  RT#6915)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-63.el5" date="1318982400">- unbreak processing of multi-line macros (#735363,#736132), broken by the
  original fix for #665833</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-62.el5" date="1308355200">- incorporate a fix to teach the file labeling bits about when replay caches
  are expunged (#712453)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-61.el5" date="1305072000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1303948800">- ftp: handle larger command inputs (#665833)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-60.el5" date="1303862400">- don't bail halfway through an unlock operation when the result will
  be discarded and the end-result not cleaned up (Martin Osvald, #586032)
- add a versioned dependency between krb5-server-ldap and krb5-libs (internal
  tooling)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-59.el5" date="1301961600">- don't discard the error code from an error message received in response
  to a change-password request (#658871, RT#6893)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-58.el5" date="1301529600">- ftpd: add patch from Jatin Nansi to correctly match "$user restrict"
  lines in /etc/ftpusers (#644215, RT#6889)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-57.el5" date="1300406400">- ftp: add modified patch from Rogan Kyuseok Lee to report the number of
  bytes transferred correctly when transferring large files on 32-bit
  systems (#648404)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-56.el5" date="1297987200">- backport fix for RT#6514: memory leak freeing rcache type "none" (#678205)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1297987200">- add upstream patch to fix hang or crash in the KDC when using the LDAP kdb
  backend (CVE-2011-0281, CVE-2011-0282, #671097)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-55.el5" date="1291161600">- incorporate upstream patch for checksum acceptance issues from
  MITKRB5-SA-2010-007 (CVE-2010-1323, #652308)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-54.el5" date="1286236800">- backport a fix to the previous change (#539423)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-53.el5" date="1285977600">- backport the k5login_directory and k5login_authoritative settings (#539423)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-52.el5" date="1284076800">- krshd: don't limit user names to 16 chars when utmp can handle names
  at least a bit longer than that (#611713)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-51.el5" date="1283558400">- fix a logic bug in computing key expiration times (RT#6762, #627038)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-50.el5" date="1283385600">- correct the post-rotate scriptlet in the kadmind logrotate config (more
  of #462658)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-49.el5" date="1278979200">- ftpd: backport changes to modify behavior to match telnetd,rshd,rlogind and
  accept GSSAPI auth to any service for which we have a matching key (#538075)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-47.el5" date="1278547200">- pull in fix for RT#5551 to treat the referral realm when seen in a ticket
  as though it were the local realm (#498554, also very likely #450122)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-46.el5" date="1278547200">- add aes256-cts:normal and aes128-cts:normal to the list of keysalts
  in the default kdc.conf (part of #565941)
- add a note to kdc.conf(5) pointing to the admin guide for the list of
  recognized key and salt types (the rest of #565941)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-45.el5" date="1278547200">- add logrotate configuration files for krb5kdc and kadmind (#462658)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-44.el5" date="1278547200">- libgssapi: backport patch from svn to stop returning context-expired errors
  when the ticket which was used to set up the context expires (#605367,
  upstream #6739)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-43.el5" date="1277856000">- enable building the -server-ldap subpackage (#514362)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-42.el5" date="1276214400">- stop caring about the endianness of stash files (#514741), which will be
  replaced by proper keytab files in later releases
- don't crash in krb5_get_init_creds_password() if the passed-in options
  struct is NULL and the client's keys have expired (#555875)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-41.el5" date="1275609600">- ksu: perform PAM account and session management before dropping privileges
  to those of the target user (#540769 and #596887, respectively)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1275004800">- add candidate patch to correct libgssapi null pointer dereference which
  could be triggered by malformed client requests (CVE-2010-1321, #583704)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-40.el5" date="1271116800">- fix a null pointer dereference and crash introduced in our PAM patch that
  would happen if ftpd was given the name of a user who wasn't known to the
  local system, limited to being triggerable by gssapi-authenticated clients by
  the default xinetd config (Olivier Fourdan, #569472)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-39.el5" date="1270598400">- add upstream patch to fix a few use-after-free bugs, including one in
  kadmind (CVE-2010-0629, #578186)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-38.el5" date="1268784000">- merge patch to correct KDC integer overflows which could be triggered by
  malformed RC4 and AES ciphertexts (CVE-2009-4212, #546348)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-37.el5" date="1268784000">- pull changes to libkrb5 to properly handle and chase "off-path" referrals
  back from 1.7 (#546538)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-36.el5" date="1242777600">- add an auth stack to ksu's PAM configuration so that it can successfully
  pam_setcred()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-35.el5" date="1242086400">- also set PAM_RUSER in ksu for completeness (#479071+#477033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-34.el5" date="1241568000">- fix various typos, except for bits pertaining to licensing (#499190)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-33.el5" date="1241568000">- kdb5_util: when renaming a database, if the new name's associated lock
  files don't exist, go ahead and create them (#442879)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1240531200">- ksu: perform PAM account and session management for the target user;
  authentication is still performed as before (#477033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1240358400">- fix typo in ksu's reporting of errors getting credentials (#462890)
- kadmind.init: stop setting up a keytab, as kadmind's been able to use
  the database directly for a while now (#473151)
- pull up patch to set PAM_RHOST (James Leddy, #479071)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5.3" date="1238803200">- update to revised patch for CVE-2009-0844/CVE-2009-0845</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5.2" date="1238198400">- add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism
  (#490636, CVE-2009-0844)
- add fix for NULL pointer dereference when handling certain error cases
  in the SPNEGO GSSAPI mechanism (#490636, CVE-2009-0845)
- add fix for attempt to free uninitialized pointer in the ASN.1 decoder
  (#491036, CVE-2009-0846)
- add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-32.el5" date="1231977600">- add patch to also report an error in rcp if close() returns an error,
  which could indicate an out-of-space error on an NFS filesystem (Tomas
  Smetana, #461902)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5" date="1227657600">- add a backported patch which adds a check on credentials obtained from
  a foreign realm to make sure that they're of an acceptable type, and
  if not, retry to the request to get one of the right type (Sadique Puthen,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-30.el5" date="1225843200">- backport fix from 1.6.3 to register file-based ccaches created with
  the krb5_cc_new_unique() function with the global list, so that we
  don't crash when we go to close the ccache (#468729)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-29.el5" date="1220572800">- backport fix from 1.6.3 to abort a sequential scan of a keytab if the
  handle to the keytab has become invalidated during the scan (via Vince
  Worthington, #460911)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-28.el5" date="1220486400">- if we successfully change the user's password during an attempt to get
  initial credentials, but then fail to get initial creds from a non-master
  using the new password, retry against the master (#432334)
- telnet: remove the proviso in the man page which says that the "z" command
  only works in csh, as this is only true on systems where other shells don't
  implement job control (#433947)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1220054400">- avoid double-logging by not parsing /etc/krb5.conf twice (#434858)
- ftp: fix to not incorrectly reuse target filenames during mget when case-
  mapping is enabled (#442716)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-27.el5" date="1215820800">- don't forget to label the principal.ok lock file (#455033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-26.el5" date="1213315200">- build with -fno-strict-aliasing (#451043)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-25.el5" date="1204761600">- add preliminary patch to fix use of uninitialized pointer / double-free in
  KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
- add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
  (#415321)
- add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
  (#415351)
- add preliminary patch to fix incorrect handling of high-numbered descriptors
  in the RPC library (CVE-2008-0947) (#433596)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-24.el5" date="1202515200">- kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
  an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
  interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-23.el5" date="1201824000">- backport changes from 1.6.3 which allow callers of the the sendto-kdc
  functions to override the failover behavior on a per-response basis, and
  default to failing over on service-unavailable errors (#230384)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-22.el5" date="1201737600">- add patch to fall back to TCP kpasswd servers for kdc-unreachable,
  can't-resolve-server, and response-too-big errors (#392631)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1201219200">- fold in some more changes to account for differing definitions of %{dist}
  (more of #427790)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-21.el5" date="1200441600">- add conditional logic to allow building only the krb5-server-ldap subpackage
  (#427790)
- use the right sequence numbers when generating password-set/change requests
  for kpasswd servers after the first one (#427789)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-20.el5" date="1198022400">- allocate space for the relative path including the nul-terminator (Jose
  Plans, #426085)
- fix a couple of spots where a file context wouldn't be freed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-19.el5" date="1197417600">- backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
  structure the same way we would one which was allocated by the calling
  application, to restore kinit's traditional behavior of doing a password
  change right when it detects an expired password (#413051)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-18.el5" date="1194652800">- fix syntax error in kadmin init script (#373011,#381011)
- turn off content/size/date verification on krb5.conf (#329771)
- fix storage of delegated krb5 credentials when they've been wrapped up in
  spnego (#319351)
- return a delegated credential handle even if the application didn't pass a
  location to store the flags which would be used to indicate that credentials
  were delegated (#314651)
- in login, allow PAM to interact with the user when they've been strongly
  authenticated (#309951)
- signal PAM when we're changing an expired password that it's an expired
  password, so that when cracklib flags a password as being weak it's treated
  as an error even if we're running as root (#308131)
- set the key expiration time in an AS-REP using the sooner of the client's
  entry's key expiration time and the entry's expiration time, instead of
  just the entry's expiration time (#250257)
- in ftp, don't lose track of a client socket when a server-side error
  causes a download to fail (#248618)
- in ftp, fix runique when mget is used (#247633)
- add the snippet documenting the kdc_tcp_ports option to kdc.conf's man
  page, using text taken from the administrator's guide (#282191)
- in kpasswd, when reading the client's principal name from the ccache fails
  for any reason, fall back to the user's name (#248631)
- init script cleanups (Michal Marciniszyn, #242500)
- tweak the telnet man page to refer to the telnet rlogin escape character
  as such instead of rereferring to it simly as the escape character or the
  telnet escape character (#247741)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-17.el5" date="1189555200">- ftpd: also do PAM session and credential management when ftp clients use
  strong authentication (#286291)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-16" date="1189123200">- update to revised patch for CVE-2007-3999</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-15" date="1189123200">- fix omission of files created by the db2 plugin when labeling (#228157)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-14" date="1188000000">- make krb5-workstation depend on the PAM configuration file used by login.krb5
- fix omission of kadmin log file when labeling (#253558)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-13" date="1187654400">- add preliminary patch to fix buffer overflow in rpcsec_gss implementation
  in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
  pointer in kadmind (#250976, CVE-2007-4000)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-12" date="1185494400">- kdc: default to listening for TCP clients as well (#248415)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-11" date="1184198400">- login: change to the user's home directory after dropping privileges,
  not before (#248050)
- turn off the ldap features</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-10" date="1182988800">- add a patch to allow applications to try to use a key with kvno=0, if
  found, in place of the "right" version for a request (Luke Howard, #230379)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-9" date="1182988800">- incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
  and MITKRB5-SA-2007-005 (CVE-2007-2798) (#239073)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-7" date="1182816000">- reintroduce missing %postun for the non-split_workstation case</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-6" date="1182816000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-5.1" date="1182816000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-5" date="1182729600">- add missing pam-devel build requirement, force selinux-or-fail build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-4" date="1182729600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-3" date="1182729600">- label all files at creation-time according to the SELinux policy (#228157)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- perform PAM account / session management in krshd (#182195,#195922)
- perform PAM authentication and account / session management in ftpd
- perform PAM authentication, account / session management, and password-
  changing in login.krb5 (#182195,#195922)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- preprocess kerberos.ldif into a format FDS will like better, and include
  that as a doc file as well</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- switch man pages to being generated with the right paths in them
- drop old, incomplete SELinux patch
- add patch from Greg Hudson to make srvtab routines report missing-file errors
  at same point that keytab routines do (#241805)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-2" date="1180051200">- pull patch from svn to undo unintentional chattiness in ftp
- pull patch from svn to handle NULL krb5_get_init_creds_opt structures
  better in a couple of places where they're expected</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-1" date="1179964800">- update to 1.6.1
  - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
  - drop patch for sendto bug in 1.6, fixed in 1.6.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1179532800">- kadmind.init: don't fail outright if the default principal database
  isn't there if it looks like we might be using the kldap plugin
- kadmind.init: attempt to extract the key for the host-specific kadmin
  service when we try to create the keytab</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-6" date="1179360000">- omit dependent libraries from the krb5-config --libs output, as using
  shared libraries (no more static libraries) makes them unnecessary and
  they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
  (strips out libkeyutils, libresolv, libdl)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-5" date="1178323200">- pull in keyutils as a build requirement to get the "KEYRING:" ccache type,
  because we've merged</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-4" date="1178323200">- fix an uninitialized length value which could cause a crash when parsing
  key data coming from a directory server
- correct a typo in the krb5.conf man page ("ldap_server"-&gt;"ldap_servers")</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1176508800">- move the default acl_file, dict_file, and admin_keytab settings to
  the part of the default/example kdc.conf where they'll actually have
  an effect (#236417)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-24" date="1175817600">- merge security fixes from RHSA-2007:0095</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-3" date="1175644800">- add patch to correct unauthorized access via krb5-aware telnet
  daemon (#229782, CVE-2007-0956)
- add patch to fix buffer overflow in krb5kdc and kadmind
  (#231528, CVE-2007-0957)
- add patch to fix double-free in kadmind (#231537, CVE-2007-1216)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1174608000">- back out buildrequires: keyutils-libs-devel for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-2" date="1174608000">- add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
  dragging keyutils-libs in as a dependency</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-23" date="1174348800">- fix bug ID in changelog</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-22" date="1174003200">* Thu Mar 15 2007 Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-21
- add preliminary patch to fix buffer overflow in krb5kdc and kadmind
  (#231528, CVE-2007-0957)
- add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1172707200">- add patch to build semi-useful static libraries, but don't apply it unless
  we need them</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-20" date="1172620800">- temporarily back out %post changes, fix for #143289 for security update
- add preliminary patch to correct unauthorized access via krb5-aware telnet</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1171929600">- make profile.d scriptlets mode 644 instead of 755 (part of #225974)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-1" date="1170201600">- clean up quoting of command-line arguments passed to the krsh/krlogin
  wrapper scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-19" date="1169769600">- refrain from killing any lingering members of our child's process group when
  logging that the child process has exited (Jose Plans, #143289)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1169510400">- initial update to 1.6, pre-package-reorg
- move workstation daemons to a new subpackage (#81836, #216356, #217301), and
  make the new subpackage require xinetd (#211885)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-18" date="1169510400">- make use of install-info more failsafe (Ville Skyttä, #223704)
- preserve timestamps on shell scriptlets at %install-time</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-17" date="1168992000">- move to using pregenerated PDF docs to cure multilib conflicts (#222721)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-16" date="1168646400">- update backport of the preauth module interface (part of #194654)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-14" date="1168387200">- apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
- apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-12" date="1166659200">- update backport of the preauth module interface</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1162252800">- update backport of the preauth module interface
- add proposed patches 4566, 4567
- add proposed edata reporting interface for KDC
- add temporary placeholder for module global context fixes</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-11" date="1161648000">- don't bail from the KDC init script if there's no database, it may be in
  a different location than the default (fenlason)
- remove the [kdc] section from the default krb5.conf -- doesn't seem to have
  been applicable for a while</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-10" date="1161216000">- rename krb5.sh and krb5.csh so that they don't overlap (#210623)
- way-late application of added error info in kadmind.init (#65853)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-9.pal_18695" date="1161216000">- add backport of in-development preauth module interface (#208643)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-9" date="1160438400">- provide docs in PDF format instead of as tex source (Enrico Scholz, #209943)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-8" date="1160006400">- add missing shebang headers to krsh and krlogin wrapper scripts (#209238)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-7" date="1157587200">- set SS_LIB at configure-time so that libss-using apps get working readline
  support (#197044)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-6" date="1155945600">- switch to the updated patch for MITKRB-SA-2006-001</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-5" date="1155081600">- apply patch to address MITKRB-SA-2006-001 (CVE-2006-3084)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-4" date="1154995200">- ensure that the gssapi library's been initialized before walking the
  internal mechanism list in gss_release_oid(), needed if called from
  gss_release_name() right after a gss_import_name() (#198092)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-3" date="1153872000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-2" date="1153872000">- pull up latest revision of patch to reduce lockups in rsh/rshd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-1.2" date="1153180800">- rebuild</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 1.5-1.1" date="1152748800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-1" date="1152230400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-0" date="1152144000">- update to 1.5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-9" date="1151107200">- mark profile.d config files noreplace (Laurent Rineau, #196447)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-8" date="1149811200">- add buildprereq for autoconf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-7" date="1148342400">- further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
  architectures, to avoid multilib conflicts; other changes will conspire to
  strip out the -L flag which uses this, so it should be harmless (#192692)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-6" date="1146268800">- adjust the patch which removes the use of rpath to also produce a
  krb5-config which is okay in multilib environments (#190118)
- make the name-of-the-tempfile comment which compile_et adds to error code
  headers always list the same file to avoid conflicts on multilib installations
- strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
- strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
  boxes</changelog><changelog author="Stepan Kasal &lt;skasal@redhat.com&gt; 1.4.3-5" date="1145059200">- Fix formatting typo in kinit.1 (krb5-kinit-man-typo.patch)</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; 1.4.3-4.1" date="1139616000">- bump again for double-long bug on ppc(64)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-4" date="1139270400">- give a little bit more information to the user when kinit gets the catch-all
  I/O error (#180175)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-3" date="1137715200">- rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
  declared, such as with recent glibc when _GNU_SOURCE isn't being used</changelog><changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; 1.4.3-2" date="1137715200">- Use full paths in krb5.sh to avoid path lookups</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt;" date="1134172800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1133481600">- login: don't truncate passwords before passing them into crypt(), in
  case they're significant (#149476)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-1" date="1132272000">- update to 1.4.3
- make ksu setuid again (#137934, others)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-4" date="1126656000">- mark %{krb5prefix}/man so that files which are packaged within it are
  flagged as %doc (#168163)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-3" date="1126051200">- add an xinetd configuration file for encryption-only telnetd, parallelling
  the kshell/ekshell pair (#167535)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-2" date="1125532800">- change the default configured encryption type for KDC databases to the
  compiled-in default of des3-hmac-sha1 (#57847)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-1" date="1123804800">- update to 1.4.2, incorporating the fixes for MIT-KRB5-SA-2005-002 and
  MIT-KRB5-SA-2005-003</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-6" date="1120089600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-5" date="1120089600">- fix telnet client environment variable disclosure the same way NetKit's
  telnet client did (CAN-2005-0488) (#159305)
- keep apps which call krb5_principal_compare() or krb5_realm_compare() with
  malformed or NULL principal structures from crashing outright (Thomas Biege)
  (#161475)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1120003200">- apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
  (#157104)
- apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-4" date="1119657600">- fix double-close in keytab handling
- add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-3" date="1116028800">- prevent spurious EBADF in krshd when stdin is closed by the client while
  the command is running (#151111)</changelog><changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 1.4.1-2" date="1116028800">- add deadlock patch, removed old patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-1" date="1115424000">- update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
- when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
  file for the service, pass it as an argument for the -r flag</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-3" date="1111622400">- drop krshd patch for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1111104000">- add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
- add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-2" date="1111017600">- don't include &lt;term.h&gt; into the telnet client when we're not using curses</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-1" date="1109289600">- update to 1.4
  - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
    flag to specify that it should communicate with the server using the older
    protocol
  - new libkrb5support library
  - v5passwdd and kadmind4 are gone
  - versioned symbols
- pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
  it on to krb5kdc
- pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
  it on to kadmind
- pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
  it on to krb524d *instead of* "-m"
- set "forwardable" in [libdefaults] in the default krb5.conf to match the
  default setting which we supply for pam_krb5
- set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
  compiled-in default</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-3" date="1103587200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-2" date="1103587200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-1" date="1103587200">- update to 1.3.6, which includes the previous fix</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-8" date="1103587200">- apply fix from Tom Yu for MITKRB5-SA-2004-004 (CAN-2004-1189)</changelog><changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 1.3.5-7" date="1103328000">- fix deadlock during file transfer via rsync/krsh
- thanks goes to James Antill for hint</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-6" date="1101513600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-3" date="1101168000">- fix predictable-tempfile-name bug in krb5-send-pr (CAN-2004-0971, #140036)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1100649600">- silence compiler warning in kprop by using an in-memory ccache with a fixed
  name instead of an on-disk ccache with a name generated by tmpnam()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-2" date="1100649600">- fix globbing patch port mode (#139075)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-1" date="1099353600">- fix segfault in telnet due to incorrect checking of gethostbyname_r result
  codes (#129059)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1097884800">- remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
  supported keytypes in kdc.conf -- they produce exactly the same keys as
  rc4-hmac:normal because rc4 string-to-key ignores salts
- nuke kdcrotate -- there are better ways to balance the load on KDCs, and
  the SELinux policy for it would have been scary-looking
- update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-7" date="1093996800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-6" date="1093392000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-5" date="1093392000">- incorporate revised fixes from Tom Yu for CAN-2004-0642, CAN-2004-0644,
  CAN-2004-0772</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-4" date="1093305600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-3" date="1093305600">- incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
  (MITKRB5-SA-2004-002, #130732)
- incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-2" date="1090972800">- fix indexing error in server sorting patch (#127336)</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-0.1" date="1087257600">- update to 1.3.4 final</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-0" date="1086652800">- update to 1.3.4 beta1
- remove MITKRB5-SA-2004-001, included in 1.3.4</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-8" date="1086652800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-7" date="1086393600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-6" date="1086393600">- apply updated patch from MITKRB5-SA-2004-001 (revision 2004-06-02)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-5" date="1086134400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-4" date="1086134400">- apply patch from MITKRB5-SA-2004-001 (#125001)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.3.3-3" date="1084406400">- removed rpath</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-2" date="1082073600">- re-enable large file support, fell out in 1.3-1
- patch rcp to use long long and %lld format specifiers when reporting file
  sizes on large files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-1" date="1081900800">- update to 1.3.3</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.2-1" date="1078963200">- update to 1.3.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-12" date="1078790400">- rebuild</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt; 1.3.1-11.1" date="1078272000">- rebuilt</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt; 1.3.1-11" date="1076716800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-10" date="1076371200">- catch krb4 send_to_kdc cases in kdc preference patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-9" date="1075766400">- remove patch to set TERM in klogind which, combined with the upstream fix in
  1.3.1, actually produces the bug now (#114762)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-8" date="1074556800">- when iterating over lists of interfaces which are "up" from getifaddrs(),
  skip over those which have no address (#113347)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1073952000">- prefer the kdc which last replied to a request when sending requests to kdcs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-7" date="1069718400">- fix combination of --with-netlib and --enable-dns (#82176)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- remove libdefault ticket_lifetime option from the default krb5.conf, it is
  ignored by libkrb5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-6" date="1064534400">- fix bug in patch to make rlogind start login with a clean environment a la
  netkit rlogin, spotted and fixed by Scott McClung</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-5" date="1064361600">- include profile.d scriptlets in krb5-devel so that krb5-config will be in
  the path if krb5-workstation isn't installed, reported by Kir Kolyshkin</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1063065600">- add more etypes (arcfour) to the default enctype list in kdc.conf
- don't apply previous patch, refused upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-4" date="1062806400">- fix 32/64-bit bug storing and retrieving the issue_date in v4 credentials</changelog><changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; 1.3.1-3" date="1062633600">- Don't check for write access on /etc/krb5.conf if SELinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-2" date="1061942400">- fixup some int/pointer varargs wackiness</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-1" date="1060128000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-0" date="1060041600">- update to 1.3.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-2" date="1059091200">- pull fix for non-compliant encoding of salt field in etype-info2 preauth
  data from 1.3.1 beta 1, until 1.3.1 is released.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-1" date="1058832000">- update to 1.3</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.8-4" date="1057622400">- correctly use stdargs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-0.beta.4" date="1055980800">- test update to 1.3 beta 4
- ditch statglue build option
- krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; 1.2.8-2" date="1053561600">- gcc 3.3 doesn't implement varargs.h, include stdarg.h instead</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.8-1" date="1049932800">- update to 1.2.8</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-14" date="1049155200">- fix double-free of enc_part2 in krb524d</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-13" date="1048291200">- update to latest patch kit for MITKRB5-SA-2003-004</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-12" date="1048118400">- add patch included in MITKRB5-SA-2003-003 (CAN-2003-0028)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-11" date="1047945600">- add patches from patchkit from MITKRB5-SA-2003-004 (CAN-2003-0138 and
  CAN-2003-0139)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-10" date="1046995200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-9" date="1046995200">- fix buffer underrun in unparsing certain principals (CAN-2003-0082)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-8" date="1044403200">- add patch to document the reject-bad-transited option in kdc.conf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1044316800">- add patch to fix server-side crashes when principals have no
  components (CAN-2003-0072)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-7" date="1043366400">- add patch from Mark Cox for exploitable bugs in ftp client</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-5" date="1042675200">- use PICFLAGS when building code from the ktany patch</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 1.2.7-4" date="1042156800">- debloat</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; 1.2.7-3" date="1041984000">- include .so.* symlinks as well as .so.*.*</changelog><changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 1.2.7-2" date="1039478400">- always #include &lt;errno.h&gt; to access errno, never do it directly
- enable LFS on a bunch of other 32-bit arches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1039046400">- increase the maximum name length allowed by kuserok() to the higher value
  used in development versions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1038873600">- install src/krb524/README as README.krb524 in the -servers package,
  includes information about converting for AFS principals</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-1" date="1037404800">- update to 1.2.7
- disable use of tcl</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1037059200">- update to 1.2.7-beta2 (internal only, not for release), dropping dnsparse
  and kadmind4 fixes</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-5" date="1035417600">- add patch for buffer overflow in kadmind4 (not used by default)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-4" date="1034380800">- drop a hunk from the dnsparse patch which is actually redundant (thanks to
  Tom Yu)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-3" date="1034208000">- patch to handle truncated dns responses</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-2" date="1034035200">- remove hashless key types from the default kdc.conf, they're not supposed to
  be there, noted by Sam Hartman on krbdev</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-1" date="1033171200">- update to 1.2.6</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-7" date="1031961600">- use %{_lib} for the sake of multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-6" date="1028332800">- add patch from Tom Yu for exploitable bugs in rpc code used in kadmind</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-5" date="1027468800">- fix bug in krb5.csh which would cause the path check to always succeed</changelog><changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 1.2.5-4" date="1027123200">- build even libdb.a with -fPIC and $RPM_OPT_FLAGS.</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1022457600">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-1" date="1020297600">- update to 1.2.5
- disable statglue</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.4-1" date="1015027200">- update to 1.2.4</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-5" date="1014249600">- rebuild in new environment
- reenable statglue</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1012089600">- prereq chkconfig for the server subpackage</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-3" date="1011225600">- build without -g3, which gives us large static libraries in -devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-2" date="1011139200">- reintroduce ld.so.conf munging in the -libs %post</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-1" date="1010707200">- rename the krb5 package back to krb5-libs; the previous rename caused
  something of an uproar
- update to 1.2.3, which includes the FTP and telnetd fixes
- configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
  the default behavior instead of enabling the feature (the feature is enabled
  by --enable-dns, which we still use)
- reenable optimizations on Alpha
- support more encryption types in the default kdc.conf (heads-up from post
  to comp.protocols.kerberos by Jason Heiss)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.2-14" date="996883200">- rename the krb5-libs package to krb5 (naming a subpackage -libs when there
  is no main package is silly)
- move defaults for PAM to the appdefaults section of krb5.conf -- this is
  the area where the krb5_appdefault_* functions look for settings)
- disable statglue (warning: breaks binary compatibility with previous
  packages, but has to be broken at some point to work correctly with
  unpatched versions built with newer versions of glibc)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.2-13" date="996883200">- bump release number and rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996710400">- add patch to fix telnetd vulnerability</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="995673600">- tweak statglue.c to fix stat/stat64 aliasing problems
- be cleaner in use of gcc to build shlibs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- use gcc to build shared libraries</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993686400">- add patch to support "ANY" keytab type (i.e.,
  "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
  patch from Gerald Britton, #42551)
- build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
- patch ftpd to use long long and %lld format specifiers to support the SIZE
  command on large files (also #30697)
- don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
- implement reload in krb5kdc and kadmind init scripts (#41911)
- lose the krb5server init script (not using it any more)</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="993427200">- Bump release + rebuild.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991180800">- pass some structures by address instead of on the stack in krb5kdc</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990576000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988329600">- add patch from Tom Yu to fix ftpd overflows (#37731)</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt;" date="987638400">- disable optimizations on the alpha again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985996800">- add in glue code to make sure that libkrb5 continues to provide a
  weak copy of stat()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="984700800">- build alpha with -O0 for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="984096000">- fix the kpropd init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983836800">- update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
- re-enable optimization on Alpha</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="981676800">- build alpha with -O0 for now
- own /var/kerberos</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="981504000">- own the directories which are created for each package (#26342)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- gettextize init scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- add some comments to the ksu patches for the curious
- re-enable optimization on alphas</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979603200">- fix krb5-send-pr (#18932) and move it from -server to -workstation
- buildprereq libtermcap-devel
- temporariliy disable optimization on alphas
- gettextize init scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- force -fPIC</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975715200">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973036800">- add bison as a BuildPrereq (#20091)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- change /usr/dict/words to /usr/share/dict/words in default kdc.conf (#20000)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- apply kpasswd bug fixes from David Wragg</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970704000">- make krb5-libs obsolete the old krb5-configs package (#18351)
- don't quit from the kpropd init script if there's no principal database so
  that you can propagate the first time without running kpropd manually
- don't complain if /etc/ld.so.conf doesn't exist in the -libs %post</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968803200">- fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
  (#11588)
- fix heap corruption bug in FTP client (#14301)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966470400">- fix summaries and descriptions
- switched the default transfer protocol from PORT to PASV as proposed on
  bugzilla (#16134), and to match the regular ftp package's behavior</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="964051200">- rebuild to compress man pages.</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="963705600">- move initscript back</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963619200">- disable servers by default to keep linuxconf from thinking they need to be
  started when they don't</changelog><changelog author="Prospector &lt;bugzilla@redhat.com&gt;" date="963532800">- automatic rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963273600">- change cleanup code in post to not tickle chkconfig
- add grep as a Prereq: for -libs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- move condrestarts to postun
- make xinetd configs noreplace
- add descriptions to xinetd configs
- add /etc/init.d as a prereq for the -server package
- patch to properly truncate $TERM in krlogind</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962409600">- update to 1.2.1
- back out Tom Yu's patch, which is a big chunk of the 1.2 -&gt; 1.2.1 update
- start using the official source tarball instead of its contents</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
- pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
  compatible with other stuff in 6.2, so no need)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962236800">- tweak graceful start/stop logic in post and preun</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962064000">- update to the 1.2 release
- ditch a lot of our patches which went upstream
- enable use of DNS to look up things at build-time
- disable use of DNS to look up things at run-time in default krb5.conf
- change ownership of the convert-config-files script to root.root
- compress PS docs
- fix some typos in the kinit man page
- run condrestart in server post, and shut down in preun</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961459200">- only remove old krb5server init script links if the init script is there</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961286400">- disable kshell and eklogin by default</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961113600">- patch mkdir/rmdir problem in ftpcmd.y
- add condrestart option to init script
- split the server init script into three pieces and add one for kpropd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961027200">- make sure workstation servers are all disabled by default
- clean up krb5server init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- apply second set of buffer overflow fixes from Tom Yu
- fix from Dirk Husung for a bug in buffer cleanups in the test suite
- work around possibly broken rev binary in running test suite
- move default realm configs from /var/kerberos to /var/kerberos</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960336000">- make ksu and v4rcp owned by root</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- use %{_infodir} to better comply with FHS
- move .so files to -devel subpackage
- tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
- fix package descriptions again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="959212800">- change a LINE_MAX to 1024, fix from Ken Raeburn
- add fix for login vulnerability in case anyone rebuilds without krb4 compat
- add tweaks for byte-swapping macros in krb.h, also from Ken
- add xinetd config files
- make rsh and rlogin quieter
- build with debug to fix credential forwarding
- add rsh as a build-time req because the configure scripts look for it to
  determine paths</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958608000">- fix config_subpackage logic</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958521600">- remove setuid bit on v4rcp and ksu in case the checks previously added
  don't close all of the problems in ksu
- apply patches from Jeffrey Schiller to fix overruns Chris Evans found
- reintroduce configs subpackage for use in the errata
- add PreReq: sh-utils</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958435200">- fix double-free in the kdc (patch merged into MIT tree)
- include convert-config-files script as a documentation file</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="957398400">- patch ksu man page because the -C option never works
- add access() checks and disable debug mode in ksu
- modify default ksu build arguments to specify more directories in CMD_PATH
  and to use getusershell()</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="957398400">- fix configure stuff for ia64</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="955411200">- add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
- change Requires: for/in subpackages to include 1.6.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954979200">- add man pages for kerberos(1), kvno(1), .k5login(5)
- add kvno to -workstation</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954806400">- Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
  a %config file anyway.
- Make krb5.conf a noreplace config file.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954460800">- Make klogind pass a clean environment to children, like NetKit's rlogind does.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952560000">- Don't enable the server by default.
- Compress info pages.
- Add defaults for the PAM module to krb5.conf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952387200">- Correct copyright: it's exportable now, provided the proper paperwork is
  filed with the government.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952128000">- apply Mike Friedman's patch to fix format string problems
- don't strip off argv[0] when invoking regular rsh/rlogin</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952041600">- run kadmin.local correctly at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="951782400">- pass absolute path to kadm5.keytab if/when extracting keys at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="951004800">- fix info page insertions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="950140800">- tweak server init script to automatically extract kadm5 keys if
  /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
- adjust package descriptions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="949622400">- fix for potentially gzipped man pages</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="948499200">- fix comments in krb5-configs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="947289600">- move /usr/kerberos/bin to end of PATH</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="946425600">- install kadmin header files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="945820800">- patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
- add installation of info docs
- remove krb4 compat patch because it doesn't fix workstation-side servers</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="945734400">- remove hesiod dependency at build-time</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="945648000">- rebuild on 1.1.1</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="939340800">- clean up init script for server, verify that it works [jlkatz]
- clean up rotation script so that rc likes it better
- add clean stanza</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="939081600">- backed out ncurses and makeshlib patches
- update for krb5-1.1
- add KDC rotation to rc.boot, based on ideas from Michael's C version</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="938390400">- added -lncurses to telnet and telnetd makefiles</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="931219200">- added krb5.csh and krb5.sh to /etc/profile.d</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="930096000">- broke out configuration files</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="929404800">- fixed server package so that it works now</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="926812800">- started changelog (previous package from zedz.net)
- updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
- added --force to makeinfo commands to skip errors during build</changelog></package>
<package pkgid="30c723b99b6c52ebd2820cd6fefa0483ce1c6ff9" name="ocsinventory-fermi" arch="noarch"><version epoch="0" ver="0.9.9" rel="17"/><changelog author="Connie Sieh &lt;csieh@fnal.gov&gt; 0.9.9-17" date="1395187200">- On SLF 6 some systems now use a name other than ethx for ethernet
- On Dell systems in particular  em1 is used 
- Symptom of this was no "NETWORKS" entry sent to server</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 0.9.9-16" date="1335398400">- made /etc/sysconfig/ocsinventory-fermi for control values
- merged Connie's 'ip addr' patch for the cronjob
- added requirement for iproute and iputils
- added extra check for DNS resolution
- added syntax check for cronjob at build time</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 0.9.9-15" date="1329177600">- added missing dependency on /bin/mail
- added /usr/lib/perl5/vendor_perl to @INC for non SLF systems (patch)
- added /usr/share/perl5/vendor_perl to @INC for non SLF systems (patch)</changelog><changelog author="Connie Sieh &lt;csieh@fnal.gov&gt; 0.9.9-14" date="1323388800">- replaced "ifconfig" to "ip addr" in z_ocs.inventory.client.cron
- ifconfig did not work with infiniband</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9.9-12" date="1293494400">- changed the name to ocsinventory-fermi
- Changed PreReq to Requires</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9.9-11" date="1260835200">- Removed ipdiscover from the rpm, removing i386 dependancies</changelog><changelog author="Connie Sieh &lt;sieh@fnal.gov&gt; 0.9.9-10" date="1245110400">- Updated the code to determine $distro and $OSComment for STS and Ubuntu</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9.9-8" date="1188604800">- Added coreutils as a prereq</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9.9-7" date="1153440000">- Updated cron to check to see if it can access the server
  and goes through a list of domains to see if it's at Fermilab</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9.9-6" date="1152835200">- Turned off debugging, check to see if we're on fermilab networks
- Write to a log, and do logrotate
- Minor fixes to the client to now do --local --xml</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9.9-1" date="1149292800">- Client now points to fortytwo as the server
- cronjob now moved to z_... to get a more random time</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9.8-3" date="1149292800">- Client was updated 
- Fixes issues with users using ups perl
- Fixed issue when the rpm comments field has a newline in it.
- Turned debug on the cron job so mail will get sent</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9.8-2" date="1149033600">- Client was updated</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9.8-1" date="1148515200">- Client was updated 
- Cron script was added</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9.1-2" date="1147737600">- Client was updated</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9.1-1" date="1144972800">- Updated the client</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9-3" date="1144972800">- Added Requires
- Note that kernel-utils isn't required, but give a 
warning if not installed</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9-2" date="1144972800">- Added ipdiscover</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.9-1" date="1144972800">- Initial spec file</changelog></package>
<package pkgid="949ad7cf213f3ebcffed26f8485bf81ac4c958ab" name="krb5-fermi-base" arch="noarch"><version epoch="0" ver="2.2" rel="2"/><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.2-2" date="1413504000">- Modify the aklog.csh/sh and z_krb5.csh/sh scripts for
- /etc/profile.d/ replace "aklog" by "/usr/bin/aklog -noprdb"</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.2-1" date="1413417600">- Modified kinit and kinit-debug scripts to (1) invoke aklog
- provided with OpenAFS (as /usr/bin/aklog) and (2) added the
- -noprdb option to aklog call so it will work for both normal
- user principals and compound principals</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-14" date="1323129600">- Re-recorrect z_krb5.csh so path varialbe is setup with
- correct word list.  Shell will automaintian PATH variable
- to matxh</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-13" date="1320710400">- Minor fix to z_krb5.csh correcting the syntax for the
- command setting the PATH</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-12" date="1314748800">- no changes, new release to test that %triggerun works
- correctly during update</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-11" date="1314748800">- Another try to get the [] test condition correct</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-10" date="1314748800">- New release for testing upgrades and fix to SLF5 code</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-9" date="1314748800">- Another set of fixes for the permissions tests and fixes
- Do stat and chmod on /usr/bin files, not symlinks
- Correct kdestroy and v4rcp permissions (no setuid)</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-8" date="1314316800">- Yet another try at the %triggerun exit test</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-7" date="1314316800">- More work on %triggerun scriptlets</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-6" date="1314316800">- Continue work to fix %triggerun problems</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-5" date="1314316800">- Fix link removal macros applunset*</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-4" date="1314316800">- Fix problem of %triggerun undoing %triggerin when
- installing upgrade</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-3" date="1314316800">- Conditionalize fixing the permissions that previous
- releases had wrongly changed</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-2" date="1314230400">- Fix chmod permissions to undo previous error</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.1-1" date="1313107200">- Added triggerun scriptlets to match existing triggerin
- scripts and remove the symbolic links on uninstalls
- Added corrected z_krb5 scripts for /etc/profile.d to handle
- change in SLF6 to df output if no AFS volumes</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.0-2" date="1309305600">- Removed "$RPM_BUILD_ROOT/" from all the commands in the
- %triggerin sections and definitions of macros used therein</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  2.0-1" date="1305936000">- Changes to use %defattr and handle both RHEL5 and RHEL6
- using %trigger* to set symbolic links correctly based on
- which package(s)/version(s) are installed/removed</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  1.1-2" date="1294963200">- Added kinit-debug script, same as kinit but -V on
- kinit command and -d on aklog command.</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  1.1-1" date="1294272000">- Replaced symbolic link for kinit with executable script
- called kinit which calls /usr/kerberos/bin/kinit and,
- if on an AFS client system, aklog since the kinit from
- MIT/Redhat knows not of aklog!</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  1.0-2" date="1271289600">- Updated z_krb5.* scripts (stored in /etc/profile.d/) to speed-up by 
- reducing unnecessary invocations of aklog when spawning subshells.</changelog><changelog author="Frank Nagy  &lt; nagy@fnal.gov &gt;  1.0-1" date="1255132800">- Created from Troy's krb5-fermi-config for SLF5.x and my original
- krb5-fermi-baseconfig attempt</changelog></package>
<package pkgid="5cac87c25e85b6aa6ebc76f9c2b46bbc51413ced" name="bash-completion" arch="noarch"><version epoch="1" ver="1.3" rel="5"/><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3-5" date="1313452800">- Fix ant completion when complete-ant-cmd.pl is N/A (#729771).
- Fix bash &lt; 4 _filedir_xspec uppercase expansion issue (#726220).
- Drop _filedir_xspec self-parsing with bash &gt;= 4 for speedups (#479936).
- Do install triggers with lua where available to speed up package install.
- Add completion for sum (#717341).</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3-4" date="1305072000">- Work around problems caused by Adobe Reader overriding _filedir (#677446).</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3-3" date="1302652800">- Patch to not test command availability for each snippet, improves load time.
- Apply upstream libreoffice flat XML extensions fix for #692548.
- Apply upstream MANPAGER fix for #689180.
- Apply upstream (la)tex *.dbj fix for #678122.</changelog><changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3-2" date="1297123200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3-1" date="1297123200">- Update to 1.3.</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.2-5" date="1287014400">- Install util-linux completions unconditionally.
- Make trigger target package rename etc tracking easier to maintain, and
  handle man-db/man (#642193, Yanko Kaneti), mysql/MySQL-client-community,
  and tigervnc/vnc renames better.
- Move pre-1.0 %changelog entries to CHANGES.package.old.</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.2-4" date="1286323200">- More IPv6 address completion fixes, #630658.</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.2-3" date="1285718400">- Apply upstream ~username completion fix for #628130.
- Apply upstream rpm completion improvements for #630328.
- Apply upstream IPv6 address completion fix for #630658.
- Drop some completions that are included in respective upstream packages.
- Fix qdbus/dcop uninstall trigger.</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.2-2" date="1277769600">- Apply upstream post 1.2 /etc/init.d/* completion improvements to fix #608351.</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.2-1" date="1276732800">- Update to 1.2, all patches applied upstream.
- Fixes #444469, #538433, #541423, and #601813, works around #585384.</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.1-7" date="1268438400">- Autoinstall dpkg and dselect completions.</changelog><changelog author="Todd Zullinger &lt;tmz@pobox.com&gt; - 1:1.1-6" date="1268352000">- Apply upstream post 1.1 service argument fix (#572794).</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.1-5" date="1261872000">- Apply upstream post 1.1 generic vncviewer fixes.
- Autoinstall vncviewer completion also on tigervnc.
- Autoinstall chsh completion also on util-linux.</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.1-4" date="1260921600">- Fix autoinstall of completions named other than the package (#546905).
- Use environment-modules upstream completion instead of ours if available.
- Autoinstall mysqladmin completion also on MySQL-client-community.</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.1-3" date="1258502400">- Prepare for smooth coexistence with yum upstream completion.</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.1-2" date="1257724800">- Use yum-utils completion instead of ours if available.</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.1-1" date="1255996800">- Update to 1.1.
- bash 4 quoting fix, mock and repomanage completions included upstream.</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.0-5" date="1253491200">- Use svn completion from subversion instead of ours if available (#496456).</changelog><changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.0-4" date="1248480000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.0-3" date="1240099200">- Do not install cowsay completion, an updated version is shipped with it.</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.0-2" date="1239148800">- Apply upstream patch to fix quoting issues with bash 4.x (#490322).</changelog><changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.0-1" date="1239062400">- 1.0.</changelog></package>
<package pkgid="68bf581758b303103c75559f172fc0fbe302fa87" name="heartbeat-resources" arch="i386"><version epoch="0" ver="2.99.2" rel="6.1.sl5.1"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt;" date="1370469600">- fixed up libnet and libnet-devel dependencies</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1222725600">- version 2.99.1-1
- Update source tarball to revision: d8710f41b9cb
- Includes many fixes to init scripts.
- Add sbd for shared-storage fencing.</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1219356000">- version 2.99.0-1
- Update source tarball to revision: f23531dd23ad</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1207087200">- version 2.1.3-18
- Added two small patches for Bug LF-1833: Do not overwrite op_status depending on op_rc</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1200348000">- version 2.1.3-1
- Update source tarball to revision: 9cdeae333990
- Statistics:
    Changesets:      153
    Diff:            141 files changed, 12279 insertions(+), 3103 deletions(-)
- This is the first release now that the CRM has becme its own project called
  Pacemaker and no longer included with Heartbeat.
- Without the CRM present, the following components are also no longer able to
  be included with Heartbeat (as they require CRM libraries) and are instead
  provided as part of pacemaker or the new pacemaker-pygui project.
   cim
   snmp
   mgmtd
   pygui
   tsa_subagent
- RPM-based distributions also have a new package layout
   heartbeat-resources ::= resource agents
   heartbeat-common    ::= components that are useful regardless of which stack is being used
   heartbeat           ::= components that are specific to the Heartbeat stack
- Changes since obs-2.1.2-24
+ apache RA: remove children in case the top process didn't
+ apcsmart: make message more descriptive
+ build (LF 1803): add -fgnu89-inline to CFLAGS if gcc version is &gt;=4.1.3 and &lt;4.3
+ by request from Andrew - Modified the external/ssh plugin to have a livedangerously flag
+ ccm (LF 1806): restart all instead of exiting (low impact)
+ Changed a test from causing a reboot to not triggering a reboot - because it doesn't seem to any more
+ Changed HIGHLY to STRONGLY in how strongly we recommend STONITH
+ Corrected a warning found on FC8 in the cl_reboot code
+ debian: Add dependancy on libpam-runtime (&gt;= 0.76-14)
+ Debian: add libxml2-utils as a dependancy, because we need xmllint for the BSC
+ Debian: add the new ibmrsa-telnet stonith plugin
+ debian: clean python bytecode
+ debian: clean up stale heartbeat-2 files
+ debian: don't install bytecompiled python modules
+ debian: patches need to be distributed
+ debian: remove chown patch
+ debian: Update standards version from 3.7.2 to 3.7.3
+ debian: update the name of the series file to reflect the new release
+ docs/packaging: reshuffle hb_report documentation and include the html version
+ dopd: don't cl_free variables on local stack
+ dopd: don't hardcode path of drbdadm; it has to be in the PATH, though.
+ dopd: fix potential segfault due to leakage of invalid/freed pointer
+ dopd: make it work with multiple concurrent outdate requests
+ external ipmi plugin caused error messages when getting metadata on machine w/o ipmitool installed.  This somewhat messed up BasicSanityCheck.
+ Filesystem: Make mount point required for the GUI (Hideo Yamauchi)
+ Fix memory leak in external plugin handling
+ fixes for fedora: system(3) function return value cannot be ignored. Also added a missing RPM build dependency.
+ hb_report: add quotes around args to test -f
+ hb_report: don't surprise user by reading the files from the current directory
+ hb_report: include hostcache
+ hb_report: replace arch with uname -m
+ hg: from last changes to recover from media errors, fixed a stupid typo with a reversed boolean condition.
+ hg: LF bug 1794: ComponentFail tests failing
+ hg: Makefile for external stonith commands was missing new stonith plugin in the extra_dist section
+ High: Heartbeat: Include an option to start the CRM in respawn mode
+ init: add should-start/stop $remote_fs to init script
+ init: should-start/stop $remote_fs to init script
+ ipc (LF 1339): enable message compression
+ IPv6addr: Check for netinet/icmp6.h instead of  linux/icmpv6.h
+ IPv6addr: Check for netinet/icmp6.h instead of linux/icmpv6.h
+ iscsi RA: wait for udev to create the links
+ Junko IKEDA reported a problem building on Red Hat with tog-pegasus installed - this fixes that problem - the code half-setup things if pegasus was present but --enable-cim-provider wasn't enabled
+ ldirectord: add forking mode
+ ldirectord: SimpleTCP service check
+ ldirectord: SimpleTCP service check documentation
+ ldirectord: Various updates to OCF compatible RA
+ lf bug 1678: stonith command core dumps with -h option
+ LF bug 1690: there should be a tool to audit (validate) node names in constraints among other things...
+ LF Bug 1732: Error handling is bad for comm media
+ LF bug 1732: restructuring code towards being able to restart (reopen) communication media when they die
+ LF bug 1795 - timeout control for crm_mon --one-shot
+ LF bugzilla 1667:  ppc64 RPMs contain 32-bit binaries
+ LRM (LF 1821): resource timing information
+ lrm reg tests: handle OCF_ROOT, warn about xmllint missing
+ LRM regtest: update filters to match the lrmadmin output
+ lrmadmin: include time.h
+ Monitor timeouts need to increment fail counts
+ OCF-resources: SphinxSearchDaemon is not installed
+ OpenBSD bugs: 1731 1761 1743 1659
+ packaging: include iscsi
+ pgsql RA: handle the missing pg software properly (thanks to Serge)
+ pgsql RA: move check for root down to enable meta-data for regular users (thanks Serge)
+ pgsql RA: postmaster confusion
+ Put the _source_ (.in) file under source control.  Groan...
+ RA Filesystem: add lustre to the list of fs which don't need fsck
+ RA iscsi: dropped complex code in favour of udev and several small cleanups
+ RA iscsi: fix meta-data xml
+ RA iscsi: get rid of one annoying message ("no active sessions")
+ RA iscsi: new iscsi resource agent
+ RA iscsi: support iscsi sles compat mode
+ RA iscsi: two echo statements removed
+ RA mysql: don't look for mysql users in the OS database (thanks to Christian Rishoj)
+ RA SAPDatabase/SAPInstance: report proper exit codes in case required software is not installed
+ RA SphinxSearchDaemon: a new RA thanks to Christian Rishoj
+ recovermgrd: changed the code to look at the return code from fwrite, to make Fedora 8 compiler compile recovermgrd warning-free.
+ Removed bzip2-devel as a build dependency for all but Fedora and RH
+ RPM and specfile changes to fix part of and help diagnose part of Junko IKEDA's problem with tog-pegasus
+ RPM spec file: Added ciblint to installed programs
+ RPM specfile change:  made is_fedora macro turn off is_rhel macro
+ shell scripts: various cases of overquoting in the for statement (thanks to Takekazu Okamoto)
+ stonith ibmrsa-telnet: new stonith plugin
+ stonith ipmi: new external stonith plugin
+ utillib.sh: update finding the binary which coredumped
+ Xen RA: new improved (thanks to Sebastian Reitenbach)
+ [patch] init: add should-start/stop $remote_fs to init script</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1196114400">- version 2.1.2-24
- Update the source tarball to revision ef1be5978d97
- Statistics:
    Changesets:       104
    Diff:             296 files changed, 3464 insertions(+), 3275 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb/vmware stonith) on a single host (opensuse10.3/2Gb/2.66Ghz Quad Core2)
  + 7-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon/ssh stonith)
- All testing was performed with STONITH enabled
- Pending bugs encountered during testing:
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-15
+ High: CIB: Fix the behavior of update_attr() and delete_attr() when the command is ambiguous
+ High: CRM: In ccm_have_quorum(), an OC_EV_MS_PRIMARY_RESTORED event means we _do_ have quorum
+ High: PE: Bug 1765 - Prevent master-master colocation constraints from preventing slaves from starting
+ High: PE: Introduce a new API call for determining the location of complex resources
+ High: PE: Set next_role recursivly so that group promotion will work
+ High: PE: increment_clone() did not overflow correctly 9-&gt;10, 99-&gt;100, etc
+ High: crmd: Prevent shutdown hangs caused by pending ops that can't be cancelled - because the no longer exist in the lrm
+ High: heartbeat: Fix getnodes() compilation with gcc 4.3
+ High: Novell 293922: Don't use non-blocking writers, but instead don't block
+ High: Novell 293922: Heartbeat network processes would block on full buffers.
+ Medium: core: Do not disconnect blocking write processes, but discard traffic.
+ Medium: PE: All other things being equal, prefer to keep non-failed instances alive
+ Medium: PE: Create a syntactic shortcut for the common use-case of "{resource} prefers {node} with {score}"
+ Medium: PE: Dont make changes to location constraints, when applying to groups, persistent
+ Medium: TE: Allow the CRM to limit the number of resource actions the TE can execute in parallel.
+ Medium: TE: Pending operations shouldn't be processed
+ Medium: attrd: Bug 1776 - Attrd doesn't exit or reconnect when the CIB is respawned
+ Medium: crm: Dont generate core files for non-fatal assert (ie. the CRM_CHECK macro).
+ Medium: crmd: Don't remap LRM_OP_PENDING when building full lrm updates
+ Medium: crmd: Prevent shutdowns initiated immediately after a node is removed from the cluster with hb_delnode from stalling.
+ Medium: LF bugzilla 1757: apache resource agent grep methodology can't handle newlines - even if you change the pattern
+ Low: Admin: Do a full simulation when we have the live CIB - since we'll always have a status section
+ Low: Admin: crm_standby - Don't complain about missing values, print the default value instead
+ Low: PE: Actions for stonith agents should never default to requiring fencing or quorum
+ Low: PE: ptest - Handle malformed inputs more gracefully
+ Low: Rename example ha_logd.cf file to the proper name.
+ Low: cib: Increase the retry interval when connecting to the ccm to 3s
+ Low: crmd: Provide a more informative error when DCs detect other DCs during a join
+ Low: heartbeat: Use the correct define when choosing to enable valgrind - Keisuke MORI
+ Low: LF bug 1705 - cl_respawn core dumps when given -h or --help
+ Low: changed configure.in to force 64-bit objects when on gcc-based ppc64 platform
+ Low: configure.in - autoconf spells ppc64 funny...
- Unclassified user impact
+ LF 1766: Heartbeat installs man pages in the wrong directories by default...
+ LF Bug 1662: Put in some RHEL changes provided by Keisuke MORI
+ LF bug 1393 - Cannot rename /var/lib/heartbeat/hostcache.tmp to /var/lib/heartbeat/hostcache (scope, risk and severity: all minor)
+ ccm (LF 1546): ensure that the membership instance number never decrements (thanks to Guochun Shi)
+ ccm: speed up ccm considerably in case a node is alone in the membership (thanks to MATSUDA, Daiki)
+ Debian: Build: Add dependacy on gawk as it is required by the OCF IPaddr resource
+ Debian: Build: rename ha_logd.cf to logd.cf in debian/heartbeat.files
+ hb_report (LF 1763): multiple fixes
+ hb_report: add more packagers support (thanks to Sebastian Reitenbach)
+ hb_report: fix handling of debug option
+ hb_report: fix the previous fix (sorry)
+ hb_report: include package verification
+ hb_report: reduce the number of ssh invocations by 1
+ hb_report: update documentation on extracting CTS tests
+ hb_report: use getopts instead of getopt(1) for the sake of portability
+ hbagent: fix memory leaks on dropping global resources (thanks to Keisuke MORI)
+ hbagent: removed the const qualifier from parameter
+ hbagent: reset gMembershipTable on dropping global resources
+ hbclient: fix memory leaks on signon/signoff (thanks to Keisuke MORI)
+ heartbeat: Increase MAXMSGHIST; reduce debugging output.
+ ldirectord: allow per-virtual checkinterval configuration
+ lvs-users: Patch for ldirectord when using mysql service
+ mgmtd (LF 1719): fix the pam file for suse
+ mysql RA (LF 1760): defaults for OpenBSD (thanks to Sebastian Reitenbach)
+ RA Xinetd (LF 1742): multiple fixes
+ RA tomcat: allow consecutive starts
+ stonithd: (LF 1727): fix dropping privileges
+ stonithd: a copy/paste typo
+ stonithd: check for storage size when copying the host list
+ stonithd: drop root privileges earlier
+ stonithd: shuffle dropping privileges around again</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1193349600">- version 2.1.2-15
- Update the source tarball to revision c492f19cb583
- Statistics:
    Changesets:       158
    Diff:             173 files changed, 8712 insertions(+), 4787 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
  + (lmb)    7-node Xen cluster on a single host
  + (debltc) 6-node ppc64 cluster
- Pending bugs encountered during testing:
  1562 - heartbeat: hostcache file rename error at startup
  1737 - crmd: Inconsistent join state detected (Hard to reproduce, possible fix included)
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-4
+ High: cib: G_main_del_IPC_Channel() doesn't like being called with a NULL pointer and crashes
+ High: crm: Bug 1749 - Make sure the diff-related digests contain the complete CIB, not just the first line
+ High: crmd: Prevent shutdown hangs by allowing the crmd to forget about pending actions for deleted resources
+ High: PE: Bug 1712 - Ensure manditory ordering constraints can cause complex resources to be shut down
+ High: PE: Clone colocation fixes
+ High: PE: Ensure that resources depending (by order) on a master are not promoted if no master is available
+ High: PE: Fix manditory ordering with m/s resources
+ High: PE: Prevent an infinite pe/te loop when reprobing with resources in master mode
+ High: PE: Prevent use-of-NULL in crm_mon when date_expressions are used by ensuring that data_set-&gt;now is always set
+ High: PE: Prevent use-of-NULL when the admin creates a colocaiton constraint with an empty group
+ High: PE: Relax an assumption regarding clones that is not true when they are unmanaged
+ High: PE: Remove an accidental commit that, when called, causes use-of-NULL
+ High: PE: Remove an errant call to exit() than prevented an assert from being triggered
+ High: RA: Novell 329833 - dotted-quad netmask notation broken in findif
+ Medium: cib: Include digests of the cib a diff was made from and verify it when applying
+ Medium: CRM: Re-evaluate appropriate IPC message queue lengths and throtle IPC _clients_ that hit them
+ Medium: crmd: Bug 1737 - Inconsistent join state detected - Possible fix
+ Medium: PE: Bug 1722 - By default, exhibit the old start-failures-are-fatal behaviour regardless of how resource-failure-stickines is set
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: PE: Fix minor memory leak when stopping orphaned resources
+ Medium: PE: Master internal ordering enhancements. Added stopped-&gt;start, stopped-&gt;promote.
+ Medium: Tools: Bug 1738 - the crmd ignores some requests from crm_resource because it exited too quickly
+ Low: contrib: dopd - Remove a pointless and annoying dependancy on the crm
+ Low: crmd: Increase the retry interval when stalling the FSA to 2s (used when connecting to the ccm, lrmd, cib)
+ Low: crmd: Update the CIB with the node's version data when it becomes DC
+ Low: crmd: Use the unaltered rc for timed out operation events from the lrmd
+ Low: Debian: heartbeat doesn't depend on libperl-dev (probably confused by '-lperl' in configure.in)
+ Low: heartbeat: Some compilers feel that the fcli variable could be used uninitialized - shut them up
+ Low: PE: Avoid pointless copying of XML items (actions) during graph creation
+ Low: PE: Convert all the resource's boolean flags into a single bit-field
+ Low: PE: Produce a config error when a clone contains more than one resource/group to clone
+ Low: RA: PureFTPd - Support debian's pure-ftpd-wrapper script.  Patch by Raoul Bhatia
+ Low: Stonith: external/rackpdu - Fix the metadata short descriptions
+ Low: ccm: Bug 1723 - fix logging (thanks to MATSUDA, Daiki)
- Unclassified user impact
+ gui: Add "meta_attributes" support to mgmt
+ gui: Add boolean_op for location rules in mgmt
+ gui: Make several fields of rsc_location editable
+ gui: Prevent clone and master_slave from belonging to group
+ gui: Prevent haclient from falling into an error caused by blank resource metadata
+ gui: Provide "Default" setting for crm configurations
+ gui: Provide complete pengine and crmd configurations with dynamic rendering
+ gui: Rename "Places" to "Locations" to match with the CIB name
+ gui: Resolve target_role problem for sub-resource
+ gui: Specify the default type of added item to correspond to the object that the cursor focused on
+ heartbeat: Remove one unlink() of the temporary hostcache file.
+ LF bug 1502: udpport statement in ha.cf is ignored by heartbeat - trivial fix
+ LF bug 1589: ia64 heartbeat unaligned access messages (SGI965396) - copy fields in structures - minor fix
+ LF bug 1679: hardcoded heartbeat userid and group in init script (minor fix)
+ LF bug 1681: BSC fails to to identify active interface on OpenBSD (minor change)
+ LF bug 1700: HA Signon always reports success - fix has minor scope.
+ LF bug 1702: during emergency restarts, heartbeat doesn't close watchdog correctly.  Fix is minor.
+ LF bug 1712: ha_logd prevented node from shutting down - changed code to use the waitout() primitive - scope fix - trivial-minor
+ LF bug 1731: wrong location of libraries for OpenBSD 64Bit architectures, with patch
+ LF bug 1734 - removed duplicate return statement as per bug report.
+ lrm stonith plugin: fix exit code handling
+ lrmd (LF 1715): increase the max dispatch time for lrmd
+ lrmd (LF 1729): revise return codes
+ Put in a missing include of &lt;memory.h&gt; for the DRBD code.  Change scope: trivial
+ RA: mysql, pgsql - use getent(1) instead of /etc/passwd (thanks to Raoul Bhatia)
+ RA: mysql: According to Geoff Harrison the sql check is broken without this
+ RA: mysql: Allow arbitrary commandline arguments for mysqld (by Raoul Bhatia)
+ RA: Raid1: Allow the homehost setting to be specified.
+ RA: Xinetd: Fix stop/monitor to not fail if service isn't available yet.
+ stonith/ibmrsa: allow ',' in the hostlist
+ STONITH: external/ssh: Disable StrictHostKeyChecking and PasswordAuthentication by default.
+ stonithd (LF 1714,1727): fix a race condition
+ stonithd (LF 1726): a hostlist may be empty
+ stonithd (LF 1727): change attach shmem seg to read only
+ stonithd/lib: replace cookie generation with uuid
+ stonithd: have -a really mean startup alone
+ stonithd: increase the maxdispatchtime
+ stonithd: library code review and cleanup
+ tools: Add hb_report - a reporting utility</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1190757600">- version 2.1.2-4
- Update the source tarball to revision 702e4f418ca8
- Statistics:
    Changesets:       109
    Diff:             188 files changed, 5926 insertions(+), 2003 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
- Pending bugs encountered during testing:
  1377 - llm_get_nodename: index(1719751538) out of range
  1561 - Cluster node c001n03 returning after partition
  1562 - hostcache file rename error at startup
  1700 - HA Signon always reports success
  1711 - Shutdown blocked by call to cl_flush_logs()
  1712 - Shutdown blocked by ha_logd
  1714 - Stonithd core dumps
- Changes since 2.1.2-2
+ High: Core: Prevent logging buffer overflow - ensure the entity is NULL terminated.  Patch from Simon Graham.
+ High: DTD: Remove stray character that made the DTD invalid
+ High: PE: Ensure mandatory ordering constraints behave correctly
+ High: PE: Implement a smarter algorithm for colocation
+ High: PE: Include preferences of colocated resources when promoting masters
+ High: PE: Make sure only the correct number of cloned groups are started
+ High: PE: Make sure the merge_weights function is called for complex resources
+ High: PE: More accurate method of detecting colocation loops in native_merge_weights
+ High: PE: Optimize the merge_weights functionfor groups
+ High: RA: Remove bashism from Filesystem OCF agent
+ High: RA: Filesystem - Fix path reference.
+ High: RA: o2cb - Fix path broken in recent cleanups
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: crmd: Tell the LRM to refresh the resource's default parameters
+ High: core: Bug 1697 - really remove proctrack sources (performance/memory leak fix)
+ High: core: An open call with the O_CREAT flag was missing the file mode.
+ Medium: Core: Ensure heartbeat flushes all its logs before exiting
+ Medium: ipc: Up MAXMSG to match MAXUNCOMPRESSED to allow larger clusters.
+ Medium: Logging: Sanitize and centrally define the log facility used by various subsystems
+ Medium: PE: Bug 1705 - Don't segfault when allocating empty groups
+ Medium: PE: Bug 1710 - A resource's failcount was ignored on nodes with no operations for the resource
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: RA: EvmsSCC - Handle start failures caused by peers starting at the same time (Patch from Jo De Baer)
+ Medium: RA: Treat migrating (status 1) as running to avoid - patch by Per Andreas Buer
+ Medium: Stonith: Remove code-reuse to prevent excessive logging by the LRM
+ Medium: Stonith: ipmilan: fix potential segvfault in options parsing
+ Medium: cib: Improved transparency when in operating in degraded mode
+ Low: Admin: Bug 1691 - crm_resource doesn't complain about empty strings as property values
+ Low: build: configure.in: fix for platforms with libc in /lib/tls
+ Low: CIB: Allow notification to remote clients
+ Low: CRM: DTD - Expand the list of accepted values for boolean fields
+ Low: CRM: DTD - Explicitly specify a default for rsc_colocation.symmetrical
+ Low: DTD: Include helpful comment for rsc_order constraints
+ Low: PE: Downgrade logging when we fallback to default option values
+ Low: PE: More efficient logging of orphan resources
+ Low: PE: Prevent users from trying to use on_fail=fence and stonith-enabled=false
+ Low: PE: Stop the master placement score from affecting the synapse's priority
+ Low: RA: Add a tomcat OCF agent from Yamauchi Hideo
+ Low: RA: ManageVE - Fix status when VE files are not persistent
+ Low: RA: Put in updates to the Informix script as supplied by Lars Forseth
+ Low: RA: apache - drop annoying messages if no configuration files are found
+ Low: Stonith: external/ssh - simplify the reset command and wait the same amount of time as the non-external variant
+ Low: Stonith: Disable ipmilan by default
+ Low: TE: Pause for a moment before trying to reconnect to stonithd
+ Low: Tools: Allow pingd to change identity based on the name of its executable - workaround for Bug #1701
+ Low: logd: Update the default config file to reflect the new default log facility
+ Low: tools: haresources2cib.py: update parameter lists and configuration defaults
- Unclassified impact
+ lrm: Bug 1458 - include timing information in the op data.
+ lrm: Bug 1684 - a meta-data operation fix introducing short sleep on zero reads
+ lrm: log non-recurring operations
+ lrm: performance - replace linear with binary search for msg type.
+ lrm: performance - remove unnecessary memstat
+ lrm: raexecocf: a fix for bug introduced in 2a787bbd73f6; longer sleep in get_resource_meta
+ RA: Bug 1692 -  monitoring fails for apache OCF resource.  Put in simple fix to apache resource agent monitoring from Sebastian Reitenbach
+ RA: eDir88 - fix to allow meta-data to work in case NDS is not installed
+ RA: pgsql - patch to remove bashism
+ Stonith: Put in an APCmastersnmp.c patch from Peter Kruse which makes the plugin work with new APC master switches
+ Stonith: Bug 1615 - get the list of hosts from an RA asynchronously
+ mgmtd: allow old clients to connect</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187301600">- version 2.1.2-2
- Update the source tarball to revision 098c0993b1d0
- Statistics:
    Changesets:	6
    Diff:		11 files changed, 402 insertions(+), 46 deletions(-)
- Changes since 2.1.2-1
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: PE: Bug 1682 - Prevent use-of-NULL when clones have no active children
+ High: TE: target_rc should default to 0 (LRM_OP_DONE) to detect monitor actions that fail the first time they are executed
+ Medium: PE: Bug 1685 - Supply the correct defaults for rsc_order constraints
+ Low: Admin: crmadmin - exit with rc=0 when the command completed successfully</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187042400">- version 2.1.2-1
- Update the source tarball to revision 1ad8497bc55d
- Statistics:
    Changesets:	340
    Diff:		614 files changed, 39588 insertions(+), 32588 deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/1ad8497bc55d
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -r e3c9306b9223:1ad8497bc55d | sort -f
- Testing notes
+ On my underpowered cluster, the CCM borked a number of times on the Stonithd test
  However since the CCM hasn't been touched in an age, its hard to conclude there are regressions from previous releases.
  If anyone would like to volunteer to maintain the CCM (or the GUI for that matter), it would be much appreciated.
- Changes since 2.1.2 (Upstream)
+ High: CRM: Update crm/cib feature sets and the set of tags/attributes used for feature set detection
+ High: CIB: Improved CCM interaction
+ High: CRM: filter_action_parameters() - Make a copy of interval/timeout in as they're about to be free'd
+ High: PE: Break graph loops involving stonith
+ High: PE: Only create _one_ pseudo op per name (all_stopped/stonith_up)
+ High: PE: The all_stopped action should only be part of the graph when the stop actions are runnable
+ High: PE: all_stopped should only depend on native resources to avoid recursion
+ High: PE: check_action_definition() - Ensure the meta attributes are also set so that the digest is calculated correctly (and consistently with the crmd)
+ High: PE: Use failcount to handle failed stops and starts (set default_resource_failure_stickiness &gt; 0 for the old blocking behaviour)
+ High: TE: Allow reconnection to stonithd if it is respawned
+ High: TE: Allow the TE to reconnect if stonithd is killed and respawned
+ High: cib: Allow the CIB to reconnect if the CCM is killed and respawned
+ High: cib: Handle master updates that fail DTD validation
+ High: cib: Support the removal of multiple child objects - required for subsequent commit
+ High: crmd: Improvements to shutdown sequence (particularly in response to failures)
+ High: crmd: Sanitize the maintenance of node_state entries
+ High: crmd: Simplify node_state maintenance
+ High: stonithd: Sanitize the login/logout functions and add the ability to reset the callback IPC channel
+ Medium: cib: Ensure fflush() and fsync() are always called when writing XML digests to disk
+ Medium: crm: Ensure fflush() and fsync() are always called when writing XML to disk
+ Medium: crm: Bug 1680 - parse_xml() can fail to detect mismatching close tags
+ Medium: PE: Dont check the parameter digest of orphan operations
+ Medium: TE: Dont modify the failcount for 'pending' action updates (rc=-1)
+ Medium: admin: Set the exit code to non-zero if crmadmin can't connect to the crmd
+ Low: PE: Warn when multiple nodes have the same uname
+ Low: Stonith: New external plugin for handling 'APC Switched Rack PDU AP7952' devices - contributed by Sergey Maznichenko
+ Low: cib: Enhancements to logging of DTD errors
+ Low: cib: Refactor reading and writing of the CIB to disk
+ Low: crmd: Ensure our assumption that all resources have a class and type is true
+ Low: crmd: Simplify the detection of active actions and resources at shutdown
+ Low: Admin: Bug 1603 - Allow CIB digest files to be verified
+ debian: make heartbeat binNMU safe
+ stonith: ipmilan - accept documented auth and priv values
+ GUI: OSDL 1449 / Novell 291749: GUI should not overwrite more specific settings of contained resources.
+ RA: IPaddr2 - Make the check for the modprobe/iptables utilities conditional on the IP being cloned
+ RA: apache - make status quieter
+ RA: Added Informix resource agent
+ RA: eDir88 resource can't be stopped ?
+ RA: patch to fix bashism in a number of agents
+ Tools: OSDL Bug 1666: in BSC, make sure temp rsc dir exists for RAs
+ Tools: ocf-tester - use the default value for OCF_ROOT if it exists
+ Tools: ocf-tester - add capability to test with lrmadmin/lrmd
- Changes since 2.1.0-2
+ A little cleanup to make the RAs more uniformly not have $OCF_ROOT paths in them
+ Added code to cause logging to be restarted if it dies.
+ Admin: Allow crm_diff to operate on compressed inputs
+ Admin: Bug #1621 - crm_mon should show failed starts of a resource
+ Admin: Bug 1632 - Make sure error messages regarding trailing XML input characters are seen
+ Admin: Bug 1635 - crm_failcount should not complain if the attribute was already deleted
+ Admin: Bug #1622 - crm_attribute: Include --inhibit-policy-engine in the help message
+ Admin: crm_resource - remove an overly simplistic check for when -C can safely be used
+ Admin: crmadmin - include Hg version in --version output
+ Admin: ptest is useful enough to warrent installation to sbindir
+ BSC: 'trap' had been continuing instead of exiting
+ Bug 1612: haresources2cib @substitution@ broken (probably by a global change)
+ Build: No longer generate RAs now that there is a sane way to set directory locations and find binaries
+ CIB: Bug 1602 - Archive invalid/unusable configurations so we can continue
+ CIB: Bug 1633 - Pass the actual error from activateCibXml back to the user
+ CIB: config_changed always needs to be calculated when processing write commands
+ CRM: Bug 1625 - Cannot update an operation's timeout
+ CRM: Clean up processes left over by crm_abort().  Initial patch by DAIKI MATSUDA
+ CRM: Fix compare_version() to actually work correctly on a regular basis (broken since 2.0.2)
+ CRM: Fix matching of objects with an ID when the match-spec has no ID
+ CRM: Make logging setup consistent and do not log the command-line to stderr.
+ CRM: Only detect timeout changes for recurring ops
+ CRM: Remove deBug code that should not have been committed
+ Corrected a typo which only matters on 32-bit machines :-(
+ Corrected so that on *BSD it passes in 2 parameters, instead of 2.
+ DTD: Add helpful comment regarding rsc_colocation objects
+ Fix location of pingd binary
+ Fixed a dangling reference to a former bin directory name.
+ Fixed a fairly-major error in IPaddr - it didn't handle CIDR netmasks correctly.  But ifconfig didn't complain either...
+ Fixed a minor stonithd testing error (not much of a Bug)
+ Fixed a syntax error in Filesystem:  missing then symbol
+ Hopefully fixed a long-time SNMP annoyance.  When the membership layer shuts down (as it does in BSC),
+ LF Bug # 1617 - Miscellaneous RPM and source cleanups
+ LF Bug # 1644 - Pinging loopback in BasicSanityCheck fails with EPERM
+ LF Bug # 960 - rpm: first-time install fails
+ LF Bug 1513 - building RPM from the 2.0.8 tarball fails
+ LF Bug 1527 - inappropriate warnings about core files logged by heartbeat (SGI961667)
+ LF Bug 1534 - compiling/installation error on OpenBSD
+ LF Bug 1576: shutdown hangs under certain shells // LF Bug 1534: compiling/installation error on OpenBSD
+ LF Bug 1654 - HA_SBIN_DIR is not set on ocf scripts
+ LF Bug - compiling/installation error on OpenBSD
+ LF Bug 1522: Strt hb_counter on time_t
+ LF Bug # 1534 - compiling/installation error on OpenBSD
+ LF Bug # 1645 - Minimize arch-dependent differences, maintain compatibility -- More on this Bug...
+ LF Bug # 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1661 - crm_verify aborts checking and reoccurring crm_abort errors in logs
+ LF Bug # 1661 - move symlink creation out of specfile and into Makefile
+ LF Bug 1650: heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1645: Minimize arch-dependent differences, maintain compatibility
+ LF Bug 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug 1665 - fix references to moved scripts - courtesy of Tuomo Soini
+ LRM plugins: skip dot-files.
+ Made the stonith -h core dump go away - by fixing a variety of small things in STONITH.
+ Minor patch to stonith patch - to keep empty result from being seen as out of memory
+ Misc: Move a few shell functions to the only script that uses them
+ More file location tweaks - mostly GUI-related.
+ OCF: Detect and warn of use of deprecated 'ocf-shellfuncs' and 'ocf-returncodes'.
+ OCF: Fixed the check in have_binary. Handle checks for programs with --arguments
+ OCF: Provide the location of /sbin as used by some agents (HA_SBIN_DIR)
+ OCF: Remove unused variables
+ OSDL Bug 1606: okay for stonith plugins to have no parameters
+ PE: Add regression test for previous commit
+ PE: Aggregate the startup of fencing resources into a stonith_up pseudo-action
+ PE: Bug 1628 - Complain about invalid operation intervals
+ PE: Correct the CRM_CHECK comparision
+ PE: Dont log stopped orphaned resources
+ PE: Fix the handling of remove-after-stop=true - it was causing unnecessary restarts
+ PE: Fix two small memory leaks detected by Valgrind
+ PE: Fix up the tests now that compare_version() functions correctly (as of cs: 7d69ef94a258)
+ PE: Handle two new actions in text2task
+ PE: Include description for the remove-after-stop option
+ PE: Make sure ptest always does a POSIX sort
+ PE: Move the creation of stonith shutdown constraints to native_internal_constraints()
+ PE: NoRoleChange shouldn't always call PromoteRsc for master resources
+ PE: Potential use of NULL
+ PE: Regression: Allow M/S resources to be promoted based solely on rsc_location constraints
+ PE: STONITH Shutdown ordering
+ PE: Streamline STONITH ordering. Make sure 'all_stopped' depends on all STONITH ops.
+ PE: Update one more regression test output now that it has been verified as still correct
+ PE: Update testcases to include all_stopped (added in cs: 800c2fec24ee)
+ PE: Use master scores to determine which clones to start where
+ Put deBug in in support of Bug 1154: 2.0.4 BSC failure - select() returns with error
+ Put in a change to allow CTS to run.  There is a sort-of-bug (in BSC/CTS) underlying this that I'll have to file a bug on.
+ RA: Add some extra variables dug out from configure
+ RA: Bug #1630 IPaddr2 - Wrong arguments passed to send_arp (test was mistakenly written as an assignment)
+ RA: Convert a number of checks for required binaries
+ RA: Delay (v1) - Remove extra characters from call to ra_execocf
+ RA: Dummy: Just add a comment to make sure people copying from this
+ RA: Filesystem: Unify coding style to match rest of script.
+ RA: IPaddr2 - Remove bash-isms
+ RA: IPaddr2 - handle IP_CIP not being defined
+ RA: IPaddr: Fix a few trivial bugs in lvs_support pointed out by Michael Stiller.
+ RA: LSBDummy - Make sure the action is passed to ra_execocf
+ RA: MailTo: Remove spurious warning about monitor.
+ RA: Move all remaining autoconf variables into common files that are automatically included
+ RA: Move some helper files to their new names (.files dont show up as RAs)
+ RA: Revised handling of directory locations
+ RA: ServeRAID - remove commented out code
+ RA: Use consistent check for required binaries
+ RA: o2cb: Improve configuration stability.
+ RA: o2cb: Optimize redistribution of cluster.cnf.
+ RA: prefer the 'test' program rather than the builtin for some reason
+ RA: v1: IPaddr: Unconditionally enabling LVS support is a mistake.
+ TE: Log the node's uname instead of UUID for completed actions
+ TE: Set failcount to INFINITY for resources that fail to start or stop
+ Tools: Bug 1653 - Further changes to prevent use of NULL when no attribute is specified
+ Tools: Bug 1653 - Misc attrd/attrd_updater cleanups suggested by Keisuke MORI
+ Tools: Bug 1653 - attrd crashes when no attribute is specified
+ debian: Add new dot-ocf files to the heartbeat package
+ debian: Add the ldirectord OCF resource to the ldirectord package
+ debian: Debian bug #432441 will be closed on the next upload
+ debian: Don't create hb_gui symlink
+ GUI: update path for png images in haclient.py
+ ldirectord: Use globals for service check return values
+ ldirectord: Add OCF wrapper
+ ldirectord: Add Oracle check
+ ldirectord: Add external check
+ ldirectord: Add forwarding mechanism to real server ID
+ ldirectord: Add ld_service_to_port()
+ ldirectord: Call ld_emailalert_send() with correct arguments
+ ldirectord: Clean up execute logic in check_sql
+ ldirectord: Cosmetic spelling and grammar fixes
+ ldirectord: Document expire_quiescent_template
+ ldirectord: Document that checktimeout is for ping checks too
+ ldirectord: Don't access CALLBACK unless it is defined
+ ldirectord: Don't die if Net::FTP times out
+ ldirectord: Enhance ftp check debugging
+ ldirectord: Enhance logging in service_set
+ ldirectord: Fix bogus detection of combined check
+ ldirectord: Fix logic bug in _status_down
+ ldirectord: Handle $dbh-&gt;prepare() failure in check_sql()
+ ldirectord: List checktype and service in alpabetical order in the documentation
+ ldirectord: Make check_sql &lt; 80col wide
+ ldirectord: Make parsing of the output of ipvsadm more robust
+ ldirectord: Note negotiatetimeout in documentation of checkcount
+ ldirectord: Port of last resort for real server checks
+ ldirectord: Remove connecttimeout
+ ldirectord: Remove stale entries on reload
+ ldirectord: Remove trim down very wordy decripton of read_config
+ ldirectord: Set default negotiatetimeout to 30s
+ ldirectord: Status to stdout
+ ldirectord: Tidy up fallback
+ ldirectord: Use $dbh-&gt;errstr instead of $dbh-&gt;err when logging
+ ldirectord: Use an alarm for HTTPS timeouts
+ ldirectord: Use goto for error handling in check_sql
+ ldirectord: Use negotiatetimeout and connecttimeout as mutual defaults
+ ldirectord: Use negotiatetimeout for SIP, DNS and Radius checks
+ ldirectord: Use valid string in log message in check_connect()
+ ldirectord: document port behaviour of real servers
+ ldirectord: rearange parsing of service to make it &lt;= 80col (more often)
+ build: Move ldirector OCF resource into the ldirectord package
+ apache RA (LF 1656): include ServerRoot in relative paths.
+ cib: Fix detection of non-status changes
+ configure: Remove unneeded AC_PATH_PROGS checks
+ crmd: Bug 1575 - crmd cannot exit if lrmd is killed and there are pending ops
+ crmd: Bug 1624 - Fix the delete op for cancelled operations
+ crmd: Bug 1655 - crmd can't exit when the PE or TE is killed from underneath it
+ crmd: Only remap monitor operation status to LRM_OP_DONE under the correct conditions
+ log: avoid handing a null pointer as a '%s' variable
+ pingd: Hard code the name used for logging
+ re-enabled code to make symlinks for moved files.
+ remove is_stable() condition from drbd-outdate-peer daemon
+ shellfuncs: 's%:.:%%' should be 's%:.:%:%'; the '.' should be '\.'
+ stonith: external/riloe - new comment in the xml on how acpid may affect the performance (thanks to Guy Coates).
+ stonith: riloe - fix the xml info.
+ stonith: ibmrsa - fix the xml info.
+ stonith: ibmrsa - allow regular users to use it with 'stonith -n' and similar.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1183154400">- version 2.1.0-2
- Update the source tarball to revision e3c9306b9223
- Statistics:
    Changesets:	259
    Diff:		625 files changed, 13133 insertions(+), 73569^ deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/e3c9306b9223
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -rSTABLE-2.1.0:e3c9306b9223 | sort -f</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.1.0-1
- Update debian packaging files which drop the -2 package suffix
- Change the version number to the one used upstream</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.0.9-2
- Sync with the version supplied in SLES10
- Bugs fixed
+ OSDL #393 - Stonith: Update plugin from OpenHPI 2.2 to OpenHPI 2.6
+ OSDL #393 - Stonith: soft_reset is {true|1|false|0}, not {yes|no}
+ OSDL #393 - Stonith: Rename ibmbc to bladehpi
+ OSDL #393 - Stonith: Enable build of bladehpi plugin if OpenHPI present
+ OSDL #761 - RA: Remove history from heartbeat init script.
+ OSDL #1073 - Tools: Add clone support to crm_resource
+ OSDL #1138 - Long delay before CCM propagates membership event
+ OSDL #1292 - Stonith: Support xSeries STONITH (IBM: 06-R212-175)
+ OSDL #1339 - IPC code limits possible cluster size
+ OSDL #1374 - Tools: Check for sane host names when migrating
+ OSDL #1428 - Stonith: Mixing definitions and code
+ OSDL #1430 - CIB: Allow automatic assignment of object IDs
+ OSDL #1451 - Tools: Allow resource meta attributes to be set with crm_admin
+ OSDL #1457 - RA: Resolve unknown command ha_log
+ OSDL #1462 - Tools: crm_migrate should allow creating temporary rules
+ OSDL #1465 - crmd: crmd gets stuck if shutdown while starting up
+ OSDL #1472 - CIB: Use-after-free in find_attr_details()
+ OSDL #1480 - CIB: Create synchronous r/w connections correctly
+ OSDL #1482 - Stonith: stonith command needs a repeat option to make it a better test tool
+ OSDL #1484 - PE: Repair on_fail=stop.  Patch courtesy of YAMAMOTO Takashi.
+ OSDL #1486 - PE: Fix for potential NULL dereference
+ OSDL #1488 - Stonith: Fix passing password to HMC
+ OSDL #1489 - Stonith: Fix HMC errors in hostlist
+ OSDL #1492 - PE: Set common resource attributes before calling the custom unpack function
+ OSDL #1494 - PE: Add node-&gt;score to the clone stability function
+ OSDL #1499 - PE: Perform #uname comparisions without case
+ OSDL #1500 - Tools: Calls to attrd_updater with dampen=0 not processed correctly
+ OSDL #1505 - Findif parsing is all screwed up unless all the parameters are passed, not defaulted.
+ OSDL #1506 - Stonith: Add optional ibmhmc plugin parameters to meta-data
+ OSDL #1507 - Stonith: Allow "stonith -h" to display help for specific device
+ OSDL #1511 - LRM: running two actions for the same resource parallel
+ OSDL #1514 - CRM: Empty values in cib.xml loses other RA parameters
+ OSDL #1523 - Stonith: bladehpi performance enhancements
+ OSDL #1528 - RA: IPaddr2 gives a spurious warning on stop (SGI961736)
+ OSDL #1532 - crmd: Single node cluster shutdown
+ OSDL #1554 - PE: Probes should not have priority INFINITY
+ OSDL #1534 - LRM: Compiliation error on OpenBSD
+ OSDL #1544 - Comms: mixed versions of 2.x and 1.x not working
+ OSDL #1545 - Stonith: stonithd signoff fixesO
+ OSDL #1548 - logging: Ensure logs are logged using the correct component name
+ OSDL #1550 - Stonith: Suicide plugin returns hostlist containing itself
+ OSDL #1553 - Stonith: suicide plugin lacking ST_DEVICENAME
+ OSDL #1554 - crmd: Wait for the membership to stabilize before starting transitions to prevent unconfirmed actions
+ Debian #420206 - RA: Bashisms in IPaddr2
+ Novell #239075 - Admin: crm_master uses the same IDs for permanent and transient attributes
+ Novell #239079 - PE: Ensure action priority is set correctly to ensure notifcations are not lost
+ Novell #239082 - PE: Order promotions after _all_ demotions have completed
+ Novell #239086 - PE: Stable Master placement
+ Novell #244444 - crmd: Free'ing g_alloc() data with cl_free()
+ Novell #246681 - PE: Teach NoRoleChange() how to migrate resource's in the master role
+ Novell #250207 - Split-brain caused by non-identical ping-node configuration and auto-join
+ Novell #250273 - RA: Provide an RA for managing evmsd as a resource
+ Novell #250625 - RA: Xen: Fix status function for newer Xen versions
+ Novell #251689 - PE: Avoid needlessly restarting changed monitor operations for stopping resources
+ Novell #252693 - PE: Enable migration in more scenarios
+ Novell #252693 - PE: Teach the PE how to migrate resources in a starting stack
+ Novell #266551 - Stonith: getconfignames returned hostname instead of hostlist
+ Novell #266551 - doc: Bring the stonith man page up-to-date
- Build Improvements
+ Add explanatory comment for configure kludge
+ Add lha_internal to c-files that dont include it
+ Allow debian packages to also be built directly from Hg archives
+ Always check for the presence of PAM an TLS headers
+ Configure switch to easily enable Valgrind'ing of the CRM
+ Dont install crm-related man pages when --disable-crm is used
+ dopd doesnt build without the crm, disable it if the crm is disabled
+ Fix typo in configure.in
+ Header-file related cleanup
+ Include the exact version being built even when building an archived tree
+ Make supplying a Valgrind suppression file simpler
+ Misc changes to allow building with crm disabled
+ Not all platforms need -lpam
+ Remove redundant and useless items from the build
+ removed unused library dependancies
+ Use existing accounts when building on OSX
+ debian: correct the location of stonith headers in *.files
+ debian: reflect the new header locations in .files
+ debian: sort out a kink in the configure vs. bootstrap logic
+ debian: Packaging updates for 2.0.8-1 release
+ debian: Add heartbeat-2-gui package control files to Makefile
+ Improved grammar in gui package description
+ Improve portability across versions of 'gcc'.
+ Allow data size to be specified
+ Ensure 'awk' is found in runtime environment
+ Use centrally determined GNUTLS cflags and libs
+ Replace multiple derivations (poor) of locations with direct derivation from configure
+ configure: Add closing information to user about '/etc/passwd' and 'make install'
+ Remove an unnecessary 'include' that broke building on some OSes.  It continues to build OK on various OSes.
+ Bourne shell 'test' does not support '-e' flag.  Using '-r' instead.
+ libgnutls: if no 'libgnutls-config', try 'AC_CHECK_LIB(...)'
+ Determine GNUTLS libs centrally in 'configure.in' rather than in individual Makefiles
+ Correct omission of &lt;lha_internal.h&gt;
+ ipctransient tests: Add some flexibility; rationalise some duplicate code
+ ConfigureMe: make usage info a little clearer
+ Add some defaults to configure.in to reduce buildrequires.
+ Remove a bunch of dead code (Perl/SWIG bindings).
+ configure: Check for more pre-requisites of the mgmt/quorum components.
+ Fix use of a future dates in the changelog
- CRM Library Enhancements and Fixes
+ Fix xml parser bug.
+ Allow retrieval of default config values without a hashtable
+ Changes to fake transition key generation
+ Check the return code from fflush() when writing xml files - AnÃÂ­bal Monsalve Salazar
+ Comprehensive review of error recovery logic for potentially failed calls to fopen()
+ Correctly handle syslog facility == 0
+ Delete dead code, make empty_uuid_cache() safe with NULLs
+ Dont call fflush() or flclose() if the output stream was NULL
+ Ensure the normalized result of (add|subtract)_time is updated before returning
+ Fix a use-after-free in parse_time_duration()
+ Fix replace_xml_child() when neither child nor update have an id
+ Fixes for Coverty issues: 52, 55-58, 61-66, 68-69, 71-73 in run 240
+ Gracefully fail when the target XML file is not writable
+ handle NULL inputs to xml_has_children() gracefully
+ Make the use of valgrind a run-time option
+ Memory leak fixes
+ Prevent a number of potential use-after-free's by zero'ing out free'd loop variables
+ Refactor date printing to allow date -&gt; string conversion
+ Remove noisy and inaccurate memory logging
+ Repair the status_printw macro now that we do logging slightly differently
+ size_t is always positive... broke error handling in XML parser.
+ Use-of-NULL in validate_with_dtd() error path... Only clean up what we created
+ When malloc tracking is enabled, pass through the person that called crm_strdup
- CLI Enhancements and Fixes
+ Uninitialized string in heartbeat/findif.c
+ Allow cluster config options to be queried/modified/deleted.  Broken in cs: 13c450735ba7
+ Allow crm_verify to be used with a named DTD file
+ Auto populate the provider for OCF resources if one is not provided
+ crm_primitive.py: Include all node preferences in the one rsc_location constraint
+ Include rsc_location details in the resource listing
+ map cib_NOTEXISTS to 0 for crm_failcount
+ Use the current node uname by default when invoked as crm_standby
+ Add two new views to crm_mon.  Patch by Christofer Edvardsen.
+ Centrally define CIB call options so that -f always works in crm_resource
+ Compile when malloc checking is off, fix last mem leak
+ crm_verify - dont complain about missing status section
+ Dont do ID checks on cibadmin diff's, duplicates are expected
+ Fix a number of memory leaks in attrd
+ Help text and input sanity checks for ocf-tester
+ Include class/type/provider in resource delete commands
+ Place the lifetime rule in the correct location
+ Set a slightly higher default action timeout
+ Show help text for crm_uuid
+ Teach crm_uuid to write ascii-form UUIDs to hb_uuid
+ Terminate the attrd process if heartbeat exits from under it
+ lrmadmin: fix the provider list function: first free data and then the list member.
+ crm_attribute/master/standby: Always default the uname to the current machine
- CIB Enhancements and Fixes
+ Allow cluster options to be created when the default set is not present
+ Allow the remote connection code to be used with or without PAM/TLS
+ Clean up memory at exit
+ Fix a number of memory leaks
+ Compile when malloc tracking is enabled
+ Don't increase the version number if nothing changed
+ Dont examine the group ownership of cib.xml since we set perms to rw-------
+ Exit the writer process correctly so we'll continue to do write outs
+ Prevent node_uuid from having any effect for &lt;crm_config&gt; changes
+ Remove dead code
+ Support processing of commands sent via remote TLS connections.
  See http://www.linux-ha.org/v2/cib_remote for usage details
+ The decision to log failed connection attempts should be left to the client
+ Warn at startup if important version information is missing
- CRMD Enhancements and Fixes
+ ALL completed actions should be removed from the shutdown_list
+ Correctly parse the shutdown timer option
+ Create the restart digest from an object with the same name that the PE uses
+ Delete the HA connection only at exit
+ Enable Valrind'ing of the PE and TE
+ Indicate the LRM error code if an operation cannot be cancelled
+ No need to create the resource if we're trying to delete it
+ Free memory at shutdown
+ Resolve a number of memory leaks
+ Sort out the whole client deletion business.  Also delete the resources hash at shutdown.
+ Improved Logging
+ Remove dead code
- Policy Engine Enhancements and Fixes
+ Always print the resource's node scores
+ Avoid a potential NULL dereference in an error path
+ Clean up generation of and contents of dot-files
+ Create an implicit "cant run here" constraint if an action returns "not installed"
+ Don't start resources until we can verify they're not still running
+ Dont waste time checking action definitions on nodes that wont be running resources
+ Fix a use-after-free of {key} when the monitor op already existed
+ Fix anti-colocation when the RHS is not running
+ Fix gcc warning - dont ignore the result of mktemp()
+ Fix group recovery when a group it depends on is restarted
+ Have group-group recovery work for the right reasons
+ Memory leak fixes
+ Make clones ever so slightly sticky by default
+ Make internal group ordering of bullet-proof
+ Make sure things that shouldn't be true are never true (added asserts)
+ Move DeleteRsc to a more appropriate location
+ Move Ncurses related defines to a more optimal location and make sure its included by crm_mon
+ Not all pseudo operations should be included in the graph
+ Only show elements of the graph in the dot-file by default
+ Prevent a potential NULL deference in clone allocation
+ Provide useful feedback when a cloned resource is found active somewhere it shouldn't be
+ Re-use StartRsc/StopRsc for consistancy
+ Rename elements of the pe_ordering enum for clarity
+ Rename migration variables for clarity
+ Updated regression tests with the revised consistant format
+ Utility functions for finding node's by uuid/uname
- Transitioner Enhancements and Fixes
+ Clean up memory on exit
+ Detect changes to attributes of the cib object
+ Only a limited number of cib attributes warrent aborting the transition
+ Unpack graph actions correctly
+ Improved logging
+ Removed dead code
- Misc
+ Allow heartbeat to easily run with standard libc malloc-and-friends
+ Allow the malloc tracking code to compile on systems where size_t != int
+ Allow writing to syslog to be turned off
+ Better information about valgrind enablement
+ Sanitize the "crm xyz" option processing.  Dont run valgrind if not using libc malloc
+ The DTD used "integer" instead of "number" (which was used by the code)
+ Stonith: Update the rilo RA with enhacements from Tijl Van den broeck and Guy Coates
+ Moved drbd peer outdater into contrib/
+ clplumbing: We _never_ want to trim memory, use -1 instead of 4*size.
+ clplumbing: Coverity 53: Potential NULL pointer dereference.
+ mgmtd: Certain versions of SWIG do not convert the Python "None" to a
+ initscript: set correct Provides: and Should-Start: entries
+ Stonithd: Relaxed a stonithd timeout so that start will succeed if it completes in a minute
+ Dont log dispatch warnings unless they exceed 30ms instead of 10ms
- LRM Enhancements and Fixes
+ Inform clients when an RA is not installed on the machine
+ Expanded regression testing
+ convert the LSB meta-data to XML.
- Resource Agent Enhancements and Fixes
+ -eq is for integer comparisions
+ Avoid concatination with None in riloe stonith agent
+ Filesystem - When checking ocfs2 is cloned, look for variables that are always set
+ Fix up the Dummy metadata
+ Fix variable initialization in pgsql
+ LVS support should always be enabled for the heartbeat IPaddr wrapper
+ Modify the Xen RA to use the new variable names
+ Return after performing a stop action in the Filesystem agent
+ Use configured scratch locations in ibmrsa stonith agent
+ bladehpi readme update
+ Dummy, mysql and drbd - fix meta-data to conform to XML.
+ Convert SAP* from dos
+ Allow ManageRAID to show meta-data at all times.
+ Enhance Pgsql ocf resource to handle multiple instances
+ Xen: Add a little reminder to the code.
+ drbd: Fix some issues and work-arounds for drbdadm bugs.
+ Filesystem: Prune duplicates from active and starting list.
+ Filesystem: Fix metadata require/unique settings.
+ Xen: Fix status function for newer Xen versions (Novell 250625)
+ Filesystem: Increase default suggested timeouts.
+ drbd: When using the nodename-override, drbdadm likes to print an
+ Xen: Swap migrate_to and _from to match PE.
+ Filesystem: Harmless typo corrected.
+ LVM: Add some hints for future todo items.
+ EvmsSCC: More fixes from Jo (Novell 199730)
+ Filesystem: Move ocfs2_init out of the generic stop path (Novell 250603).
+ pgsql: Several enhancements to by Keisuke MORI
+ drbd: Make parsing of drbdadm output more robust.
+ drbd: If drbd is stopped, demote should fail with NOT_RUNNING.
+ Xen: Advertise migrate_from and _to actions. Mention migrate in meta-data.
+ drbd: Add support for overriding the hostname drbd uses based on the clone
+ Filesystem: Whitespace cleanup and minor fixes ("" for -z arguments, using -ne when
+ IPsrcaddr: Added count of how many inet lines to use for the diff -B
+ external/riloe misspelled RI_LOGIN variable name.
- ldirectord Enhancements and Fixes
+ Use $arrayOfDNs[0] instead of @arrayOfDNs[0] to get rid of the following
+ Remove duplicate $recstr
+ Change the code around a bit to avoid a warning about code following exec
+ Dont use SIGENT, as it doesn't seem to exist.
+ 92d4e521db53 Handle $line more carefully
+ Make sure that frequency is intialised before it is used
+ Use $$ instead of (the uninitialised) $pid
+ Remove useless calls to lc()
+ Make sure that DEBUG is initialised
+ Use implicit variables in read_config()
+ Use the -w flag to perl to find warnings/errors
+ Make ldirectord's version valid
+ If weight is not supplied, set it to 1
+ Fix broken reload command
- Testing Improvements
+ Account for a small timing window in the ResourceRecover test
+ Explain why we're aborting when nodes aren't found in DNS
+ Ignore ResourceRecover testing artifacts
+ Indicate debug log messages
+ Improved Logging
+ Remove resource tied to the DC - the #is_dc comparision is irrelevant
+ Rewrite the LSBDummy RA
+ Rewrite the ResourceRecover to use asynchronous failures
+ BSC: (1) test IPC before its dependencies; (2) signal-handling: improve and catch some more.
+ ocf-tester: Continue if validate-all succeeds.
+ ocf-tester: Exit with appropriate exit code for success or failure.
+ ocf-tester: Various integers were compared as strings.
+ BSC: Test Dummy, IPaddr, IPaddr2, Filesystem RAs.
+ BSC: Skip IPaddr2 test if ip not installed.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1173823200">- version 2.0.9-1
- New Upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1170194400">- version 2.0.8-1
- New Upstream
+ Allow colocation based on node attributes other than #id
+ SAPDatabase and SAPInstance resource agents added.
+ Core/CRM: Improvements to the memory allocation, message, and string
  handling libraries result in an overall speed-up of 65%.
+ CRM: Fix ISO date handling for Jan 01 of any year.
+ CRM: Only update the voted hashtable with no-votes for the current
  election.
+ RA: IPaddr: Support netmask both in CIDR and in dotted-quad notation.
+ logd: Fix trailing random byte in log messages (OSDL 1268).
+ heartbeat:  Work around a glibc/times() bug to prevent failures every
  497 days on 32-bit Linux (OSDL 1407).
+ heartbeat: Retransmits were requested more often than they'd be
  honored (OSDL 1455).
+ CTS/PE: Introduce CRM option "startup_fencing" to disable fencing of
  unseen nodes, because CTS can't handle this.
+ PE: Split-off "network-delay" option from global_timeout to separate
  network delays from action timeouts.
+ PE/CRM: Binaries now support being called with "metadata" command to
  document the complete list of options in the CIB.
+ PE: DTD: Include start_delay as a property of operation objects.
+ PE: Fix implementation of date_spec when no range is specified.
+ PE: Enforce clone_node_max for already running resources.
+ PE: Clones were not being stopped on node shutdown.
+ PE: Allow resource colocation based on node attributes other than #id
  (node_attribute option added to rsc_colocation constraint).
+ PE: Improved handling when timeout &lt; start_delay (OSDL 1421).
+ PE: Pre-notifications for promote occured before start was completed
  (OSDL 1447).
+ PE: Allow any two pairs of actions to be specified for rsc_order (OSDL
  1452).
+ PE: Handle asymmetric clusters where RAs are not installed on all
  nodes.
+ PE: Allow resource stickiness and failure stickiness to change based
  on node attributes.
+ CIB: Fix update_attr() causes attrd to hang at shutdown when there is
  no DC (OSDL 1432).
+ CIB: Corrupted config file prevents heartbeat restart (OSDL 1385).
+ CIB: Startup processing improvements; DTD validation will be
  automatically activated if the CIB on-disk validates.
+ TE: Fix memory leak.
+ TE: Failcount wasn't being updated in all cases.
+ TE: never update the CIB with unconfirmed stop actions (OSDL 1435).
+ CTS/RA: Replace OCFMSDummy with Stateful RA.
+ CCM: Centralize quorum calculation on the transition leader.
+ CCM: Support split-site and external quorum servers.
+ CRM: Ignore status update for non-members (ie, ping nodes).
+ LRM: Don't postpone postponed resources.
+ LRM: Fix restart in case an lrmd is already running (OSDL 1333).
+ LRM: Fix overflow in RA output handling (OSDL 1433).
+ mgmtd: Robustness and memory leak fixes.
+ mgmtd: make the port used configurable (OSDL 1390).
+ haresources2cib.py: Improve v1 to v2 conversion tool (OSDL 1415).
+ GUI: ping nodes appear as failed in gui (OSDL 1394).
+ GUI: Reduce duplicates in RA list by only showing the OCF one if both
  ocf and hb RA exist) (OSDL 1338).
+ GUI: Add new resource to currently selected group (OSDL 1414).
+ GUI: support all attributes of operations (OSDL 1372).
+ GUI: Create first resource along with a new group; delete group when
  last resource is removed (OSDL 1287).
+ GUI: Set defaults for clones and m/s RAs (OSDL 1352).
+ GUI: Use meta-data defaults when creating actions (OSDL 1351).
+ GUI: GUI: start all sub resources when we start a group or a clone
  (OSDL 1449).
+ GUI: support ordered==false or non-collocated==false groups (OSDL
  1257).
+ stonithd: Fix memory leak.
+ stonithd: Remove reliance on farside_pid (OSDL 1412).
+ stonith external/riloe: Make the login name and iLo device address
  configurable.
+ crm_resource: Add manpage.
+ RA: PureFTPd, mysql, ManageVE (to manage an OpenVZ container),
  ManageRAID, WAS6 (Websphere 6) added.
+ RA: Include SAPInstance and SAPDatabase (FATE 2172).
+ RA: IPaddr cleanup to avoid race conditions in the script. Report
  status failure when an IPaddr is active on a different interface but
  allow it to be stopped.
+ RA: IPaddr2 fixes for loopback bound addresses.
+ RA: Filesystem reported wrong status/monitor results for OCFS2 in some
  circumstances (Novell 187080).
+ RA: Improve heartbeat v1 wrappers.
+ RA: Fix db2 monitor operation.
+ RA: ldirectord: Make the emailalert and emailalertfreq options global
  as well as non-global, make checkcount global as well as per-virtual,
  add radius check, improvements to documentation.
+ RA: pgsql: Make server logfile configurable and implement
  validate-all. New parameter ctl_opt added to pgsql to support
  additional options for pg_ctl.
+ CRM: First beginnings of a cluster-wide shell (FATE ...)
+ BEAM / Coverity induced fixes.
+ Minor compatibility fixes (OSDL 1405).
+ Logging improvements all over the place.
+ Extended support for master-slave resources (FATE 300723).
+ OCF RA API compliance checker (FATE 300737).
+ Support weak and uni-directional collocation constraints (FATE
  300792).
+ Many bugfixes.
- errata: CVE-2006-3121 was incorrectly refered to as CVE-2006-3821 in
  the changelog for 2.0.6-2 and 2.0.7-1
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-2-global.patch (introduced in 2.0.6-2)
- Remove alternate dependancy on netkit-ping as it is being removed
  from Debian</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1164924000">- version 2.0.7-2
- Add dependancy and build dependancy on psmisc for fuser
  Thanks to Hans-Joachim Baader
- Acknowldge NMU by Roger Leigh</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155592800">- version 2.0.7-1
- New Upstream
 - Remote Denial of Service attack (#195068, CVE-2006-3121).
 - Bugfixes to the CRM, the LRM and the GUI.
 - GUI failed to connect to and retrieve data from the cluster (#198747).
 - Improved log messages.
 - ptest can now read compressed XML directly. Do not include optional
   actions and dependancies in ptest output by default.
 - crm_resource will now warn and demand exact specification when trying
   to modify an attribute while several sets are present.
 - lrmd now limits itself to a maximum of 4 child processes, to avoid
   overloading the node and causing too long delays.
 - pengine: Processing of pending probes; should not be treated as if the
   resource is running or in a known state.
 - target_role now is only taken into account for managed resources.
 - cib: Detect more cases where the nodes section needs to be refreshed.
 - More accurately determine node status. (OSDL 1369)
 - Filter out stop requests that would require a resource to be added.
   (OSDL 1369)
 - Send filtered resource "stops" as successes as to not block waiting
   for filtered actions.
 - By default pass the TE graph via IPC until its too large for IPC to
   deal with, only then fall back to passing via the disk.
 - Stopping of stonith resources can never require stonith, even if the
   node its running on failed; prevent graph loop. (OSDL 1376)
 - STONITH events need to inputs to start events (not stops), to avoid
   graph loop in combination with "stop before" dependencies (ie,
   groups).
 - crmd: Dont stall the FSA if we try to invoke the TE after we've
   stopped it.
 - Always unpack the correct part of a diff operation; diffs should now
   apply in more cases, reducing the need for full refreshs.
 - Correctly observe --disable-snmp-subagent during build.
 - In some states the membership is invalid and shouldn't be referenced.
   (OSDL 1377)
 - Fix a use-before-null-check issue in lrmd. (Coverity #48)
 - OCF Resource Agents outside the default path were incorrectly found to
   be not executable.
 - ccm: hostcache and delnodecache files should not be authoritative if
   autojoin is disabled. (OSDL 1226)
 - With autojoin, llm_get_nodecount() can't return the real max nodes
   anymore, this may cause memory corruption. (OSDL 1382)
 - Fix a memory corruption in membership layer, more frequently observed
   with larger (&gt;5) clusters.
 - Change the default api-auth for pingd to uid=root
 - Dummy RA now OCF compliant.
 - Fix pingd RA metadata to be XML compliant.
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-1-quiet.patch  (introduced in 2.0.6-2)
  - ldirectord-1.141-readline_workaround.patch (introduced in 2.0.6-2)
  - CVE-2006-3821.patch                        (introduced in 2.0.6-2)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155074400">- version 2.0.6-2
- ldirectord-1.141-emailalert-1-quiet.patch
  Don't send email alerts if the alert address is not configured
- ldirectord-1.141-emailalert-2-global.patch
  Allow emailalert and emailalertfreq directives to be global
  as well as per-virtual service
- ldirectord-1.141-readline_workaround.patch
  readline doesn't seem to return lines after Net::FTP
  has been called, so split them up by hand.
- Added recommends iptables to heartbeat, as it is needed
  for the portblock resource to function correctly
- Added /var/lib/heartbeat/pengine directory
- Replace 02-chown-check.patch with chown-check-2.patch
  - use the environement variable FAKED_MODE instead of FAKEROOTKEY to check
    if code is runing in fakeroot. At some stage around fakeroot 1.5.10
    FAKEROOTKEY disapeared. Ran autoconf manually to effect this change
    after repatching.
  - Updated 02-chown-check.patch: fix typos in comment
- CVE-2006-3821.patch
  Fix remote denial of causes caused by insufficient bounds checking
  on data read from the network.
  CVE-2006-3821
- Python transition - http://wiki.debian.org/DebianPython/NewPolicy
  - Update build dependancy on debhelper from (&gt;= 4.0.0) to (&gt;= 5.0.37.2)
  - Add dh_python call to debian/rules
  - created debian/pycompat with contents of "2"
  - heartebeat: deplaced depenancy on python with one on ${python:Depends}
  - Added XB-Python-Version: ${python:Versions} to each package
  - Replace build dependancy on python2.3-dev with one on python-dev
  - Use python-central
    + Add build depends on python-central (&gt;= 0.5)
    + Add dh_pycentral call right before dh_python in debian/rules
    + Add XS-Python-Version: current in the source stanza of debian/control</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1152136800">- version 2.0.5-8
- ldirectord-2: Add missing dependancy on libmailtools-perl
                (Mail::Send)
- ldirectord-2: Add missing dependancy on libnet-perl
                (Net::SMTP, Net::FTP, Net::POP3)
- ldirectord-2: Remove unneccesary dependancy on adduser
- Automake transition: http://wiki.debian.org/AutomakeTransition
  - Remove unneccesary build-depends on automake1.9 | automaken
  - Remove unneccesary build-conflicts on automake1.4</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1151618400">- version 2.0.5-7
- Don't run deluser and delgroup in postrm
  - These commands may not be available at this time
  - If there are any files left that belong to this user or group
    then they will be left unowned and get inhereited by the
    next user that comes along that happens to have hacluster's
    old userid or the old haclient groupid respectively.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-5
- Reverse the change made in 2.0.5-4
  It turns out that in heartbeat (as opposed to heartbeat)
  is a script which calls a binary that is located in
  /usr/lib/ocf/resource.d/heartbeat/</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-4
- Move IPv6addr from /etc/ha.d/resource.d/ into /usr/lib/heartbeat,
  and then symlink that back into /etc/ha.d/resource.d/ as binaries
  are not allowed in /etc</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1149544800">- version 2.0.5-3
- Fix libgnutls binary dependancy
  - Build-Depends on libgnutls-dev instead of libgnutls13-dev
  - Recompile against libgnutls13 in place of libgnutls11
  -</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1148076000">- version 2.0.5-2
- Make use of invoke-rc.d
- Update from standards versoin from 3.6.2 to 3.7.2</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1147212000">- version 2.0.5-1
- New Upstream
- Removed build depenancy on openssl-devel,
  as heartbeat no longer uses openssl directly.
  (Libraries that heartbeat depends on may in turn
   depend on openssl creating an indirect depenancy
   or build-dependancy).</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1141855200">- version 2.0.4-1
- New Upstream
- Don't try and stop heartbeat in preinst on the first install</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139954400">- version 2.0.3-2
- Add build dependancy on libncurses-dev to allow crm_mon to work
  Thanks to Guy Coates
- Move hacluster user and haclient group creation (don't ask me why the
  user and group names are different) from preinst to postinst.
  Once upon a time there might have been a need for it in preinst,
  but the current packaging changes files to have the hacluster user
  and haclient group as neccessary in the postinst. So there is
  no need to create them before postinst.
  This is a better fix to #352158, and the pre-depends on adduser
  has been changed to a depends accordingly.
- Stop heartbeat in preinst</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139695200">- version 2.0.3-1
- New Upstream
- Make sure adduser is passed the --system flag
- Slightly Enhanced package descriptions
- Add build dependancy on swig
- As PYTHON_PATH has been added to configure.in it seems that autoconf1.4
  can no longer build this tree.  Currently autoconf is provided by
  autoconf1.4, and autoconfn is a virtual package provided by autoconf1.7,
  1.8 and 1.9.  Accordingly, replace the autoconf build dependancy with
  autoconf1.9 | autoconfn.  And add a build conflict on autoconf1.4. This
  way the autoconf command should be autoconf1.7, 1.8 or 1.9, but not 1.4
  as was previously the case.
- Don't apply 00-ssh_scp_path.patch as it should no longer be needed,
  instead add a build dependancy on openssh-client.
  Also removed call to relevant configure options.
- Removed configure option that no longer exists
  --enable-checkpointd
- Removed configure options that are now on by default
  --enable-crm --enable-lrm
- Add build dependancy on libgnutls11-dev, as 1.0 probably doesn't
  compile as _t types don't exist.
  http://lists.gnu.org/archive/html/help-gnutls/2004-08/msg00001.html
- Fix insonsistency between hb_stanby(1) man page, an the wiki
- Make /usr/bin/cl_status setgid
- Make sure that /var/run/heartbeat/{ccm,crm} exist on install
  else postinst, and thus the install will abort.
- Fix inconsistency between hb_standb(1) man page and wiki
- Add Pre-Depends on adduser
- Add management tool
  ./confgure --enable-mgmt
  Build-Depends: python2.3-dev, libpam0g-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1129759200">- version 2.0.2-5
- Change libcurl3-dev dependancy to libcurl3-openssl-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1128031200">- version 2.0.2-4
- Include /var/lib/heartbeat/ccm and /var/run/heartbeat/crm</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-3
- Get rid of bogus touching of config.status and friends in clean target,
  which if run as root causes build failures.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-2
- Add build dependancy on libltdl3-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127772000">- version 2.0.2-1
- New upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127599200">- version 2.0.1-4
- Add /var/run/heartbeat directory to package
  http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=900</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-3
- Restrurctured  provides, conflicts and replaces
- Made heartbeat-dev depend on heartbeat, not heartbeat</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-2
- Uptream initally made the wrong tar ball avaliable for
  2.0.1 and this was used to build 2.0.1-1.
  I have asked 2.0.1-1 not to be accepted into the Debian Archive
  for this reason. 2.0.1-2 uses the updated, correct tarball from
  upstream.
- Note that this package has a binary dependancy on libssl
  only because of linking against libsnmp9 (5.2.1.2-3)
- Add build dependancy on libsensors-dev (for libsnmp9)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1126821600">- version 2.0.1-1
- New upstream
- Add /var/lib/heartbeat/cores/root, /var/lib/heartbeat/cores/hacluster
  and /var/lib/heartbeat/cores/nobody
- Remove usr/lib/stonith/plugins/stonith2/riloe.so, its
  no longer in the tree
- Enable snmp_agent
- Added new libplumbgpl
- Added new ha_logd.cf
- Added new iso8601 executable
- Temporarly remove the drac3 module as GPL code that links
  against OpenSSL is not acceptable to Debian.
  - http://lists.community.tummy.com/pipermail/linux-ha-dev/2005-August/011266.html
  - http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=853
- Update build dependncy from libsnmp5-dev to libsnmp9-dev
- Make configure chown test fakeroot aware to avoid build hang
- Fix syntax error in db OCF resource
- Make crm/test/helper.sh have #! /bin/bash
- Make resources/OCF/ocf-shellfuncs.in have #! /bin/bash
- Update FSF address
- Zero config.status, libltdl/config.log and libltdl/config.status on clean</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1123106400">- version 2.0.0-2
- Add /var/lib/heartbeat/ccm and /var/lib/heartbeat/cores</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1122760800">- version 2.0.0-1
- New upstream
- Added dependancy on libnet-dns-perl to ldirectord
- Added --enable-checkpointd to configure arguments
- Added --disable-snmp-subagent to configure arguments
- Added --disable-swig to configure arguments
- Add build dependancy on uuid-dev
- Readranged packages to allow heartbeat 1.2.X to exist in debian
  and heartebat 2.X to be heartbeat until heartbeat gets
  a bit more testing in the wild. Also consoldidated binary
  packages into heartbeat, and development packages into
  heartbeat-dev, ldirectord is still in its own package,
  ldirectord2, as it drags in a lot of dependancies that
  no other part of the system uses.</changelog></package>
<package pkgid="b7b462530aa6e0081d60265aa8af6c21d5ec7a49" name="libheartbeat2" arch="i386"><version epoch="0" ver="2.99.2" rel="6.1.sl5.1"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt;" date="1370469600">- fixed up libnet and libnet-devel dependencies</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1222725600">- version 2.99.1-1
- Update source tarball to revision: d8710f41b9cb
- Includes many fixes to init scripts.
- Add sbd for shared-storage fencing.</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1219356000">- version 2.99.0-1
- Update source tarball to revision: f23531dd23ad</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1207087200">- version 2.1.3-18
- Added two small patches for Bug LF-1833: Do not overwrite op_status depending on op_rc</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1200348000">- version 2.1.3-1
- Update source tarball to revision: 9cdeae333990
- Statistics:
    Changesets:      153
    Diff:            141 files changed, 12279 insertions(+), 3103 deletions(-)
- This is the first release now that the CRM has becme its own project called
  Pacemaker and no longer included with Heartbeat.
- Without the CRM present, the following components are also no longer able to
  be included with Heartbeat (as they require CRM libraries) and are instead
  provided as part of pacemaker or the new pacemaker-pygui project.
   cim
   snmp
   mgmtd
   pygui
   tsa_subagent
- RPM-based distributions also have a new package layout
   heartbeat-resources ::= resource agents
   heartbeat-common    ::= components that are useful regardless of which stack is being used
   heartbeat           ::= components that are specific to the Heartbeat stack
- Changes since obs-2.1.2-24
+ apache RA: remove children in case the top process didn't
+ apcsmart: make message more descriptive
+ build (LF 1803): add -fgnu89-inline to CFLAGS if gcc version is &gt;=4.1.3 and &lt;4.3
+ by request from Andrew - Modified the external/ssh plugin to have a livedangerously flag
+ ccm (LF 1806): restart all instead of exiting (low impact)
+ Changed a test from causing a reboot to not triggering a reboot - because it doesn't seem to any more
+ Changed HIGHLY to STRONGLY in how strongly we recommend STONITH
+ Corrected a warning found on FC8 in the cl_reboot code
+ debian: Add dependancy on libpam-runtime (&gt;= 0.76-14)
+ Debian: add libxml2-utils as a dependancy, because we need xmllint for the BSC
+ Debian: add the new ibmrsa-telnet stonith plugin
+ debian: clean python bytecode
+ debian: clean up stale heartbeat-2 files
+ debian: don't install bytecompiled python modules
+ debian: patches need to be distributed
+ debian: remove chown patch
+ debian: Update standards version from 3.7.2 to 3.7.3
+ debian: update the name of the series file to reflect the new release
+ docs/packaging: reshuffle hb_report documentation and include the html version
+ dopd: don't cl_free variables on local stack
+ dopd: don't hardcode path of drbdadm; it has to be in the PATH, though.
+ dopd: fix potential segfault due to leakage of invalid/freed pointer
+ dopd: make it work with multiple concurrent outdate requests
+ external ipmi plugin caused error messages when getting metadata on machine w/o ipmitool installed.  This somewhat messed up BasicSanityCheck.
+ Filesystem: Make mount point required for the GUI (Hideo Yamauchi)
+ Fix memory leak in external plugin handling
+ fixes for fedora: system(3) function return value cannot be ignored. Also added a missing RPM build dependency.
+ hb_report: add quotes around args to test -f
+ hb_report: don't surprise user by reading the files from the current directory
+ hb_report: include hostcache
+ hb_report: replace arch with uname -m
+ hg: from last changes to recover from media errors, fixed a stupid typo with a reversed boolean condition.
+ hg: LF bug 1794: ComponentFail tests failing
+ hg: Makefile for external stonith commands was missing new stonith plugin in the extra_dist section
+ High: Heartbeat: Include an option to start the CRM in respawn mode
+ init: add should-start/stop $remote_fs to init script
+ init: should-start/stop $remote_fs to init script
+ ipc (LF 1339): enable message compression
+ IPv6addr: Check for netinet/icmp6.h instead of  linux/icmpv6.h
+ IPv6addr: Check for netinet/icmp6.h instead of linux/icmpv6.h
+ iscsi RA: wait for udev to create the links
+ Junko IKEDA reported a problem building on Red Hat with tog-pegasus installed - this fixes that problem - the code half-setup things if pegasus was present but --enable-cim-provider wasn't enabled
+ ldirectord: add forking mode
+ ldirectord: SimpleTCP service check
+ ldirectord: SimpleTCP service check documentation
+ ldirectord: Various updates to OCF compatible RA
+ lf bug 1678: stonith command core dumps with -h option
+ LF bug 1690: there should be a tool to audit (validate) node names in constraints among other things...
+ LF Bug 1732: Error handling is bad for comm media
+ LF bug 1732: restructuring code towards being able to restart (reopen) communication media when they die
+ LF bug 1795 - timeout control for crm_mon --one-shot
+ LF bugzilla 1667:  ppc64 RPMs contain 32-bit binaries
+ LRM (LF 1821): resource timing information
+ lrm reg tests: handle OCF_ROOT, warn about xmllint missing
+ LRM regtest: update filters to match the lrmadmin output
+ lrmadmin: include time.h
+ Monitor timeouts need to increment fail counts
+ OCF-resources: SphinxSearchDaemon is not installed
+ OpenBSD bugs: 1731 1761 1743 1659
+ packaging: include iscsi
+ pgsql RA: handle the missing pg software properly (thanks to Serge)
+ pgsql RA: move check for root down to enable meta-data for regular users (thanks Serge)
+ pgsql RA: postmaster confusion
+ Put the _source_ (.in) file under source control.  Groan...
+ RA Filesystem: add lustre to the list of fs which don't need fsck
+ RA iscsi: dropped complex code in favour of udev and several small cleanups
+ RA iscsi: fix meta-data xml
+ RA iscsi: get rid of one annoying message ("no active sessions")
+ RA iscsi: new iscsi resource agent
+ RA iscsi: support iscsi sles compat mode
+ RA iscsi: two echo statements removed
+ RA mysql: don't look for mysql users in the OS database (thanks to Christian Rishoj)
+ RA SAPDatabase/SAPInstance: report proper exit codes in case required software is not installed
+ RA SphinxSearchDaemon: a new RA thanks to Christian Rishoj
+ recovermgrd: changed the code to look at the return code from fwrite, to make Fedora 8 compiler compile recovermgrd warning-free.
+ Removed bzip2-devel as a build dependency for all but Fedora and RH
+ RPM and specfile changes to fix part of and help diagnose part of Junko IKEDA's problem with tog-pegasus
+ RPM spec file: Added ciblint to installed programs
+ RPM specfile change:  made is_fedora macro turn off is_rhel macro
+ shell scripts: various cases of overquoting in the for statement (thanks to Takekazu Okamoto)
+ stonith ibmrsa-telnet: new stonith plugin
+ stonith ipmi: new external stonith plugin
+ utillib.sh: update finding the binary which coredumped
+ Xen RA: new improved (thanks to Sebastian Reitenbach)
+ [patch] init: add should-start/stop $remote_fs to init script</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1196114400">- version 2.1.2-24
- Update the source tarball to revision ef1be5978d97
- Statistics:
    Changesets:       104
    Diff:             296 files changed, 3464 insertions(+), 3275 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb/vmware stonith) on a single host (opensuse10.3/2Gb/2.66Ghz Quad Core2)
  + 7-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon/ssh stonith)
- All testing was performed with STONITH enabled
- Pending bugs encountered during testing:
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-15
+ High: CIB: Fix the behavior of update_attr() and delete_attr() when the command is ambiguous
+ High: CRM: In ccm_have_quorum(), an OC_EV_MS_PRIMARY_RESTORED event means we _do_ have quorum
+ High: PE: Bug 1765 - Prevent master-master colocation constraints from preventing slaves from starting
+ High: PE: Introduce a new API call for determining the location of complex resources
+ High: PE: Set next_role recursivly so that group promotion will work
+ High: PE: increment_clone() did not overflow correctly 9-&gt;10, 99-&gt;100, etc
+ High: crmd: Prevent shutdown hangs caused by pending ops that can't be cancelled - because the no longer exist in the lrm
+ High: heartbeat: Fix getnodes() compilation with gcc 4.3
+ High: Novell 293922: Don't use non-blocking writers, but instead don't block
+ High: Novell 293922: Heartbeat network processes would block on full buffers.
+ Medium: core: Do not disconnect blocking write processes, but discard traffic.
+ Medium: PE: All other things being equal, prefer to keep non-failed instances alive
+ Medium: PE: Create a syntactic shortcut for the common use-case of "{resource} prefers {node} with {score}"
+ Medium: PE: Dont make changes to location constraints, when applying to groups, persistent
+ Medium: TE: Allow the CRM to limit the number of resource actions the TE can execute in parallel.
+ Medium: TE: Pending operations shouldn't be processed
+ Medium: attrd: Bug 1776 - Attrd doesn't exit or reconnect when the CIB is respawned
+ Medium: crm: Dont generate core files for non-fatal assert (ie. the CRM_CHECK macro).
+ Medium: crmd: Don't remap LRM_OP_PENDING when building full lrm updates
+ Medium: crmd: Prevent shutdowns initiated immediately after a node is removed from the cluster with hb_delnode from stalling.
+ Medium: LF bugzilla 1757: apache resource agent grep methodology can't handle newlines - even if you change the pattern
+ Low: Admin: Do a full simulation when we have the live CIB - since we'll always have a status section
+ Low: Admin: crm_standby - Don't complain about missing values, print the default value instead
+ Low: PE: Actions for stonith agents should never default to requiring fencing or quorum
+ Low: PE: ptest - Handle malformed inputs more gracefully
+ Low: Rename example ha_logd.cf file to the proper name.
+ Low: cib: Increase the retry interval when connecting to the ccm to 3s
+ Low: crmd: Provide a more informative error when DCs detect other DCs during a join
+ Low: heartbeat: Use the correct define when choosing to enable valgrind - Keisuke MORI
+ Low: LF bug 1705 - cl_respawn core dumps when given -h or --help
+ Low: changed configure.in to force 64-bit objects when on gcc-based ppc64 platform
+ Low: configure.in - autoconf spells ppc64 funny...
- Unclassified user impact
+ LF 1766: Heartbeat installs man pages in the wrong directories by default...
+ LF Bug 1662: Put in some RHEL changes provided by Keisuke MORI
+ LF bug 1393 - Cannot rename /var/lib/heartbeat/hostcache.tmp to /var/lib/heartbeat/hostcache (scope, risk and severity: all minor)
+ ccm (LF 1546): ensure that the membership instance number never decrements (thanks to Guochun Shi)
+ ccm: speed up ccm considerably in case a node is alone in the membership (thanks to MATSUDA, Daiki)
+ Debian: Build: Add dependacy on gawk as it is required by the OCF IPaddr resource
+ Debian: Build: rename ha_logd.cf to logd.cf in debian/heartbeat.files
+ hb_report (LF 1763): multiple fixes
+ hb_report: add more packagers support (thanks to Sebastian Reitenbach)
+ hb_report: fix handling of debug option
+ hb_report: fix the previous fix (sorry)
+ hb_report: include package verification
+ hb_report: reduce the number of ssh invocations by 1
+ hb_report: update documentation on extracting CTS tests
+ hb_report: use getopts instead of getopt(1) for the sake of portability
+ hbagent: fix memory leaks on dropping global resources (thanks to Keisuke MORI)
+ hbagent: removed the const qualifier from parameter
+ hbagent: reset gMembershipTable on dropping global resources
+ hbclient: fix memory leaks on signon/signoff (thanks to Keisuke MORI)
+ heartbeat: Increase MAXMSGHIST; reduce debugging output.
+ ldirectord: allow per-virtual checkinterval configuration
+ lvs-users: Patch for ldirectord when using mysql service
+ mgmtd (LF 1719): fix the pam file for suse
+ mysql RA (LF 1760): defaults for OpenBSD (thanks to Sebastian Reitenbach)
+ RA Xinetd (LF 1742): multiple fixes
+ RA tomcat: allow consecutive starts
+ stonithd: (LF 1727): fix dropping privileges
+ stonithd: a copy/paste typo
+ stonithd: check for storage size when copying the host list
+ stonithd: drop root privileges earlier
+ stonithd: shuffle dropping privileges around again</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1193349600">- version 2.1.2-15
- Update the source tarball to revision c492f19cb583
- Statistics:
    Changesets:       158
    Diff:             173 files changed, 8712 insertions(+), 4787 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
  + (lmb)    7-node Xen cluster on a single host
  + (debltc) 6-node ppc64 cluster
- Pending bugs encountered during testing:
  1562 - heartbeat: hostcache file rename error at startup
  1737 - crmd: Inconsistent join state detected (Hard to reproduce, possible fix included)
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-4
+ High: cib: G_main_del_IPC_Channel() doesn't like being called with a NULL pointer and crashes
+ High: crm: Bug 1749 - Make sure the diff-related digests contain the complete CIB, not just the first line
+ High: crmd: Prevent shutdown hangs by allowing the crmd to forget about pending actions for deleted resources
+ High: PE: Bug 1712 - Ensure manditory ordering constraints can cause complex resources to be shut down
+ High: PE: Clone colocation fixes
+ High: PE: Ensure that resources depending (by order) on a master are not promoted if no master is available
+ High: PE: Fix manditory ordering with m/s resources
+ High: PE: Prevent an infinite pe/te loop when reprobing with resources in master mode
+ High: PE: Prevent use-of-NULL in crm_mon when date_expressions are used by ensuring that data_set-&gt;now is always set
+ High: PE: Prevent use-of-NULL when the admin creates a colocaiton constraint with an empty group
+ High: PE: Relax an assumption regarding clones that is not true when they are unmanaged
+ High: PE: Remove an accidental commit that, when called, causes use-of-NULL
+ High: PE: Remove an errant call to exit() than prevented an assert from being triggered
+ High: RA: Novell 329833 - dotted-quad netmask notation broken in findif
+ Medium: cib: Include digests of the cib a diff was made from and verify it when applying
+ Medium: CRM: Re-evaluate appropriate IPC message queue lengths and throtle IPC _clients_ that hit them
+ Medium: crmd: Bug 1737 - Inconsistent join state detected - Possible fix
+ Medium: PE: Bug 1722 - By default, exhibit the old start-failures-are-fatal behaviour regardless of how resource-failure-stickines is set
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: PE: Fix minor memory leak when stopping orphaned resources
+ Medium: PE: Master internal ordering enhancements. Added stopped-&gt;start, stopped-&gt;promote.
+ Medium: Tools: Bug 1738 - the crmd ignores some requests from crm_resource because it exited too quickly
+ Low: contrib: dopd - Remove a pointless and annoying dependancy on the crm
+ Low: crmd: Increase the retry interval when stalling the FSA to 2s (used when connecting to the ccm, lrmd, cib)
+ Low: crmd: Update the CIB with the node's version data when it becomes DC
+ Low: crmd: Use the unaltered rc for timed out operation events from the lrmd
+ Low: Debian: heartbeat doesn't depend on libperl-dev (probably confused by '-lperl' in configure.in)
+ Low: heartbeat: Some compilers feel that the fcli variable could be used uninitialized - shut them up
+ Low: PE: Avoid pointless copying of XML items (actions) during graph creation
+ Low: PE: Convert all the resource's boolean flags into a single bit-field
+ Low: PE: Produce a config error when a clone contains more than one resource/group to clone
+ Low: RA: PureFTPd - Support debian's pure-ftpd-wrapper script.  Patch by Raoul Bhatia
+ Low: Stonith: external/rackpdu - Fix the metadata short descriptions
+ Low: ccm: Bug 1723 - fix logging (thanks to MATSUDA, Daiki)
- Unclassified user impact
+ gui: Add "meta_attributes" support to mgmt
+ gui: Add boolean_op for location rules in mgmt
+ gui: Make several fields of rsc_location editable
+ gui: Prevent clone and master_slave from belonging to group
+ gui: Prevent haclient from falling into an error caused by blank resource metadata
+ gui: Provide "Default" setting for crm configurations
+ gui: Provide complete pengine and crmd configurations with dynamic rendering
+ gui: Rename "Places" to "Locations" to match with the CIB name
+ gui: Resolve target_role problem for sub-resource
+ gui: Specify the default type of added item to correspond to the object that the cursor focused on
+ heartbeat: Remove one unlink() of the temporary hostcache file.
+ LF bug 1502: udpport statement in ha.cf is ignored by heartbeat - trivial fix
+ LF bug 1589: ia64 heartbeat unaligned access messages (SGI965396) - copy fields in structures - minor fix
+ LF bug 1679: hardcoded heartbeat userid and group in init script (minor fix)
+ LF bug 1681: BSC fails to to identify active interface on OpenBSD (minor change)
+ LF bug 1700: HA Signon always reports success - fix has minor scope.
+ LF bug 1702: during emergency restarts, heartbeat doesn't close watchdog correctly.  Fix is minor.
+ LF bug 1712: ha_logd prevented node from shutting down - changed code to use the waitout() primitive - scope fix - trivial-minor
+ LF bug 1731: wrong location of libraries for OpenBSD 64Bit architectures, with patch
+ LF bug 1734 - removed duplicate return statement as per bug report.
+ lrm stonith plugin: fix exit code handling
+ lrmd (LF 1715): increase the max dispatch time for lrmd
+ lrmd (LF 1729): revise return codes
+ Put in a missing include of &lt;memory.h&gt; for the DRBD code.  Change scope: trivial
+ RA: mysql, pgsql - use getent(1) instead of /etc/passwd (thanks to Raoul Bhatia)
+ RA: mysql: According to Geoff Harrison the sql check is broken without this
+ RA: mysql: Allow arbitrary commandline arguments for mysqld (by Raoul Bhatia)
+ RA: Raid1: Allow the homehost setting to be specified.
+ RA: Xinetd: Fix stop/monitor to not fail if service isn't available yet.
+ stonith/ibmrsa: allow ',' in the hostlist
+ STONITH: external/ssh: Disable StrictHostKeyChecking and PasswordAuthentication by default.
+ stonithd (LF 1714,1727): fix a race condition
+ stonithd (LF 1726): a hostlist may be empty
+ stonithd (LF 1727): change attach shmem seg to read only
+ stonithd/lib: replace cookie generation with uuid
+ stonithd: have -a really mean startup alone
+ stonithd: increase the maxdispatchtime
+ stonithd: library code review and cleanup
+ tools: Add hb_report - a reporting utility</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1190757600">- version 2.1.2-4
- Update the source tarball to revision 702e4f418ca8
- Statistics:
    Changesets:       109
    Diff:             188 files changed, 5926 insertions(+), 2003 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
- Pending bugs encountered during testing:
  1377 - llm_get_nodename: index(1719751538) out of range
  1561 - Cluster node c001n03 returning after partition
  1562 - hostcache file rename error at startup
  1700 - HA Signon always reports success
  1711 - Shutdown blocked by call to cl_flush_logs()
  1712 - Shutdown blocked by ha_logd
  1714 - Stonithd core dumps
- Changes since 2.1.2-2
+ High: Core: Prevent logging buffer overflow - ensure the entity is NULL terminated.  Patch from Simon Graham.
+ High: DTD: Remove stray character that made the DTD invalid
+ High: PE: Ensure mandatory ordering constraints behave correctly
+ High: PE: Implement a smarter algorithm for colocation
+ High: PE: Include preferences of colocated resources when promoting masters
+ High: PE: Make sure only the correct number of cloned groups are started
+ High: PE: Make sure the merge_weights function is called for complex resources
+ High: PE: More accurate method of detecting colocation loops in native_merge_weights
+ High: PE: Optimize the merge_weights functionfor groups
+ High: RA: Remove bashism from Filesystem OCF agent
+ High: RA: Filesystem - Fix path reference.
+ High: RA: o2cb - Fix path broken in recent cleanups
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: crmd: Tell the LRM to refresh the resource's default parameters
+ High: core: Bug 1697 - really remove proctrack sources (performance/memory leak fix)
+ High: core: An open call with the O_CREAT flag was missing the file mode.
+ Medium: Core: Ensure heartbeat flushes all its logs before exiting
+ Medium: ipc: Up MAXMSG to match MAXUNCOMPRESSED to allow larger clusters.
+ Medium: Logging: Sanitize and centrally define the log facility used by various subsystems
+ Medium: PE: Bug 1705 - Don't segfault when allocating empty groups
+ Medium: PE: Bug 1710 - A resource's failcount was ignored on nodes with no operations for the resource
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: RA: EvmsSCC - Handle start failures caused by peers starting at the same time (Patch from Jo De Baer)
+ Medium: RA: Treat migrating (status 1) as running to avoid - patch by Per Andreas Buer
+ Medium: Stonith: Remove code-reuse to prevent excessive logging by the LRM
+ Medium: Stonith: ipmilan: fix potential segvfault in options parsing
+ Medium: cib: Improved transparency when in operating in degraded mode
+ Low: Admin: Bug 1691 - crm_resource doesn't complain about empty strings as property values
+ Low: build: configure.in: fix for platforms with libc in /lib/tls
+ Low: CIB: Allow notification to remote clients
+ Low: CRM: DTD - Expand the list of accepted values for boolean fields
+ Low: CRM: DTD - Explicitly specify a default for rsc_colocation.symmetrical
+ Low: DTD: Include helpful comment for rsc_order constraints
+ Low: PE: Downgrade logging when we fallback to default option values
+ Low: PE: More efficient logging of orphan resources
+ Low: PE: Prevent users from trying to use on_fail=fence and stonith-enabled=false
+ Low: PE: Stop the master placement score from affecting the synapse's priority
+ Low: RA: Add a tomcat OCF agent from Yamauchi Hideo
+ Low: RA: ManageVE - Fix status when VE files are not persistent
+ Low: RA: Put in updates to the Informix script as supplied by Lars Forseth
+ Low: RA: apache - drop annoying messages if no configuration files are found
+ Low: Stonith: external/ssh - simplify the reset command and wait the same amount of time as the non-external variant
+ Low: Stonith: Disable ipmilan by default
+ Low: TE: Pause for a moment before trying to reconnect to stonithd
+ Low: Tools: Allow pingd to change identity based on the name of its executable - workaround for Bug #1701
+ Low: logd: Update the default config file to reflect the new default log facility
+ Low: tools: haresources2cib.py: update parameter lists and configuration defaults
- Unclassified impact
+ lrm: Bug 1458 - include timing information in the op data.
+ lrm: Bug 1684 - a meta-data operation fix introducing short sleep on zero reads
+ lrm: log non-recurring operations
+ lrm: performance - replace linear with binary search for msg type.
+ lrm: performance - remove unnecessary memstat
+ lrm: raexecocf: a fix for bug introduced in 2a787bbd73f6; longer sleep in get_resource_meta
+ RA: Bug 1692 -  monitoring fails for apache OCF resource.  Put in simple fix to apache resource agent monitoring from Sebastian Reitenbach
+ RA: eDir88 - fix to allow meta-data to work in case NDS is not installed
+ RA: pgsql - patch to remove bashism
+ Stonith: Put in an APCmastersnmp.c patch from Peter Kruse which makes the plugin work with new APC master switches
+ Stonith: Bug 1615 - get the list of hosts from an RA asynchronously
+ mgmtd: allow old clients to connect</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187301600">- version 2.1.2-2
- Update the source tarball to revision 098c0993b1d0
- Statistics:
    Changesets:	6
    Diff:		11 files changed, 402 insertions(+), 46 deletions(-)
- Changes since 2.1.2-1
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: PE: Bug 1682 - Prevent use-of-NULL when clones have no active children
+ High: TE: target_rc should default to 0 (LRM_OP_DONE) to detect monitor actions that fail the first time they are executed
+ Medium: PE: Bug 1685 - Supply the correct defaults for rsc_order constraints
+ Low: Admin: crmadmin - exit with rc=0 when the command completed successfully</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187042400">- version 2.1.2-1
- Update the source tarball to revision 1ad8497bc55d
- Statistics:
    Changesets:	340
    Diff:		614 files changed, 39588 insertions(+), 32588 deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/1ad8497bc55d
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -r e3c9306b9223:1ad8497bc55d | sort -f
- Testing notes
+ On my underpowered cluster, the CCM borked a number of times on the Stonithd test
  However since the CCM hasn't been touched in an age, its hard to conclude there are regressions from previous releases.
  If anyone would like to volunteer to maintain the CCM (or the GUI for that matter), it would be much appreciated.
- Changes since 2.1.2 (Upstream)
+ High: CRM: Update crm/cib feature sets and the set of tags/attributes used for feature set detection
+ High: CIB: Improved CCM interaction
+ High: CRM: filter_action_parameters() - Make a copy of interval/timeout in as they're about to be free'd
+ High: PE: Break graph loops involving stonith
+ High: PE: Only create _one_ pseudo op per name (all_stopped/stonith_up)
+ High: PE: The all_stopped action should only be part of the graph when the stop actions are runnable
+ High: PE: all_stopped should only depend on native resources to avoid recursion
+ High: PE: check_action_definition() - Ensure the meta attributes are also set so that the digest is calculated correctly (and consistently with the crmd)
+ High: PE: Use failcount to handle failed stops and starts (set default_resource_failure_stickiness &gt; 0 for the old blocking behaviour)
+ High: TE: Allow reconnection to stonithd if it is respawned
+ High: TE: Allow the TE to reconnect if stonithd is killed and respawned
+ High: cib: Allow the CIB to reconnect if the CCM is killed and respawned
+ High: cib: Handle master updates that fail DTD validation
+ High: cib: Support the removal of multiple child objects - required for subsequent commit
+ High: crmd: Improvements to shutdown sequence (particularly in response to failures)
+ High: crmd: Sanitize the maintenance of node_state entries
+ High: crmd: Simplify node_state maintenance
+ High: stonithd: Sanitize the login/logout functions and add the ability to reset the callback IPC channel
+ Medium: cib: Ensure fflush() and fsync() are always called when writing XML digests to disk
+ Medium: crm: Ensure fflush() and fsync() are always called when writing XML to disk
+ Medium: crm: Bug 1680 - parse_xml() can fail to detect mismatching close tags
+ Medium: PE: Dont check the parameter digest of orphan operations
+ Medium: TE: Dont modify the failcount for 'pending' action updates (rc=-1)
+ Medium: admin: Set the exit code to non-zero if crmadmin can't connect to the crmd
+ Low: PE: Warn when multiple nodes have the same uname
+ Low: Stonith: New external plugin for handling 'APC Switched Rack PDU AP7952' devices - contributed by Sergey Maznichenko
+ Low: cib: Enhancements to logging of DTD errors
+ Low: cib: Refactor reading and writing of the CIB to disk
+ Low: crmd: Ensure our assumption that all resources have a class and type is true
+ Low: crmd: Simplify the detection of active actions and resources at shutdown
+ Low: Admin: Bug 1603 - Allow CIB digest files to be verified
+ debian: make heartbeat binNMU safe
+ stonith: ipmilan - accept documented auth and priv values
+ GUI: OSDL 1449 / Novell 291749: GUI should not overwrite more specific settings of contained resources.
+ RA: IPaddr2 - Make the check for the modprobe/iptables utilities conditional on the IP being cloned
+ RA: apache - make status quieter
+ RA: Added Informix resource agent
+ RA: eDir88 resource can't be stopped ?
+ RA: patch to fix bashism in a number of agents
+ Tools: OSDL Bug 1666: in BSC, make sure temp rsc dir exists for RAs
+ Tools: ocf-tester - use the default value for OCF_ROOT if it exists
+ Tools: ocf-tester - add capability to test with lrmadmin/lrmd
- Changes since 2.1.0-2
+ A little cleanup to make the RAs more uniformly not have $OCF_ROOT paths in them
+ Added code to cause logging to be restarted if it dies.
+ Admin: Allow crm_diff to operate on compressed inputs
+ Admin: Bug #1621 - crm_mon should show failed starts of a resource
+ Admin: Bug 1632 - Make sure error messages regarding trailing XML input characters are seen
+ Admin: Bug 1635 - crm_failcount should not complain if the attribute was already deleted
+ Admin: Bug #1622 - crm_attribute: Include --inhibit-policy-engine in the help message
+ Admin: crm_resource - remove an overly simplistic check for when -C can safely be used
+ Admin: crmadmin - include Hg version in --version output
+ Admin: ptest is useful enough to warrent installation to sbindir
+ BSC: 'trap' had been continuing instead of exiting
+ Bug 1612: haresources2cib @substitution@ broken (probably by a global change)
+ Build: No longer generate RAs now that there is a sane way to set directory locations and find binaries
+ CIB: Bug 1602 - Archive invalid/unusable configurations so we can continue
+ CIB: Bug 1633 - Pass the actual error from activateCibXml back to the user
+ CIB: config_changed always needs to be calculated when processing write commands
+ CRM: Bug 1625 - Cannot update an operation's timeout
+ CRM: Clean up processes left over by crm_abort().  Initial patch by DAIKI MATSUDA
+ CRM: Fix compare_version() to actually work correctly on a regular basis (broken since 2.0.2)
+ CRM: Fix matching of objects with an ID when the match-spec has no ID
+ CRM: Make logging setup consistent and do not log the command-line to stderr.
+ CRM: Only detect timeout changes for recurring ops
+ CRM: Remove deBug code that should not have been committed
+ Corrected a typo which only matters on 32-bit machines :-(
+ Corrected so that on *BSD it passes in 2 parameters, instead of 2.
+ DTD: Add helpful comment regarding rsc_colocation objects
+ Fix location of pingd binary
+ Fixed a dangling reference to a former bin directory name.
+ Fixed a fairly-major error in IPaddr - it didn't handle CIDR netmasks correctly.  But ifconfig didn't complain either...
+ Fixed a minor stonithd testing error (not much of a Bug)
+ Fixed a syntax error in Filesystem:  missing then symbol
+ Hopefully fixed a long-time SNMP annoyance.  When the membership layer shuts down (as it does in BSC),
+ LF Bug # 1617 - Miscellaneous RPM and source cleanups
+ LF Bug # 1644 - Pinging loopback in BasicSanityCheck fails with EPERM
+ LF Bug # 960 - rpm: first-time install fails
+ LF Bug 1513 - building RPM from the 2.0.8 tarball fails
+ LF Bug 1527 - inappropriate warnings about core files logged by heartbeat (SGI961667)
+ LF Bug 1534 - compiling/installation error on OpenBSD
+ LF Bug 1576: shutdown hangs under certain shells // LF Bug 1534: compiling/installation error on OpenBSD
+ LF Bug 1654 - HA_SBIN_DIR is not set on ocf scripts
+ LF Bug - compiling/installation error on OpenBSD
+ LF Bug 1522: Strt hb_counter on time_t
+ LF Bug # 1534 - compiling/installation error on OpenBSD
+ LF Bug # 1645 - Minimize arch-dependent differences, maintain compatibility -- More on this Bug...
+ LF Bug # 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1661 - crm_verify aborts checking and reoccurring crm_abort errors in logs
+ LF Bug # 1661 - move symlink creation out of specfile and into Makefile
+ LF Bug 1650: heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1645: Minimize arch-dependent differences, maintain compatibility
+ LF Bug 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug 1665 - fix references to moved scripts - courtesy of Tuomo Soini
+ LRM plugins: skip dot-files.
+ Made the stonith -h core dump go away - by fixing a variety of small things in STONITH.
+ Minor patch to stonith patch - to keep empty result from being seen as out of memory
+ Misc: Move a few shell functions to the only script that uses them
+ More file location tweaks - mostly GUI-related.
+ OCF: Detect and warn of use of deprecated 'ocf-shellfuncs' and 'ocf-returncodes'.
+ OCF: Fixed the check in have_binary. Handle checks for programs with --arguments
+ OCF: Provide the location of /sbin as used by some agents (HA_SBIN_DIR)
+ OCF: Remove unused variables
+ OSDL Bug 1606: okay for stonith plugins to have no parameters
+ PE: Add regression test for previous commit
+ PE: Aggregate the startup of fencing resources into a stonith_up pseudo-action
+ PE: Bug 1628 - Complain about invalid operation intervals
+ PE: Correct the CRM_CHECK comparision
+ PE: Dont log stopped orphaned resources
+ PE: Fix the handling of remove-after-stop=true - it was causing unnecessary restarts
+ PE: Fix two small memory leaks detected by Valgrind
+ PE: Fix up the tests now that compare_version() functions correctly (as of cs: 7d69ef94a258)
+ PE: Handle two new actions in text2task
+ PE: Include description for the remove-after-stop option
+ PE: Make sure ptest always does a POSIX sort
+ PE: Move the creation of stonith shutdown constraints to native_internal_constraints()
+ PE: NoRoleChange shouldn't always call PromoteRsc for master resources
+ PE: Potential use of NULL
+ PE: Regression: Allow M/S resources to be promoted based solely on rsc_location constraints
+ PE: STONITH Shutdown ordering
+ PE: Streamline STONITH ordering. Make sure 'all_stopped' depends on all STONITH ops.
+ PE: Update one more regression test output now that it has been verified as still correct
+ PE: Update testcases to include all_stopped (added in cs: 800c2fec24ee)
+ PE: Use master scores to determine which clones to start where
+ Put deBug in in support of Bug 1154: 2.0.4 BSC failure - select() returns with error
+ Put in a change to allow CTS to run.  There is a sort-of-bug (in BSC/CTS) underlying this that I'll have to file a bug on.
+ RA: Add some extra variables dug out from configure
+ RA: Bug #1630 IPaddr2 - Wrong arguments passed to send_arp (test was mistakenly written as an assignment)
+ RA: Convert a number of checks for required binaries
+ RA: Delay (v1) - Remove extra characters from call to ra_execocf
+ RA: Dummy: Just add a comment to make sure people copying from this
+ RA: Filesystem: Unify coding style to match rest of script.
+ RA: IPaddr2 - Remove bash-isms
+ RA: IPaddr2 - handle IP_CIP not being defined
+ RA: IPaddr: Fix a few trivial bugs in lvs_support pointed out by Michael Stiller.
+ RA: LSBDummy - Make sure the action is passed to ra_execocf
+ RA: MailTo: Remove spurious warning about monitor.
+ RA: Move all remaining autoconf variables into common files that are automatically included
+ RA: Move some helper files to their new names (.files dont show up as RAs)
+ RA: Revised handling of directory locations
+ RA: ServeRAID - remove commented out code
+ RA: Use consistent check for required binaries
+ RA: o2cb: Improve configuration stability.
+ RA: o2cb: Optimize redistribution of cluster.cnf.
+ RA: prefer the 'test' program rather than the builtin for some reason
+ RA: v1: IPaddr: Unconditionally enabling LVS support is a mistake.
+ TE: Log the node's uname instead of UUID for completed actions
+ TE: Set failcount to INFINITY for resources that fail to start or stop
+ Tools: Bug 1653 - Further changes to prevent use of NULL when no attribute is specified
+ Tools: Bug 1653 - Misc attrd/attrd_updater cleanups suggested by Keisuke MORI
+ Tools: Bug 1653 - attrd crashes when no attribute is specified
+ debian: Add new dot-ocf files to the heartbeat package
+ debian: Add the ldirectord OCF resource to the ldirectord package
+ debian: Debian bug #432441 will be closed on the next upload
+ debian: Don't create hb_gui symlink
+ GUI: update path for png images in haclient.py
+ ldirectord: Use globals for service check return values
+ ldirectord: Add OCF wrapper
+ ldirectord: Add Oracle check
+ ldirectord: Add external check
+ ldirectord: Add forwarding mechanism to real server ID
+ ldirectord: Add ld_service_to_port()
+ ldirectord: Call ld_emailalert_send() with correct arguments
+ ldirectord: Clean up execute logic in check_sql
+ ldirectord: Cosmetic spelling and grammar fixes
+ ldirectord: Document expire_quiescent_template
+ ldirectord: Document that checktimeout is for ping checks too
+ ldirectord: Don't access CALLBACK unless it is defined
+ ldirectord: Don't die if Net::FTP times out
+ ldirectord: Enhance ftp check debugging
+ ldirectord: Enhance logging in service_set
+ ldirectord: Fix bogus detection of combined check
+ ldirectord: Fix logic bug in _status_down
+ ldirectord: Handle $dbh-&gt;prepare() failure in check_sql()
+ ldirectord: List checktype and service in alpabetical order in the documentation
+ ldirectord: Make check_sql &lt; 80col wide
+ ldirectord: Make parsing of the output of ipvsadm more robust
+ ldirectord: Note negotiatetimeout in documentation of checkcount
+ ldirectord: Port of last resort for real server checks
+ ldirectord: Remove connecttimeout
+ ldirectord: Remove stale entries on reload
+ ldirectord: Remove trim down very wordy decripton of read_config
+ ldirectord: Set default negotiatetimeout to 30s
+ ldirectord: Status to stdout
+ ldirectord: Tidy up fallback
+ ldirectord: Use $dbh-&gt;errstr instead of $dbh-&gt;err when logging
+ ldirectord: Use an alarm for HTTPS timeouts
+ ldirectord: Use goto for error handling in check_sql
+ ldirectord: Use negotiatetimeout and connecttimeout as mutual defaults
+ ldirectord: Use negotiatetimeout for SIP, DNS and Radius checks
+ ldirectord: Use valid string in log message in check_connect()
+ ldirectord: document port behaviour of real servers
+ ldirectord: rearange parsing of service to make it &lt;= 80col (more often)
+ build: Move ldirector OCF resource into the ldirectord package
+ apache RA (LF 1656): include ServerRoot in relative paths.
+ cib: Fix detection of non-status changes
+ configure: Remove unneeded AC_PATH_PROGS checks
+ crmd: Bug 1575 - crmd cannot exit if lrmd is killed and there are pending ops
+ crmd: Bug 1624 - Fix the delete op for cancelled operations
+ crmd: Bug 1655 - crmd can't exit when the PE or TE is killed from underneath it
+ crmd: Only remap monitor operation status to LRM_OP_DONE under the correct conditions
+ log: avoid handing a null pointer as a '%s' variable
+ pingd: Hard code the name used for logging
+ re-enabled code to make symlinks for moved files.
+ remove is_stable() condition from drbd-outdate-peer daemon
+ shellfuncs: 's%:.:%%' should be 's%:.:%:%'; the '.' should be '\.'
+ stonith: external/riloe - new comment in the xml on how acpid may affect the performance (thanks to Guy Coates).
+ stonith: riloe - fix the xml info.
+ stonith: ibmrsa - fix the xml info.
+ stonith: ibmrsa - allow regular users to use it with 'stonith -n' and similar.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1183154400">- version 2.1.0-2
- Update the source tarball to revision e3c9306b9223
- Statistics:
    Changesets:	259
    Diff:		625 files changed, 13133 insertions(+), 73569^ deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/e3c9306b9223
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -rSTABLE-2.1.0:e3c9306b9223 | sort -f</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.1.0-1
- Update debian packaging files which drop the -2 package suffix
- Change the version number to the one used upstream</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.0.9-2
- Sync with the version supplied in SLES10
- Bugs fixed
+ OSDL #393 - Stonith: Update plugin from OpenHPI 2.2 to OpenHPI 2.6
+ OSDL #393 - Stonith: soft_reset is {true|1|false|0}, not {yes|no}
+ OSDL #393 - Stonith: Rename ibmbc to bladehpi
+ OSDL #393 - Stonith: Enable build of bladehpi plugin if OpenHPI present
+ OSDL #761 - RA: Remove history from heartbeat init script.
+ OSDL #1073 - Tools: Add clone support to crm_resource
+ OSDL #1138 - Long delay before CCM propagates membership event
+ OSDL #1292 - Stonith: Support xSeries STONITH (IBM: 06-R212-175)
+ OSDL #1339 - IPC code limits possible cluster size
+ OSDL #1374 - Tools: Check for sane host names when migrating
+ OSDL #1428 - Stonith: Mixing definitions and code
+ OSDL #1430 - CIB: Allow automatic assignment of object IDs
+ OSDL #1451 - Tools: Allow resource meta attributes to be set with crm_admin
+ OSDL #1457 - RA: Resolve unknown command ha_log
+ OSDL #1462 - Tools: crm_migrate should allow creating temporary rules
+ OSDL #1465 - crmd: crmd gets stuck if shutdown while starting up
+ OSDL #1472 - CIB: Use-after-free in find_attr_details()
+ OSDL #1480 - CIB: Create synchronous r/w connections correctly
+ OSDL #1482 - Stonith: stonith command needs a repeat option to make it a better test tool
+ OSDL #1484 - PE: Repair on_fail=stop.  Patch courtesy of YAMAMOTO Takashi.
+ OSDL #1486 - PE: Fix for potential NULL dereference
+ OSDL #1488 - Stonith: Fix passing password to HMC
+ OSDL #1489 - Stonith: Fix HMC errors in hostlist
+ OSDL #1492 - PE: Set common resource attributes before calling the custom unpack function
+ OSDL #1494 - PE: Add node-&gt;score to the clone stability function
+ OSDL #1499 - PE: Perform #uname comparisions without case
+ OSDL #1500 - Tools: Calls to attrd_updater with dampen=0 not processed correctly
+ OSDL #1505 - Findif parsing is all screwed up unless all the parameters are passed, not defaulted.
+ OSDL #1506 - Stonith: Add optional ibmhmc plugin parameters to meta-data
+ OSDL #1507 - Stonith: Allow "stonith -h" to display help for specific device
+ OSDL #1511 - LRM: running two actions for the same resource parallel
+ OSDL #1514 - CRM: Empty values in cib.xml loses other RA parameters
+ OSDL #1523 - Stonith: bladehpi performance enhancements
+ OSDL #1528 - RA: IPaddr2 gives a spurious warning on stop (SGI961736)
+ OSDL #1532 - crmd: Single node cluster shutdown
+ OSDL #1554 - PE: Probes should not have priority INFINITY
+ OSDL #1534 - LRM: Compiliation error on OpenBSD
+ OSDL #1544 - Comms: mixed versions of 2.x and 1.x not working
+ OSDL #1545 - Stonith: stonithd signoff fixesO
+ OSDL #1548 - logging: Ensure logs are logged using the correct component name
+ OSDL #1550 - Stonith: Suicide plugin returns hostlist containing itself
+ OSDL #1553 - Stonith: suicide plugin lacking ST_DEVICENAME
+ OSDL #1554 - crmd: Wait for the membership to stabilize before starting transitions to prevent unconfirmed actions
+ Debian #420206 - RA: Bashisms in IPaddr2
+ Novell #239075 - Admin: crm_master uses the same IDs for permanent and transient attributes
+ Novell #239079 - PE: Ensure action priority is set correctly to ensure notifcations are not lost
+ Novell #239082 - PE: Order promotions after _all_ demotions have completed
+ Novell #239086 - PE: Stable Master placement
+ Novell #244444 - crmd: Free'ing g_alloc() data with cl_free()
+ Novell #246681 - PE: Teach NoRoleChange() how to migrate resource's in the master role
+ Novell #250207 - Split-brain caused by non-identical ping-node configuration and auto-join
+ Novell #250273 - RA: Provide an RA for managing evmsd as a resource
+ Novell #250625 - RA: Xen: Fix status function for newer Xen versions
+ Novell #251689 - PE: Avoid needlessly restarting changed monitor operations for stopping resources
+ Novell #252693 - PE: Enable migration in more scenarios
+ Novell #252693 - PE: Teach the PE how to migrate resources in a starting stack
+ Novell #266551 - Stonith: getconfignames returned hostname instead of hostlist
+ Novell #266551 - doc: Bring the stonith man page up-to-date
- Build Improvements
+ Add explanatory comment for configure kludge
+ Add lha_internal to c-files that dont include it
+ Allow debian packages to also be built directly from Hg archives
+ Always check for the presence of PAM an TLS headers
+ Configure switch to easily enable Valgrind'ing of the CRM
+ Dont install crm-related man pages when --disable-crm is used
+ dopd doesnt build without the crm, disable it if the crm is disabled
+ Fix typo in configure.in
+ Header-file related cleanup
+ Include the exact version being built even when building an archived tree
+ Make supplying a Valgrind suppression file simpler
+ Misc changes to allow building with crm disabled
+ Not all platforms need -lpam
+ Remove redundant and useless items from the build
+ removed unused library dependancies
+ Use existing accounts when building on OSX
+ debian: correct the location of stonith headers in *.files
+ debian: reflect the new header locations in .files
+ debian: sort out a kink in the configure vs. bootstrap logic
+ debian: Packaging updates for 2.0.8-1 release
+ debian: Add heartbeat-2-gui package control files to Makefile
+ Improved grammar in gui package description
+ Improve portability across versions of 'gcc'.
+ Allow data size to be specified
+ Ensure 'awk' is found in runtime environment
+ Use centrally determined GNUTLS cflags and libs
+ Replace multiple derivations (poor) of locations with direct derivation from configure
+ configure: Add closing information to user about '/etc/passwd' and 'make install'
+ Remove an unnecessary 'include' that broke building on some OSes.  It continues to build OK on various OSes.
+ Bourne shell 'test' does not support '-e' flag.  Using '-r' instead.
+ libgnutls: if no 'libgnutls-config', try 'AC_CHECK_LIB(...)'
+ Determine GNUTLS libs centrally in 'configure.in' rather than in individual Makefiles
+ Correct omission of &lt;lha_internal.h&gt;
+ ipctransient tests: Add some flexibility; rationalise some duplicate code
+ ConfigureMe: make usage info a little clearer
+ Add some defaults to configure.in to reduce buildrequires.
+ Remove a bunch of dead code (Perl/SWIG bindings).
+ configure: Check for more pre-requisites of the mgmt/quorum components.
+ Fix use of a future dates in the changelog
- CRM Library Enhancements and Fixes
+ Fix xml parser bug.
+ Allow retrieval of default config values without a hashtable
+ Changes to fake transition key generation
+ Check the return code from fflush() when writing xml files - AnÃÂ­bal Monsalve Salazar
+ Comprehensive review of error recovery logic for potentially failed calls to fopen()
+ Correctly handle syslog facility == 0
+ Delete dead code, make empty_uuid_cache() safe with NULLs
+ Dont call fflush() or flclose() if the output stream was NULL
+ Ensure the normalized result of (add|subtract)_time is updated before returning
+ Fix a use-after-free in parse_time_duration()
+ Fix replace_xml_child() when neither child nor update have an id
+ Fixes for Coverty issues: 52, 55-58, 61-66, 68-69, 71-73 in run 240
+ Gracefully fail when the target XML file is not writable
+ handle NULL inputs to xml_has_children() gracefully
+ Make the use of valgrind a run-time option
+ Memory leak fixes
+ Prevent a number of potential use-after-free's by zero'ing out free'd loop variables
+ Refactor date printing to allow date -&gt; string conversion
+ Remove noisy and inaccurate memory logging
+ Repair the status_printw macro now that we do logging slightly differently
+ size_t is always positive... broke error handling in XML parser.
+ Use-of-NULL in validate_with_dtd() error path... Only clean up what we created
+ When malloc tracking is enabled, pass through the person that called crm_strdup
- CLI Enhancements and Fixes
+ Uninitialized string in heartbeat/findif.c
+ Allow cluster config options to be queried/modified/deleted.  Broken in cs: 13c450735ba7
+ Allow crm_verify to be used with a named DTD file
+ Auto populate the provider for OCF resources if one is not provided
+ crm_primitive.py: Include all node preferences in the one rsc_location constraint
+ Include rsc_location details in the resource listing
+ map cib_NOTEXISTS to 0 for crm_failcount
+ Use the current node uname by default when invoked as crm_standby
+ Add two new views to crm_mon.  Patch by Christofer Edvardsen.
+ Centrally define CIB call options so that -f always works in crm_resource
+ Compile when malloc checking is off, fix last mem leak
+ crm_verify - dont complain about missing status section
+ Dont do ID checks on cibadmin diff's, duplicates are expected
+ Fix a number of memory leaks in attrd
+ Help text and input sanity checks for ocf-tester
+ Include class/type/provider in resource delete commands
+ Place the lifetime rule in the correct location
+ Set a slightly higher default action timeout
+ Show help text for crm_uuid
+ Teach crm_uuid to write ascii-form UUIDs to hb_uuid
+ Terminate the attrd process if heartbeat exits from under it
+ lrmadmin: fix the provider list function: first free data and then the list member.
+ crm_attribute/master/standby: Always default the uname to the current machine
- CIB Enhancements and Fixes
+ Allow cluster options to be created when the default set is not present
+ Allow the remote connection code to be used with or without PAM/TLS
+ Clean up memory at exit
+ Fix a number of memory leaks
+ Compile when malloc tracking is enabled
+ Don't increase the version number if nothing changed
+ Dont examine the group ownership of cib.xml since we set perms to rw-------
+ Exit the writer process correctly so we'll continue to do write outs
+ Prevent node_uuid from having any effect for &lt;crm_config&gt; changes
+ Remove dead code
+ Support processing of commands sent via remote TLS connections.
  See http://www.linux-ha.org/v2/cib_remote for usage details
+ The decision to log failed connection attempts should be left to the client
+ Warn at startup if important version information is missing
- CRMD Enhancements and Fixes
+ ALL completed actions should be removed from the shutdown_list
+ Correctly parse the shutdown timer option
+ Create the restart digest from an object with the same name that the PE uses
+ Delete the HA connection only at exit
+ Enable Valrind'ing of the PE and TE
+ Indicate the LRM error code if an operation cannot be cancelled
+ No need to create the resource if we're trying to delete it
+ Free memory at shutdown
+ Resolve a number of memory leaks
+ Sort out the whole client deletion business.  Also delete the resources hash at shutdown.
+ Improved Logging
+ Remove dead code
- Policy Engine Enhancements and Fixes
+ Always print the resource's node scores
+ Avoid a potential NULL dereference in an error path
+ Clean up generation of and contents of dot-files
+ Create an implicit "cant run here" constraint if an action returns "not installed"
+ Don't start resources until we can verify they're not still running
+ Dont waste time checking action definitions on nodes that wont be running resources
+ Fix a use-after-free of {key} when the monitor op already existed
+ Fix anti-colocation when the RHS is not running
+ Fix gcc warning - dont ignore the result of mktemp()
+ Fix group recovery when a group it depends on is restarted
+ Have group-group recovery work for the right reasons
+ Memory leak fixes
+ Make clones ever so slightly sticky by default
+ Make internal group ordering of bullet-proof
+ Make sure things that shouldn't be true are never true (added asserts)
+ Move DeleteRsc to a more appropriate location
+ Move Ncurses related defines to a more optimal location and make sure its included by crm_mon
+ Not all pseudo operations should be included in the graph
+ Only show elements of the graph in the dot-file by default
+ Prevent a potential NULL deference in clone allocation
+ Provide useful feedback when a cloned resource is found active somewhere it shouldn't be
+ Re-use StartRsc/StopRsc for consistancy
+ Rename elements of the pe_ordering enum for clarity
+ Rename migration variables for clarity
+ Updated regression tests with the revised consistant format
+ Utility functions for finding node's by uuid/uname
- Transitioner Enhancements and Fixes
+ Clean up memory on exit
+ Detect changes to attributes of the cib object
+ Only a limited number of cib attributes warrent aborting the transition
+ Unpack graph actions correctly
+ Improved logging
+ Removed dead code
- Misc
+ Allow heartbeat to easily run with standard libc malloc-and-friends
+ Allow the malloc tracking code to compile on systems where size_t != int
+ Allow writing to syslog to be turned off
+ Better information about valgrind enablement
+ Sanitize the "crm xyz" option processing.  Dont run valgrind if not using libc malloc
+ The DTD used "integer" instead of "number" (which was used by the code)
+ Stonith: Update the rilo RA with enhacements from Tijl Van den broeck and Guy Coates
+ Moved drbd peer outdater into contrib/
+ clplumbing: We _never_ want to trim memory, use -1 instead of 4*size.
+ clplumbing: Coverity 53: Potential NULL pointer dereference.
+ mgmtd: Certain versions of SWIG do not convert the Python "None" to a
+ initscript: set correct Provides: and Should-Start: entries
+ Stonithd: Relaxed a stonithd timeout so that start will succeed if it completes in a minute
+ Dont log dispatch warnings unless they exceed 30ms instead of 10ms
- LRM Enhancements and Fixes
+ Inform clients when an RA is not installed on the machine
+ Expanded regression testing
+ convert the LSB meta-data to XML.
- Resource Agent Enhancements and Fixes
+ -eq is for integer comparisions
+ Avoid concatination with None in riloe stonith agent
+ Filesystem - When checking ocfs2 is cloned, look for variables that are always set
+ Fix up the Dummy metadata
+ Fix variable initialization in pgsql
+ LVS support should always be enabled for the heartbeat IPaddr wrapper
+ Modify the Xen RA to use the new variable names
+ Return after performing a stop action in the Filesystem agent
+ Use configured scratch locations in ibmrsa stonith agent
+ bladehpi readme update
+ Dummy, mysql and drbd - fix meta-data to conform to XML.
+ Convert SAP* from dos
+ Allow ManageRAID to show meta-data at all times.
+ Enhance Pgsql ocf resource to handle multiple instances
+ Xen: Add a little reminder to the code.
+ drbd: Fix some issues and work-arounds for drbdadm bugs.
+ Filesystem: Prune duplicates from active and starting list.
+ Filesystem: Fix metadata require/unique settings.
+ Xen: Fix status function for newer Xen versions (Novell 250625)
+ Filesystem: Increase default suggested timeouts.
+ drbd: When using the nodename-override, drbdadm likes to print an
+ Xen: Swap migrate_to and _from to match PE.
+ Filesystem: Harmless typo corrected.
+ LVM: Add some hints for future todo items.
+ EvmsSCC: More fixes from Jo (Novell 199730)
+ Filesystem: Move ocfs2_init out of the generic stop path (Novell 250603).
+ pgsql: Several enhancements to by Keisuke MORI
+ drbd: Make parsing of drbdadm output more robust.
+ drbd: If drbd is stopped, demote should fail with NOT_RUNNING.
+ Xen: Advertise migrate_from and _to actions. Mention migrate in meta-data.
+ drbd: Add support for overriding the hostname drbd uses based on the clone
+ Filesystem: Whitespace cleanup and minor fixes ("" for -z arguments, using -ne when
+ IPsrcaddr: Added count of how many inet lines to use for the diff -B
+ external/riloe misspelled RI_LOGIN variable name.
- ldirectord Enhancements and Fixes
+ Use $arrayOfDNs[0] instead of @arrayOfDNs[0] to get rid of the following
+ Remove duplicate $recstr
+ Change the code around a bit to avoid a warning about code following exec
+ Dont use SIGENT, as it doesn't seem to exist.
+ 92d4e521db53 Handle $line more carefully
+ Make sure that frequency is intialised before it is used
+ Use $$ instead of (the uninitialised) $pid
+ Remove useless calls to lc()
+ Make sure that DEBUG is initialised
+ Use implicit variables in read_config()
+ Use the -w flag to perl to find warnings/errors
+ Make ldirectord's version valid
+ If weight is not supplied, set it to 1
+ Fix broken reload command
- Testing Improvements
+ Account for a small timing window in the ResourceRecover test
+ Explain why we're aborting when nodes aren't found in DNS
+ Ignore ResourceRecover testing artifacts
+ Indicate debug log messages
+ Improved Logging
+ Remove resource tied to the DC - the #is_dc comparision is irrelevant
+ Rewrite the LSBDummy RA
+ Rewrite the ResourceRecover to use asynchronous failures
+ BSC: (1) test IPC before its dependencies; (2) signal-handling: improve and catch some more.
+ ocf-tester: Continue if validate-all succeeds.
+ ocf-tester: Exit with appropriate exit code for success or failure.
+ ocf-tester: Various integers were compared as strings.
+ BSC: Test Dummy, IPaddr, IPaddr2, Filesystem RAs.
+ BSC: Skip IPaddr2 test if ip not installed.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1173823200">- version 2.0.9-1
- New Upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1170194400">- version 2.0.8-1
- New Upstream
+ Allow colocation based on node attributes other than #id
+ SAPDatabase and SAPInstance resource agents added.
+ Core/CRM: Improvements to the memory allocation, message, and string
  handling libraries result in an overall speed-up of 65%.
+ CRM: Fix ISO date handling for Jan 01 of any year.
+ CRM: Only update the voted hashtable with no-votes for the current
  election.
+ RA: IPaddr: Support netmask both in CIDR and in dotted-quad notation.
+ logd: Fix trailing random byte in log messages (OSDL 1268).
+ heartbeat:  Work around a glibc/times() bug to prevent failures every
  497 days on 32-bit Linux (OSDL 1407).
+ heartbeat: Retransmits were requested more often than they'd be
  honored (OSDL 1455).
+ CTS/PE: Introduce CRM option "startup_fencing" to disable fencing of
  unseen nodes, because CTS can't handle this.
+ PE: Split-off "network-delay" option from global_timeout to separate
  network delays from action timeouts.
+ PE/CRM: Binaries now support being called with "metadata" command to
  document the complete list of options in the CIB.
+ PE: DTD: Include start_delay as a property of operation objects.
+ PE: Fix implementation of date_spec when no range is specified.
+ PE: Enforce clone_node_max for already running resources.
+ PE: Clones were not being stopped on node shutdown.
+ PE: Allow resource colocation based on node attributes other than #id
  (node_attribute option added to rsc_colocation constraint).
+ PE: Improved handling when timeout &lt; start_delay (OSDL 1421).
+ PE: Pre-notifications for promote occured before start was completed
  (OSDL 1447).
+ PE: Allow any two pairs of actions to be specified for rsc_order (OSDL
  1452).
+ PE: Handle asymmetric clusters where RAs are not installed on all
  nodes.
+ PE: Allow resource stickiness and failure stickiness to change based
  on node attributes.
+ CIB: Fix update_attr() causes attrd to hang at shutdown when there is
  no DC (OSDL 1432).
+ CIB: Corrupted config file prevents heartbeat restart (OSDL 1385).
+ CIB: Startup processing improvements; DTD validation will be
  automatically activated if the CIB on-disk validates.
+ TE: Fix memory leak.
+ TE: Failcount wasn't being updated in all cases.
+ TE: never update the CIB with unconfirmed stop actions (OSDL 1435).
+ CTS/RA: Replace OCFMSDummy with Stateful RA.
+ CCM: Centralize quorum calculation on the transition leader.
+ CCM: Support split-site and external quorum servers.
+ CRM: Ignore status update for non-members (ie, ping nodes).
+ LRM: Don't postpone postponed resources.
+ LRM: Fix restart in case an lrmd is already running (OSDL 1333).
+ LRM: Fix overflow in RA output handling (OSDL 1433).
+ mgmtd: Robustness and memory leak fixes.
+ mgmtd: make the port used configurable (OSDL 1390).
+ haresources2cib.py: Improve v1 to v2 conversion tool (OSDL 1415).
+ GUI: ping nodes appear as failed in gui (OSDL 1394).
+ GUI: Reduce duplicates in RA list by only showing the OCF one if both
  ocf and hb RA exist) (OSDL 1338).
+ GUI: Add new resource to currently selected group (OSDL 1414).
+ GUI: support all attributes of operations (OSDL 1372).
+ GUI: Create first resource along with a new group; delete group when
  last resource is removed (OSDL 1287).
+ GUI: Set defaults for clones and m/s RAs (OSDL 1352).
+ GUI: Use meta-data defaults when creating actions (OSDL 1351).
+ GUI: GUI: start all sub resources when we start a group or a clone
  (OSDL 1449).
+ GUI: support ordered==false or non-collocated==false groups (OSDL
  1257).
+ stonithd: Fix memory leak.
+ stonithd: Remove reliance on farside_pid (OSDL 1412).
+ stonith external/riloe: Make the login name and iLo device address
  configurable.
+ crm_resource: Add manpage.
+ RA: PureFTPd, mysql, ManageVE (to manage an OpenVZ container),
  ManageRAID, WAS6 (Websphere 6) added.
+ RA: Include SAPInstance and SAPDatabase (FATE 2172).
+ RA: IPaddr cleanup to avoid race conditions in the script. Report
  status failure when an IPaddr is active on a different interface but
  allow it to be stopped.
+ RA: IPaddr2 fixes for loopback bound addresses.
+ RA: Filesystem reported wrong status/monitor results for OCFS2 in some
  circumstances (Novell 187080).
+ RA: Improve heartbeat v1 wrappers.
+ RA: Fix db2 monitor operation.
+ RA: ldirectord: Make the emailalert and emailalertfreq options global
  as well as non-global, make checkcount global as well as per-virtual,
  add radius check, improvements to documentation.
+ RA: pgsql: Make server logfile configurable and implement
  validate-all. New parameter ctl_opt added to pgsql to support
  additional options for pg_ctl.
+ CRM: First beginnings of a cluster-wide shell (FATE ...)
+ BEAM / Coverity induced fixes.
+ Minor compatibility fixes (OSDL 1405).
+ Logging improvements all over the place.
+ Extended support for master-slave resources (FATE 300723).
+ OCF RA API compliance checker (FATE 300737).
+ Support weak and uni-directional collocation constraints (FATE
  300792).
+ Many bugfixes.
- errata: CVE-2006-3121 was incorrectly refered to as CVE-2006-3821 in
  the changelog for 2.0.6-2 and 2.0.7-1
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-2-global.patch (introduced in 2.0.6-2)
- Remove alternate dependancy on netkit-ping as it is being removed
  from Debian</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1164924000">- version 2.0.7-2
- Add dependancy and build dependancy on psmisc for fuser
  Thanks to Hans-Joachim Baader
- Acknowldge NMU by Roger Leigh</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155592800">- version 2.0.7-1
- New Upstream
 - Remote Denial of Service attack (#195068, CVE-2006-3121).
 - Bugfixes to the CRM, the LRM and the GUI.
 - GUI failed to connect to and retrieve data from the cluster (#198747).
 - Improved log messages.
 - ptest can now read compressed XML directly. Do not include optional
   actions and dependancies in ptest output by default.
 - crm_resource will now warn and demand exact specification when trying
   to modify an attribute while several sets are present.
 - lrmd now limits itself to a maximum of 4 child processes, to avoid
   overloading the node and causing too long delays.
 - pengine: Processing of pending probes; should not be treated as if the
   resource is running or in a known state.
 - target_role now is only taken into account for managed resources.
 - cib: Detect more cases where the nodes section needs to be refreshed.
 - More accurately determine node status. (OSDL 1369)
 - Filter out stop requests that would require a resource to be added.
   (OSDL 1369)
 - Send filtered resource "stops" as successes as to not block waiting
   for filtered actions.
 - By default pass the TE graph via IPC until its too large for IPC to
   deal with, only then fall back to passing via the disk.
 - Stopping of stonith resources can never require stonith, even if the
   node its running on failed; prevent graph loop. (OSDL 1376)
 - STONITH events need to inputs to start events (not stops), to avoid
   graph loop in combination with "stop before" dependencies (ie,
   groups).
 - crmd: Dont stall the FSA if we try to invoke the TE after we've
   stopped it.
 - Always unpack the correct part of a diff operation; diffs should now
   apply in more cases, reducing the need for full refreshs.
 - Correctly observe --disable-snmp-subagent during build.
 - In some states the membership is invalid and shouldn't be referenced.
   (OSDL 1377)
 - Fix a use-before-null-check issue in lrmd. (Coverity #48)
 - OCF Resource Agents outside the default path were incorrectly found to
   be not executable.
 - ccm: hostcache and delnodecache files should not be authoritative if
   autojoin is disabled. (OSDL 1226)
 - With autojoin, llm_get_nodecount() can't return the real max nodes
   anymore, this may cause memory corruption. (OSDL 1382)
 - Fix a memory corruption in membership layer, more frequently observed
   with larger (&gt;5) clusters.
 - Change the default api-auth for pingd to uid=root
 - Dummy RA now OCF compliant.
 - Fix pingd RA metadata to be XML compliant.
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-1-quiet.patch  (introduced in 2.0.6-2)
  - ldirectord-1.141-readline_workaround.patch (introduced in 2.0.6-2)
  - CVE-2006-3821.patch                        (introduced in 2.0.6-2)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155074400">- version 2.0.6-2
- ldirectord-1.141-emailalert-1-quiet.patch
  Don't send email alerts if the alert address is not configured
- ldirectord-1.141-emailalert-2-global.patch
  Allow emailalert and emailalertfreq directives to be global
  as well as per-virtual service
- ldirectord-1.141-readline_workaround.patch
  readline doesn't seem to return lines after Net::FTP
  has been called, so split them up by hand.
- Added recommends iptables to heartbeat, as it is needed
  for the portblock resource to function correctly
- Added /var/lib/heartbeat/pengine directory
- Replace 02-chown-check.patch with chown-check-2.patch
  - use the environement variable FAKED_MODE instead of FAKEROOTKEY to check
    if code is runing in fakeroot. At some stage around fakeroot 1.5.10
    FAKEROOTKEY disapeared. Ran autoconf manually to effect this change
    after repatching.
  - Updated 02-chown-check.patch: fix typos in comment
- CVE-2006-3821.patch
  Fix remote denial of causes caused by insufficient bounds checking
  on data read from the network.
  CVE-2006-3821
- Python transition - http://wiki.debian.org/DebianPython/NewPolicy
  - Update build dependancy on debhelper from (&gt;= 4.0.0) to (&gt;= 5.0.37.2)
  - Add dh_python call to debian/rules
  - created debian/pycompat with contents of "2"
  - heartebeat: deplaced depenancy on python with one on ${python:Depends}
  - Added XB-Python-Version: ${python:Versions} to each package
  - Replace build dependancy on python2.3-dev with one on python-dev
  - Use python-central
    + Add build depends on python-central (&gt;= 0.5)
    + Add dh_pycentral call right before dh_python in debian/rules
    + Add XS-Python-Version: current in the source stanza of debian/control</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1152136800">- version 2.0.5-8
- ldirectord-2: Add missing dependancy on libmailtools-perl
                (Mail::Send)
- ldirectord-2: Add missing dependancy on libnet-perl
                (Net::SMTP, Net::FTP, Net::POP3)
- ldirectord-2: Remove unneccesary dependancy on adduser
- Automake transition: http://wiki.debian.org/AutomakeTransition
  - Remove unneccesary build-depends on automake1.9 | automaken
  - Remove unneccesary build-conflicts on automake1.4</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1151618400">- version 2.0.5-7
- Don't run deluser and delgroup in postrm
  - These commands may not be available at this time
  - If there are any files left that belong to this user or group
    then they will be left unowned and get inhereited by the
    next user that comes along that happens to have hacluster's
    old userid or the old haclient groupid respectively.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-5
- Reverse the change made in 2.0.5-4
  It turns out that in heartbeat (as opposed to heartbeat)
  is a script which calls a binary that is located in
  /usr/lib/ocf/resource.d/heartbeat/</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-4
- Move IPv6addr from /etc/ha.d/resource.d/ into /usr/lib/heartbeat,
  and then symlink that back into /etc/ha.d/resource.d/ as binaries
  are not allowed in /etc</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1149544800">- version 2.0.5-3
- Fix libgnutls binary dependancy
  - Build-Depends on libgnutls-dev instead of libgnutls13-dev
  - Recompile against libgnutls13 in place of libgnutls11
  -</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1148076000">- version 2.0.5-2
- Make use of invoke-rc.d
- Update from standards versoin from 3.6.2 to 3.7.2</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1147212000">- version 2.0.5-1
- New Upstream
- Removed build depenancy on openssl-devel,
  as heartbeat no longer uses openssl directly.
  (Libraries that heartbeat depends on may in turn
   depend on openssl creating an indirect depenancy
   or build-dependancy).</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1141855200">- version 2.0.4-1
- New Upstream
- Don't try and stop heartbeat in preinst on the first install</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139954400">- version 2.0.3-2
- Add build dependancy on libncurses-dev to allow crm_mon to work
  Thanks to Guy Coates
- Move hacluster user and haclient group creation (don't ask me why the
  user and group names are different) from preinst to postinst.
  Once upon a time there might have been a need for it in preinst,
  but the current packaging changes files to have the hacluster user
  and haclient group as neccessary in the postinst. So there is
  no need to create them before postinst.
  This is a better fix to #352158, and the pre-depends on adduser
  has been changed to a depends accordingly.
- Stop heartbeat in preinst</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139695200">- version 2.0.3-1
- New Upstream
- Make sure adduser is passed the --system flag
- Slightly Enhanced package descriptions
- Add build dependancy on swig
- As PYTHON_PATH has been added to configure.in it seems that autoconf1.4
  can no longer build this tree.  Currently autoconf is provided by
  autoconf1.4, and autoconfn is a virtual package provided by autoconf1.7,
  1.8 and 1.9.  Accordingly, replace the autoconf build dependancy with
  autoconf1.9 | autoconfn.  And add a build conflict on autoconf1.4. This
  way the autoconf command should be autoconf1.7, 1.8 or 1.9, but not 1.4
  as was previously the case.
- Don't apply 00-ssh_scp_path.patch as it should no longer be needed,
  instead add a build dependancy on openssh-client.
  Also removed call to relevant configure options.
- Removed configure option that no longer exists
  --enable-checkpointd
- Removed configure options that are now on by default
  --enable-crm --enable-lrm
- Add build dependancy on libgnutls11-dev, as 1.0 probably doesn't
  compile as _t types don't exist.
  http://lists.gnu.org/archive/html/help-gnutls/2004-08/msg00001.html
- Fix insonsistency between hb_stanby(1) man page, an the wiki
- Make /usr/bin/cl_status setgid
- Make sure that /var/run/heartbeat/{ccm,crm} exist on install
  else postinst, and thus the install will abort.
- Fix inconsistency between hb_standb(1) man page and wiki
- Add Pre-Depends on adduser
- Add management tool
  ./confgure --enable-mgmt
  Build-Depends: python2.3-dev, libpam0g-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1129759200">- version 2.0.2-5
- Change libcurl3-dev dependancy to libcurl3-openssl-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1128031200">- version 2.0.2-4
- Include /var/lib/heartbeat/ccm and /var/run/heartbeat/crm</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-3
- Get rid of bogus touching of config.status and friends in clean target,
  which if run as root causes build failures.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-2
- Add build dependancy on libltdl3-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127772000">- version 2.0.2-1
- New upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127599200">- version 2.0.1-4
- Add /var/run/heartbeat directory to package
  http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=900</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-3
- Restrurctured  provides, conflicts and replaces
- Made heartbeat-dev depend on heartbeat, not heartbeat</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-2
- Uptream initally made the wrong tar ball avaliable for
  2.0.1 and this was used to build 2.0.1-1.
  I have asked 2.0.1-1 not to be accepted into the Debian Archive
  for this reason. 2.0.1-2 uses the updated, correct tarball from
  upstream.
- Note that this package has a binary dependancy on libssl
  only because of linking against libsnmp9 (5.2.1.2-3)
- Add build dependancy on libsensors-dev (for libsnmp9)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1126821600">- version 2.0.1-1
- New upstream
- Add /var/lib/heartbeat/cores/root, /var/lib/heartbeat/cores/hacluster
  and /var/lib/heartbeat/cores/nobody
- Remove usr/lib/stonith/plugins/stonith2/riloe.so, its
  no longer in the tree
- Enable snmp_agent
- Added new libplumbgpl
- Added new ha_logd.cf
- Added new iso8601 executable
- Temporarly remove the drac3 module as GPL code that links
  against OpenSSL is not acceptable to Debian.
  - http://lists.community.tummy.com/pipermail/linux-ha-dev/2005-August/011266.html
  - http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=853
- Update build dependncy from libsnmp5-dev to libsnmp9-dev
- Make configure chown test fakeroot aware to avoid build hang
- Fix syntax error in db OCF resource
- Make crm/test/helper.sh have #! /bin/bash
- Make resources/OCF/ocf-shellfuncs.in have #! /bin/bash
- Update FSF address
- Zero config.status, libltdl/config.log and libltdl/config.status on clean</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1123106400">- version 2.0.0-2
- Add /var/lib/heartbeat/ccm and /var/lib/heartbeat/cores</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1122760800">- version 2.0.0-1
- New upstream
- Added dependancy on libnet-dns-perl to ldirectord
- Added --enable-checkpointd to configure arguments
- Added --disable-snmp-subagent to configure arguments
- Added --disable-swig to configure arguments
- Add build dependancy on uuid-dev
- Readranged packages to allow heartbeat 1.2.X to exist in debian
  and heartebat 2.X to be heartbeat until heartbeat gets
  a bit more testing in the wild. Also consoldidated binary
  packages into heartbeat, and development packages into
  heartbeat-dev, ldirectord is still in its own package,
  ldirectord2, as it drags in a lot of dependancies that
  no other part of the system uses.</changelog></package>
<package pkgid="abe65fc39955c41746aec9763fc3a7ba23e2b94e" name="zz_postfix_fermi_gateway" arch="noarch"><version epoch="0" ver="1.1" rel="2"/><changelog author="Troy Dawson (dawson@fnal.gov) 1.1-2" date="1297814400">- This is a test</changelog><changelog author="Troy Dawson (dawson@fnal.gov) 1.1-1" date="1297814400">- Added relayhost = smtp.fnal.gov</changelog><changelog author="Troy Dawson (dawson@fnal.gov) 1.0-1" date="1297814400">- First round - designed for Postfix 2.6.6</changelog></package>
<package pkgid="2d6aa3239837717fe6ee43044b2afd51d87dc83e" name="libheartbeat-devel" arch="i386"><version epoch="0" ver="2.99.2" rel="6.1.sl5.1"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt;" date="1370469600">- fixed up libnet and libnet-devel dependencies</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1222725600">- version 2.99.1-1
- Update source tarball to revision: d8710f41b9cb
- Includes many fixes to init scripts.
- Add sbd for shared-storage fencing.</changelog><changelog author="Lars Marowsky-Bree &lt;lmb@suse.de&gt;" date="1219356000">- version 2.99.0-1
- Update source tarball to revision: f23531dd23ad</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1207087200">- version 2.1.3-18
- Added two small patches for Bug LF-1833: Do not overwrite op_status depending on op_rc</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1200348000">- version 2.1.3-1
- Update source tarball to revision: 9cdeae333990
- Statistics:
    Changesets:      153
    Diff:            141 files changed, 12279 insertions(+), 3103 deletions(-)
- This is the first release now that the CRM has becme its own project called
  Pacemaker and no longer included with Heartbeat.
- Without the CRM present, the following components are also no longer able to
  be included with Heartbeat (as they require CRM libraries) and are instead
  provided as part of pacemaker or the new pacemaker-pygui project.
   cim
   snmp
   mgmtd
   pygui
   tsa_subagent
- RPM-based distributions also have a new package layout
   heartbeat-resources ::= resource agents
   heartbeat-common    ::= components that are useful regardless of which stack is being used
   heartbeat           ::= components that are specific to the Heartbeat stack
- Changes since obs-2.1.2-24
+ apache RA: remove children in case the top process didn't
+ apcsmart: make message more descriptive
+ build (LF 1803): add -fgnu89-inline to CFLAGS if gcc version is &gt;=4.1.3 and &lt;4.3
+ by request from Andrew - Modified the external/ssh plugin to have a livedangerously flag
+ ccm (LF 1806): restart all instead of exiting (low impact)
+ Changed a test from causing a reboot to not triggering a reboot - because it doesn't seem to any more
+ Changed HIGHLY to STRONGLY in how strongly we recommend STONITH
+ Corrected a warning found on FC8 in the cl_reboot code
+ debian: Add dependancy on libpam-runtime (&gt;= 0.76-14)
+ Debian: add libxml2-utils as a dependancy, because we need xmllint for the BSC
+ Debian: add the new ibmrsa-telnet stonith plugin
+ debian: clean python bytecode
+ debian: clean up stale heartbeat-2 files
+ debian: don't install bytecompiled python modules
+ debian: patches need to be distributed
+ debian: remove chown patch
+ debian: Update standards version from 3.7.2 to 3.7.3
+ debian: update the name of the series file to reflect the new release
+ docs/packaging: reshuffle hb_report documentation and include the html version
+ dopd: don't cl_free variables on local stack
+ dopd: don't hardcode path of drbdadm; it has to be in the PATH, though.
+ dopd: fix potential segfault due to leakage of invalid/freed pointer
+ dopd: make it work with multiple concurrent outdate requests
+ external ipmi plugin caused error messages when getting metadata on machine w/o ipmitool installed.  This somewhat messed up BasicSanityCheck.
+ Filesystem: Make mount point required for the GUI (Hideo Yamauchi)
+ Fix memory leak in external plugin handling
+ fixes for fedora: system(3) function return value cannot be ignored. Also added a missing RPM build dependency.
+ hb_report: add quotes around args to test -f
+ hb_report: don't surprise user by reading the files from the current directory
+ hb_report: include hostcache
+ hb_report: replace arch with uname -m
+ hg: from last changes to recover from media errors, fixed a stupid typo with a reversed boolean condition.
+ hg: LF bug 1794: ComponentFail tests failing
+ hg: Makefile for external stonith commands was missing new stonith plugin in the extra_dist section
+ High: Heartbeat: Include an option to start the CRM in respawn mode
+ init: add should-start/stop $remote_fs to init script
+ init: should-start/stop $remote_fs to init script
+ ipc (LF 1339): enable message compression
+ IPv6addr: Check for netinet/icmp6.h instead of  linux/icmpv6.h
+ IPv6addr: Check for netinet/icmp6.h instead of linux/icmpv6.h
+ iscsi RA: wait for udev to create the links
+ Junko IKEDA reported a problem building on Red Hat with tog-pegasus installed - this fixes that problem - the code half-setup things if pegasus was present but --enable-cim-provider wasn't enabled
+ ldirectord: add forking mode
+ ldirectord: SimpleTCP service check
+ ldirectord: SimpleTCP service check documentation
+ ldirectord: Various updates to OCF compatible RA
+ lf bug 1678: stonith command core dumps with -h option
+ LF bug 1690: there should be a tool to audit (validate) node names in constraints among other things...
+ LF Bug 1732: Error handling is bad for comm media
+ LF bug 1732: restructuring code towards being able to restart (reopen) communication media when they die
+ LF bug 1795 - timeout control for crm_mon --one-shot
+ LF bugzilla 1667:  ppc64 RPMs contain 32-bit binaries
+ LRM (LF 1821): resource timing information
+ lrm reg tests: handle OCF_ROOT, warn about xmllint missing
+ LRM regtest: update filters to match the lrmadmin output
+ lrmadmin: include time.h
+ Monitor timeouts need to increment fail counts
+ OCF-resources: SphinxSearchDaemon is not installed
+ OpenBSD bugs: 1731 1761 1743 1659
+ packaging: include iscsi
+ pgsql RA: handle the missing pg software properly (thanks to Serge)
+ pgsql RA: move check for root down to enable meta-data for regular users (thanks Serge)
+ pgsql RA: postmaster confusion
+ Put the _source_ (.in) file under source control.  Groan...
+ RA Filesystem: add lustre to the list of fs which don't need fsck
+ RA iscsi: dropped complex code in favour of udev and several small cleanups
+ RA iscsi: fix meta-data xml
+ RA iscsi: get rid of one annoying message ("no active sessions")
+ RA iscsi: new iscsi resource agent
+ RA iscsi: support iscsi sles compat mode
+ RA iscsi: two echo statements removed
+ RA mysql: don't look for mysql users in the OS database (thanks to Christian Rishoj)
+ RA SAPDatabase/SAPInstance: report proper exit codes in case required software is not installed
+ RA SphinxSearchDaemon: a new RA thanks to Christian Rishoj
+ recovermgrd: changed the code to look at the return code from fwrite, to make Fedora 8 compiler compile recovermgrd warning-free.
+ Removed bzip2-devel as a build dependency for all but Fedora and RH
+ RPM and specfile changes to fix part of and help diagnose part of Junko IKEDA's problem with tog-pegasus
+ RPM spec file: Added ciblint to installed programs
+ RPM specfile change:  made is_fedora macro turn off is_rhel macro
+ shell scripts: various cases of overquoting in the for statement (thanks to Takekazu Okamoto)
+ stonith ibmrsa-telnet: new stonith plugin
+ stonith ipmi: new external stonith plugin
+ utillib.sh: update finding the binary which coredumped
+ Xen RA: new improved (thanks to Sebastian Reitenbach)
+ [patch] init: add should-start/stop $remote_fs to init script</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1196114400">- version 2.1.2-24
- Update the source tarball to revision ef1be5978d97
- Statistics:
    Changesets:       104
    Diff:             296 files changed, 3464 insertions(+), 3275 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb/vmware stonith) on a single host (opensuse10.3/2Gb/2.66Ghz Quad Core2)
  + 7-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon/ssh stonith)
- All testing was performed with STONITH enabled
- Pending bugs encountered during testing:
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-15
+ High: CIB: Fix the behavior of update_attr() and delete_attr() when the command is ambiguous
+ High: CRM: In ccm_have_quorum(), an OC_EV_MS_PRIMARY_RESTORED event means we _do_ have quorum
+ High: PE: Bug 1765 - Prevent master-master colocation constraints from preventing slaves from starting
+ High: PE: Introduce a new API call for determining the location of complex resources
+ High: PE: Set next_role recursivly so that group promotion will work
+ High: PE: increment_clone() did not overflow correctly 9-&gt;10, 99-&gt;100, etc
+ High: crmd: Prevent shutdown hangs caused by pending ops that can't be cancelled - because the no longer exist in the lrm
+ High: heartbeat: Fix getnodes() compilation with gcc 4.3
+ High: Novell 293922: Don't use non-blocking writers, but instead don't block
+ High: Novell 293922: Heartbeat network processes would block on full buffers.
+ Medium: core: Do not disconnect blocking write processes, but discard traffic.
+ Medium: PE: All other things being equal, prefer to keep non-failed instances alive
+ Medium: PE: Create a syntactic shortcut for the common use-case of "{resource} prefers {node} with {score}"
+ Medium: PE: Dont make changes to location constraints, when applying to groups, persistent
+ Medium: TE: Allow the CRM to limit the number of resource actions the TE can execute in parallel.
+ Medium: TE: Pending operations shouldn't be processed
+ Medium: attrd: Bug 1776 - Attrd doesn't exit or reconnect when the CIB is respawned
+ Medium: crm: Dont generate core files for non-fatal assert (ie. the CRM_CHECK macro).
+ Medium: crmd: Don't remap LRM_OP_PENDING when building full lrm updates
+ Medium: crmd: Prevent shutdowns initiated immediately after a node is removed from the cluster with hb_delnode from stalling.
+ Medium: LF bugzilla 1757: apache resource agent grep methodology can't handle newlines - even if you change the pattern
+ Low: Admin: Do a full simulation when we have the live CIB - since we'll always have a status section
+ Low: Admin: crm_standby - Don't complain about missing values, print the default value instead
+ Low: PE: Actions for stonith agents should never default to requiring fencing or quorum
+ Low: PE: ptest - Handle malformed inputs more gracefully
+ Low: Rename example ha_logd.cf file to the proper name.
+ Low: cib: Increase the retry interval when connecting to the ccm to 3s
+ Low: crmd: Provide a more informative error when DCs detect other DCs during a join
+ Low: heartbeat: Use the correct define when choosing to enable valgrind - Keisuke MORI
+ Low: LF bug 1705 - cl_respawn core dumps when given -h or --help
+ Low: changed configure.in to force 64-bit objects when on gcc-based ppc64 platform
+ Low: configure.in - autoconf spells ppc64 funny...
- Unclassified user impact
+ LF 1766: Heartbeat installs man pages in the wrong directories by default...
+ LF Bug 1662: Put in some RHEL changes provided by Keisuke MORI
+ LF bug 1393 - Cannot rename /var/lib/heartbeat/hostcache.tmp to /var/lib/heartbeat/hostcache (scope, risk and severity: all minor)
+ ccm (LF 1546): ensure that the membership instance number never decrements (thanks to Guochun Shi)
+ ccm: speed up ccm considerably in case a node is alone in the membership (thanks to MATSUDA, Daiki)
+ Debian: Build: Add dependacy on gawk as it is required by the OCF IPaddr resource
+ Debian: Build: rename ha_logd.cf to logd.cf in debian/heartbeat.files
+ hb_report (LF 1763): multiple fixes
+ hb_report: add more packagers support (thanks to Sebastian Reitenbach)
+ hb_report: fix handling of debug option
+ hb_report: fix the previous fix (sorry)
+ hb_report: include package verification
+ hb_report: reduce the number of ssh invocations by 1
+ hb_report: update documentation on extracting CTS tests
+ hb_report: use getopts instead of getopt(1) for the sake of portability
+ hbagent: fix memory leaks on dropping global resources (thanks to Keisuke MORI)
+ hbagent: removed the const qualifier from parameter
+ hbagent: reset gMembershipTable on dropping global resources
+ hbclient: fix memory leaks on signon/signoff (thanks to Keisuke MORI)
+ heartbeat: Increase MAXMSGHIST; reduce debugging output.
+ ldirectord: allow per-virtual checkinterval configuration
+ lvs-users: Patch for ldirectord when using mysql service
+ mgmtd (LF 1719): fix the pam file for suse
+ mysql RA (LF 1760): defaults for OpenBSD (thanks to Sebastian Reitenbach)
+ RA Xinetd (LF 1742): multiple fixes
+ RA tomcat: allow consecutive starts
+ stonithd: (LF 1727): fix dropping privileges
+ stonithd: a copy/paste typo
+ stonithd: check for storage size when copying the host list
+ stonithd: drop root privileges earlier
+ stonithd: shuffle dropping privileges around again</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1193349600">- version 2.1.2-15
- Update the source tarball to revision c492f19cb583
- Statistics:
    Changesets:       158
    Diff:             173 files changed, 8712 insertions(+), 4787 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
  + (lmb)    7-node Xen cluster on a single host
  + (debltc) 6-node ppc64 cluster
- Pending bugs encountered during testing:
  1562 - heartbeat: hostcache file rename error at startup
  1737 - crmd: Inconsistent join state detected (Hard to reproduce, possible fix included)
  1750 - logd: ipc_bufpool_update: magic number in head does not match
- Changes since 2.1.2-4
+ High: cib: G_main_del_IPC_Channel() doesn't like being called with a NULL pointer and crashes
+ High: crm: Bug 1749 - Make sure the diff-related digests contain the complete CIB, not just the first line
+ High: crmd: Prevent shutdown hangs by allowing the crmd to forget about pending actions for deleted resources
+ High: PE: Bug 1712 - Ensure manditory ordering constraints can cause complex resources to be shut down
+ High: PE: Clone colocation fixes
+ High: PE: Ensure that resources depending (by order) on a master are not promoted if no master is available
+ High: PE: Fix manditory ordering with m/s resources
+ High: PE: Prevent an infinite pe/te loop when reprobing with resources in master mode
+ High: PE: Prevent use-of-NULL in crm_mon when date_expressions are used by ensuring that data_set-&gt;now is always set
+ High: PE: Prevent use-of-NULL when the admin creates a colocaiton constraint with an empty group
+ High: PE: Relax an assumption regarding clones that is not true when they are unmanaged
+ High: PE: Remove an accidental commit that, when called, causes use-of-NULL
+ High: PE: Remove an errant call to exit() than prevented an assert from being triggered
+ High: RA: Novell 329833 - dotted-quad netmask notation broken in findif
+ Medium: cib: Include digests of the cib a diff was made from and verify it when applying
+ Medium: CRM: Re-evaluate appropriate IPC message queue lengths and throtle IPC _clients_ that hit them
+ Medium: crmd: Bug 1737 - Inconsistent join state detected - Possible fix
+ Medium: PE: Bug 1722 - By default, exhibit the old start-failures-are-fatal behaviour regardless of how resource-failure-stickines is set
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: PE: Fix minor memory leak when stopping orphaned resources
+ Medium: PE: Master internal ordering enhancements. Added stopped-&gt;start, stopped-&gt;promote.
+ Medium: Tools: Bug 1738 - the crmd ignores some requests from crm_resource because it exited too quickly
+ Low: contrib: dopd - Remove a pointless and annoying dependancy on the crm
+ Low: crmd: Increase the retry interval when stalling the FSA to 2s (used when connecting to the ccm, lrmd, cib)
+ Low: crmd: Update the CIB with the node's version data when it becomes DC
+ Low: crmd: Use the unaltered rc for timed out operation events from the lrmd
+ Low: Debian: heartbeat doesn't depend on libperl-dev (probably confused by '-lperl' in configure.in)
+ Low: heartbeat: Some compilers feel that the fcli variable could be used uninitialized - shut them up
+ Low: PE: Avoid pointless copying of XML items (actions) during graph creation
+ Low: PE: Convert all the resource's boolean flags into a single bit-field
+ Low: PE: Produce a config error when a clone contains more than one resource/group to clone
+ Low: RA: PureFTPd - Support debian's pure-ftpd-wrapper script.  Patch by Raoul Bhatia
+ Low: Stonith: external/rackpdu - Fix the metadata short descriptions
+ Low: ccm: Bug 1723 - fix logging (thanks to MATSUDA, Daiki)
- Unclassified user impact
+ gui: Add "meta_attributes" support to mgmt
+ gui: Add boolean_op for location rules in mgmt
+ gui: Make several fields of rsc_location editable
+ gui: Prevent clone and master_slave from belonging to group
+ gui: Prevent haclient from falling into an error caused by blank resource metadata
+ gui: Provide "Default" setting for crm configurations
+ gui: Provide complete pengine and crmd configurations with dynamic rendering
+ gui: Rename "Places" to "Locations" to match with the CIB name
+ gui: Resolve target_role problem for sub-resource
+ gui: Specify the default type of added item to correspond to the object that the cursor focused on
+ heartbeat: Remove one unlink() of the temporary hostcache file.
+ LF bug 1502: udpport statement in ha.cf is ignored by heartbeat - trivial fix
+ LF bug 1589: ia64 heartbeat unaligned access messages (SGI965396) - copy fields in structures - minor fix
+ LF bug 1679: hardcoded heartbeat userid and group in init script (minor fix)
+ LF bug 1681: BSC fails to to identify active interface on OpenBSD (minor change)
+ LF bug 1700: HA Signon always reports success - fix has minor scope.
+ LF bug 1702: during emergency restarts, heartbeat doesn't close watchdog correctly.  Fix is minor.
+ LF bug 1712: ha_logd prevented node from shutting down - changed code to use the waitout() primitive - scope fix - trivial-minor
+ LF bug 1731: wrong location of libraries for OpenBSD 64Bit architectures, with patch
+ LF bug 1734 - removed duplicate return statement as per bug report.
+ lrm stonith plugin: fix exit code handling
+ lrmd (LF 1715): increase the max dispatch time for lrmd
+ lrmd (LF 1729): revise return codes
+ Put in a missing include of &lt;memory.h&gt; for the DRBD code.  Change scope: trivial
+ RA: mysql, pgsql - use getent(1) instead of /etc/passwd (thanks to Raoul Bhatia)
+ RA: mysql: According to Geoff Harrison the sql check is broken without this
+ RA: mysql: Allow arbitrary commandline arguments for mysqld (by Raoul Bhatia)
+ RA: Raid1: Allow the homehost setting to be specified.
+ RA: Xinetd: Fix stop/monitor to not fail if service isn't available yet.
+ stonith/ibmrsa: allow ',' in the hostlist
+ STONITH: external/ssh: Disable StrictHostKeyChecking and PasswordAuthentication by default.
+ stonithd (LF 1714,1727): fix a race condition
+ stonithd (LF 1726): a hostlist may be empty
+ stonithd (LF 1727): change attach shmem seg to read only
+ stonithd/lib: replace cookie generation with uuid
+ stonithd: have -a really mean startup alone
+ stonithd: increase the maxdispatchtime
+ stonithd: library code review and cleanup
+ tools: Add hb_report - a reporting utility</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1190757600">- version 2.1.2-4
- Update the source tarball to revision 702e4f418ca8
- Statistics:
    Changesets:       109
    Diff:             188 files changed, 5926 insertions(+), 2003 deletions(-)
- Test hardware:
  + 4-node vmware cluster (sles10-sp1/256Mb) on a single host (opensuse10.2/2Gb/2.66Ghz Quad Core2)
  + 6-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon)
- Pending bugs encountered during testing:
  1377 - llm_get_nodename: index(1719751538) out of range
  1561 - Cluster node c001n03 returning after partition
  1562 - hostcache file rename error at startup
  1700 - HA Signon always reports success
  1711 - Shutdown blocked by call to cl_flush_logs()
  1712 - Shutdown blocked by ha_logd
  1714 - Stonithd core dumps
- Changes since 2.1.2-2
+ High: Core: Prevent logging buffer overflow - ensure the entity is NULL terminated.  Patch from Simon Graham.
+ High: DTD: Remove stray character that made the DTD invalid
+ High: PE: Ensure mandatory ordering constraints behave correctly
+ High: PE: Implement a smarter algorithm for colocation
+ High: PE: Include preferences of colocated resources when promoting masters
+ High: PE: Make sure only the correct number of cloned groups are started
+ High: PE: Make sure the merge_weights function is called for complex resources
+ High: PE: More accurate method of detecting colocation loops in native_merge_weights
+ High: PE: Optimize the merge_weights functionfor groups
+ High: RA: Remove bashism from Filesystem OCF agent
+ High: RA: Filesystem - Fix path reference.
+ High: RA: o2cb - Fix path broken in recent cleanups
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: crmd: Tell the LRM to refresh the resource's default parameters
+ High: core: Bug 1697 - really remove proctrack sources (performance/memory leak fix)
+ High: core: An open call with the O_CREAT flag was missing the file mode.
+ Medium: Core: Ensure heartbeat flushes all its logs before exiting
+ Medium: ipc: Up MAXMSG to match MAXUNCOMPRESSED to allow larger clusters.
+ Medium: Logging: Sanitize and centrally define the log facility used by various subsystems
+ Medium: PE: Bug 1705 - Don't segfault when allocating empty groups
+ Medium: PE: Bug 1710 - A resource's failcount was ignored on nodes with no operations for the resource
+ Medium: PE: Enact a saner default for rsc_order.score (s/0/INFINITY)
+ Medium: RA: EvmsSCC - Handle start failures caused by peers starting at the same time (Patch from Jo De Baer)
+ Medium: RA: Treat migrating (status 1) as running to avoid - patch by Per Andreas Buer
+ Medium: Stonith: Remove code-reuse to prevent excessive logging by the LRM
+ Medium: Stonith: ipmilan: fix potential segvfault in options parsing
+ Medium: cib: Improved transparency when in operating in degraded mode
+ Low: Admin: Bug 1691 - crm_resource doesn't complain about empty strings as property values
+ Low: build: configure.in: fix for platforms with libc in /lib/tls
+ Low: CIB: Allow notification to remote clients
+ Low: CRM: DTD - Expand the list of accepted values for boolean fields
+ Low: CRM: DTD - Explicitly specify a default for rsc_colocation.symmetrical
+ Low: DTD: Include helpful comment for rsc_order constraints
+ Low: PE: Downgrade logging when we fallback to default option values
+ Low: PE: More efficient logging of orphan resources
+ Low: PE: Prevent users from trying to use on_fail=fence and stonith-enabled=false
+ Low: PE: Stop the master placement score from affecting the synapse's priority
+ Low: RA: Add a tomcat OCF agent from Yamauchi Hideo
+ Low: RA: ManageVE - Fix status when VE files are not persistent
+ Low: RA: Put in updates to the Informix script as supplied by Lars Forseth
+ Low: RA: apache - drop annoying messages if no configuration files are found
+ Low: Stonith: external/ssh - simplify the reset command and wait the same amount of time as the non-external variant
+ Low: Stonith: Disable ipmilan by default
+ Low: TE: Pause for a moment before trying to reconnect to stonithd
+ Low: Tools: Allow pingd to change identity based on the name of its executable - workaround for Bug #1701
+ Low: logd: Update the default config file to reflect the new default log facility
+ Low: tools: haresources2cib.py: update parameter lists and configuration defaults
- Unclassified impact
+ lrm: Bug 1458 - include timing information in the op data.
+ lrm: Bug 1684 - a meta-data operation fix introducing short sleep on zero reads
+ lrm: log non-recurring operations
+ lrm: performance - replace linear with binary search for msg type.
+ lrm: performance - remove unnecessary memstat
+ lrm: raexecocf: a fix for bug introduced in 2a787bbd73f6; longer sleep in get_resource_meta
+ RA: Bug 1692 -  monitoring fails for apache OCF resource.  Put in simple fix to apache resource agent monitoring from Sebastian Reitenbach
+ RA: eDir88 - fix to allow meta-data to work in case NDS is not installed
+ RA: pgsql - patch to remove bashism
+ Stonith: Put in an APCmastersnmp.c patch from Peter Kruse which makes the plugin work with new APC master switches
+ Stonith: Bug 1615 - get the list of hosts from an RA asynchronously
+ mgmtd: allow old clients to connect</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187301600">- version 2.1.2-2
- Update the source tarball to revision 098c0993b1d0
- Statistics:
    Changesets:	6
    Diff:		11 files changed, 402 insertions(+), 46 deletions(-)
- Changes since 2.1.2-1
+ High: clplumbing: Use the correct environment variable when deciding to log via ha_logd
+ High: PE: Bug 1682 - Prevent use-of-NULL when clones have no active children
+ High: TE: target_rc should default to 0 (LRM_OP_DONE) to detect monitor actions that fail the first time they are executed
+ Medium: PE: Bug 1685 - Supply the correct defaults for rsc_order constraints
+ Low: Admin: crmadmin - exit with rc=0 when the command completed successfully</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1187042400">- version 2.1.2-1
- Update the source tarball to revision 1ad8497bc55d
- Statistics:
    Changesets:	340
    Diff:		614 files changed, 39588 insertions(+), 32588 deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/1ad8497bc55d
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -r e3c9306b9223:1ad8497bc55d | sort -f
- Testing notes
+ On my underpowered cluster, the CCM borked a number of times on the Stonithd test
  However since the CCM hasn't been touched in an age, its hard to conclude there are regressions from previous releases.
  If anyone would like to volunteer to maintain the CCM (or the GUI for that matter), it would be much appreciated.
- Changes since 2.1.2 (Upstream)
+ High: CRM: Update crm/cib feature sets and the set of tags/attributes used for feature set detection
+ High: CIB: Improved CCM interaction
+ High: CRM: filter_action_parameters() - Make a copy of interval/timeout in as they're about to be free'd
+ High: PE: Break graph loops involving stonith
+ High: PE: Only create _one_ pseudo op per name (all_stopped/stonith_up)
+ High: PE: The all_stopped action should only be part of the graph when the stop actions are runnable
+ High: PE: all_stopped should only depend on native resources to avoid recursion
+ High: PE: check_action_definition() - Ensure the meta attributes are also set so that the digest is calculated correctly (and consistently with the crmd)
+ High: PE: Use failcount to handle failed stops and starts (set default_resource_failure_stickiness &gt; 0 for the old blocking behaviour)
+ High: TE: Allow reconnection to stonithd if it is respawned
+ High: TE: Allow the TE to reconnect if stonithd is killed and respawned
+ High: cib: Allow the CIB to reconnect if the CCM is killed and respawned
+ High: cib: Handle master updates that fail DTD validation
+ High: cib: Support the removal of multiple child objects - required for subsequent commit
+ High: crmd: Improvements to shutdown sequence (particularly in response to failures)
+ High: crmd: Sanitize the maintenance of node_state entries
+ High: crmd: Simplify node_state maintenance
+ High: stonithd: Sanitize the login/logout functions and add the ability to reset the callback IPC channel
+ Medium: cib: Ensure fflush() and fsync() are always called when writing XML digests to disk
+ Medium: crm: Ensure fflush() and fsync() are always called when writing XML to disk
+ Medium: crm: Bug 1680 - parse_xml() can fail to detect mismatching close tags
+ Medium: PE: Dont check the parameter digest of orphan operations
+ Medium: TE: Dont modify the failcount for 'pending' action updates (rc=-1)
+ Medium: admin: Set the exit code to non-zero if crmadmin can't connect to the crmd
+ Low: PE: Warn when multiple nodes have the same uname
+ Low: Stonith: New external plugin for handling 'APC Switched Rack PDU AP7952' devices - contributed by Sergey Maznichenko
+ Low: cib: Enhancements to logging of DTD errors
+ Low: cib: Refactor reading and writing of the CIB to disk
+ Low: crmd: Ensure our assumption that all resources have a class and type is true
+ Low: crmd: Simplify the detection of active actions and resources at shutdown
+ Low: Admin: Bug 1603 - Allow CIB digest files to be verified
+ debian: make heartbeat binNMU safe
+ stonith: ipmilan - accept documented auth and priv values
+ GUI: OSDL 1449 / Novell 291749: GUI should not overwrite more specific settings of contained resources.
+ RA: IPaddr2 - Make the check for the modprobe/iptables utilities conditional on the IP being cloned
+ RA: apache - make status quieter
+ RA: Added Informix resource agent
+ RA: eDir88 resource can't be stopped ?
+ RA: patch to fix bashism in a number of agents
+ Tools: OSDL Bug 1666: in BSC, make sure temp rsc dir exists for RAs
+ Tools: ocf-tester - use the default value for OCF_ROOT if it exists
+ Tools: ocf-tester - add capability to test with lrmadmin/lrmd
- Changes since 2.1.0-2
+ A little cleanup to make the RAs more uniformly not have $OCF_ROOT paths in them
+ Added code to cause logging to be restarted if it dies.
+ Admin: Allow crm_diff to operate on compressed inputs
+ Admin: Bug #1621 - crm_mon should show failed starts of a resource
+ Admin: Bug 1632 - Make sure error messages regarding trailing XML input characters are seen
+ Admin: Bug 1635 - crm_failcount should not complain if the attribute was already deleted
+ Admin: Bug #1622 - crm_attribute: Include --inhibit-policy-engine in the help message
+ Admin: crm_resource - remove an overly simplistic check for when -C can safely be used
+ Admin: crmadmin - include Hg version in --version output
+ Admin: ptest is useful enough to warrent installation to sbindir
+ BSC: 'trap' had been continuing instead of exiting
+ Bug 1612: haresources2cib @substitution@ broken (probably by a global change)
+ Build: No longer generate RAs now that there is a sane way to set directory locations and find binaries
+ CIB: Bug 1602 - Archive invalid/unusable configurations so we can continue
+ CIB: Bug 1633 - Pass the actual error from activateCibXml back to the user
+ CIB: config_changed always needs to be calculated when processing write commands
+ CRM: Bug 1625 - Cannot update an operation's timeout
+ CRM: Clean up processes left over by crm_abort().  Initial patch by DAIKI MATSUDA
+ CRM: Fix compare_version() to actually work correctly on a regular basis (broken since 2.0.2)
+ CRM: Fix matching of objects with an ID when the match-spec has no ID
+ CRM: Make logging setup consistent and do not log the command-line to stderr.
+ CRM: Only detect timeout changes for recurring ops
+ CRM: Remove deBug code that should not have been committed
+ Corrected a typo which only matters on 32-bit machines :-(
+ Corrected so that on *BSD it passes in 2 parameters, instead of 2.
+ DTD: Add helpful comment regarding rsc_colocation objects
+ Fix location of pingd binary
+ Fixed a dangling reference to a former bin directory name.
+ Fixed a fairly-major error in IPaddr - it didn't handle CIDR netmasks correctly.  But ifconfig didn't complain either...
+ Fixed a minor stonithd testing error (not much of a Bug)
+ Fixed a syntax error in Filesystem:  missing then symbol
+ Hopefully fixed a long-time SNMP annoyance.  When the membership layer shuts down (as it does in BSC),
+ LF Bug # 1617 - Miscellaneous RPM and source cleanups
+ LF Bug # 1644 - Pinging loopback in BasicSanityCheck fails with EPERM
+ LF Bug # 960 - rpm: first-time install fails
+ LF Bug 1513 - building RPM from the 2.0.8 tarball fails
+ LF Bug 1527 - inappropriate warnings about core files logged by heartbeat (SGI961667)
+ LF Bug 1534 - compiling/installation error on OpenBSD
+ LF Bug 1576: shutdown hangs under certain shells // LF Bug 1534: compiling/installation error on OpenBSD
+ LF Bug 1654 - HA_SBIN_DIR is not set on ocf scripts
+ LF Bug - compiling/installation error on OpenBSD
+ LF Bug 1522: Strt hb_counter on time_t
+ LF Bug # 1534 - compiling/installation error on OpenBSD
+ LF Bug # 1645 - Minimize arch-dependent differences, maintain compatibility -- More on this Bug...
+ LF Bug # 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1661 - crm_verify aborts checking and reoccurring crm_abort errors in logs
+ LF Bug # 1661 - move symlink creation out of specfile and into Makefile
+ LF Bug 1650: heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug # 1645: Minimize arch-dependent differences, maintain compatibility
+ LF Bug 1650 - heartbeat should put scripts/non arch specific things in /usr/share
+ LF Bug 1665 - fix references to moved scripts - courtesy of Tuomo Soini
+ LRM plugins: skip dot-files.
+ Made the stonith -h core dump go away - by fixing a variety of small things in STONITH.
+ Minor patch to stonith patch - to keep empty result from being seen as out of memory
+ Misc: Move a few shell functions to the only script that uses them
+ More file location tweaks - mostly GUI-related.
+ OCF: Detect and warn of use of deprecated 'ocf-shellfuncs' and 'ocf-returncodes'.
+ OCF: Fixed the check in have_binary. Handle checks for programs with --arguments
+ OCF: Provide the location of /sbin as used by some agents (HA_SBIN_DIR)
+ OCF: Remove unused variables
+ OSDL Bug 1606: okay for stonith plugins to have no parameters
+ PE: Add regression test for previous commit
+ PE: Aggregate the startup of fencing resources into a stonith_up pseudo-action
+ PE: Bug 1628 - Complain about invalid operation intervals
+ PE: Correct the CRM_CHECK comparision
+ PE: Dont log stopped orphaned resources
+ PE: Fix the handling of remove-after-stop=true - it was causing unnecessary restarts
+ PE: Fix two small memory leaks detected by Valgrind
+ PE: Fix up the tests now that compare_version() functions correctly (as of cs: 7d69ef94a258)
+ PE: Handle two new actions in text2task
+ PE: Include description for the remove-after-stop option
+ PE: Make sure ptest always does a POSIX sort
+ PE: Move the creation of stonith shutdown constraints to native_internal_constraints()
+ PE: NoRoleChange shouldn't always call PromoteRsc for master resources
+ PE: Potential use of NULL
+ PE: Regression: Allow M/S resources to be promoted based solely on rsc_location constraints
+ PE: STONITH Shutdown ordering
+ PE: Streamline STONITH ordering. Make sure 'all_stopped' depends on all STONITH ops.
+ PE: Update one more regression test output now that it has been verified as still correct
+ PE: Update testcases to include all_stopped (added in cs: 800c2fec24ee)
+ PE: Use master scores to determine which clones to start where
+ Put deBug in in support of Bug 1154: 2.0.4 BSC failure - select() returns with error
+ Put in a change to allow CTS to run.  There is a sort-of-bug (in BSC/CTS) underlying this that I'll have to file a bug on.
+ RA: Add some extra variables dug out from configure
+ RA: Bug #1630 IPaddr2 - Wrong arguments passed to send_arp (test was mistakenly written as an assignment)
+ RA: Convert a number of checks for required binaries
+ RA: Delay (v1) - Remove extra characters from call to ra_execocf
+ RA: Dummy: Just add a comment to make sure people copying from this
+ RA: Filesystem: Unify coding style to match rest of script.
+ RA: IPaddr2 - Remove bash-isms
+ RA: IPaddr2 - handle IP_CIP not being defined
+ RA: IPaddr: Fix a few trivial bugs in lvs_support pointed out by Michael Stiller.
+ RA: LSBDummy - Make sure the action is passed to ra_execocf
+ RA: MailTo: Remove spurious warning about monitor.
+ RA: Move all remaining autoconf variables into common files that are automatically included
+ RA: Move some helper files to their new names (.files dont show up as RAs)
+ RA: Revised handling of directory locations
+ RA: ServeRAID - remove commented out code
+ RA: Use consistent check for required binaries
+ RA: o2cb: Improve configuration stability.
+ RA: o2cb: Optimize redistribution of cluster.cnf.
+ RA: prefer the 'test' program rather than the builtin for some reason
+ RA: v1: IPaddr: Unconditionally enabling LVS support is a mistake.
+ TE: Log the node's uname instead of UUID for completed actions
+ TE: Set failcount to INFINITY for resources that fail to start or stop
+ Tools: Bug 1653 - Further changes to prevent use of NULL when no attribute is specified
+ Tools: Bug 1653 - Misc attrd/attrd_updater cleanups suggested by Keisuke MORI
+ Tools: Bug 1653 - attrd crashes when no attribute is specified
+ debian: Add new dot-ocf files to the heartbeat package
+ debian: Add the ldirectord OCF resource to the ldirectord package
+ debian: Debian bug #432441 will be closed on the next upload
+ debian: Don't create hb_gui symlink
+ GUI: update path for png images in haclient.py
+ ldirectord: Use globals for service check return values
+ ldirectord: Add OCF wrapper
+ ldirectord: Add Oracle check
+ ldirectord: Add external check
+ ldirectord: Add forwarding mechanism to real server ID
+ ldirectord: Add ld_service_to_port()
+ ldirectord: Call ld_emailalert_send() with correct arguments
+ ldirectord: Clean up execute logic in check_sql
+ ldirectord: Cosmetic spelling and grammar fixes
+ ldirectord: Document expire_quiescent_template
+ ldirectord: Document that checktimeout is for ping checks too
+ ldirectord: Don't access CALLBACK unless it is defined
+ ldirectord: Don't die if Net::FTP times out
+ ldirectord: Enhance ftp check debugging
+ ldirectord: Enhance logging in service_set
+ ldirectord: Fix bogus detection of combined check
+ ldirectord: Fix logic bug in _status_down
+ ldirectord: Handle $dbh-&gt;prepare() failure in check_sql()
+ ldirectord: List checktype and service in alpabetical order in the documentation
+ ldirectord: Make check_sql &lt; 80col wide
+ ldirectord: Make parsing of the output of ipvsadm more robust
+ ldirectord: Note negotiatetimeout in documentation of checkcount
+ ldirectord: Port of last resort for real server checks
+ ldirectord: Remove connecttimeout
+ ldirectord: Remove stale entries on reload
+ ldirectord: Remove trim down very wordy decripton of read_config
+ ldirectord: Set default negotiatetimeout to 30s
+ ldirectord: Status to stdout
+ ldirectord: Tidy up fallback
+ ldirectord: Use $dbh-&gt;errstr instead of $dbh-&gt;err when logging
+ ldirectord: Use an alarm for HTTPS timeouts
+ ldirectord: Use goto for error handling in check_sql
+ ldirectord: Use negotiatetimeout and connecttimeout as mutual defaults
+ ldirectord: Use negotiatetimeout for SIP, DNS and Radius checks
+ ldirectord: Use valid string in log message in check_connect()
+ ldirectord: document port behaviour of real servers
+ ldirectord: rearange parsing of service to make it &lt;= 80col (more often)
+ build: Move ldirector OCF resource into the ldirectord package
+ apache RA (LF 1656): include ServerRoot in relative paths.
+ cib: Fix detection of non-status changes
+ configure: Remove unneeded AC_PATH_PROGS checks
+ crmd: Bug 1575 - crmd cannot exit if lrmd is killed and there are pending ops
+ crmd: Bug 1624 - Fix the delete op for cancelled operations
+ crmd: Bug 1655 - crmd can't exit when the PE or TE is killed from underneath it
+ crmd: Only remap monitor operation status to LRM_OP_DONE under the correct conditions
+ log: avoid handing a null pointer as a '%s' variable
+ pingd: Hard code the name used for logging
+ re-enabled code to make symlinks for moved files.
+ remove is_stable() condition from drbd-outdate-peer daemon
+ shellfuncs: 's%:.:%%' should be 's%:.:%:%'; the '.' should be '\.'
+ stonith: external/riloe - new comment in the xml on how acpid may affect the performance (thanks to Guy Coates).
+ stonith: riloe - fix the xml info.
+ stonith: ibmrsa - fix the xml info.
+ stonith: ibmrsa - allow regular users to use it with 'stonith -n' and similar.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1183154400">- version 2.1.0-2
- Update the source tarball to revision e3c9306b9223
- Statistics:
    Changesets:	259
    Diff:		625 files changed, 13133 insertions(+), 73569^ deletions(-)
    ^ A large amount of dead code from Intel was removed
- A full list of changes can be seen at
     http://hg.linux-ha.org/dev/shortlog/e3c9306b9223
- Mercurial users can obtain the full list by executing:
     hg log -M --template "{desc|firstline|strip} CS: {node|short}\n" -rSTABLE-2.1.0:e3c9306b9223 | sort -f</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.1.0-1
- Update debian packaging files which drop the -2 package suffix
- Change the version number to the one used upstream</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1177020000">- version 2.0.9-2
- Sync with the version supplied in SLES10
- Bugs fixed
+ OSDL #393 - Stonith: Update plugin from OpenHPI 2.2 to OpenHPI 2.6
+ OSDL #393 - Stonith: soft_reset is {true|1|false|0}, not {yes|no}
+ OSDL #393 - Stonith: Rename ibmbc to bladehpi
+ OSDL #393 - Stonith: Enable build of bladehpi plugin if OpenHPI present
+ OSDL #761 - RA: Remove history from heartbeat init script.
+ OSDL #1073 - Tools: Add clone support to crm_resource
+ OSDL #1138 - Long delay before CCM propagates membership event
+ OSDL #1292 - Stonith: Support xSeries STONITH (IBM: 06-R212-175)
+ OSDL #1339 - IPC code limits possible cluster size
+ OSDL #1374 - Tools: Check for sane host names when migrating
+ OSDL #1428 - Stonith: Mixing definitions and code
+ OSDL #1430 - CIB: Allow automatic assignment of object IDs
+ OSDL #1451 - Tools: Allow resource meta attributes to be set with crm_admin
+ OSDL #1457 - RA: Resolve unknown command ha_log
+ OSDL #1462 - Tools: crm_migrate should allow creating temporary rules
+ OSDL #1465 - crmd: crmd gets stuck if shutdown while starting up
+ OSDL #1472 - CIB: Use-after-free in find_attr_details()
+ OSDL #1480 - CIB: Create synchronous r/w connections correctly
+ OSDL #1482 - Stonith: stonith command needs a repeat option to make it a better test tool
+ OSDL #1484 - PE: Repair on_fail=stop.  Patch courtesy of YAMAMOTO Takashi.
+ OSDL #1486 - PE: Fix for potential NULL dereference
+ OSDL #1488 - Stonith: Fix passing password to HMC
+ OSDL #1489 - Stonith: Fix HMC errors in hostlist
+ OSDL #1492 - PE: Set common resource attributes before calling the custom unpack function
+ OSDL #1494 - PE: Add node-&gt;score to the clone stability function
+ OSDL #1499 - PE: Perform #uname comparisions without case
+ OSDL #1500 - Tools: Calls to attrd_updater with dampen=0 not processed correctly
+ OSDL #1505 - Findif parsing is all screwed up unless all the parameters are passed, not defaulted.
+ OSDL #1506 - Stonith: Add optional ibmhmc plugin parameters to meta-data
+ OSDL #1507 - Stonith: Allow "stonith -h" to display help for specific device
+ OSDL #1511 - LRM: running two actions for the same resource parallel
+ OSDL #1514 - CRM: Empty values in cib.xml loses other RA parameters
+ OSDL #1523 - Stonith: bladehpi performance enhancements
+ OSDL #1528 - RA: IPaddr2 gives a spurious warning on stop (SGI961736)
+ OSDL #1532 - crmd: Single node cluster shutdown
+ OSDL #1554 - PE: Probes should not have priority INFINITY
+ OSDL #1534 - LRM: Compiliation error on OpenBSD
+ OSDL #1544 - Comms: mixed versions of 2.x and 1.x not working
+ OSDL #1545 - Stonith: stonithd signoff fixesO
+ OSDL #1548 - logging: Ensure logs are logged using the correct component name
+ OSDL #1550 - Stonith: Suicide plugin returns hostlist containing itself
+ OSDL #1553 - Stonith: suicide plugin lacking ST_DEVICENAME
+ OSDL #1554 - crmd: Wait for the membership to stabilize before starting transitions to prevent unconfirmed actions
+ Debian #420206 - RA: Bashisms in IPaddr2
+ Novell #239075 - Admin: crm_master uses the same IDs for permanent and transient attributes
+ Novell #239079 - PE: Ensure action priority is set correctly to ensure notifcations are not lost
+ Novell #239082 - PE: Order promotions after _all_ demotions have completed
+ Novell #239086 - PE: Stable Master placement
+ Novell #244444 - crmd: Free'ing g_alloc() data with cl_free()
+ Novell #246681 - PE: Teach NoRoleChange() how to migrate resource's in the master role
+ Novell #250207 - Split-brain caused by non-identical ping-node configuration and auto-join
+ Novell #250273 - RA: Provide an RA for managing evmsd as a resource
+ Novell #250625 - RA: Xen: Fix status function for newer Xen versions
+ Novell #251689 - PE: Avoid needlessly restarting changed monitor operations for stopping resources
+ Novell #252693 - PE: Enable migration in more scenarios
+ Novell #252693 - PE: Teach the PE how to migrate resources in a starting stack
+ Novell #266551 - Stonith: getconfignames returned hostname instead of hostlist
+ Novell #266551 - doc: Bring the stonith man page up-to-date
- Build Improvements
+ Add explanatory comment for configure kludge
+ Add lha_internal to c-files that dont include it
+ Allow debian packages to also be built directly from Hg archives
+ Always check for the presence of PAM an TLS headers
+ Configure switch to easily enable Valgrind'ing of the CRM
+ Dont install crm-related man pages when --disable-crm is used
+ dopd doesnt build without the crm, disable it if the crm is disabled
+ Fix typo in configure.in
+ Header-file related cleanup
+ Include the exact version being built even when building an archived tree
+ Make supplying a Valgrind suppression file simpler
+ Misc changes to allow building with crm disabled
+ Not all platforms need -lpam
+ Remove redundant and useless items from the build
+ removed unused library dependancies
+ Use existing accounts when building on OSX
+ debian: correct the location of stonith headers in *.files
+ debian: reflect the new header locations in .files
+ debian: sort out a kink in the configure vs. bootstrap logic
+ debian: Packaging updates for 2.0.8-1 release
+ debian: Add heartbeat-2-gui package control files to Makefile
+ Improved grammar in gui package description
+ Improve portability across versions of 'gcc'.
+ Allow data size to be specified
+ Ensure 'awk' is found in runtime environment
+ Use centrally determined GNUTLS cflags and libs
+ Replace multiple derivations (poor) of locations with direct derivation from configure
+ configure: Add closing information to user about '/etc/passwd' and 'make install'
+ Remove an unnecessary 'include' that broke building on some OSes.  It continues to build OK on various OSes.
+ Bourne shell 'test' does not support '-e' flag.  Using '-r' instead.
+ libgnutls: if no 'libgnutls-config', try 'AC_CHECK_LIB(...)'
+ Determine GNUTLS libs centrally in 'configure.in' rather than in individual Makefiles
+ Correct omission of &lt;lha_internal.h&gt;
+ ipctransient tests: Add some flexibility; rationalise some duplicate code
+ ConfigureMe: make usage info a little clearer
+ Add some defaults to configure.in to reduce buildrequires.
+ Remove a bunch of dead code (Perl/SWIG bindings).
+ configure: Check for more pre-requisites of the mgmt/quorum components.
+ Fix use of a future dates in the changelog
- CRM Library Enhancements and Fixes
+ Fix xml parser bug.
+ Allow retrieval of default config values without a hashtable
+ Changes to fake transition key generation
+ Check the return code from fflush() when writing xml files - AnÃÂ­bal Monsalve Salazar
+ Comprehensive review of error recovery logic for potentially failed calls to fopen()
+ Correctly handle syslog facility == 0
+ Delete dead code, make empty_uuid_cache() safe with NULLs
+ Dont call fflush() or flclose() if the output stream was NULL
+ Ensure the normalized result of (add|subtract)_time is updated before returning
+ Fix a use-after-free in parse_time_duration()
+ Fix replace_xml_child() when neither child nor update have an id
+ Fixes for Coverty issues: 52, 55-58, 61-66, 68-69, 71-73 in run 240
+ Gracefully fail when the target XML file is not writable
+ handle NULL inputs to xml_has_children() gracefully
+ Make the use of valgrind a run-time option
+ Memory leak fixes
+ Prevent a number of potential use-after-free's by zero'ing out free'd loop variables
+ Refactor date printing to allow date -&gt; string conversion
+ Remove noisy and inaccurate memory logging
+ Repair the status_printw macro now that we do logging slightly differently
+ size_t is always positive... broke error handling in XML parser.
+ Use-of-NULL in validate_with_dtd() error path... Only clean up what we created
+ When malloc tracking is enabled, pass through the person that called crm_strdup
- CLI Enhancements and Fixes
+ Uninitialized string in heartbeat/findif.c
+ Allow cluster config options to be queried/modified/deleted.  Broken in cs: 13c450735ba7
+ Allow crm_verify to be used with a named DTD file
+ Auto populate the provider for OCF resources if one is not provided
+ crm_primitive.py: Include all node preferences in the one rsc_location constraint
+ Include rsc_location details in the resource listing
+ map cib_NOTEXISTS to 0 for crm_failcount
+ Use the current node uname by default when invoked as crm_standby
+ Add two new views to crm_mon.  Patch by Christofer Edvardsen.
+ Centrally define CIB call options so that -f always works in crm_resource
+ Compile when malloc checking is off, fix last mem leak
+ crm_verify - dont complain about missing status section
+ Dont do ID checks on cibadmin diff's, duplicates are expected
+ Fix a number of memory leaks in attrd
+ Help text and input sanity checks for ocf-tester
+ Include class/type/provider in resource delete commands
+ Place the lifetime rule in the correct location
+ Set a slightly higher default action timeout
+ Show help text for crm_uuid
+ Teach crm_uuid to write ascii-form UUIDs to hb_uuid
+ Terminate the attrd process if heartbeat exits from under it
+ lrmadmin: fix the provider list function: first free data and then the list member.
+ crm_attribute/master/standby: Always default the uname to the current machine
- CIB Enhancements and Fixes
+ Allow cluster options to be created when the default set is not present
+ Allow the remote connection code to be used with or without PAM/TLS
+ Clean up memory at exit
+ Fix a number of memory leaks
+ Compile when malloc tracking is enabled
+ Don't increase the version number if nothing changed
+ Dont examine the group ownership of cib.xml since we set perms to rw-------
+ Exit the writer process correctly so we'll continue to do write outs
+ Prevent node_uuid from having any effect for &lt;crm_config&gt; changes
+ Remove dead code
+ Support processing of commands sent via remote TLS connections.
  See http://www.linux-ha.org/v2/cib_remote for usage details
+ The decision to log failed connection attempts should be left to the client
+ Warn at startup if important version information is missing
- CRMD Enhancements and Fixes
+ ALL completed actions should be removed from the shutdown_list
+ Correctly parse the shutdown timer option
+ Create the restart digest from an object with the same name that the PE uses
+ Delete the HA connection only at exit
+ Enable Valrind'ing of the PE and TE
+ Indicate the LRM error code if an operation cannot be cancelled
+ No need to create the resource if we're trying to delete it
+ Free memory at shutdown
+ Resolve a number of memory leaks
+ Sort out the whole client deletion business.  Also delete the resources hash at shutdown.
+ Improved Logging
+ Remove dead code
- Policy Engine Enhancements and Fixes
+ Always print the resource's node scores
+ Avoid a potential NULL dereference in an error path
+ Clean up generation of and contents of dot-files
+ Create an implicit "cant run here" constraint if an action returns "not installed"
+ Don't start resources until we can verify they're not still running
+ Dont waste time checking action definitions on nodes that wont be running resources
+ Fix a use-after-free of {key} when the monitor op already existed
+ Fix anti-colocation when the RHS is not running
+ Fix gcc warning - dont ignore the result of mktemp()
+ Fix group recovery when a group it depends on is restarted
+ Have group-group recovery work for the right reasons
+ Memory leak fixes
+ Make clones ever so slightly sticky by default
+ Make internal group ordering of bullet-proof
+ Make sure things that shouldn't be true are never true (added asserts)
+ Move DeleteRsc to a more appropriate location
+ Move Ncurses related defines to a more optimal location and make sure its included by crm_mon
+ Not all pseudo operations should be included in the graph
+ Only show elements of the graph in the dot-file by default
+ Prevent a potential NULL deference in clone allocation
+ Provide useful feedback when a cloned resource is found active somewhere it shouldn't be
+ Re-use StartRsc/StopRsc for consistancy
+ Rename elements of the pe_ordering enum for clarity
+ Rename migration variables for clarity
+ Updated regression tests with the revised consistant format
+ Utility functions for finding node's by uuid/uname
- Transitioner Enhancements and Fixes
+ Clean up memory on exit
+ Detect changes to attributes of the cib object
+ Only a limited number of cib attributes warrent aborting the transition
+ Unpack graph actions correctly
+ Improved logging
+ Removed dead code
- Misc
+ Allow heartbeat to easily run with standard libc malloc-and-friends
+ Allow the malloc tracking code to compile on systems where size_t != int
+ Allow writing to syslog to be turned off
+ Better information about valgrind enablement
+ Sanitize the "crm xyz" option processing.  Dont run valgrind if not using libc malloc
+ The DTD used "integer" instead of "number" (which was used by the code)
+ Stonith: Update the rilo RA with enhacements from Tijl Van den broeck and Guy Coates
+ Moved drbd peer outdater into contrib/
+ clplumbing: We _never_ want to trim memory, use -1 instead of 4*size.
+ clplumbing: Coverity 53: Potential NULL pointer dereference.
+ mgmtd: Certain versions of SWIG do not convert the Python "None" to a
+ initscript: set correct Provides: and Should-Start: entries
+ Stonithd: Relaxed a stonithd timeout so that start will succeed if it completes in a minute
+ Dont log dispatch warnings unless they exceed 30ms instead of 10ms
- LRM Enhancements and Fixes
+ Inform clients when an RA is not installed on the machine
+ Expanded regression testing
+ convert the LSB meta-data to XML.
- Resource Agent Enhancements and Fixes
+ -eq is for integer comparisions
+ Avoid concatination with None in riloe stonith agent
+ Filesystem - When checking ocfs2 is cloned, look for variables that are always set
+ Fix up the Dummy metadata
+ Fix variable initialization in pgsql
+ LVS support should always be enabled for the heartbeat IPaddr wrapper
+ Modify the Xen RA to use the new variable names
+ Return after performing a stop action in the Filesystem agent
+ Use configured scratch locations in ibmrsa stonith agent
+ bladehpi readme update
+ Dummy, mysql and drbd - fix meta-data to conform to XML.
+ Convert SAP* from dos
+ Allow ManageRAID to show meta-data at all times.
+ Enhance Pgsql ocf resource to handle multiple instances
+ Xen: Add a little reminder to the code.
+ drbd: Fix some issues and work-arounds for drbdadm bugs.
+ Filesystem: Prune duplicates from active and starting list.
+ Filesystem: Fix metadata require/unique settings.
+ Xen: Fix status function for newer Xen versions (Novell 250625)
+ Filesystem: Increase default suggested timeouts.
+ drbd: When using the nodename-override, drbdadm likes to print an
+ Xen: Swap migrate_to and _from to match PE.
+ Filesystem: Harmless typo corrected.
+ LVM: Add some hints for future todo items.
+ EvmsSCC: More fixes from Jo (Novell 199730)
+ Filesystem: Move ocfs2_init out of the generic stop path (Novell 250603).
+ pgsql: Several enhancements to by Keisuke MORI
+ drbd: Make parsing of drbdadm output more robust.
+ drbd: If drbd is stopped, demote should fail with NOT_RUNNING.
+ Xen: Advertise migrate_from and _to actions. Mention migrate in meta-data.
+ drbd: Add support for overriding the hostname drbd uses based on the clone
+ Filesystem: Whitespace cleanup and minor fixes ("" for -z arguments, using -ne when
+ IPsrcaddr: Added count of how many inet lines to use for the diff -B
+ external/riloe misspelled RI_LOGIN variable name.
- ldirectord Enhancements and Fixes
+ Use $arrayOfDNs[0] instead of @arrayOfDNs[0] to get rid of the following
+ Remove duplicate $recstr
+ Change the code around a bit to avoid a warning about code following exec
+ Dont use SIGENT, as it doesn't seem to exist.
+ 92d4e521db53 Handle $line more carefully
+ Make sure that frequency is intialised before it is used
+ Use $$ instead of (the uninitialised) $pid
+ Remove useless calls to lc()
+ Make sure that DEBUG is initialised
+ Use implicit variables in read_config()
+ Use the -w flag to perl to find warnings/errors
+ Make ldirectord's version valid
+ If weight is not supplied, set it to 1
+ Fix broken reload command
- Testing Improvements
+ Account for a small timing window in the ResourceRecover test
+ Explain why we're aborting when nodes aren't found in DNS
+ Ignore ResourceRecover testing artifacts
+ Indicate debug log messages
+ Improved Logging
+ Remove resource tied to the DC - the #is_dc comparision is irrelevant
+ Rewrite the LSBDummy RA
+ Rewrite the ResourceRecover to use asynchronous failures
+ BSC: (1) test IPC before its dependencies; (2) signal-handling: improve and catch some more.
+ ocf-tester: Continue if validate-all succeeds.
+ ocf-tester: Exit with appropriate exit code for success or failure.
+ ocf-tester: Various integers were compared as strings.
+ BSC: Test Dummy, IPaddr, IPaddr2, Filesystem RAs.
+ BSC: Skip IPaddr2 test if ip not installed.</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1173823200">- version 2.0.9-1
- New Upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1170194400">- version 2.0.8-1
- New Upstream
+ Allow colocation based on node attributes other than #id
+ SAPDatabase and SAPInstance resource agents added.
+ Core/CRM: Improvements to the memory allocation, message, and string
  handling libraries result in an overall speed-up of 65%.
+ CRM: Fix ISO date handling for Jan 01 of any year.
+ CRM: Only update the voted hashtable with no-votes for the current
  election.
+ RA: IPaddr: Support netmask both in CIDR and in dotted-quad notation.
+ logd: Fix trailing random byte in log messages (OSDL 1268).
+ heartbeat:  Work around a glibc/times() bug to prevent failures every
  497 days on 32-bit Linux (OSDL 1407).
+ heartbeat: Retransmits were requested more often than they'd be
  honored (OSDL 1455).
+ CTS/PE: Introduce CRM option "startup_fencing" to disable fencing of
  unseen nodes, because CTS can't handle this.
+ PE: Split-off "network-delay" option from global_timeout to separate
  network delays from action timeouts.
+ PE/CRM: Binaries now support being called with "metadata" command to
  document the complete list of options in the CIB.
+ PE: DTD: Include start_delay as a property of operation objects.
+ PE: Fix implementation of date_spec when no range is specified.
+ PE: Enforce clone_node_max for already running resources.
+ PE: Clones were not being stopped on node shutdown.
+ PE: Allow resource colocation based on node attributes other than #id
  (node_attribute option added to rsc_colocation constraint).
+ PE: Improved handling when timeout &lt; start_delay (OSDL 1421).
+ PE: Pre-notifications for promote occured before start was completed
  (OSDL 1447).
+ PE: Allow any two pairs of actions to be specified for rsc_order (OSDL
  1452).
+ PE: Handle asymmetric clusters where RAs are not installed on all
  nodes.
+ PE: Allow resource stickiness and failure stickiness to change based
  on node attributes.
+ CIB: Fix update_attr() causes attrd to hang at shutdown when there is
  no DC (OSDL 1432).
+ CIB: Corrupted config file prevents heartbeat restart (OSDL 1385).
+ CIB: Startup processing improvements; DTD validation will be
  automatically activated if the CIB on-disk validates.
+ TE: Fix memory leak.
+ TE: Failcount wasn't being updated in all cases.
+ TE: never update the CIB with unconfirmed stop actions (OSDL 1435).
+ CTS/RA: Replace OCFMSDummy with Stateful RA.
+ CCM: Centralize quorum calculation on the transition leader.
+ CCM: Support split-site and external quorum servers.
+ CRM: Ignore status update for non-members (ie, ping nodes).
+ LRM: Don't postpone postponed resources.
+ LRM: Fix restart in case an lrmd is already running (OSDL 1333).
+ LRM: Fix overflow in RA output handling (OSDL 1433).
+ mgmtd: Robustness and memory leak fixes.
+ mgmtd: make the port used configurable (OSDL 1390).
+ haresources2cib.py: Improve v1 to v2 conversion tool (OSDL 1415).
+ GUI: ping nodes appear as failed in gui (OSDL 1394).
+ GUI: Reduce duplicates in RA list by only showing the OCF one if both
  ocf and hb RA exist) (OSDL 1338).
+ GUI: Add new resource to currently selected group (OSDL 1414).
+ GUI: support all attributes of operations (OSDL 1372).
+ GUI: Create first resource along with a new group; delete group when
  last resource is removed (OSDL 1287).
+ GUI: Set defaults for clones and m/s RAs (OSDL 1352).
+ GUI: Use meta-data defaults when creating actions (OSDL 1351).
+ GUI: GUI: start all sub resources when we start a group or a clone
  (OSDL 1449).
+ GUI: support ordered==false or non-collocated==false groups (OSDL
  1257).
+ stonithd: Fix memory leak.
+ stonithd: Remove reliance on farside_pid (OSDL 1412).
+ stonith external/riloe: Make the login name and iLo device address
  configurable.
+ crm_resource: Add manpage.
+ RA: PureFTPd, mysql, ManageVE (to manage an OpenVZ container),
  ManageRAID, WAS6 (Websphere 6) added.
+ RA: Include SAPInstance and SAPDatabase (FATE 2172).
+ RA: IPaddr cleanup to avoid race conditions in the script. Report
  status failure when an IPaddr is active on a different interface but
  allow it to be stopped.
+ RA: IPaddr2 fixes for loopback bound addresses.
+ RA: Filesystem reported wrong status/monitor results for OCFS2 in some
  circumstances (Novell 187080).
+ RA: Improve heartbeat v1 wrappers.
+ RA: Fix db2 monitor operation.
+ RA: ldirectord: Make the emailalert and emailalertfreq options global
  as well as non-global, make checkcount global as well as per-virtual,
  add radius check, improvements to documentation.
+ RA: pgsql: Make server logfile configurable and implement
  validate-all. New parameter ctl_opt added to pgsql to support
  additional options for pg_ctl.
+ CRM: First beginnings of a cluster-wide shell (FATE ...)
+ BEAM / Coverity induced fixes.
+ Minor compatibility fixes (OSDL 1405).
+ Logging improvements all over the place.
+ Extended support for master-slave resources (FATE 300723).
+ OCF RA API compliance checker (FATE 300737).
+ Support weak and uni-directional collocation constraints (FATE
  300792).
+ Many bugfixes.
- errata: CVE-2006-3121 was incorrectly refered to as CVE-2006-3821 in
  the changelog for 2.0.6-2 and 2.0.7-1
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-2-global.patch (introduced in 2.0.6-2)
- Remove alternate dependancy on netkit-ping as it is being removed
  from Debian</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1164924000">- version 2.0.7-2
- Add dependancy and build dependancy on psmisc for fuser
  Thanks to Hans-Joachim Baader
- Acknowldge NMU by Roger Leigh</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155592800">- version 2.0.7-1
- New Upstream
 - Remote Denial of Service attack (#195068, CVE-2006-3121).
 - Bugfixes to the CRM, the LRM and the GUI.
 - GUI failed to connect to and retrieve data from the cluster (#198747).
 - Improved log messages.
 - ptest can now read compressed XML directly. Do not include optional
   actions and dependancies in ptest output by default.
 - crm_resource will now warn and demand exact specification when trying
   to modify an attribute while several sets are present.
 - lrmd now limits itself to a maximum of 4 child processes, to avoid
   overloading the node and causing too long delays.
 - pengine: Processing of pending probes; should not be treated as if the
   resource is running or in a known state.
 - target_role now is only taken into account for managed resources.
 - cib: Detect more cases where the nodes section needs to be refreshed.
 - More accurately determine node status. (OSDL 1369)
 - Filter out stop requests that would require a resource to be added.
   (OSDL 1369)
 - Send filtered resource "stops" as successes as to not block waiting
   for filtered actions.
 - By default pass the TE graph via IPC until its too large for IPC to
   deal with, only then fall back to passing via the disk.
 - Stopping of stonith resources can never require stonith, even if the
   node its running on failed; prevent graph loop. (OSDL 1376)
 - STONITH events need to inputs to start events (not stops), to avoid
   graph loop in combination with "stop before" dependencies (ie,
   groups).
 - crmd: Dont stall the FSA if we try to invoke the TE after we've
   stopped it.
 - Always unpack the correct part of a diff operation; diffs should now
   apply in more cases, reducing the need for full refreshs.
 - Correctly observe --disable-snmp-subagent during build.
 - In some states the membership is invalid and shouldn't be referenced.
   (OSDL 1377)
 - Fix a use-before-null-check issue in lrmd. (Coverity #48)
 - OCF Resource Agents outside the default path were incorrectly found to
   be not executable.
 - ccm: hostcache and delnodecache files should not be authoritative if
   autojoin is disabled. (OSDL 1226)
 - With autojoin, llm_get_nodecount() can't return the real max nodes
   anymore, this may cause memory corruption. (OSDL 1382)
 - Fix a memory corruption in membership layer, more frequently observed
   with larger (&gt;5) clusters.
 - Change the default api-auth for pingd to uid=root
 - Dummy RA now OCF compliant.
 - Fix pingd RA metadata to be XML compliant.
- Dropped the following patches as they are now upstream
  - ldirectord-1.141-emailalert-1-quiet.patch  (introduced in 2.0.6-2)
  - ldirectord-1.141-readline_workaround.patch (introduced in 2.0.6-2)
  - CVE-2006-3821.patch                        (introduced in 2.0.6-2)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1155074400">- version 2.0.6-2
- ldirectord-1.141-emailalert-1-quiet.patch
  Don't send email alerts if the alert address is not configured
- ldirectord-1.141-emailalert-2-global.patch
  Allow emailalert and emailalertfreq directives to be global
  as well as per-virtual service
- ldirectord-1.141-readline_workaround.patch
  readline doesn't seem to return lines after Net::FTP
  has been called, so split them up by hand.
- Added recommends iptables to heartbeat, as it is needed
  for the portblock resource to function correctly
- Added /var/lib/heartbeat/pengine directory
- Replace 02-chown-check.patch with chown-check-2.patch
  - use the environement variable FAKED_MODE instead of FAKEROOTKEY to check
    if code is runing in fakeroot. At some stage around fakeroot 1.5.10
    FAKEROOTKEY disapeared. Ran autoconf manually to effect this change
    after repatching.
  - Updated 02-chown-check.patch: fix typos in comment
- CVE-2006-3821.patch
  Fix remote denial of causes caused by insufficient bounds checking
  on data read from the network.
  CVE-2006-3821
- Python transition - http://wiki.debian.org/DebianPython/NewPolicy
  - Update build dependancy on debhelper from (&gt;= 4.0.0) to (&gt;= 5.0.37.2)
  - Add dh_python call to debian/rules
  - created debian/pycompat with contents of "2"
  - heartebeat: deplaced depenancy on python with one on ${python:Depends}
  - Added XB-Python-Version: ${python:Versions} to each package
  - Replace build dependancy on python2.3-dev with one on python-dev
  - Use python-central
    + Add build depends on python-central (&gt;= 0.5)
    + Add dh_pycentral call right before dh_python in debian/rules
    + Add XS-Python-Version: current in the source stanza of debian/control</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1152136800">- version 2.0.5-8
- ldirectord-2: Add missing dependancy on libmailtools-perl
                (Mail::Send)
- ldirectord-2: Add missing dependancy on libnet-perl
                (Net::SMTP, Net::FTP, Net::POP3)
- ldirectord-2: Remove unneccesary dependancy on adduser
- Automake transition: http://wiki.debian.org/AutomakeTransition
  - Remove unneccesary build-depends on automake1.9 | automaken
  - Remove unneccesary build-conflicts on automake1.4</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1151618400">- version 2.0.5-7
- Don't run deluser and delgroup in postrm
  - These commands may not be available at this time
  - If there are any files left that belong to this user or group
    then they will be left unowned and get inhereited by the
    next user that comes along that happens to have hacluster's
    old userid or the old haclient groupid respectively.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-5
- Reverse the change made in 2.0.5-4
  It turns out that in heartbeat (as opposed to heartbeat)
  is a script which calls a binary that is located in
  /usr/lib/ocf/resource.d/heartbeat/</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1150149600">- version 2.0.5-4
- Move IPv6addr from /etc/ha.d/resource.d/ into /usr/lib/heartbeat,
  and then symlink that back into /etc/ha.d/resource.d/ as binaries
  are not allowed in /etc</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1149544800">- version 2.0.5-3
- Fix libgnutls binary dependancy
  - Build-Depends on libgnutls-dev instead of libgnutls13-dev
  - Recompile against libgnutls13 in place of libgnutls11
  -</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1148076000">- version 2.0.5-2
- Make use of invoke-rc.d
- Update from standards versoin from 3.6.2 to 3.7.2</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1147212000">- version 2.0.5-1
- New Upstream
- Removed build depenancy on openssl-devel,
  as heartbeat no longer uses openssl directly.
  (Libraries that heartbeat depends on may in turn
   depend on openssl creating an indirect depenancy
   or build-dependancy).</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1141855200">- version 2.0.4-1
- New Upstream
- Don't try and stop heartbeat in preinst on the first install</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139954400">- version 2.0.3-2
- Add build dependancy on libncurses-dev to allow crm_mon to work
  Thanks to Guy Coates
- Move hacluster user and haclient group creation (don't ask me why the
  user and group names are different) from preinst to postinst.
  Once upon a time there might have been a need for it in preinst,
  but the current packaging changes files to have the hacluster user
  and haclient group as neccessary in the postinst. So there is
  no need to create them before postinst.
  This is a better fix to #352158, and the pre-depends on adduser
  has been changed to a depends accordingly.
- Stop heartbeat in preinst</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1139695200">- version 2.0.3-1
- New Upstream
- Make sure adduser is passed the --system flag
- Slightly Enhanced package descriptions
- Add build dependancy on swig
- As PYTHON_PATH has been added to configure.in it seems that autoconf1.4
  can no longer build this tree.  Currently autoconf is provided by
  autoconf1.4, and autoconfn is a virtual package provided by autoconf1.7,
  1.8 and 1.9.  Accordingly, replace the autoconf build dependancy with
  autoconf1.9 | autoconfn.  And add a build conflict on autoconf1.4. This
  way the autoconf command should be autoconf1.7, 1.8 or 1.9, but not 1.4
  as was previously the case.
- Don't apply 00-ssh_scp_path.patch as it should no longer be needed,
  instead add a build dependancy on openssh-client.
  Also removed call to relevant configure options.
- Removed configure option that no longer exists
  --enable-checkpointd
- Removed configure options that are now on by default
  --enable-crm --enable-lrm
- Add build dependancy on libgnutls11-dev, as 1.0 probably doesn't
  compile as _t types don't exist.
  http://lists.gnu.org/archive/html/help-gnutls/2004-08/msg00001.html
- Fix insonsistency between hb_stanby(1) man page, an the wiki
- Make /usr/bin/cl_status setgid
- Make sure that /var/run/heartbeat/{ccm,crm} exist on install
  else postinst, and thus the install will abort.
- Fix inconsistency between hb_standb(1) man page and wiki
- Add Pre-Depends on adduser
- Add management tool
  ./confgure --enable-mgmt
  Build-Depends: python2.3-dev, libpam0g-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1129759200">- version 2.0.2-5
- Change libcurl3-dev dependancy to libcurl3-openssl-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1128031200">- version 2.0.2-4
- Include /var/lib/heartbeat/ccm and /var/run/heartbeat/crm</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-3
- Get rid of bogus touching of config.status and friends in clean target,
  which if run as root causes build failures.</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127858400">- version 2.0.2-2
- Add build dependancy on libltdl3-dev</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127772000">- version 2.0.2-1
- New upstream</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127599200">- version 2.0.1-4
- Add /var/run/heartbeat directory to package
  http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=900</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-3
- Restrurctured  provides, conflicts and replaces
- Made heartbeat-dev depend on heartbeat, not heartbeat</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1127426400">- version 2.0.1-2
- Uptream initally made the wrong tar ball avaliable for
  2.0.1 and this was used to build 2.0.1-1.
  I have asked 2.0.1-1 not to be accepted into the Debian Archive
  for this reason. 2.0.1-2 uses the updated, correct tarball from
  upstream.
- Note that this package has a binary dependancy on libssl
  only because of linking against libsnmp9 (5.2.1.2-3)
- Add build dependancy on libsensors-dev (for libsnmp9)</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1126821600">- version 2.0.1-1
- New upstream
- Add /var/lib/heartbeat/cores/root, /var/lib/heartbeat/cores/hacluster
  and /var/lib/heartbeat/cores/nobody
- Remove usr/lib/stonith/plugins/stonith2/riloe.so, its
  no longer in the tree
- Enable snmp_agent
- Added new libplumbgpl
- Added new ha_logd.cf
- Added new iso8601 executable
- Temporarly remove the drac3 module as GPL code that links
  against OpenSSL is not acceptable to Debian.
  - http://lists.community.tummy.com/pipermail/linux-ha-dev/2005-August/011266.html
  - http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=853
- Update build dependncy from libsnmp5-dev to libsnmp9-dev
- Make configure chown test fakeroot aware to avoid build hang
- Fix syntax error in db OCF resource
- Make crm/test/helper.sh have #! /bin/bash
- Make resources/OCF/ocf-shellfuncs.in have #! /bin/bash
- Update FSF address
- Zero config.status, libltdl/config.log and libltdl/config.status on clean</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1123106400">- version 2.0.0-2
- Add /var/lib/heartbeat/ccm and /var/lib/heartbeat/cores</changelog><changelog author="Simon Horman &lt;horms@debian.org&gt;" date="1122760800">- version 2.0.0-1
- New upstream
- Added dependancy on libnet-dns-perl to ldirectord
- Added --enable-checkpointd to configure arguments
- Added --disable-snmp-subagent to configure arguments
- Added --disable-swig to configure arguments
- Add build dependancy on uuid-dev
- Readranged packages to allow heartbeat 1.2.X to exist in debian
  and heartebat 2.X to be heartbeat until heartbeat gets
  a bit more testing in the wild. Also consoldidated binary
  packages into heartbeat, and development packages into
  heartbeat-dev, ldirectord is still in its own package,
  ldirectord2, as it drags in a lot of dependancies that
  no other part of the system uses.</changelog></package>
<package pkgid="d83354f449157cf3ac72c901c1a3762e083275b3" name="pacemaker" arch="i386"><version epoch="0" ver="1.0.1" rel="6.2.sl5"/><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1227045600">- version 1.0.1-1
- Update source tarball to revision: 6fc5ce8302ab (stable-1.0) tip
- Statistics:
    Changesets:      170
    Diff:            816 files changed, 7633 insertions(+), 6286 deletions(-)
- Changes since Pacemaker-1.0.1
+ High: ais: Allow the crmd to get callbacks whenever a node's state changes
+ High: ais: Create an option for starting the mgmtd daemon automatically
+ High: ais: Ensure HA_RSCTMP exists for use by resource agents
+ High: ais: Hook up the openais.conf config logging options
+ High: ais: Zero out the PID of disconnecting clients
+ High: cib: Ensure global updates cause a disk write when appropriate
+ High: Core: Add an extra snaity check to getXpathResults() to prevent segfaults
+ High: Core: Don't redefine __FUNCTION__ unnecessarily
+ High: Core: Repair the ability to have comments in the configuration
+ High: crmd: Bug:1975 - crmd should wait indefinitely for stonith operations to complete
+ High: crmd: Ensure PE processing does not occur for all error cases in do_pe_invoke_callback
+ High: crmd: Requests to the CIB should cause any prior PE calculations to be ignored
+ High: heartbeat: Wait for membership 'up' events before removing stale node status data
+ High: PE: Bug LF:1988 - Ensure recurring operations always have the correct target-rc set
+ High: PE: Bug LF:1988 - For unmanaged resources we need to skip the usual can_run_resources() checks
+ High: PE: Ensure the terminate node attribute is handled correctly
+ High: PE: Fix optional colocation
+ High: PE: Improve up the detection of 'new' nodes joining the cluster
+ High: PE: Prevent assert failures in master_color() by ensuring unmanaged masters are always reallocated to their current location
+ High: Tools: crm cli: parser: return False on syntax error and None for comments
+ High: Tools: crm cli: unify template and edit commands
+ High: Tools: crm_shadow - Show more line number information after validation failures
+ High: Tools: hb2openais: add option to upgrade the CIB to v3.0
+ High: Tools: hb2openais: add U option to getopts and update usage
+ High: Tools: hb2openais: backup improved and multiple fixes
+ High: Tools: hb2openais: fix class/provider reversal
+ High: Tools: hb2openais: fix testing
+ High: Tools: hb2openais: move the CIB update to the end
+ High: Tools: hb2openais: update logging and set logfile appropriately
+ High: Tools: LF:1969 - Attrd never sets any properties in the cib
+ High: Tools: Make attrd functional on OpenAIS
+ Medium: ais: Hook up the options for specifying the expected number of nodes and total quorum votes
+ Medium: ais: Look for pacemaker options inside the service block with 'name: pacemaker' instead of creating an addtional configuration block
+ Medium: ais: Provide better feedback when nodes change nodeid's (in openais.conf)
+ Medium: cib: Always store cib contents on disk with num_updates=0
+ Medium: cib: Ensure remote access ports are cleaned up on shutdown
+ Medium: crmd: Detect deleted resource operations automatically
+ Medium: crmd: Erase a node's resource operations and transient attributes after a successful STONITH
+ Medium: crmd: Find a more appropriate place to update quorum and refresh attrd attributes
+ Medium: crmd: Fix the handling of unexpected PE exits to ensure the current CIB is stored
+ Medium: crmd: Fix the recording of pending operations in the CIB
+ Medium: crmd: Initiate an attrd refresh _after_ the status section has been fully repopulated
+ Medium: crmd: Only the DC should update quorum in an openais cluster
+ Medium: Ensure meta attributes are used consistantly
+ Medium: PE: Allow group and clone level resource attributes
+ Medium: PE: Bug N:437719 - Ensure scores from colocated resources count when allocating groups
+ Medium: PE: Prevent lsb scripts from being used in globally unique clones
+ Medium: PE: Make a best-effort guess at a migration threshold for people with 0.6 configs
+ Medium: Resources: controld - ensure we are part of a clone with globally_unique=false
+ Medium: Tools: attrd - Automatically refresh all attributes after a CIB replace operation
+ Medium: Tools: Bug LF:1985 - crm_mon - Correctly process failed cib queries to allow reconnection after cluster restarts
+ Medium: Tools: Bug LF:1987 - crm_verify incorrectly warns of configuration upgrades for the most recent version
+ Medium: Tools: crm (bnc#441028): check for key error in attributes management
+ Medium: Tools: crm_mon - display the meaning of the operation's rc code instead of the status
+ Medium: Tools: crm_mon - Fix the display of timing data
+ Medium: Tools: crm_verify - check that we're being asked to validate a complete config
+ Medium: xml: Relax the restriction on the contents of rsc_locaiton.node</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1224194400">- version 1.0.0-1
- Update source tarball to revision: 388654dfef8f tip
- Statistics:
    Changesets:      261
    Diff:            3021 files changed, 244985 insertions(+), 111596 deletions(-)
- Changes since f805e1b30103
+ High: add the crm cli program
+ High: ais: Move the service id definition to a common location and make sure it is always used
+ High: build: rename hb2openais.sh to .in and replace paths with vars
+ High: cib: Implement --create for crm_shadow
+ High: cib: Remove dead files
+ High: Core: Allow the expected number of quorum votes to be configrable
+ High: Core: cl_malloc and friends were removed from Heartbeat
+ High: Core: Only call xmlCleanupParser() if we parsed anything.  Doing so unconditionally seems to cause a segfault
+ High: hb2openais.sh: improve pingd handling; several bugs fixed
+ High: hb2openais: fix clone creation; replace EVMS strings
+ High: new hb2openais.sh conversion script
+ High: PE: Bug LF:1950 - Ensure the current values for all notification variables are always set (even if empty)
+ High: PE: Bug LF:1955 - Ensure unmanaged masters are unconditionally repromoted to ensure they are monitored correctly.
+ High: PE: Bug LF:1955 - Fix another case of filtering causing unmanaged master failures
+ High: PE: Bug LF:1955 - Umanaged mode prevents master resources from being allocated correctly
+ High: PE: Bug N:420538 - Anit-colocation caused a positive node preference
+ High: PE: Correctly handle unmanaged resources to prevent them from being started elsewhere
+ High: PE: crm_resource - Fix the --migrate command
+ High: PE: MAke stonith-enabled default to true and warn if no STONITH resources are found
+ High: PE: Make sure orphaned clone children are created correctly
+ High: PE: Monitors for unmanaged resources don't need to wait for start/promote/demote actions to complete
+ High: stonithd (LF 1951): fix remote stonith operations
+ High: stonithd: fix handling of timeouts
+ High: stonithd: fix logic for stonith resource priorities
+ High: stonithd: implement the fence-timeout instance attribute
+ High: stonithd: initialize value before reading fence-timeout
+ High: stonithd: set timeouts for fencing ops to the timeout of the start op
+ High: stonithd: stonith rsc priorities (new feature)
+ High: Tools: Add hb2openais - a tool for upgrading a Heartbeat cluster to use OpenAIS instead
+ High: Tools: crm_verify - clean up the upgrade logic to prevent crash on invalid configurations
+ High: Tools: Make pingd functional on Linux
+ High: Update version numbers for 1.0 candidates
+ Medium: ais: Add support for a synchronous call to retrieve the node's nodeid
+ Medium: ais: Use the agreed service number
+ Medium: Build: Reliably detect heartbeat libraries during configure
+ Medium: Build: Supply prototypes for libreplace functions when needed
+ Medium: Build: Teach configure how to find corosync
+ Medium: Core: Provide better feedback if Pacemaker is started by a stack it doesn't support
+ Medium: crmd: Avoid calling GHashTable functions with NULL
+ Medium: crmd: Delay raising I_ERROR when the PE exits until we've had a chance to save the current CIB
+ Medium: crmd: Hook up the stonith-timeout option to stonithd
+ Medium: crmd: Prevent potential use-of-NULL in global_timer_callback
+ Medium: crmd: Rationalize the logging of graph aborts
+ Medium: PE: Add a stonith_timeout option and remove new options that are better set in rsc_defaults
+ Medium: PE: Allow external entities to ask for a node to be shot by creating a terminate=true transient node attribute
+ Medium: PE: Bug LF:1950 - Notifications do not contain all documented resource state fields
+ Medium: PE: Bug N:417585 - Don't restart group children who's individual score drops below zero
+ Medium: PE: Detect clients that disconnect before receiving their reply
+ Medium: PE: Implement a true maintenance mode
+ Medium: PE: Implement on-fail=standby for NTT.  Derived from a patch by Satomi TANIGUCHI
+ Medium: PE: Print the correct message when stonith is disabled
+ Medium: PE: ptest - check the input is valid before proceeding
+ Medium: PE: Revert group stickiness to the 'old way'
+ Medium: PE: Use the correct attribute for action 'requires' (was prereq)
+ Medium: stonithd: Fix compilation without full heartbeat install
+ Medium: stonithd: exit with better code on empty host list
+ Medium: tools: Add a new regression test for CLI tools
+ Medium: tools: crm_resource - return with non-zero when a resource migration command is invalid
+ Medium: tools: crm_shadow - Allow the admin to start with an empty CIB (and no cluster connection)
+ Medium: xml: pacemaker-0.7 is now an alias for the 1.0 schema</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1222120800">- version 0.7.3-1
- Update source tarball to revision: 33e677ab7764+ tip
- Statistics:
    Changesets:      133
    Diff:            89 files changed, 7492 insertions(+), 1125 deletions(-)
- Changes since f805e1b30103
+ High: Tools: add the crm cli program
+ High: Core: cl_malloc and friends were removed from Heartbeat
+ High: Core: Only call xmlCleanupParser() if we parsed anything.  Doing so unconditionally seems to cause a segfault
+ High: new hb2openais.sh conversion script
+ High: PE: Bug LF:1950 - Ensure the current values for all notification variables are always set (even if empty)
+ High: PE: Bug LF:1955 - Ensure unmanaged masters are unconditionally repromoted to ensure they are monitored correctly.
+ High: PE: Bug LF:1955 - Fix another case of filtering causing unmanaged master failures
+ High: PE: Bug LF:1955 - Umanaged mode prevents master resources from being allocated correctly
+ High: PE: Bug N:420538 - Anit-colocation caused a positive node preference
+ High: PE: Correctly handle unmanaged resources to prevent them from being started elsewhere
+ High: PE: crm_resource - Fix the --migrate command
+ High: PE: MAke stonith-enabled default to true and warn if no STONITH resources are found
+ High: PE: Make sure orphaned clone children are created correctly
+ High: PE: Monitors for unmanaged resources don't need to wait for start/promote/demote actions to complete
+ High: stonithd (LF 1951): fix remote stonith operations
+ High: Tools: crm_verify - clean up the upgrade logic to prevent crash on invalid configurations
+ Medium: ais: Add support for a synchronous call to retrieve the node's nodeid
+ Medium: ais: Use the agreed service number
+ Medium: PE: Allow external entities to ask for a node to be shot by creating a terminate=true transient node attribute
+ Medium: PE: Bug LF:1950 - Notifications do not contain all documented resource state fields
+ Medium: PE: Bug N:417585 - Don't restart group children who's individual score drops below zero
+ Medium: PE: Implement a true maintenance mode
+ Medium: PE: Print the correct message when stonith is disabled
+ Medium: stonithd: exit with better code on empty host list
+ Medium: xml: pacemaker-0.7 is now an alias for the 1.0 schema</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1219269600">- version 0.7.1-1
- Update source tarball to revision: f805e1b30103+ tip
- Statistics:
    Changesets:      184
    Diff:            513 files changed, 43408 insertions(+), 43783 deletions(-)
- Testing Notes:
+ Test hardware:
+ All testing was performed with STONITH enabled
+ Pending bugs encountered during testing:
- Changes since 0.7.0-19
+ Fix compilation when GNUTLS isnt found
+ Hg: Use the default branch name for dev
+ High: admin: Fix use-after-free in crm_mon
+ High: Build: Remove testing code that prevented heartbeat-only builds
+ High: cib: Use single quotes so that the xpath queries for nvpairs will succeed
+ High: crmd: Always connect to stonithd when the TE starts and ensure we notice if it dies
+ High: crmd: Correctly handle a dead PE process
+ High: crmd: Make sure async-failures cause the failcount to be incrimented
+ High: PE: Bug LF:1941 - Handle failed clone instance probes when clone-max &lt; #nodes
+ High: PE: Parse resource ordering sets correctly
+ High: PE: Prevent use-of-NULL - order-&gt;rsc_rh will not always be non-NULL
+ High: PE: Unpack colocation sets correctly
+ High: Tools: crm_mon - Prevent use-of-NULL for orphaned resources
+ Medium: ais: Add support for a synchronous call to retrieve the node's nodeid
+ Medium: ais: Allow transient clients to receive membership updates
+ Medium: ais: Avoid double-free in error path
+ Medium: ais: Include in the mebership nodes for which we haven't determined their hostname
+ Medium: ais: Spawn the PE from the ais plugin instead of the crmd
+ Medium: cib: By default, new configurations use the latest schema
+ Medium: cib: Clean up the CIB if it was already disconnected
+ Medium: cib: Only incriment num_updates if something actually changed
+ Medium: cib: Prevent use-after-free in client after abnormal termination of the CIB
+ Medium: Core: Fix memory leak in xpath searches
+ Medium: Core: Get more details regarding parser errors
+ Medium: Core: Repair expand_plus_plus - don't call char2score on unexpanded values
+ Medium: Core: Switch to the libxml2 parser - its significantly faster
+ Medium: Core: Use a libxml2 library function for xml -&gt; text conversion
+ Medium: crmd: Asynchronous failure actions have no parameters
+ Medium: crmd: Avoid calling glib functions with NULL
+ Medium: crmd: Do not allow an election to promote a node from S_STARTING
+ Medium: crmd: Do not vote if we've not completed the local startup
+ Medium: crmd: Fix te_update_diff() now that get_object_root() functions differently
+ Medium: crmd: Fix the lrmd xpath expressions to not contain quotes
+ Medium: crmd: If we get a join offer during an election, better restart the election
+ Medium: crmd: No further processing is needed when using the LRM's API call for failing resources
+ Medium: crmd: Only update have-quorum if the value changed
+ Medium: crmd: Repair the input validation logic in do_te_invoke
+ Medium: cts: CIB's can no longer contain comments
+ Medium: cts: Enable a bunch of tests that were incorrectly disabled
+ Medium: cts: The libxml2 parser wont allow v1 resources to use integers as parameter names
+ Medium: Don't use the cluster UID and GID directly.  Look them up based on the configured value of HA_CCMUSER
+ Medium: Fix compilation when heartbeat is not supported
+ Medium: PE: Allow groups to be involved in optional ordering constraints
+ Medium: PE: Allow sets of operations to be reused by multiple resources
+ Medium: PE: Bug LF:1941 - Mark extra clone instances as orphans and don't show inactive ones
+ Medium: PE: Determin the correct migration-threshold during resource expansion
+ Medium: PE: Implement no-quorum-policy=suicide (FATE #303619)
+ Medium: pengine: Clean up resources after stopping old copies of the PE
+ Medium: pengine: Teach the PE how to stop old copies of itself
+ Medium: Tools: Backport hb_report updates
+ Medium: Tools: cib_shadow - On create, spawn a new shell with CIB_shadow and PS1 set accordingly
+ Medium: Tools: Rename cib_shadow to crm_shadow</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1216418400">- version 0.7.0-19
- Update source tarball to revision: 007c3a1c50f5 (unstable) tip
- Statistics:
    Changesets:      108
    Diff:            216 files changed, 4632 insertions(+), 4173 deletions(-)
- Changes added since unstable-0.7
+ High: admin: Fix use-after-free in crm_mon
+ High: ais: Change the tag for the ais plugin to "pacemaker" (used in openais.conf)
+ High: ais: Log terminated processes as an error
+ High: cib: Performance - Reorganize things to avoid calculating the XML diff twice
+ High: PE: Bug LF:1941 - Handle failed clone instance probes when clone-max &lt; #nodes
+ High: PE: Fix memory leak in action2xml
+ High: PE: Make OCF_ERR_ARGS a node-level error rather than a cluster-level one
+ High: PE: Properly handle clones that are not installed on all nodes
+ Medium: admin: cibadmin - Show any validation errors if the upgrade failed
+ Medium: admin: cib_shadow - Implement --locate to display the underlying filename
+ Medium: admin: cib_shadow - Implement a --diff option
+ Medium: admin: cib_shadow - Implement a --switch option
+ Medium: admin: crm_resource - create more compact constraints that don't use lifetime (which is deprecated)
+ Medium: ais: Approximate born_on for OpenAIS based clusters
+ Medium: cib: Remove do_id_check, it is a poor substitute for ID validation by a schema
+ Medium: cib: Skip construction of pre-notify messages if no-one wants one
+ Medium: Core: Attempt to streamline some key functions to increase performance
+ Medium: Core: Clean up XML parser after validation
+ Medium: crmd: Detect and optimize the crm's behavior when processing diffs of an LRM refresh
+ Medium: Fix memory leaks when resetting the name of an XML object
+ Medium: PE: Prefer the current location if it is one of a group of nodes with the same (highest) score</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1214431200">- version 0.7.0-1
- Update source tarball to revision: bde0c7db74fb tip
- Statistics:
    Changesets:      439
    Diff:            676 files changed, 41310 insertions(+), 52071 deletions(-)
- Changes added since stable-0.6
+ High: A new tool for setting up and invoking CTS
+ High: Admin: All tools now use --node (-N) for specifying node unames
+ High: Admin: All tools now use --xml-file (-x) and --xml-text (-X) for specifying where to find XML blobs
+ High: cib: Cleanup the API - remove redundant input fields
+ High: cib: Implement CIB_shadow - a facility for making and testing changes before uploading them to the cluster
+ High: cib: Make registering per-op callbacks an API call and renamed (for clarity) the API call for requesting notifications
+ High: Core: Add a facility for automatically upgrading old configurations
+ High: Core: Adopt libxml2 as the XML processing library - all external clients need to be recompiled
+ High: Core: Allow sending TLS messages larger than the MTU
+ High: Core: Fix parsing of time-only ISO dates
+ High: Core: Smarter handling of XML values containing quotes
+ High: Core: XML memory corruption - catch, and handle, cases where we're overwriting an attribute value with itself
+ High: Core: The xml ID type doesn't allow UUIDs that start with a number
+ High: Core: Implement XPath based versions of query/delete/replace/modify
+ High: Core: Remove some HA2.0.(3,4) compatability code
+ High: crmd: Overhaul the detection of nodes that are starting vs. failed
+ High: PE: Bug LF:1459 - Allow failures to expire
+ High: PE: Have the PE do non-persistent configuration upgrades before performing calculations
+ High: PE: Replace failure-stickiness with a simple 'migration-threshold'
+ High: TE: Simplify the design by folding the tengine process into the crmd
+ Medium: Admin: Bug LF:1438 - Allow the list of all/active resource operations to be queried by crm_resource
+ Medium: Admin: Bug LF:1708 - crm_resource should print a warning if an attribute is already set as a meta attribute
+ Medium: Admin: Bug LF:1883 - crm_mon should display fail-count and operation history
+ Medium: Admin: Bug LF:1883 - crm_mon should display operation timing data
+ Medium: Admin: Bug N:371785 - crm_resource -C doesn't also clean up fail-count attributes
+ Medium: Admin: crm_mon - include timing data for failed actions
+ Medium: ais: Read options from the environment since objdb isn't completely usable yet
+ Medium: cib: Add sections for op_defaults and rsc_defaults
+ Medium: cib: Better matching notification callbacks (for detecting duplicates and removal)
+ Medium: cib: Bug LF:1348 - Allow rules and attribute sets to be referenced for use in other objects
+ Medium: cib: BUG LF:1918 - By default, all cib calls now timeout after 30s
+ Medium: cib: Detect updates that decrease the version tuple
+ Medium: cib: Implement a client-side operation timeout - Requires LHA update
+ Medium: cib: Implement callbacks and async notifications for remote connections
+ Medium: cib: Make cib-&gt;cmds-&gt;update() an alias for modify at the API level (also implemented in cibadmin)
+ Medium: cib: Mark the CIB as disconnected if the IPC connection is terminated
+ Medium: cib: New call option 'cib_can_create' which can be passed to modify actions - allows the object to be created if it doesn't exist yet
+ Medium: cib: Reimplement get|set|delete attributes using XPath
+ Medium: cib: Remove some useless parts of the API
+ Medium: cib: Remove the 'attributes' scaffolding from the new format
+ Medium: cib: Implement the ability for clients to connect to remote servers
+ Medium: Core: Add support for validating xml against RelaxNG schemas
+ Medium: Core: Allow more than one item to be modified/deleted in XPath based operations
+ Medium: Core: Fix the sort_pairs function for creating sorted xml objects
+ Medium: Core: iso8601 - Implement subtract_duration and fix subtract_time
+ Medium: Core: Reduce the amount of xml copying occuring
+ Medium: Core: Support value='value+=N' XML updates (in addtion to value='value++')
+ Medium: crmd: Add support for lrm_ops-&gt;fail_rsc if its available
+ Medium: crmd: HB - watch link status for node leaving events
+ Medium: crmd: Bug LF:1924 - Improved handling of lrmd disconnects and shutdowns
+ Medium: crmd: Do not wait for actions with a start_delay over 5 minutes. Confirm them immediately
+ Medium: PE: Bug LF:1328 - Don't fencing nodes in clusters without managed resources
+ Medium: PE: Bug LF:1461 - Give transient node attributes (in &lt;status/&gt;) preference over persistent ones (in &lt;nodes/&gt;)
+ Medium: PE: Bug LF:1884, Bug LF:1885 - Implement N:M ordering and colocation constraints
+ Medium: PE: Bug LF:1886 - Create a resource and operation 'defaults' config section
+ Medium: PE: Bug LF:1892 - Allow recurring actions to be triggered at known times
+ Medium: PE: Bug LF:1926 - Probes should complete before stop actions are invoked
+ Medium: PE: Fix the standby when it's set as a transient attribute
+ Medium: PE: Implement a global 'stop-all-resources' option
+ Medium: PE: Implement cibpipe, a tool for performing/simulating config changes "offline"
+ Medium: PE: We don't allow colocation with specific clone instances
+ Medium: Tools: pingd - Implement a stack-independant version of pingd
+ Medium: xml: Ship an xslt for upgrading from 0.6 to 0.7</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1213912800">- version 0.6.5-1
- Update source tarball to revision: b9fe723d1ac5 tip
- Statistics:
    Changesets:      48
    Diff:            37 files changed, 1204 insertions(+), 234 deletions(-)
- Changes since Pacemaker-0.6.4
+ High: Admin: Repair the ability to delete failcounts
+ High: ais: Audit IPC handling between the AIS plugin and CRM processes
+ High: ais: Have the plugin create needed /var/lib directories
+ High: ais: Make sure the sync and async connections are assigned correctly (not swapped)
+ High: cib: Correctly detect configuration changes - num_updates does not count
+ High: PE: Apply stickiness values to the whole group, not the individual resources
+ High: PE: Bug N:385265 - Ensure groups are migrated instead of remaining partially active on the current node
+ High: PE: Bug N:396293 - Enforce manditory group restarts due to ordering constraints
+ High: PE: Correctly recover master instances found active on more than one node
+ High: PE: Fix memory leaks reported by Valgrind
+ Medium: Admin: crm_mon - Misc improvements from Satomi Taniguchi
+ Medium: Bug LF:1900 - Resource stickiness should not allow placement in asynchronous clusters
+ Medium: crmd: Ensure joins are completed promptly when a node taking part dies
+ Medium: PE: Avoid clone instance shuffling in more cases
+ Medium: PE: Bug LF:1906 - Remove an optimization in native_merge_weights() causing group scores to behave eratically
+ Medium: PE: Make use of target_rc data to correctly process resource operations
+ Medium: PE: Prevent a possible use of NULL in sort_clone_instance()
+ Medium: TE: Include target rc in the transition key - used to correctly determin operation failure</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1211493600">- version 0.6.4-1
- Update source tarball to revision: 226d8e356924 tip
- Statistics:
    Changesets:       55
    Diff:             199 files changed, 7103 insertions(+), 12378 deletions(-)
- Changes since Pacemaker-0.6.3
+ High: crmd: Bug LF:1881 LF:1882 - Overhaul the logic for operation cancelation and deletion
+ High: crmd: Bug LF:1894 - Make sure cancelled recurring operations are cleaned out from the CIB
+ High: PE: Bug N:387749 - Colocation with clones causes unnecessary clone instance shuffling
+ High: PE: Ensure 'master' monitor actions are cancelled _before_ we demote the resource
+ High: PE: Fix assert failure leading to core dump - make sure variable is properly initialized
+ High: PE: Make sure 'slave' monitoring happens after the resource has been demoted
+ High: PE: Prevent failure stickiness underflows (where too many failures become a _positive_ preference)
+ Medium: Admin: crm_mon - Only complain if the output file could not be opened
+ Medium: Common: filter_action_parameters - enable legacy handling only for older versions
+ Medium: PE: Bug N:385265 - The failure stickiness of group children is ignored until it reaches -INFINITY
+ Medium: PE: Implement master and clone colocation by exlcuding nodes rather than setting one's score to INFINITY (similar to cs: 756afc42dc51)
+ Medium: TE: Bug LF:1875 - Correctly find actions to cancel when their node leaves the cluster</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1208988000">- version 0.6.3-1
- Update source tarball to revision: fd8904c9bc67 tip
- Statistics:
    Changesets:      117
    Diff:            354 files changed, 19094 insertions(+), 11338 deletions(-)
- Changes since Pacemaker-0.6.2
+ High: Admin: Bug LF:1848 - crm_resource - Pass set name and id to delete_resource_attr() in the correct order
+ High: Build: SNMP has been moved to the management/pygui project
+ High: crmd: Bug LF1837 - Unmanaged resources prevent crmd from shutting down
+ High: crmd: Prevent use-after-free in lrm interface code (Patch based on work by Keisuke MORI)
+ High: PE: Allow the cluster to make progress by not retrying failed demote actions
+ High: PE: Anti-colocation with slave shouldn't prevent master colocation
+ High: PE: Bug LF 1768 - Wait more often for STONITH ops to complete before starting resources
+ High: PE: Bug LF1836 - Allow is-managed-default=false to be overridden by individual resources
+ High: PE: Bug LF185 - Prevent pointless master/slave instance shuffling by ignoring the master-pref of stopped instances
+ High: PE: Bug N-191176 - Implement interleaved ordering for clone-to-clone scenarios
+ High: PE: Bug N-347004 - Ensure clone notifications are always sent when an instance is stopped/started
+ High: PE: Bug N-347004 - Include notification ordering is correct for interleaved clones
+ High: PE: Bug PM-11 - Directly link probe_complete to starting clone instances
+ High: PE: Bug PM1 - Fix setting failcounts when applied to complex resources
+ High: PE: Bug PM12, LF1648 - Extensive revision of group ordering
+ High: PE: Bug PM7 - Ensure masters are always demoted before they are stopped
+ High: PE: Create probes after allocation to allow smarter handling of anonymous clones
+ High: PE: Don't prioritize clone instances that must be moved
+ High: PE: Fix error in previous commit that allowed more than the required number of masters to be promoted
+ High: PE: Group start ordering fixes
+ High: PE: Implement promote/demote ordering for cloned groups
+ High: TE: Repair failcount updates
+ High: TE: Use the correct offset when updating failcount
+ Medium: Admin: Add a summary output that can be easily parsed by CTS for audit purposes
+ Medium: Build: Make configure fail if bz2 or libxml2 are not present
+ Medium: Build: Re-instate a better default for LCRSODIR
+ Medium: CIB: Bug LF-1861 - Filter irrelvant error status from synchronous CIB clients
+ Medium: Core: Bug 1849 - Invalid conversion of ordinal leap year to gregorian date
+ Medium: Core: Drop compataibility code for 2.0.4 and 2.0.5 clusters
+ Medium: crmd: Bug LF-1860 - Automatically cancel recurring ops before demote and promote operations (not only stops)
+ Medium: crmd: Save the current CIB contents if we detect the PE crashed
+ Medium: PE: Bug LF:1866 - Fix version check when applying compatability handling for failed start operations
+ Medium: PE: Bug LF:1866 - Restore the ability to have start failures not be fatal
+ Medium: PE: Bug PM1 - Failcount applies to all instances of non-unique clone
+ Medium: PE: Correctly set the state of partially active master/slave groups
+ Medium: PE: Don't claim to be stopping an already stopped orphan
+ Medium: PE: Ensure implies_left ordering constraints are always effective
+ Medium: PE: Indicate each resource's 'promotion' score
+ Medium: PE: Prevent a possible use-of-NULL
+ Medium: PE: Reprocess the current action if it changed (so that any prior dependancies are updated)
+ Medium: TE: Bug LF-1859 - Wait for fail-count updates to complete before terminating the transition
+ Medium: TE: Bug LF:1859 - Don't abort graphs due to our own failcount updates
+ Medium: TE: Bug LF:1859 - Prevent the TE from interupting itself</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1203026400">- version 0.6.2-1
- Update source tarball to revision: 28b1a8c1868b tip
- Statistics:
    Changesets:    11
    Diff:          7 files changed, 58 insertions(+), 18 deletions(-)
- Changes since Pacemaker-0.6.1
+ haresources2cib.py: set default-action-timeout to the default (20s)
+ haresources2cib.py: update ra parameters lists
+ Medium: SNMP: Allow the snmp subagent to be built (patch from MATSUDA, Daiki)
+ Medium: Tools: Make sure the autoconf variables in haresources2cib are expanded</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1202853600">- version 0.6.1-1
- Update source tarball to revision: e7152d1be933 tip
- Statistics:
    Changesets:    25
    Diff:          37 files changed, 1323 insertions(+), 227 deletions(-)
- Changes since Pacemaker-0.6.0
+ High: CIB: Ensure changes to top-level attributes (like admin_epoch) cause a disk write
+ High: CIB: Ensure the archived file hits the disk before returning
+ High: CIB: Repair the ability to do 'atomic incriment' updates (value="value++")
+ High: crmd: Bug #7 - Connecting to the crmd immediately after startup causes use-of-NULL
+ Medium: CIB: Mask cib_diff_resync results from the caller - they don't need to know
+ Medium: crmd: Delay starting the IPC server until we're fully functional
+ Medium: CTS: Fix the startup patterns
+ Medium: PE: Bug 1820 - Allow the first resource in a group to be migrated
+ Medium: PE: Bug 1820 - Check the colocation dependancies of resources to be migrated</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1200348000">- version 0.6.0-2
- This is the first release of the Pacemaker Cluster Resource Manager formerly part of Heartbeat.
- For those looking for the GUI, mgmtd, CIM or TSA components, they are now found in
  the new pacemaker-pygui project.  Build dependancies prevent them from being
  included in Heartbeat (since the built-in CRM is no longer supported) and,
  being non-core components, are not included with Pacemaker.
- Update source tarball to revision: c94b92d550cf
- Statistics:
    Changesets:      347
    Diff:            2272 files changed, 132508 insertions(+), 305991 deletions(-)
- Test hardware:
  + 6-node vmware cluster (sles10-sp1/256Mb/vmware stonith) on a single host (opensuse10.3/2Gb/2.66Ghz Quad Core2)
  + 7-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon/ssh stonith)
- Notes: Heartbeat Stack
  + All testing was performed with STONITH enabled
  + The CRM was enabled using the "crm respawn" directive
  + Testing
    2-nodes ::= 1000 CTS iterations (passed)
    4-nodes ::= 1000 CTS iterations (passed)
    6-nodes ::= 2000 CTS iterations (passed)
  + Total estimated cluster transitions: 18000
- Notes: OpenAIS Stack
  + This release contains a preview of support for the OpenAIS cluster stack
  + The current release of the OpenAIS project is missing two important
    patches that we require.  OpenAIS packages containing these patches are
    available for most major distributions at:
      http://download.opensuse.org/repositories/server:/ha-clustering
  + The OpenAIS stack is not currently recommended for use in clusters that
    have shared data as STONITH support is not yet implimented
  + pingd is not yet available for use with the OpenAIS stack
  + 3 significant OpenAIS issues were found during testing of 4 and 6 node
    clusters.  We are activly working together with the OpenAIS project to
    get these resolved.
  + Testing
    2-nodes ::= 1000 CTS iterations (passed)
    4-nodes ::= 1000 CTS iterations (sporadic problems - see pending bugs)
    6-nodes ::= 1000 CTS iterations (significant problems - see pending bugs)
  + Total estimated cluster transitions: 12000
- Pending bugs encountered during testing:
  + OpenAIS   #1736 - Openais membership took 20s to stabilize
  + Heartbeat #1750 - ipc_bufpool_update: magic number in head does not match
  + OpenAIS   #1793 - Assertion failure in memb_state_gather_enter()
  + OpenAIS   #1796 - Cluster message corruption
- Changes since Heartbeat-2.1.2-24
+ High: Add OpenAIS support
+ High: Admin: crm_uuid - Look in the right place for Heartbeat UUID files
+ High: admin: Exit and indicate a problem if the crmd exits while crmadmin is performing a query
+ High: cib: Fix CIB_OP_UPDATE calls that modify the whole CIB
+ High: cib: Fix compilation when supporting the heartbeat stack
+ High: cib: Fix memory leaks caused by the switch to get_message_xml()
+ High: cib: HA_VALGRIND_ENABLED needs to be set _and_ set to 1|yes|true
+ High: cib: Use get_message_xml() in preference to cl_get_struct()
+ High: cib: Use the return value from call to write() in cib_send_plaintext()
+ High: Core: ccm nodes can legitimately have a node id of 0
+ High: Core: Fix peer-process tracking for the Heartbeat stack
+ High: Core: Heartbeat doesn't send status notifications for nodes that were already part of the cluster.  Fake them instead
+ High: CRM: Add children to HA_Messages such that the field name matches F_XML_TAGNAME
+ High: crm: Adopt a more flexible appraoch to enabling Valgrind
+ High: crm: Fix compilation when bzip2 is not installed
+ High: CRM: Future-proof get_message_xml()
+ High: crmd: Filter election responses based on time not FSA state
+ High: crmd: Handle all possible peer states in crmd_ha_status_callback()
+ High: crmd: Make sure the current date/time is set - prevents use-of-NULL when evaluating rules
+ High: crmd: Relax an assertion regrading  ccm membership instances
+ High: crmd: Use (node-&gt;processes&amp;crm_proc_ais) to accurately update the CIB after replace operations
+ High: crmd: Heartbeat: Accurately record peer client status
+ High: PE: Bug 1777 - Allow colocation with a resource in the Stopped state
+ High: PE: Bug 1822 - Prevent use-of-NULL in PromoteRsc()
+ High: PE: Implement three recovery policies based on op_status and op_rc
+ High: PE: Parse fail-count correctly (it may be set to ININFITY)
+ High: PE: Prevent graph-loop when stonith agents need to be moved around before a STONITH op
+ High: PE: Prevent graph-loops when two operations have the same name+interval
+ High: te: Cancel active timers when destroying graphs
+ High: TE: Ensure failcount is set correctly for failed stops/starts
+ High: TE: Update failcount for oeprations that time out
+ Medium: admin: Prevent hang in crm_mon -1 when there is no cib connection - Patch from Junko IKEDA
+ Medium: cib: Require --force|-f when performing potentially dangerous commands with cibadmin
+ Medium: cib: Tweak the shutdown code
+ Medium: Common: Only count peer processes of active nodes
+ Medium: Core: Create generic cluster sign-in method
+ Medium: core: Fix compilation when Heartbeat support is disabled
+ Medium: Core: General cleanup for supporting two stacks
+ Medium: Core: iso6601 - Support parsing of time-only strings
+ Medium: core: Isolate more code that's only needed when SUPPORT_HEARTBEAT is enabled
+ Medium: crm: Improved logging of errors in the XML parser
+ Medium: crmd: Fix potential use-of-NULL in string comparison
+ Medium: crmd: Reimpliment syncronizing of CIB queries and updates when invoking the PE
+ Medium: crm_mon: Indicate when a node is both in standby mode and offline
+ Medium: PE: Bug 1822 - Don't try an promote groups if not all of it is active
+ Medium: PE: on_fail=nothing is an alias for 'ignore' not 'restart'
+ Medium: PE: Prevent a potential use-of-NULL in cron_range_satisfied()
+ snmp subagent: fix a problem on displaying an unmanaged group
+ snmp subagent: use the syslog setting
+ snmp: v2 support (thanks to Keisuke MORI)
+ snmp_subagent - made it not complain about some things if shutting down</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1197324000">- version 0.6.0-1
- Initial package check-in</changelog></package>
<package pkgid="81e37c6ef96a9c8e4fd8dfad790e00a29437c090" name="clamav-unofficial-sigs" arch="noarch"><version epoch="0" ver="3.7.1" rel="6.el5"/><changelog author="Andrew Colin Kissa &lt;andrew@topdog.za.net&gt; - 3.7.1-6" date="1313704800">- Fix moving signatures into clam directory</changelog><changelog author="Andrew Colin Kissa &lt;andrew@topdog.za.net&gt; - 3.7.1-5" date="1313704800">- Added update user as EPEL clam user has no shell access
- Fix pid path on EPEL</changelog><changelog author="Andrew Colin Kissa &lt;andrew@topdog.za.net&gt; - 3.7.1-4" date="1303596000">- FIX: bugzilla #683139
- FIX: Bugzilla #695356</changelog><changelog author="Andrew Colin Kissa &lt;andrew@topdog.za.net&gt; - 3.7.1-3" date="1294005600">- Fixes requested by reviewer</changelog><changelog author="Andrew Colin Kissa &lt;andrew@topdog.za.net&gt; - 3.7.1-2" date="1293141600">- Fixes requested by reviewer</changelog><changelog author="Andrew Colin Kissa &lt;andrew@topdog.za.net&gt; - 3.7.1-1" date="1279663200">- upgraded to latest upstream</changelog><changelog author="Andrew Colin Kissa &lt;andrew@topdog.za.net&gt; - 3.7-3" date="1271973600">- Fix sed error</changelog><changelog author="Andrew Colin Kissa &lt;andrew@topdog.za.net&gt; - 3.7-2" date="1268690400">- Fix the cron entry</changelog><changelog author="Andrew Colin Kissa &lt;andrew@topdog.za.net&gt; - 3.7-1" date="1268172000">- Initial packaging</changelog></package>
<package pkgid="a3c107f4e23fc1a9d3fb0061046b9d1949758c79" name="epel-release" arch="noarch"><version epoch="0" ver="5" rel="5.SLF"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; - SLF" date="1359158400">- repos disabled by default</changelog><changelog author="Seth Vidal &lt;skvidal at fedoraproject.org&gt; - 5-4" date="1281484800">- conflict fedora-release so people don't indadvertently do something silly</changelog><changelog author="Matt Domsch &lt;Matt_Domsch@dell.com&gt; - 5-3" date="1209168000">- use mirrorlists in epel-testing.repo
- use download.fedoraproject.org in (commented out) baseurls</changelog><changelog author="Michael Stahnke &lt;mastahnke@gmail.com&gt; - 5-2" date="1175558400">- Missed a syntax correction in epel-testing.repo</changelog><changelog author="Michael Stahnke &lt;mastahnke@gmail.com&gt; - 5-1" date="1175558400">- Hard coded version '5' in epel yum repo files.</changelog><changelog author="Michael Stahnke &lt;mastahnke@gmail.com&gt; - 5-0" date="1175558400">- Initial Package for RHEL 5</changelog></package>
<package pkgid="3656e4bd6ac6c1103325826b7a0697765f51dbfb" name="kernel-module-drbd-2.6.18-398.el5xen" arch="i686"><version epoch="0" ver="8.3.7" rel="1.sl5"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-1" date="1271116800">- Update to 8.3.7
- Separated the kernel module out to a separate rpm
  This is because the driver is now in the generic kernel
- Combined spec files from atrpms and normal SL kernel module specs</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.3.6-27" date="1259539200">- Update to 8.3.6.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.3.2-25" date="1252454400">- Update to 8.3.2.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.3.1-24" date="1240272000">- Update to 8.3.1.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.2.7-23" date="1228694400">- Update to 8.2.7.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.2.6-22" date="1223078400">- Update to 8.2.6.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.2.5-21" date="1206230400">- Update to 8.2.5.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.2.1-20" date="1195862400">- Update to 8.2.1.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.0.4-18" date="1185926400">- Update to 8.0.4.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.24-17" date="1185926400">- Update to 0.7.24.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.23-15" date="1168732800">- Update to 0.7.23.
- Fix summary (#1110).</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.22-14" date="1167782400">- Update to 0.7.22.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.21-13" date="1161561600">- Update to 0.7.21.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.20-12" date="1153180800">- Update to 0.7.20.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1143331200">- Update to 0.7.17.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1141776000">- Update to 0.7.16.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1121212800">- Update to 0.7.11.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1114128000">- Update to 0.7.10.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1106524800">- Update to 0.7.8.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1105574400">- Update to 0.7.7.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1096848000">- Update to 0.7.5.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1087689600">- Initial build.</changelog></package>
<package pkgid="a2d6c37a5ef646b42efdde3a6e52b8e7f963530d" name="pidgin-sipe" arch="i386"><version epoch="0" ver="1.11.2" rel="2.el5"/><changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.11.2-2" date="1297288800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.11.2-1" date="1289340000">- Update to 1.11.2</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.11.0-1" date="1286402400">- Update to 1.11.0</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.10.1-2" date="1285365600">- Fix group for purple-sipe (#624246)</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.10.1-1" date="1279317600">- Upstream 1.10.1:
        - Fixes to build against pidgin-2.7
        - Initial support for Office 2007+ "Access Levels"
        - SVG icon artwork
        - Miscellaneous bugfixes</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.9.1-1" date="1268776800">- Upstream 1.9.1:
        - Fix Kerberos authentication for unix platforms (broken in 1.9.0)
        - Bugfixes</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.9.0-1" date="1268344800">- Upstream 1.9.0:
        - Contributed File transfer functionality. File encryption is supported.
        - NTLMv2 and NTLMv2 Session Security support
        - Implemented SIP Authentication Extensions protocol version 4 and 3
        - another shot at presence update problems
        - fix crash caused by uninitialized security contexts
        - Updated translations: ru, de, es, pt_BR
        - Bugfixes and crash fixes
- BR libpurple &gt;= 2.4.0
- Split into purple-sipe and pidgin-sipe
- Other spec fixes to match upstream's spec file</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.8.1-1" date="1266357600">- Upstream 1.8.1 (crash fixes)</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.8.0-1" date="1265666400">- Upstream 1.8.0 (new features)
- Exchange Calendar integration
- New and updated translations
- Bugfixes</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.7.1-1" date="1259013600">- Upstream 1.7.1 (bugfixes)</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.7.0-1" date="1257285600">- Upstream 1.7.0</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.6.3-1" date="1254175200">- Upstream 1.6.3</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.6.2-1" date="1252447200">- Upstream 1.6.2
- Drop obsoleted ppc fix patch</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.6.0-2" date="1249077600">- Add BR: gettext to build on EPEL</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.6.0-2" date="1248991200">- Another attempt at ppc build fix (patch from Stefan Becker)</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.6.0-1" date="1248818400">- Upstream 1.6.0
- Build on ppc, but pass --enable-quality-check=no to configure</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.5.0-2" date="1247781600">- Build --with-krb5</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.5.0-1" date="1246399200">- Initial packaging.</changelog></package>
<package pkgid="06fd16e37a46343e4f626ce341488175934e41a8" name="purple-sipe" arch="i386"><version epoch="0" ver="1.11.2" rel="2.el5"/><changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.11.2-2" date="1297288800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.11.2-1" date="1289340000">- Update to 1.11.2</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.11.0-1" date="1286402400">- Update to 1.11.0</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.10.1-2" date="1285365600">- Fix group for purple-sipe (#624246)</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.10.1-1" date="1279317600">- Upstream 1.10.1:
        - Fixes to build against pidgin-2.7
        - Initial support for Office 2007+ "Access Levels"
        - SVG icon artwork
        - Miscellaneous bugfixes</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.9.1-1" date="1268776800">- Upstream 1.9.1:
        - Fix Kerberos authentication for unix platforms (broken in 1.9.0)
        - Bugfixes</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.9.0-1" date="1268344800">- Upstream 1.9.0:
        - Contributed File transfer functionality. File encryption is supported.
        - NTLMv2 and NTLMv2 Session Security support
        - Implemented SIP Authentication Extensions protocol version 4 and 3
        - another shot at presence update problems
        - fix crash caused by uninitialized security contexts
        - Updated translations: ru, de, es, pt_BR
        - Bugfixes and crash fixes
- BR libpurple &gt;= 2.4.0
- Split into purple-sipe and pidgin-sipe
- Other spec fixes to match upstream's spec file</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.8.1-1" date="1266357600">- Upstream 1.8.1 (crash fixes)</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.8.0-1" date="1265666400">- Upstream 1.8.0 (new features)
- Exchange Calendar integration
- New and updated translations
- Bugfixes</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.7.1-1" date="1259013600">- Upstream 1.7.1 (bugfixes)</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.7.0-1" date="1257285600">- Upstream 1.7.0</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.6.3-1" date="1254175200">- Upstream 1.6.3</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.6.2-1" date="1252447200">- Upstream 1.6.2
- Drop obsoleted ppc fix patch</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.6.0-2" date="1249077600">- Add BR: gettext to build on EPEL</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.6.0-2" date="1248991200">- Another attempt at ppc build fix (patch from Stefan Becker)</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.6.0-1" date="1248818400">- Upstream 1.6.0
- Build on ppc, but pass --enable-quality-check=no to configure</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.5.0-2" date="1247781600">- Build --with-krb5</changelog><changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 1.5.0-1" date="1246399200">- Initial packaging.</changelog></package>
<package pkgid="988d1a6f5a58824ac530b722d90c7457623d7269" name="krb5-devel" arch="i386"><version epoch="0" ver="1.6.1" rel="80.el5.slf5"/><changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1413244800">- Ran Regex: (Release: .*) =&gt; \1.slf5
--&gt;  Modify release string to note changes for SLF5
- Added Source: krb5.ini
--&gt;  Config file for automated patch script
- Added Patch: krb5_krb5-mwm-kshd.patch
--&gt;  Fix sync bug, see BZ#658217</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-80.el5" date="1409270400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-79.el5" date="1408752000">- incorporate fix for MITKRB5-SA-2014-001 (CVE-2014-4345, #1132785)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592000">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-77.el5" date="1406592000">- fix what appears to be a cosmetic error in the patch for self-tests
  for CVE-2014-4341</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-76.el5" date="1406160000">- run the backported self-tests, such as they are, for CVE-2014-4341</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-75.el5" date="1406160000">- pull in backported fix for denial of service by injection of malformed
  GSSAPI tokens (CVE-2014-4341, #1121509)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-74.el5" date="1399334400">- add patch based on one from Filip Krska to not call poll() with a negative
  timeout when the caller's intent is for us to just stop calling it (#1089732)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-73.el5" date="1398211200">- incorporate backported upstream patch for remote crash of KDCs which serve
  multiple realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-72.el5" date="1395792000">- add part-backported fix to avoid possible use-after-free when encrypting
  delegated creds (Jatin Nansi, #1004632)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-71.el5" date="1370044800">- add backported fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325030400">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-69.el5" date="1320278400">- ftp: fix a static analysis should-never-happen NULL dereference (#750823)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-68.el5" date="1319068800">- backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
  to talk to a KDC by using poll() if it's detected at compile-time, revised
  (#701444, RT#6905)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-67.el5" date="1318982400">- add backported patch by way of jbarbuc to free subkeys created by the
  KDC while processing TGS requests (#708516)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-66.el5" date="1318982400">- add backported patch by way of several people to better avoid false
  detection of replay attacks when talking to systems with coarse time
  resolution (#713500)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-65.el5" date="1318982400">- ftpd: add backported patch to check for errors when calling setegid
  (MITKRB5-SA-2011-005, CVE-2011-1526, #719098)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-64.el5" date="1318982400">- klist: don't trip over referral entries when invoked with -s (#729067,
  RT#6915)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-63.el5" date="1318982400">- unbreak processing of multi-line macros (#735363,#736132), broken by the
  original fix for #665833</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-62.el5" date="1308355200">- incorporate a fix to teach the file labeling bits about when replay caches
  are expunged (#712453)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-61.el5" date="1305072000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1303948800">- ftp: handle larger command inputs (#665833)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-60.el5" date="1303862400">- don't bail halfway through an unlock operation when the result will
  be discarded and the end-result not cleaned up (Martin Osvald, #586032)
- add a versioned dependency between krb5-server-ldap and krb5-libs (internal
  tooling)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-59.el5" date="1301961600">- don't discard the error code from an error message received in response
  to a change-password request (#658871, RT#6893)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-58.el5" date="1301529600">- ftpd: add patch from Jatin Nansi to correctly match "$user restrict"
  lines in /etc/ftpusers (#644215, RT#6889)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-57.el5" date="1300406400">- ftp: add modified patch from Rogan Kyuseok Lee to report the number of
  bytes transferred correctly when transferring large files on 32-bit
  systems (#648404)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-56.el5" date="1297987200">- backport fix for RT#6514: memory leak freeing rcache type "none" (#678205)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1297987200">- add upstream patch to fix hang or crash in the KDC when using the LDAP kdb
  backend (CVE-2011-0281, CVE-2011-0282, #671097)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-55.el5" date="1291161600">- incorporate upstream patch for checksum acceptance issues from
  MITKRB5-SA-2010-007 (CVE-2010-1323, #652308)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-54.el5" date="1286236800">- backport a fix to the previous change (#539423)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-53.el5" date="1285977600">- backport the k5login_directory and k5login_authoritative settings (#539423)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-52.el5" date="1284076800">- krshd: don't limit user names to 16 chars when utmp can handle names
  at least a bit longer than that (#611713)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-51.el5" date="1283558400">- fix a logic bug in computing key expiration times (RT#6762, #627038)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-50.el5" date="1283385600">- correct the post-rotate scriptlet in the kadmind logrotate config (more
  of #462658)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-49.el5" date="1278979200">- ftpd: backport changes to modify behavior to match telnetd,rshd,rlogind and
  accept GSSAPI auth to any service for which we have a matching key (#538075)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-47.el5" date="1278547200">- pull in fix for RT#5551 to treat the referral realm when seen in a ticket
  as though it were the local realm (#498554, also very likely #450122)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-46.el5" date="1278547200">- add aes256-cts:normal and aes128-cts:normal to the list of keysalts
  in the default kdc.conf (part of #565941)
- add a note to kdc.conf(5) pointing to the admin guide for the list of
  recognized key and salt types (the rest of #565941)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-45.el5" date="1278547200">- add logrotate configuration files for krb5kdc and kadmind (#462658)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-44.el5" date="1278547200">- libgssapi: backport patch from svn to stop returning context-expired errors
  when the ticket which was used to set up the context expires (#605367,
  upstream #6739)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-43.el5" date="1277856000">- enable building the -server-ldap subpackage (#514362)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-42.el5" date="1276214400">- stop caring about the endianness of stash files (#514741), which will be
  replaced by proper keytab files in later releases
- don't crash in krb5_get_init_creds_password() if the passed-in options
  struct is NULL and the client's keys have expired (#555875)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-41.el5" date="1275609600">- ksu: perform PAM account and session management before dropping privileges
  to those of the target user (#540769 and #596887, respectively)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1275004800">- add candidate patch to correct libgssapi null pointer dereference which
  could be triggered by malformed client requests (CVE-2010-1321, #583704)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-40.el5" date="1271116800">- fix a null pointer dereference and crash introduced in our PAM patch that
  would happen if ftpd was given the name of a user who wasn't known to the
  local system, limited to being triggerable by gssapi-authenticated clients by
  the default xinetd config (Olivier Fourdan, #569472)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-39.el5" date="1270598400">- add upstream patch to fix a few use-after-free bugs, including one in
  kadmind (CVE-2010-0629, #578186)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-38.el5" date="1268784000">- merge patch to correct KDC integer overflows which could be triggered by
  malformed RC4 and AES ciphertexts (CVE-2009-4212, #546348)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-37.el5" date="1268784000">- pull changes to libkrb5 to properly handle and chase "off-path" referrals
  back from 1.7 (#546538)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-36.el5" date="1242777600">- add an auth stack to ksu's PAM configuration so that it can successfully
  pam_setcred()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-35.el5" date="1242086400">- also set PAM_RUSER in ksu for completeness (#479071+#477033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-34.el5" date="1241568000">- fix various typos, except for bits pertaining to licensing (#499190)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-33.el5" date="1241568000">- kdb5_util: when renaming a database, if the new name's associated lock
  files don't exist, go ahead and create them (#442879)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1240531200">- ksu: perform PAM account and session management for the target user;
  authentication is still performed as before (#477033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1240358400">- fix typo in ksu's reporting of errors getting credentials (#462890)
- kadmind.init: stop setting up a keytab, as kadmind's been able to use
  the database directly for a while now (#473151)
- pull up patch to set PAM_RHOST (James Leddy, #479071)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5.3" date="1238803200">- update to revised patch for CVE-2009-0844/CVE-2009-0845</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5.2" date="1238198400">- add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism
  (#490636, CVE-2009-0844)
- add fix for NULL pointer dereference when handling certain error cases
  in the SPNEGO GSSAPI mechanism (#490636, CVE-2009-0845)
- add fix for attempt to free uninitialized pointer in the ASN.1 decoder
  (#491036, CVE-2009-0846)
- add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-32.el5" date="1231977600">- add patch to also report an error in rcp if close() returns an error,
  which could indicate an out-of-space error on an NFS filesystem (Tomas
  Smetana, #461902)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5" date="1227657600">- add a backported patch which adds a check on credentials obtained from
  a foreign realm to make sure that they're of an acceptable type, and
  if not, retry to the request to get one of the right type (Sadique Puthen,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-30.el5" date="1225843200">- backport fix from 1.6.3 to register file-based ccaches created with
  the krb5_cc_new_unique() function with the global list, so that we
  don't crash when we go to close the ccache (#468729)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-29.el5" date="1220572800">- backport fix from 1.6.3 to abort a sequential scan of a keytab if the
  handle to the keytab has become invalidated during the scan (via Vince
  Worthington, #460911)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-28.el5" date="1220486400">- if we successfully change the user's password during an attempt to get
  initial credentials, but then fail to get initial creds from a non-master
  using the new password, retry against the master (#432334)
- telnet: remove the proviso in the man page which says that the "z" command
  only works in csh, as this is only true on systems where other shells don't
  implement job control (#433947)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1220054400">- avoid double-logging by not parsing /etc/krb5.conf twice (#434858)
- ftp: fix to not incorrectly reuse target filenames during mget when case-
  mapping is enabled (#442716)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-27.el5" date="1215820800">- don't forget to label the principal.ok lock file (#455033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-26.el5" date="1213315200">- build with -fno-strict-aliasing (#451043)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-25.el5" date="1204761600">- add preliminary patch to fix use of uninitialized pointer / double-free in
  KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
- add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
  (#415321)
- add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
  (#415351)
- add preliminary patch to fix incorrect handling of high-numbered descriptors
  in the RPC library (CVE-2008-0947) (#433596)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-24.el5" date="1202515200">- kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
  an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
  interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-23.el5" date="1201824000">- backport changes from 1.6.3 which allow callers of the the sendto-kdc
  functions to override the failover behavior on a per-response basis, and
  default to failing over on service-unavailable errors (#230384)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-22.el5" date="1201737600">- add patch to fall back to TCP kpasswd servers for kdc-unreachable,
  can't-resolve-server, and response-too-big errors (#392631)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1201219200">- fold in some more changes to account for differing definitions of %{dist}
  (more of #427790)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-21.el5" date="1200441600">- add conditional logic to allow building only the krb5-server-ldap subpackage
  (#427790)
- use the right sequence numbers when generating password-set/change requests
  for kpasswd servers after the first one (#427789)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-20.el5" date="1198022400">- allocate space for the relative path including the nul-terminator (Jose
  Plans, #426085)
- fix a couple of spots where a file context wouldn't be freed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-19.el5" date="1197417600">- backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
  structure the same way we would one which was allocated by the calling
  application, to restore kinit's traditional behavior of doing a password
  change right when it detects an expired password (#413051)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-18.el5" date="1194652800">- fix syntax error in kadmin init script (#373011,#381011)
- turn off content/size/date verification on krb5.conf (#329771)
- fix storage of delegated krb5 credentials when they've been wrapped up in
  spnego (#319351)
- return a delegated credential handle even if the application didn't pass a
  location to store the flags which would be used to indicate that credentials
  were delegated (#314651)
- in login, allow PAM to interact with the user when they've been strongly
  authenticated (#309951)
- signal PAM when we're changing an expired password that it's an expired
  password, so that when cracklib flags a password as being weak it's treated
  as an error even if we're running as root (#308131)
- set the key expiration time in an AS-REP using the sooner of the client's
  entry's key expiration time and the entry's expiration time, instead of
  just the entry's expiration time (#250257)
- in ftp, don't lose track of a client socket when a server-side error
  causes a download to fail (#248618)
- in ftp, fix runique when mget is used (#247633)
- add the snippet documenting the kdc_tcp_ports option to kdc.conf's man
  page, using text taken from the administrator's guide (#282191)
- in kpasswd, when reading the client's principal name from the ccache fails
  for any reason, fall back to the user's name (#248631)
- init script cleanups (Michal Marciniszyn, #242500)
- tweak the telnet man page to refer to the telnet rlogin escape character
  as such instead of rereferring to it simly as the escape character or the
  telnet escape character (#247741)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-17.el5" date="1189555200">- ftpd: also do PAM session and credential management when ftp clients use
  strong authentication (#286291)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-16" date="1189123200">- update to revised patch for CVE-2007-3999</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-15" date="1189123200">- fix omission of files created by the db2 plugin when labeling (#228157)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-14" date="1188000000">- make krb5-workstation depend on the PAM configuration file used by login.krb5
- fix omission of kadmin log file when labeling (#253558)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-13" date="1187654400">- add preliminary patch to fix buffer overflow in rpcsec_gss implementation
  in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
  pointer in kadmind (#250976, CVE-2007-4000)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-12" date="1185494400">- kdc: default to listening for TCP clients as well (#248415)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-11" date="1184198400">- login: change to the user's home directory after dropping privileges,
  not before (#248050)
- turn off the ldap features</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-10" date="1182988800">- add a patch to allow applications to try to use a key with kvno=0, if
  found, in place of the "right" version for a request (Luke Howard, #230379)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-9" date="1182988800">- incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
  and MITKRB5-SA-2007-005 (CVE-2007-2798) (#239073)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-7" date="1182816000">- reintroduce missing %postun for the non-split_workstation case</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-6" date="1182816000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-5.1" date="1182816000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-5" date="1182729600">- add missing pam-devel build requirement, force selinux-or-fail build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-4" date="1182729600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-3" date="1182729600">- label all files at creation-time according to the SELinux policy (#228157)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- perform PAM account / session management in krshd (#182195,#195922)
- perform PAM authentication and account / session management in ftpd
- perform PAM authentication, account / session management, and password-
  changing in login.krb5 (#182195,#195922)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- preprocess kerberos.ldif into a format FDS will like better, and include
  that as a doc file as well</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- switch man pages to being generated with the right paths in them
- drop old, incomplete SELinux patch
- add patch from Greg Hudson to make srvtab routines report missing-file errors
  at same point that keytab routines do (#241805)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-2" date="1180051200">- pull patch from svn to undo unintentional chattiness in ftp
- pull patch from svn to handle NULL krb5_get_init_creds_opt structures
  better in a couple of places where they're expected</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-1" date="1179964800">- update to 1.6.1
  - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
  - drop patch for sendto bug in 1.6, fixed in 1.6.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1179532800">- kadmind.init: don't fail outright if the default principal database
  isn't there if it looks like we might be using the kldap plugin
- kadmind.init: attempt to extract the key for the host-specific kadmin
  service when we try to create the keytab</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-6" date="1179360000">- omit dependent libraries from the krb5-config --libs output, as using
  shared libraries (no more static libraries) makes them unnecessary and
  they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
  (strips out libkeyutils, libresolv, libdl)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-5" date="1178323200">- pull in keyutils as a build requirement to get the "KEYRING:" ccache type,
  because we've merged</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-4" date="1178323200">- fix an uninitialized length value which could cause a crash when parsing
  key data coming from a directory server
- correct a typo in the krb5.conf man page ("ldap_server"-&gt;"ldap_servers")</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1176508800">- move the default acl_file, dict_file, and admin_keytab settings to
  the part of the default/example kdc.conf where they'll actually have
  an effect (#236417)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-24" date="1175817600">- merge security fixes from RHSA-2007:0095</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-3" date="1175644800">- add patch to correct unauthorized access via krb5-aware telnet
  daemon (#229782, CVE-2007-0956)
- add patch to fix buffer overflow in krb5kdc and kadmind
  (#231528, CVE-2007-0957)
- add patch to fix double-free in kadmind (#231537, CVE-2007-1216)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1174608000">- back out buildrequires: keyutils-libs-devel for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-2" date="1174608000">- add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
  dragging keyutils-libs in as a dependency</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-23" date="1174348800">- fix bug ID in changelog</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-22" date="1174003200">* Thu Mar 15 2007 Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-21
- add preliminary patch to fix buffer overflow in krb5kdc and kadmind
  (#231528, CVE-2007-0957)
- add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1172707200">- add patch to build semi-useful static libraries, but don't apply it unless
  we need them</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-20" date="1172620800">- temporarily back out %post changes, fix for #143289 for security update
- add preliminary patch to correct unauthorized access via krb5-aware telnet</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1171929600">- make profile.d scriptlets mode 644 instead of 755 (part of #225974)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-1" date="1170201600">- clean up quoting of command-line arguments passed to the krsh/krlogin
  wrapper scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-19" date="1169769600">- refrain from killing any lingering members of our child's process group when
  logging that the child process has exited (Jose Plans, #143289)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1169510400">- initial update to 1.6, pre-package-reorg
- move workstation daemons to a new subpackage (#81836, #216356, #217301), and
  make the new subpackage require xinetd (#211885)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-18" date="1169510400">- make use of install-info more failsafe (Ville Skyttä, #223704)
- preserve timestamps on shell scriptlets at %install-time</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-17" date="1168992000">- move to using pregenerated PDF docs to cure multilib conflicts (#222721)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-16" date="1168646400">- update backport of the preauth module interface (part of #194654)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-14" date="1168387200">- apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
- apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-12" date="1166659200">- update backport of the preauth module interface</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1162252800">- update backport of the preauth module interface
- add proposed patches 4566, 4567
- add proposed edata reporting interface for KDC
- add temporary placeholder for module global context fixes</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-11" date="1161648000">- don't bail from the KDC init script if there's no database, it may be in
  a different location than the default (fenlason)
- remove the [kdc] section from the default krb5.conf -- doesn't seem to have
  been applicable for a while</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-10" date="1161216000">- rename krb5.sh and krb5.csh so that they don't overlap (#210623)
- way-late application of added error info in kadmind.init (#65853)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-9.pal_18695" date="1161216000">- add backport of in-development preauth module interface (#208643)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-9" date="1160438400">- provide docs in PDF format instead of as tex source (Enrico Scholz, #209943)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-8" date="1160006400">- add missing shebang headers to krsh and krlogin wrapper scripts (#209238)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-7" date="1157587200">- set SS_LIB at configure-time so that libss-using apps get working readline
  support (#197044)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-6" date="1155945600">- switch to the updated patch for MITKRB-SA-2006-001</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-5" date="1155081600">- apply patch to address MITKRB-SA-2006-001 (CVE-2006-3084)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-4" date="1154995200">- ensure that the gssapi library's been initialized before walking the
  internal mechanism list in gss_release_oid(), needed if called from
  gss_release_name() right after a gss_import_name() (#198092)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-3" date="1153872000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-2" date="1153872000">- pull up latest revision of patch to reduce lockups in rsh/rshd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-1.2" date="1153180800">- rebuild</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 1.5-1.1" date="1152748800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-1" date="1152230400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-0" date="1152144000">- update to 1.5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-9" date="1151107200">- mark profile.d config files noreplace (Laurent Rineau, #196447)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-8" date="1149811200">- add buildprereq for autoconf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-7" date="1148342400">- further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
  architectures, to avoid multilib conflicts; other changes will conspire to
  strip out the -L flag which uses this, so it should be harmless (#192692)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-6" date="1146268800">- adjust the patch which removes the use of rpath to also produce a
  krb5-config which is okay in multilib environments (#190118)
- make the name-of-the-tempfile comment which compile_et adds to error code
  headers always list the same file to avoid conflicts on multilib installations
- strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
- strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
  boxes</changelog><changelog author="Stepan Kasal &lt;skasal@redhat.com&gt; 1.4.3-5" date="1145059200">- Fix formatting typo in kinit.1 (krb5-kinit-man-typo.patch)</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; 1.4.3-4.1" date="1139616000">- bump again for double-long bug on ppc(64)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-4" date="1139270400">- give a little bit more information to the user when kinit gets the catch-all
  I/O error (#180175)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-3" date="1137715200">- rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
  declared, such as with recent glibc when _GNU_SOURCE isn't being used</changelog><changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; 1.4.3-2" date="1137715200">- Use full paths in krb5.sh to avoid path lookups</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt;" date="1134172800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1133481600">- login: don't truncate passwords before passing them into crypt(), in
  case they're significant (#149476)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-1" date="1132272000">- update to 1.4.3
- make ksu setuid again (#137934, others)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-4" date="1126656000">- mark %{krb5prefix}/man so that files which are packaged within it are
  flagged as %doc (#168163)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-3" date="1126051200">- add an xinetd configuration file for encryption-only telnetd, parallelling
  the kshell/ekshell pair (#167535)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-2" date="1125532800">- change the default configured encryption type for KDC databases to the
  compiled-in default of des3-hmac-sha1 (#57847)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-1" date="1123804800">- update to 1.4.2, incorporating the fixes for MIT-KRB5-SA-2005-002 and
  MIT-KRB5-SA-2005-003</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-6" date="1120089600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-5" date="1120089600">- fix telnet client environment variable disclosure the same way NetKit's
  telnet client did (CAN-2005-0488) (#159305)
- keep apps which call krb5_principal_compare() or krb5_realm_compare() with
  malformed or NULL principal structures from crashing outright (Thomas Biege)
  (#161475)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1120003200">- apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
  (#157104)
- apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-4" date="1119657600">- fix double-close in keytab handling
- add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-3" date="1116028800">- prevent spurious EBADF in krshd when stdin is closed by the client while
  the command is running (#151111)</changelog><changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 1.4.1-2" date="1116028800">- add deadlock patch, removed old patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-1" date="1115424000">- update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
- when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
  file for the service, pass it as an argument for the -r flag</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-3" date="1111622400">- drop krshd patch for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1111104000">- add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
- add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-2" date="1111017600">- don't include &lt;term.h&gt; into the telnet client when we're not using curses</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-1" date="1109289600">- update to 1.4
  - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
    flag to specify that it should communicate with the server using the older
    protocol
  - new libkrb5support library
  - v5passwdd and kadmind4 are gone
  - versioned symbols
- pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
  it on to krb5kdc
- pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
  it on to kadmind
- pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
  it on to krb524d *instead of* "-m"
- set "forwardable" in [libdefaults] in the default krb5.conf to match the
  default setting which we supply for pam_krb5
- set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
  compiled-in default</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-3" date="1103587200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-2" date="1103587200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-1" date="1103587200">- update to 1.3.6, which includes the previous fix</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-8" date="1103587200">- apply fix from Tom Yu for MITKRB5-SA-2004-004 (CAN-2004-1189)</changelog><changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 1.3.5-7" date="1103328000">- fix deadlock during file transfer via rsync/krsh
- thanks goes to James Antill for hint</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-6" date="1101513600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-3" date="1101168000">- fix predictable-tempfile-name bug in krb5-send-pr (CAN-2004-0971, #140036)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1100649600">- silence compiler warning in kprop by using an in-memory ccache with a fixed
  name instead of an on-disk ccache with a name generated by tmpnam()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-2" date="1100649600">- fix globbing patch port mode (#139075)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-1" date="1099353600">- fix segfault in telnet due to incorrect checking of gethostbyname_r result
  codes (#129059)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1097884800">- remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
  supported keytypes in kdc.conf -- they produce exactly the same keys as
  rc4-hmac:normal because rc4 string-to-key ignores salts
- nuke kdcrotate -- there are better ways to balance the load on KDCs, and
  the SELinux policy for it would have been scary-looking
- update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-7" date="1093996800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-6" date="1093392000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-5" date="1093392000">- incorporate revised fixes from Tom Yu for CAN-2004-0642, CAN-2004-0644,
  CAN-2004-0772</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-4" date="1093305600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-3" date="1093305600">- incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
  (MITKRB5-SA-2004-002, #130732)
- incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-2" date="1090972800">- fix indexing error in server sorting patch (#127336)</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-0.1" date="1087257600">- update to 1.3.4 final</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-0" date="1086652800">- update to 1.3.4 beta1
- remove MITKRB5-SA-2004-001, included in 1.3.4</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-8" date="1086652800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-7" date="1086393600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-6" date="1086393600">- apply updated patch from MITKRB5-SA-2004-001 (revision 2004-06-02)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-5" date="1086134400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-4" date="1086134400">- apply patch from MITKRB5-SA-2004-001 (#125001)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.3.3-3" date="1084406400">- removed rpath</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-2" date="1082073600">- re-enable large file support, fell out in 1.3-1
- patch rcp to use long long and %lld format specifiers when reporting file
  sizes on large files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-1" date="1081900800">- update to 1.3.3</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.2-1" date="1078963200">- update to 1.3.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-12" date="1078790400">- rebuild</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt; 1.3.1-11.1" date="1078272000">- rebuilt</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt; 1.3.1-11" date="1076716800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-10" date="1076371200">- catch krb4 send_to_kdc cases in kdc preference patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-9" date="1075766400">- remove patch to set TERM in klogind which, combined with the upstream fix in
  1.3.1, actually produces the bug now (#114762)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-8" date="1074556800">- when iterating over lists of interfaces which are "up" from getifaddrs(),
  skip over those which have no address (#113347)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1073952000">- prefer the kdc which last replied to a request when sending requests to kdcs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-7" date="1069718400">- fix combination of --with-netlib and --enable-dns (#82176)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- remove libdefault ticket_lifetime option from the default krb5.conf, it is
  ignored by libkrb5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-6" date="1064534400">- fix bug in patch to make rlogind start login with a clean environment a la
  netkit rlogin, spotted and fixed by Scott McClung</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-5" date="1064361600">- include profile.d scriptlets in krb5-devel so that krb5-config will be in
  the path if krb5-workstation isn't installed, reported by Kir Kolyshkin</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1063065600">- add more etypes (arcfour) to the default enctype list in kdc.conf
- don't apply previous patch, refused upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-4" date="1062806400">- fix 32/64-bit bug storing and retrieving the issue_date in v4 credentials</changelog><changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; 1.3.1-3" date="1062633600">- Don't check for write access on /etc/krb5.conf if SELinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-2" date="1061942400">- fixup some int/pointer varargs wackiness</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-1" date="1060128000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-0" date="1060041600">- update to 1.3.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-2" date="1059091200">- pull fix for non-compliant encoding of salt field in etype-info2 preauth
  data from 1.3.1 beta 1, until 1.3.1 is released.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-1" date="1058832000">- update to 1.3</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.8-4" date="1057622400">- correctly use stdargs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-0.beta.4" date="1055980800">- test update to 1.3 beta 4
- ditch statglue build option
- krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; 1.2.8-2" date="1053561600">- gcc 3.3 doesn't implement varargs.h, include stdarg.h instead</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.8-1" date="1049932800">- update to 1.2.8</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-14" date="1049155200">- fix double-free of enc_part2 in krb524d</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-13" date="1048291200">- update to latest patch kit for MITKRB5-SA-2003-004</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-12" date="1048118400">- add patch included in MITKRB5-SA-2003-003 (CAN-2003-0028)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-11" date="1047945600">- add patches from patchkit from MITKRB5-SA-2003-004 (CAN-2003-0138 and
  CAN-2003-0139)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-10" date="1046995200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-9" date="1046995200">- fix buffer underrun in unparsing certain principals (CAN-2003-0082)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-8" date="1044403200">- add patch to document the reject-bad-transited option in kdc.conf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1044316800">- add patch to fix server-side crashes when principals have no
  components (CAN-2003-0072)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-7" date="1043366400">- add patch from Mark Cox for exploitable bugs in ftp client</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-5" date="1042675200">- use PICFLAGS when building code from the ktany patch</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 1.2.7-4" date="1042156800">- debloat</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; 1.2.7-3" date="1041984000">- include .so.* symlinks as well as .so.*.*</changelog><changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 1.2.7-2" date="1039478400">- always #include &lt;errno.h&gt; to access errno, never do it directly
- enable LFS on a bunch of other 32-bit arches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1039046400">- increase the maximum name length allowed by kuserok() to the higher value
  used in development versions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1038873600">- install src/krb524/README as README.krb524 in the -servers package,
  includes information about converting for AFS principals</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-1" date="1037404800">- update to 1.2.7
- disable use of tcl</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1037059200">- update to 1.2.7-beta2 (internal only, not for release), dropping dnsparse
  and kadmind4 fixes</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-5" date="1035417600">- add patch for buffer overflow in kadmind4 (not used by default)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-4" date="1034380800">- drop a hunk from the dnsparse patch which is actually redundant (thanks to
  Tom Yu)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-3" date="1034208000">- patch to handle truncated dns responses</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-2" date="1034035200">- remove hashless key types from the default kdc.conf, they're not supposed to
  be there, noted by Sam Hartman on krbdev</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-1" date="1033171200">- update to 1.2.6</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-7" date="1031961600">- use %{_lib} for the sake of multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-6" date="1028332800">- add patch from Tom Yu for exploitable bugs in rpc code used in kadmind</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-5" date="1027468800">- fix bug in krb5.csh which would cause the path check to always succeed</changelog><changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 1.2.5-4" date="1027123200">- build even libdb.a with -fPIC and $RPM_OPT_FLAGS.</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1022457600">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-1" date="1020297600">- update to 1.2.5
- disable statglue</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.4-1" date="1015027200">- update to 1.2.4</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-5" date="1014249600">- rebuild in new environment
- reenable statglue</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1012089600">- prereq chkconfig for the server subpackage</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-3" date="1011225600">- build without -g3, which gives us large static libraries in -devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-2" date="1011139200">- reintroduce ld.so.conf munging in the -libs %post</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-1" date="1010707200">- rename the krb5 package back to krb5-libs; the previous rename caused
  something of an uproar
- update to 1.2.3, which includes the FTP and telnetd fixes
- configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
  the default behavior instead of enabling the feature (the feature is enabled
  by --enable-dns, which we still use)
- reenable optimizations on Alpha
- support more encryption types in the default kdc.conf (heads-up from post
  to comp.protocols.kerberos by Jason Heiss)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.2-14" date="996883200">- rename the krb5-libs package to krb5 (naming a subpackage -libs when there
  is no main package is silly)
- move defaults for PAM to the appdefaults section of krb5.conf -- this is
  the area where the krb5_appdefault_* functions look for settings)
- disable statglue (warning: breaks binary compatibility with previous
  packages, but has to be broken at some point to work correctly with
  unpatched versions built with newer versions of glibc)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.2-13" date="996883200">- bump release number and rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996710400">- add patch to fix telnetd vulnerability</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="995673600">- tweak statglue.c to fix stat/stat64 aliasing problems
- be cleaner in use of gcc to build shlibs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- use gcc to build shared libraries</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993686400">- add patch to support "ANY" keytab type (i.e.,
  "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
  patch from Gerald Britton, #42551)
- build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
- patch ftpd to use long long and %lld format specifiers to support the SIZE
  command on large files (also #30697)
- don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
- implement reload in krb5kdc and kadmind init scripts (#41911)
- lose the krb5server init script (not using it any more)</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="993427200">- Bump release + rebuild.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991180800">- pass some structures by address instead of on the stack in krb5kdc</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990576000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988329600">- add patch from Tom Yu to fix ftpd overflows (#37731)</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt;" date="987638400">- disable optimizations on the alpha again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985996800">- add in glue code to make sure that libkrb5 continues to provide a
  weak copy of stat()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="984700800">- build alpha with -O0 for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="984096000">- fix the kpropd init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983836800">- update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
- re-enable optimization on Alpha</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="981676800">- build alpha with -O0 for now
- own /var/kerberos</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="981504000">- own the directories which are created for each package (#26342)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- gettextize init scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- add some comments to the ksu patches for the curious
- re-enable optimization on alphas</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979603200">- fix krb5-send-pr (#18932) and move it from -server to -workstation
- buildprereq libtermcap-devel
- temporariliy disable optimization on alphas
- gettextize init scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- force -fPIC</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975715200">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973036800">- add bison as a BuildPrereq (#20091)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- change /usr/dict/words to /usr/share/dict/words in default kdc.conf (#20000)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- apply kpasswd bug fixes from David Wragg</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970704000">- make krb5-libs obsolete the old krb5-configs package (#18351)
- don't quit from the kpropd init script if there's no principal database so
  that you can propagate the first time without running kpropd manually
- don't complain if /etc/ld.so.conf doesn't exist in the -libs %post</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968803200">- fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
  (#11588)
- fix heap corruption bug in FTP client (#14301)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966470400">- fix summaries and descriptions
- switched the default transfer protocol from PORT to PASV as proposed on
  bugzilla (#16134), and to match the regular ftp package's behavior</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="964051200">- rebuild to compress man pages.</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="963705600">- move initscript back</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963619200">- disable servers by default to keep linuxconf from thinking they need to be
  started when they don't</changelog><changelog author="Prospector &lt;bugzilla@redhat.com&gt;" date="963532800">- automatic rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963273600">- change cleanup code in post to not tickle chkconfig
- add grep as a Prereq: for -libs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- move condrestarts to postun
- make xinetd configs noreplace
- add descriptions to xinetd configs
- add /etc/init.d as a prereq for the -server package
- patch to properly truncate $TERM in krlogind</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962409600">- update to 1.2.1
- back out Tom Yu's patch, which is a big chunk of the 1.2 -&gt; 1.2.1 update
- start using the official source tarball instead of its contents</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
- pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
  compatible with other stuff in 6.2, so no need)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962236800">- tweak graceful start/stop logic in post and preun</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962064000">- update to the 1.2 release
- ditch a lot of our patches which went upstream
- enable use of DNS to look up things at build-time
- disable use of DNS to look up things at run-time in default krb5.conf
- change ownership of the convert-config-files script to root.root
- compress PS docs
- fix some typos in the kinit man page
- run condrestart in server post, and shut down in preun</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961459200">- only remove old krb5server init script links if the init script is there</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961286400">- disable kshell and eklogin by default</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961113600">- patch mkdir/rmdir problem in ftpcmd.y
- add condrestart option to init script
- split the server init script into three pieces and add one for kpropd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961027200">- make sure workstation servers are all disabled by default
- clean up krb5server init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- apply second set of buffer overflow fixes from Tom Yu
- fix from Dirk Husung for a bug in buffer cleanups in the test suite
- work around possibly broken rev binary in running test suite
- move default realm configs from /var/kerberos to /var/kerberos</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960336000">- make ksu and v4rcp owned by root</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- use %{_infodir} to better comply with FHS
- move .so files to -devel subpackage
- tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
- fix package descriptions again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="959212800">- change a LINE_MAX to 1024, fix from Ken Raeburn
- add fix for login vulnerability in case anyone rebuilds without krb4 compat
- add tweaks for byte-swapping macros in krb.h, also from Ken
- add xinetd config files
- make rsh and rlogin quieter
- build with debug to fix credential forwarding
- add rsh as a build-time req because the configure scripts look for it to
  determine paths</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958608000">- fix config_subpackage logic</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958521600">- remove setuid bit on v4rcp and ksu in case the checks previously added
  don't close all of the problems in ksu
- apply patches from Jeffrey Schiller to fix overruns Chris Evans found
- reintroduce configs subpackage for use in the errata
- add PreReq: sh-utils</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958435200">- fix double-free in the kdc (patch merged into MIT tree)
- include convert-config-files script as a documentation file</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="957398400">- patch ksu man page because the -C option never works
- add access() checks and disable debug mode in ksu
- modify default ksu build arguments to specify more directories in CMD_PATH
  and to use getusershell()</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="957398400">- fix configure stuff for ia64</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="955411200">- add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
- change Requires: for/in subpackages to include 1.6.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954979200">- add man pages for kerberos(1), kvno(1), .k5login(5)
- add kvno to -workstation</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954806400">- Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
  a %config file anyway.
- Make krb5.conf a noreplace config file.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954460800">- Make klogind pass a clean environment to children, like NetKit's rlogind does.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952560000">- Don't enable the server by default.
- Compress info pages.
- Add defaults for the PAM module to krb5.conf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952387200">- Correct copyright: it's exportable now, provided the proper paperwork is
  filed with the government.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952128000">- apply Mike Friedman's patch to fix format string problems
- don't strip off argv[0] when invoking regular rsh/rlogin</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952041600">- run kadmin.local correctly at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="951782400">- pass absolute path to kadm5.keytab if/when extracting keys at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="951004800">- fix info page insertions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="950140800">- tweak server init script to automatically extract kadm5 keys if
  /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
- adjust package descriptions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="949622400">- fix for potentially gzipped man pages</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="948499200">- fix comments in krb5-configs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="947289600">- move /usr/kerberos/bin to end of PATH</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="946425600">- install kadmin header files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="945820800">- patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
- add installation of info docs
- remove krb4 compat patch because it doesn't fix workstation-side servers</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="945734400">- remove hesiod dependency at build-time</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="945648000">- rebuild on 1.1.1</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="939340800">- clean up init script for server, verify that it works [jlkatz]
- clean up rotation script so that rc likes it better
- add clean stanza</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="939081600">- backed out ncurses and makeshlib patches
- update for krb5-1.1
- add KDC rotation to rc.boot, based on ideas from Michael's C version</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="938390400">- added -lncurses to telnet and telnetd makefiles</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="931219200">- added krb5.csh and krb5.sh to /etc/profile.d</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="930096000">- broke out configuration files</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="929404800">- fixed server package so that it works now</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="926812800">- started changelog (previous package from zedz.net)
- updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
- added --force to makeinfo commands to skip errors during build</changelog></package>
<package pkgid="164759e079f3bc9e941d4d8b7227eac874c73b82" name="libnet-devel" arch="i386"><version epoch="0" ver="1.1.5" rel="1.el5"/><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.5-1" date="1293573600">- Upgrade to 1.1.5</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.4-4" date="1278712800">- Added patch for capability support rather UID check (#589770)</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.4-3" date="1250892000">- Move libnet.so.* to /lib[64] to avoid static linking (#518150)</changelog><changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.1.4-2" date="1248472800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.4-1" date="1244757600">- Upgrade to 1.1.4</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.3-2" date="1244325600">- Added upstream patch to solve HAVE_CONFIG_H (#501633, #502400)</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.3-1" date="1242511200">- Upgrade to 1.1.3</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.2.1-14" date="1240178400">- Enabled a shared library and made lots of spec file cleanups</changelog><changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.1.2.1-13" date="1235426400">- Rebuild against gcc 4.4 and rpm 4.6</changelog><changelog author="Fedora Release Engineering &lt;rel-eng@fedoraproject.org&gt; - 1.1.2.1-12" date="1203458400">- Autorebuild for GCC 4.3</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-11" date="1186005600">- build with -fPIC (#250296)</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-10" date="1168639200">- add debian patch to correct bad checksums</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-9" date="1156888800">- rebuild for FC6</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-8" date="1140213600">- rebuild for fc5</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-7" date="1135288800">- rebuild</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-6" date="1126562400">- bump release and add dist tag</changelog><changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.1.2.1-5" date="1125439200">- spec file cleanup</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-4" date="1125093600">- use pushd and popd (from Oliver Falk)</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-3" date="1124748000">- Correct dos end of lines
- add in devel: Provides: %{name} = %{version}-%{release}</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-2" date="1123884000">- put everything in a devel subpackage
- add smpflags
- clean in sample</changelog><changelog author="Patrice Dumas &lt;pertusus@free.fr&gt; 1.1.2.1-1" date="1123884000">- rebuild changing only name</changelog><changelog author="Marcin Garski &lt;garski@poczta.onet.pl&gt; 1.1.2.1-2.fc2" date="1086213600">- Rebuild for Fedora Core 2</changelog><changelog author="Marcin Garski &lt;garski@poczta.onet.pl&gt; 1.1.2.1-1" date="1084053600">- Initial specfile</changelog></package>
<package pkgid="d82f1bcc70f77db540be51a7106d7c34cc233e29" name="augeas" arch="i386"><version epoch="0" ver="1.0.0" rel="1.el5"/><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 1.0.0-1" date="1357336800">- New version; remove all patches</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.10.0-3" date="1326232800">- Add patches for bugs 247 and 248 (JSON lens)</changelog><changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 0.10.0-2" date="1322949600">- Add patch to resolve missing libxml2 requirement in augeas.pc.</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.10.0-1" date="1322863200">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.9.0-1" date="1311631200">- New version; removed patch pathx-whitespace-ea010d8</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.8.1-2" date="1304460000">- Add patch pathx-whitespace-ea010d8.patch to fix BZ 700608</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.8.1-1" date="1302904800">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.8.0-1" date="1298498400">- New version</changelog><changelog author="Matthew Booth &lt;mbooth@redhat.com&gt; - 0.7.4-1" date="1290463200">- Update to version 0.7.4</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.7.3-1" date="1281132000">- Remove upstream patches</changelog><changelog author="Matthew Booth &lt;mbooth@redhat.com&gt; - 0.7.2-2" date="1278108000">- Add lens for grub's device.map</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.7.2-1" date="1277244000">- Fix ownership of /usr/share/augeas. BZ 569393</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.7.1-1" date="1271887200">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.7.0-1" date="1263506400">- Remove patch vim-ftdetect-syntax.patch. It's upstream</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.6.0-2" date="1260914400">- Fix ftdetect file for vim</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.6.0-1" date="1259618400">- Install vim syntax files</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.3-1" date="1252965600">- Remove separate xorg.aug, included in upstream source</changelog><changelog author="Matthew Booth &lt;mbooth@redhat.com&gt; - 0.5.2-2" date="1251237600">- Include new xorg lens from upstream</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.2-1" date="1247522400">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.1-1" date="1244239200">- Install fadot</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.0-2" date="1238191200">- fadot isn't being installed just yet</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.0-1" date="1237932000">- New program /usr/bin/fadot</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.4.2-1" date="1236636000">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.4.1-1" date="1235772000">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.4.0-1" date="1233957600">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.3.6-1" date="1233007200">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.3.5-1" date="1230069600">- New version</changelog><changelog author="David Lutterkort &lt;dlutter@redhat.com&gt; - 0.0.4-1" date="1203976800">- Initial specfile</changelog></package>
<package pkgid="e8b550048cbd1655a555d1147729c113ab2c7df4" name="augeas-devel" arch="i386"><version epoch="0" ver="1.0.0" rel="1.el5"/><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 1.0.0-1" date="1357336800">- New version; remove all patches</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.10.0-3" date="1326232800">- Add patches for bugs 247 and 248 (JSON lens)</changelog><changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 0.10.0-2" date="1322949600">- Add patch to resolve missing libxml2 requirement in augeas.pc.</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.10.0-1" date="1322863200">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.9.0-1" date="1311631200">- New version; removed patch pathx-whitespace-ea010d8</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.8.1-2" date="1304460000">- Add patch pathx-whitespace-ea010d8.patch to fix BZ 700608</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.8.1-1" date="1302904800">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.8.0-1" date="1298498400">- New version</changelog><changelog author="Matthew Booth &lt;mbooth@redhat.com&gt; - 0.7.4-1" date="1290463200">- Update to version 0.7.4</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.7.3-1" date="1281132000">- Remove upstream patches</changelog><changelog author="Matthew Booth &lt;mbooth@redhat.com&gt; - 0.7.2-2" date="1278108000">- Add lens for grub's device.map</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.7.2-1" date="1277244000">- Fix ownership of /usr/share/augeas. BZ 569393</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.7.1-1" date="1271887200">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.7.0-1" date="1263506400">- Remove patch vim-ftdetect-syntax.patch. It's upstream</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.6.0-2" date="1260914400">- Fix ftdetect file for vim</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.6.0-1" date="1259618400">- Install vim syntax files</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.3-1" date="1252965600">- Remove separate xorg.aug, included in upstream source</changelog><changelog author="Matthew Booth &lt;mbooth@redhat.com&gt; - 0.5.2-2" date="1251237600">- Include new xorg lens from upstream</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.2-1" date="1247522400">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.1-1" date="1244239200">- Install fadot</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.0-2" date="1238191200">- fadot isn't being installed just yet</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.0-1" date="1237932000">- New program /usr/bin/fadot</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.4.2-1" date="1236636000">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.4.1-1" date="1235772000">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.4.0-1" date="1233957600">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.3.6-1" date="1233007200">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.3.5-1" date="1230069600">- New version</changelog><changelog author="David Lutterkort &lt;dlutter@redhat.com&gt; - 0.0.4-1" date="1203976800">- Initial specfile</changelog></package>
<package pkgid="d1b8779a73b989a87bfa17d0264a78d30163655e" name="krb5-libs" arch="i386"><version epoch="0" ver="1.6.1" rel="80.el5.slf5"/><changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1413244800">- Ran Regex: (Release: .*) =&gt; \1.slf5
--&gt;  Modify release string to note changes for SLF5
- Added Source: krb5.ini
--&gt;  Config file for automated patch script
- Added Patch: krb5_krb5-mwm-kshd.patch
--&gt;  Fix sync bug, see BZ#658217</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-80.el5" date="1409270400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-79.el5" date="1408752000">- incorporate fix for MITKRB5-SA-2014-001 (CVE-2014-4345, #1132785)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592000">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-77.el5" date="1406592000">- fix what appears to be a cosmetic error in the patch for self-tests
  for CVE-2014-4341</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-76.el5" date="1406160000">- run the backported self-tests, such as they are, for CVE-2014-4341</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-75.el5" date="1406160000">- pull in backported fix for denial of service by injection of malformed
  GSSAPI tokens (CVE-2014-4341, #1121509)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-74.el5" date="1399334400">- add patch based on one from Filip Krska to not call poll() with a negative
  timeout when the caller's intent is for us to just stop calling it (#1089732)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-73.el5" date="1398211200">- incorporate backported upstream patch for remote crash of KDCs which serve
  multiple realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-72.el5" date="1395792000">- add part-backported fix to avoid possible use-after-free when encrypting
  delegated creds (Jatin Nansi, #1004632)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-71.el5" date="1370044800">- add backported fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325030400">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-69.el5" date="1320278400">- ftp: fix a static analysis should-never-happen NULL dereference (#750823)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-68.el5" date="1319068800">- backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
  to talk to a KDC by using poll() if it's detected at compile-time, revised
  (#701444, RT#6905)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-67.el5" date="1318982400">- add backported patch by way of jbarbuc to free subkeys created by the
  KDC while processing TGS requests (#708516)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-66.el5" date="1318982400">- add backported patch by way of several people to better avoid false
  detection of replay attacks when talking to systems with coarse time
  resolution (#713500)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-65.el5" date="1318982400">- ftpd: add backported patch to check for errors when calling setegid
  (MITKRB5-SA-2011-005, CVE-2011-1526, #719098)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-64.el5" date="1318982400">- klist: don't trip over referral entries when invoked with -s (#729067,
  RT#6915)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-63.el5" date="1318982400">- unbreak processing of multi-line macros (#735363,#736132), broken by the
  original fix for #665833</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-62.el5" date="1308355200">- incorporate a fix to teach the file labeling bits about when replay caches
  are expunged (#712453)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-61.el5" date="1305072000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1303948800">- ftp: handle larger command inputs (#665833)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-60.el5" date="1303862400">- don't bail halfway through an unlock operation when the result will
  be discarded and the end-result not cleaned up (Martin Osvald, #586032)
- add a versioned dependency between krb5-server-ldap and krb5-libs (internal
  tooling)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-59.el5" date="1301961600">- don't discard the error code from an error message received in response
  to a change-password request (#658871, RT#6893)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-58.el5" date="1301529600">- ftpd: add patch from Jatin Nansi to correctly match "$user restrict"
  lines in /etc/ftpusers (#644215, RT#6889)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-57.el5" date="1300406400">- ftp: add modified patch from Rogan Kyuseok Lee to report the number of
  bytes transferred correctly when transferring large files on 32-bit
  systems (#648404)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-56.el5" date="1297987200">- backport fix for RT#6514: memory leak freeing rcache type "none" (#678205)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1297987200">- add upstream patch to fix hang or crash in the KDC when using the LDAP kdb
  backend (CVE-2011-0281, CVE-2011-0282, #671097)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-55.el5" date="1291161600">- incorporate upstream patch for checksum acceptance issues from
  MITKRB5-SA-2010-007 (CVE-2010-1323, #652308)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-54.el5" date="1286236800">- backport a fix to the previous change (#539423)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-53.el5" date="1285977600">- backport the k5login_directory and k5login_authoritative settings (#539423)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-52.el5" date="1284076800">- krshd: don't limit user names to 16 chars when utmp can handle names
  at least a bit longer than that (#611713)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-51.el5" date="1283558400">- fix a logic bug in computing key expiration times (RT#6762, #627038)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-50.el5" date="1283385600">- correct the post-rotate scriptlet in the kadmind logrotate config (more
  of #462658)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-49.el5" date="1278979200">- ftpd: backport changes to modify behavior to match telnetd,rshd,rlogind and
  accept GSSAPI auth to any service for which we have a matching key (#538075)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-47.el5" date="1278547200">- pull in fix for RT#5551 to treat the referral realm when seen in a ticket
  as though it were the local realm (#498554, also very likely #450122)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-46.el5" date="1278547200">- add aes256-cts:normal and aes128-cts:normal to the list of keysalts
  in the default kdc.conf (part of #565941)
- add a note to kdc.conf(5) pointing to the admin guide for the list of
  recognized key and salt types (the rest of #565941)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-45.el5" date="1278547200">- add logrotate configuration files for krb5kdc and kadmind (#462658)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-44.el5" date="1278547200">- libgssapi: backport patch from svn to stop returning context-expired errors
  when the ticket which was used to set up the context expires (#605367,
  upstream #6739)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-43.el5" date="1277856000">- enable building the -server-ldap subpackage (#514362)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-42.el5" date="1276214400">- stop caring about the endianness of stash files (#514741), which will be
  replaced by proper keytab files in later releases
- don't crash in krb5_get_init_creds_password() if the passed-in options
  struct is NULL and the client's keys have expired (#555875)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-41.el5" date="1275609600">- ksu: perform PAM account and session management before dropping privileges
  to those of the target user (#540769 and #596887, respectively)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1275004800">- add candidate patch to correct libgssapi null pointer dereference which
  could be triggered by malformed client requests (CVE-2010-1321, #583704)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-40.el5" date="1271116800">- fix a null pointer dereference and crash introduced in our PAM patch that
  would happen if ftpd was given the name of a user who wasn't known to the
  local system, limited to being triggerable by gssapi-authenticated clients by
  the default xinetd config (Olivier Fourdan, #569472)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-39.el5" date="1270598400">- add upstream patch to fix a few use-after-free bugs, including one in
  kadmind (CVE-2010-0629, #578186)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-38.el5" date="1268784000">- merge patch to correct KDC integer overflows which could be triggered by
  malformed RC4 and AES ciphertexts (CVE-2009-4212, #546348)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-37.el5" date="1268784000">- pull changes to libkrb5 to properly handle and chase "off-path" referrals
  back from 1.7 (#546538)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-36.el5" date="1242777600">- add an auth stack to ksu's PAM configuration so that it can successfully
  pam_setcred()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-35.el5" date="1242086400">- also set PAM_RUSER in ksu for completeness (#479071+#477033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-34.el5" date="1241568000">- fix various typos, except for bits pertaining to licensing (#499190)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-33.el5" date="1241568000">- kdb5_util: when renaming a database, if the new name's associated lock
  files don't exist, go ahead and create them (#442879)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1240531200">- ksu: perform PAM account and session management for the target user;
  authentication is still performed as before (#477033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1240358400">- fix typo in ksu's reporting of errors getting credentials (#462890)
- kadmind.init: stop setting up a keytab, as kadmind's been able to use
  the database directly for a while now (#473151)
- pull up patch to set PAM_RHOST (James Leddy, #479071)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5.3" date="1238803200">- update to revised patch for CVE-2009-0844/CVE-2009-0845</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5.2" date="1238198400">- add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism
  (#490636, CVE-2009-0844)
- add fix for NULL pointer dereference when handling certain error cases
  in the SPNEGO GSSAPI mechanism (#490636, CVE-2009-0845)
- add fix for attempt to free uninitialized pointer in the ASN.1 decoder
  (#491036, CVE-2009-0846)
- add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-32.el5" date="1231977600">- add patch to also report an error in rcp if close() returns an error,
  which could indicate an out-of-space error on an NFS filesystem (Tomas
  Smetana, #461902)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5" date="1227657600">- add a backported patch which adds a check on credentials obtained from
  a foreign realm to make sure that they're of an acceptable type, and
  if not, retry to the request to get one of the right type (Sadique Puthen,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-30.el5" date="1225843200">- backport fix from 1.6.3 to register file-based ccaches created with
  the krb5_cc_new_unique() function with the global list, so that we
  don't crash when we go to close the ccache (#468729)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-29.el5" date="1220572800">- backport fix from 1.6.3 to abort a sequential scan of a keytab if the
  handle to the keytab has become invalidated during the scan (via Vince
  Worthington, #460911)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-28.el5" date="1220486400">- if we successfully change the user's password during an attempt to get
  initial credentials, but then fail to get initial creds from a non-master
  using the new password, retry against the master (#432334)
- telnet: remove the proviso in the man page which says that the "z" command
  only works in csh, as this is only true on systems where other shells don't
  implement job control (#433947)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1220054400">- avoid double-logging by not parsing /etc/krb5.conf twice (#434858)
- ftp: fix to not incorrectly reuse target filenames during mget when case-
  mapping is enabled (#442716)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-27.el5" date="1215820800">- don't forget to label the principal.ok lock file (#455033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-26.el5" date="1213315200">- build with -fno-strict-aliasing (#451043)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-25.el5" date="1204761600">- add preliminary patch to fix use of uninitialized pointer / double-free in
  KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
- add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
  (#415321)
- add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
  (#415351)
- add preliminary patch to fix incorrect handling of high-numbered descriptors
  in the RPC library (CVE-2008-0947) (#433596)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-24.el5" date="1202515200">- kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
  an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
  interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-23.el5" date="1201824000">- backport changes from 1.6.3 which allow callers of the the sendto-kdc
  functions to override the failover behavior on a per-response basis, and
  default to failing over on service-unavailable errors (#230384)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-22.el5" date="1201737600">- add patch to fall back to TCP kpasswd servers for kdc-unreachable,
  can't-resolve-server, and response-too-big errors (#392631)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1201219200">- fold in some more changes to account for differing definitions of %{dist}
  (more of #427790)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-21.el5" date="1200441600">- add conditional logic to allow building only the krb5-server-ldap subpackage
  (#427790)
- use the right sequence numbers when generating password-set/change requests
  for kpasswd servers after the first one (#427789)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-20.el5" date="1198022400">- allocate space for the relative path including the nul-terminator (Jose
  Plans, #426085)
- fix a couple of spots where a file context wouldn't be freed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-19.el5" date="1197417600">- backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
  structure the same way we would one which was allocated by the calling
  application, to restore kinit's traditional behavior of doing a password
  change right when it detects an expired password (#413051)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-18.el5" date="1194652800">- fix syntax error in kadmin init script (#373011,#381011)
- turn off content/size/date verification on krb5.conf (#329771)
- fix storage of delegated krb5 credentials when they've been wrapped up in
  spnego (#319351)
- return a delegated credential handle even if the application didn't pass a
  location to store the flags which would be used to indicate that credentials
  were delegated (#314651)
- in login, allow PAM to interact with the user when they've been strongly
  authenticated (#309951)
- signal PAM when we're changing an expired password that it's an expired
  password, so that when cracklib flags a password as being weak it's treated
  as an error even if we're running as root (#308131)
- set the key expiration time in an AS-REP using the sooner of the client's
  entry's key expiration time and the entry's expiration time, instead of
  just the entry's expiration time (#250257)
- in ftp, don't lose track of a client socket when a server-side error
  causes a download to fail (#248618)
- in ftp, fix runique when mget is used (#247633)
- add the snippet documenting the kdc_tcp_ports option to kdc.conf's man
  page, using text taken from the administrator's guide (#282191)
- in kpasswd, when reading the client's principal name from the ccache fails
  for any reason, fall back to the user's name (#248631)
- init script cleanups (Michal Marciniszyn, #242500)
- tweak the telnet man page to refer to the telnet rlogin escape character
  as such instead of rereferring to it simly as the escape character or the
  telnet escape character (#247741)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-17.el5" date="1189555200">- ftpd: also do PAM session and credential management when ftp clients use
  strong authentication (#286291)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-16" date="1189123200">- update to revised patch for CVE-2007-3999</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-15" date="1189123200">- fix omission of files created by the db2 plugin when labeling (#228157)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-14" date="1188000000">- make krb5-workstation depend on the PAM configuration file used by login.krb5
- fix omission of kadmin log file when labeling (#253558)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-13" date="1187654400">- add preliminary patch to fix buffer overflow in rpcsec_gss implementation
  in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
  pointer in kadmind (#250976, CVE-2007-4000)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-12" date="1185494400">- kdc: default to listening for TCP clients as well (#248415)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-11" date="1184198400">- login: change to the user's home directory after dropping privileges,
  not before (#248050)
- turn off the ldap features</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-10" date="1182988800">- add a patch to allow applications to try to use a key with kvno=0, if
  found, in place of the "right" version for a request (Luke Howard, #230379)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-9" date="1182988800">- incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
  and MITKRB5-SA-2007-005 (CVE-2007-2798) (#239073)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-7" date="1182816000">- reintroduce missing %postun for the non-split_workstation case</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-6" date="1182816000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-5.1" date="1182816000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-5" date="1182729600">- add missing pam-devel build requirement, force selinux-or-fail build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-4" date="1182729600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-3" date="1182729600">- label all files at creation-time according to the SELinux policy (#228157)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- perform PAM account / session management in krshd (#182195,#195922)
- perform PAM authentication and account / session management in ftpd
- perform PAM authentication, account / session management, and password-
  changing in login.krb5 (#182195,#195922)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- preprocess kerberos.ldif into a format FDS will like better, and include
  that as a doc file as well</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- switch man pages to being generated with the right paths in them
- drop old, incomplete SELinux patch
- add patch from Greg Hudson to make srvtab routines report missing-file errors
  at same point that keytab routines do (#241805)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-2" date="1180051200">- pull patch from svn to undo unintentional chattiness in ftp
- pull patch from svn to handle NULL krb5_get_init_creds_opt structures
  better in a couple of places where they're expected</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-1" date="1179964800">- update to 1.6.1
  - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
  - drop patch for sendto bug in 1.6, fixed in 1.6.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1179532800">- kadmind.init: don't fail outright if the default principal database
  isn't there if it looks like we might be using the kldap plugin
- kadmind.init: attempt to extract the key for the host-specific kadmin
  service when we try to create the keytab</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-6" date="1179360000">- omit dependent libraries from the krb5-config --libs output, as using
  shared libraries (no more static libraries) makes them unnecessary and
  they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
  (strips out libkeyutils, libresolv, libdl)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-5" date="1178323200">- pull in keyutils as a build requirement to get the "KEYRING:" ccache type,
  because we've merged</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-4" date="1178323200">- fix an uninitialized length value which could cause a crash when parsing
  key data coming from a directory server
- correct a typo in the krb5.conf man page ("ldap_server"-&gt;"ldap_servers")</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1176508800">- move the default acl_file, dict_file, and admin_keytab settings to
  the part of the default/example kdc.conf where they'll actually have
  an effect (#236417)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-24" date="1175817600">- merge security fixes from RHSA-2007:0095</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-3" date="1175644800">- add patch to correct unauthorized access via krb5-aware telnet
  daemon (#229782, CVE-2007-0956)
- add patch to fix buffer overflow in krb5kdc and kadmind
  (#231528, CVE-2007-0957)
- add patch to fix double-free in kadmind (#231537, CVE-2007-1216)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1174608000">- back out buildrequires: keyutils-libs-devel for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-2" date="1174608000">- add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
  dragging keyutils-libs in as a dependency</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-23" date="1174348800">- fix bug ID in changelog</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-22" date="1174003200">* Thu Mar 15 2007 Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-21
- add preliminary patch to fix buffer overflow in krb5kdc and kadmind
  (#231528, CVE-2007-0957)
- add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1172707200">- add patch to build semi-useful static libraries, but don't apply it unless
  we need them</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-20" date="1172620800">- temporarily back out %post changes, fix for #143289 for security update
- add preliminary patch to correct unauthorized access via krb5-aware telnet</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1171929600">- make profile.d scriptlets mode 644 instead of 755 (part of #225974)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-1" date="1170201600">- clean up quoting of command-line arguments passed to the krsh/krlogin
  wrapper scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-19" date="1169769600">- refrain from killing any lingering members of our child's process group when
  logging that the child process has exited (Jose Plans, #143289)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1169510400">- initial update to 1.6, pre-package-reorg
- move workstation daemons to a new subpackage (#81836, #216356, #217301), and
  make the new subpackage require xinetd (#211885)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-18" date="1169510400">- make use of install-info more failsafe (Ville Skyttä, #223704)
- preserve timestamps on shell scriptlets at %install-time</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-17" date="1168992000">- move to using pregenerated PDF docs to cure multilib conflicts (#222721)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-16" date="1168646400">- update backport of the preauth module interface (part of #194654)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-14" date="1168387200">- apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
- apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-12" date="1166659200">- update backport of the preauth module interface</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1162252800">- update backport of the preauth module interface
- add proposed patches 4566, 4567
- add proposed edata reporting interface for KDC
- add temporary placeholder for module global context fixes</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-11" date="1161648000">- don't bail from the KDC init script if there's no database, it may be in
  a different location than the default (fenlason)
- remove the [kdc] section from the default krb5.conf -- doesn't seem to have
  been applicable for a while</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-10" date="1161216000">- rename krb5.sh and krb5.csh so that they don't overlap (#210623)
- way-late application of added error info in kadmind.init (#65853)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-9.pal_18695" date="1161216000">- add backport of in-development preauth module interface (#208643)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-9" date="1160438400">- provide docs in PDF format instead of as tex source (Enrico Scholz, #209943)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-8" date="1160006400">- add missing shebang headers to krsh and krlogin wrapper scripts (#209238)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-7" date="1157587200">- set SS_LIB at configure-time so that libss-using apps get working readline
  support (#197044)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-6" date="1155945600">- switch to the updated patch for MITKRB-SA-2006-001</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-5" date="1155081600">- apply patch to address MITKRB-SA-2006-001 (CVE-2006-3084)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-4" date="1154995200">- ensure that the gssapi library's been initialized before walking the
  internal mechanism list in gss_release_oid(), needed if called from
  gss_release_name() right after a gss_import_name() (#198092)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-3" date="1153872000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-2" date="1153872000">- pull up latest revision of patch to reduce lockups in rsh/rshd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-1.2" date="1153180800">- rebuild</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 1.5-1.1" date="1152748800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-1" date="1152230400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-0" date="1152144000">- update to 1.5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-9" date="1151107200">- mark profile.d config files noreplace (Laurent Rineau, #196447)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-8" date="1149811200">- add buildprereq for autoconf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-7" date="1148342400">- further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
  architectures, to avoid multilib conflicts; other changes will conspire to
  strip out the -L flag which uses this, so it should be harmless (#192692)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-6" date="1146268800">- adjust the patch which removes the use of rpath to also produce a
  krb5-config which is okay in multilib environments (#190118)
- make the name-of-the-tempfile comment which compile_et adds to error code
  headers always list the same file to avoid conflicts on multilib installations
- strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
- strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
  boxes</changelog><changelog author="Stepan Kasal &lt;skasal@redhat.com&gt; 1.4.3-5" date="1145059200">- Fix formatting typo in kinit.1 (krb5-kinit-man-typo.patch)</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; 1.4.3-4.1" date="1139616000">- bump again for double-long bug on ppc(64)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-4" date="1139270400">- give a little bit more information to the user when kinit gets the catch-all
  I/O error (#180175)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-3" date="1137715200">- rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
  declared, such as with recent glibc when _GNU_SOURCE isn't being used</changelog><changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; 1.4.3-2" date="1137715200">- Use full paths in krb5.sh to avoid path lookups</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt;" date="1134172800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1133481600">- login: don't truncate passwords before passing them into crypt(), in
  case they're significant (#149476)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-1" date="1132272000">- update to 1.4.3
- make ksu setuid again (#137934, others)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-4" date="1126656000">- mark %{krb5prefix}/man so that files which are packaged within it are
  flagged as %doc (#168163)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-3" date="1126051200">- add an xinetd configuration file for encryption-only telnetd, parallelling
  the kshell/ekshell pair (#167535)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-2" date="1125532800">- change the default configured encryption type for KDC databases to the
  compiled-in default of des3-hmac-sha1 (#57847)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-1" date="1123804800">- update to 1.4.2, incorporating the fixes for MIT-KRB5-SA-2005-002 and
  MIT-KRB5-SA-2005-003</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-6" date="1120089600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-5" date="1120089600">- fix telnet client environment variable disclosure the same way NetKit's
  telnet client did (CAN-2005-0488) (#159305)
- keep apps which call krb5_principal_compare() or krb5_realm_compare() with
  malformed or NULL principal structures from crashing outright (Thomas Biege)
  (#161475)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1120003200">- apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
  (#157104)
- apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-4" date="1119657600">- fix double-close in keytab handling
- add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-3" date="1116028800">- prevent spurious EBADF in krshd when stdin is closed by the client while
  the command is running (#151111)</changelog><changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 1.4.1-2" date="1116028800">- add deadlock patch, removed old patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-1" date="1115424000">- update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
- when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
  file for the service, pass it as an argument for the -r flag</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-3" date="1111622400">- drop krshd patch for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1111104000">- add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
- add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-2" date="1111017600">- don't include &lt;term.h&gt; into the telnet client when we're not using curses</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-1" date="1109289600">- update to 1.4
  - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
    flag to specify that it should communicate with the server using the older
    protocol
  - new libkrb5support library
  - v5passwdd and kadmind4 are gone
  - versioned symbols
- pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
  it on to krb5kdc
- pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
  it on to kadmind
- pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
  it on to krb524d *instead of* "-m"
- set "forwardable" in [libdefaults] in the default krb5.conf to match the
  default setting which we supply for pam_krb5
- set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
  compiled-in default</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-3" date="1103587200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-2" date="1103587200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-1" date="1103587200">- update to 1.3.6, which includes the previous fix</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-8" date="1103587200">- apply fix from Tom Yu for MITKRB5-SA-2004-004 (CAN-2004-1189)</changelog><changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 1.3.5-7" date="1103328000">- fix deadlock during file transfer via rsync/krsh
- thanks goes to James Antill for hint</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-6" date="1101513600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-3" date="1101168000">- fix predictable-tempfile-name bug in krb5-send-pr (CAN-2004-0971, #140036)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1100649600">- silence compiler warning in kprop by using an in-memory ccache with a fixed
  name instead of an on-disk ccache with a name generated by tmpnam()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-2" date="1100649600">- fix globbing patch port mode (#139075)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-1" date="1099353600">- fix segfault in telnet due to incorrect checking of gethostbyname_r result
  codes (#129059)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1097884800">- remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
  supported keytypes in kdc.conf -- they produce exactly the same keys as
  rc4-hmac:normal because rc4 string-to-key ignores salts
- nuke kdcrotate -- there are better ways to balance the load on KDCs, and
  the SELinux policy for it would have been scary-looking
- update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-7" date="1093996800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-6" date="1093392000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-5" date="1093392000">- incorporate revised fixes from Tom Yu for CAN-2004-0642, CAN-2004-0644,
  CAN-2004-0772</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-4" date="1093305600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-3" date="1093305600">- incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
  (MITKRB5-SA-2004-002, #130732)
- incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-2" date="1090972800">- fix indexing error in server sorting patch (#127336)</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-0.1" date="1087257600">- update to 1.3.4 final</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-0" date="1086652800">- update to 1.3.4 beta1
- remove MITKRB5-SA-2004-001, included in 1.3.4</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-8" date="1086652800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-7" date="1086393600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-6" date="1086393600">- apply updated patch from MITKRB5-SA-2004-001 (revision 2004-06-02)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-5" date="1086134400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-4" date="1086134400">- apply patch from MITKRB5-SA-2004-001 (#125001)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.3.3-3" date="1084406400">- removed rpath</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-2" date="1082073600">- re-enable large file support, fell out in 1.3-1
- patch rcp to use long long and %lld format specifiers when reporting file
  sizes on large files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-1" date="1081900800">- update to 1.3.3</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.2-1" date="1078963200">- update to 1.3.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-12" date="1078790400">- rebuild</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt; 1.3.1-11.1" date="1078272000">- rebuilt</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt; 1.3.1-11" date="1076716800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-10" date="1076371200">- catch krb4 send_to_kdc cases in kdc preference patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-9" date="1075766400">- remove patch to set TERM in klogind which, combined with the upstream fix in
  1.3.1, actually produces the bug now (#114762)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-8" date="1074556800">- when iterating over lists of interfaces which are "up" from getifaddrs(),
  skip over those which have no address (#113347)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1073952000">- prefer the kdc which last replied to a request when sending requests to kdcs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-7" date="1069718400">- fix combination of --with-netlib and --enable-dns (#82176)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- remove libdefault ticket_lifetime option from the default krb5.conf, it is
  ignored by libkrb5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-6" date="1064534400">- fix bug in patch to make rlogind start login with a clean environment a la
  netkit rlogin, spotted and fixed by Scott McClung</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-5" date="1064361600">- include profile.d scriptlets in krb5-devel so that krb5-config will be in
  the path if krb5-workstation isn't installed, reported by Kir Kolyshkin</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1063065600">- add more etypes (arcfour) to the default enctype list in kdc.conf
- don't apply previous patch, refused upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-4" date="1062806400">- fix 32/64-bit bug storing and retrieving the issue_date in v4 credentials</changelog><changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; 1.3.1-3" date="1062633600">- Don't check for write access on /etc/krb5.conf if SELinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-2" date="1061942400">- fixup some int/pointer varargs wackiness</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-1" date="1060128000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-0" date="1060041600">- update to 1.3.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-2" date="1059091200">- pull fix for non-compliant encoding of salt field in etype-info2 preauth
  data from 1.3.1 beta 1, until 1.3.1 is released.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-1" date="1058832000">- update to 1.3</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.8-4" date="1057622400">- correctly use stdargs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-0.beta.4" date="1055980800">- test update to 1.3 beta 4
- ditch statglue build option
- krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; 1.2.8-2" date="1053561600">- gcc 3.3 doesn't implement varargs.h, include stdarg.h instead</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.8-1" date="1049932800">- update to 1.2.8</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-14" date="1049155200">- fix double-free of enc_part2 in krb524d</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-13" date="1048291200">- update to latest patch kit for MITKRB5-SA-2003-004</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-12" date="1048118400">- add patch included in MITKRB5-SA-2003-003 (CAN-2003-0028)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-11" date="1047945600">- add patches from patchkit from MITKRB5-SA-2003-004 (CAN-2003-0138 and
  CAN-2003-0139)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-10" date="1046995200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-9" date="1046995200">- fix buffer underrun in unparsing certain principals (CAN-2003-0082)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-8" date="1044403200">- add patch to document the reject-bad-transited option in kdc.conf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1044316800">- add patch to fix server-side crashes when principals have no
  components (CAN-2003-0072)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-7" date="1043366400">- add patch from Mark Cox for exploitable bugs in ftp client</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-5" date="1042675200">- use PICFLAGS when building code from the ktany patch</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 1.2.7-4" date="1042156800">- debloat</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; 1.2.7-3" date="1041984000">- include .so.* symlinks as well as .so.*.*</changelog><changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 1.2.7-2" date="1039478400">- always #include &lt;errno.h&gt; to access errno, never do it directly
- enable LFS on a bunch of other 32-bit arches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1039046400">- increase the maximum name length allowed by kuserok() to the higher value
  used in development versions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1038873600">- install src/krb524/README as README.krb524 in the -servers package,
  includes information about converting for AFS principals</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-1" date="1037404800">- update to 1.2.7
- disable use of tcl</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1037059200">- update to 1.2.7-beta2 (internal only, not for release), dropping dnsparse
  and kadmind4 fixes</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-5" date="1035417600">- add patch for buffer overflow in kadmind4 (not used by default)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-4" date="1034380800">- drop a hunk from the dnsparse patch which is actually redundant (thanks to
  Tom Yu)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-3" date="1034208000">- patch to handle truncated dns responses</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-2" date="1034035200">- remove hashless key types from the default kdc.conf, they're not supposed to
  be there, noted by Sam Hartman on krbdev</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-1" date="1033171200">- update to 1.2.6</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-7" date="1031961600">- use %{_lib} for the sake of multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-6" date="1028332800">- add patch from Tom Yu for exploitable bugs in rpc code used in kadmind</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-5" date="1027468800">- fix bug in krb5.csh which would cause the path check to always succeed</changelog><changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 1.2.5-4" date="1027123200">- build even libdb.a with -fPIC and $RPM_OPT_FLAGS.</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1022457600">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-1" date="1020297600">- update to 1.2.5
- disable statglue</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.4-1" date="1015027200">- update to 1.2.4</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-5" date="1014249600">- rebuild in new environment
- reenable statglue</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1012089600">- prereq chkconfig for the server subpackage</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-3" date="1011225600">- build without -g3, which gives us large static libraries in -devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-2" date="1011139200">- reintroduce ld.so.conf munging in the -libs %post</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-1" date="1010707200">- rename the krb5 package back to krb5-libs; the previous rename caused
  something of an uproar
- update to 1.2.3, which includes the FTP and telnetd fixes
- configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
  the default behavior instead of enabling the feature (the feature is enabled
  by --enable-dns, which we still use)
- reenable optimizations on Alpha
- support more encryption types in the default kdc.conf (heads-up from post
  to comp.protocols.kerberos by Jason Heiss)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.2-14" date="996883200">- rename the krb5-libs package to krb5 (naming a subpackage -libs when there
  is no main package is silly)
- move defaults for PAM to the appdefaults section of krb5.conf -- this is
  the area where the krb5_appdefault_* functions look for settings)
- disable statglue (warning: breaks binary compatibility with previous
  packages, but has to be broken at some point to work correctly with
  unpatched versions built with newer versions of glibc)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.2-13" date="996883200">- bump release number and rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996710400">- add patch to fix telnetd vulnerability</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="995673600">- tweak statglue.c to fix stat/stat64 aliasing problems
- be cleaner in use of gcc to build shlibs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- use gcc to build shared libraries</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993686400">- add patch to support "ANY" keytab type (i.e.,
  "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
  patch from Gerald Britton, #42551)
- build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
- patch ftpd to use long long and %lld format specifiers to support the SIZE
  command on large files (also #30697)
- don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
- implement reload in krb5kdc and kadmind init scripts (#41911)
- lose the krb5server init script (not using it any more)</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="993427200">- Bump release + rebuild.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991180800">- pass some structures by address instead of on the stack in krb5kdc</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990576000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988329600">- add patch from Tom Yu to fix ftpd overflows (#37731)</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt;" date="987638400">- disable optimizations on the alpha again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985996800">- add in glue code to make sure that libkrb5 continues to provide a
  weak copy of stat()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="984700800">- build alpha with -O0 for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="984096000">- fix the kpropd init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983836800">- update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
- re-enable optimization on Alpha</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="981676800">- build alpha with -O0 for now
- own /var/kerberos</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="981504000">- own the directories which are created for each package (#26342)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- gettextize init scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- add some comments to the ksu patches for the curious
- re-enable optimization on alphas</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979603200">- fix krb5-send-pr (#18932) and move it from -server to -workstation
- buildprereq libtermcap-devel
- temporariliy disable optimization on alphas
- gettextize init scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- force -fPIC</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975715200">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973036800">- add bison as a BuildPrereq (#20091)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- change /usr/dict/words to /usr/share/dict/words in default kdc.conf (#20000)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- apply kpasswd bug fixes from David Wragg</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970704000">- make krb5-libs obsolete the old krb5-configs package (#18351)
- don't quit from the kpropd init script if there's no principal database so
  that you can propagate the first time without running kpropd manually
- don't complain if /etc/ld.so.conf doesn't exist in the -libs %post</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968803200">- fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
  (#11588)
- fix heap corruption bug in FTP client (#14301)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966470400">- fix summaries and descriptions
- switched the default transfer protocol from PORT to PASV as proposed on
  bugzilla (#16134), and to match the regular ftp package's behavior</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="964051200">- rebuild to compress man pages.</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="963705600">- move initscript back</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963619200">- disable servers by default to keep linuxconf from thinking they need to be
  started when they don't</changelog><changelog author="Prospector &lt;bugzilla@redhat.com&gt;" date="963532800">- automatic rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963273600">- change cleanup code in post to not tickle chkconfig
- add grep as a Prereq: for -libs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- move condrestarts to postun
- make xinetd configs noreplace
- add descriptions to xinetd configs
- add /etc/init.d as a prereq for the -server package
- patch to properly truncate $TERM in krlogind</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962409600">- update to 1.2.1
- back out Tom Yu's patch, which is a big chunk of the 1.2 -&gt; 1.2.1 update
- start using the official source tarball instead of its contents</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
- pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
  compatible with other stuff in 6.2, so no need)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962236800">- tweak graceful start/stop logic in post and preun</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962064000">- update to the 1.2 release
- ditch a lot of our patches which went upstream
- enable use of DNS to look up things at build-time
- disable use of DNS to look up things at run-time in default krb5.conf
- change ownership of the convert-config-files script to root.root
- compress PS docs
- fix some typos in the kinit man page
- run condrestart in server post, and shut down in preun</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961459200">- only remove old krb5server init script links if the init script is there</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961286400">- disable kshell and eklogin by default</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961113600">- patch mkdir/rmdir problem in ftpcmd.y
- add condrestart option to init script
- split the server init script into three pieces and add one for kpropd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961027200">- make sure workstation servers are all disabled by default
- clean up krb5server init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- apply second set of buffer overflow fixes from Tom Yu
- fix from Dirk Husung for a bug in buffer cleanups in the test suite
- work around possibly broken rev binary in running test suite
- move default realm configs from /var/kerberos to /var/kerberos</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960336000">- make ksu and v4rcp owned by root</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- use %{_infodir} to better comply with FHS
- move .so files to -devel subpackage
- tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
- fix package descriptions again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="959212800">- change a LINE_MAX to 1024, fix from Ken Raeburn
- add fix for login vulnerability in case anyone rebuilds without krb4 compat
- add tweaks for byte-swapping macros in krb.h, also from Ken
- add xinetd config files
- make rsh and rlogin quieter
- build with debug to fix credential forwarding
- add rsh as a build-time req because the configure scripts look for it to
  determine paths</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958608000">- fix config_subpackage logic</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958521600">- remove setuid bit on v4rcp and ksu in case the checks previously added
  don't close all of the problems in ksu
- apply patches from Jeffrey Schiller to fix overruns Chris Evans found
- reintroduce configs subpackage for use in the errata
- add PreReq: sh-utils</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958435200">- fix double-free in the kdc (patch merged into MIT tree)
- include convert-config-files script as a documentation file</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="957398400">- patch ksu man page because the -C option never works
- add access() checks and disable debug mode in ksu
- modify default ksu build arguments to specify more directories in CMD_PATH
  and to use getusershell()</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="957398400">- fix configure stuff for ia64</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="955411200">- add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
- change Requires: for/in subpackages to include 1.6.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954979200">- add man pages for kerberos(1), kvno(1), .k5login(5)
- add kvno to -workstation</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954806400">- Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
  a %config file anyway.
- Make krb5.conf a noreplace config file.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954460800">- Make klogind pass a clean environment to children, like NetKit's rlogind does.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952560000">- Don't enable the server by default.
- Compress info pages.
- Add defaults for the PAM module to krb5.conf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952387200">- Correct copyright: it's exportable now, provided the proper paperwork is
  filed with the government.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952128000">- apply Mike Friedman's patch to fix format string problems
- don't strip off argv[0] when invoking regular rsh/rlogin</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952041600">- run kadmin.local correctly at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="951782400">- pass absolute path to kadm5.keytab if/when extracting keys at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="951004800">- fix info page insertions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="950140800">- tweak server init script to automatically extract kadm5 keys if
  /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
- adjust package descriptions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="949622400">- fix for potentially gzipped man pages</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="948499200">- fix comments in krb5-configs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="947289600">- move /usr/kerberos/bin to end of PATH</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="946425600">- install kadmin header files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="945820800">- patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
- add installation of info docs
- remove krb4 compat patch because it doesn't fix workstation-side servers</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="945734400">- remove hesiod dependency at build-time</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="945648000">- rebuild on 1.1.1</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="939340800">- clean up init script for server, verify that it works [jlkatz]
- clean up rotation script so that rc likes it better
- add clean stanza</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="939081600">- backed out ncurses and makeshlib patches
- update for krb5-1.1
- add KDC rotation to rc.boot, based on ideas from Michael's C version</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="938390400">- added -lncurses to telnet and telnetd makefiles</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="931219200">- added krb5.csh and krb5.sh to /etc/profile.d</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="930096000">- broke out configuration files</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="929404800">- fixed server package so that it works now</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="926812800">- started changelog (previous package from zedz.net)
- updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
- added --force to makeinfo commands to skip errors during build</changelog></package>
<package pkgid="89359552f61cda7058839a7b6360aa2dfef5f8a3" name="elrepo-release" arch="noarch"><version epoch="0" ver="5" rel="5.el5.SLF"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; - SLF" date="1359158400">- repos disabled by default
- exclude openafs packages</changelog><changelog author="Philip J Perry &lt;phil@elrepo.org&gt; - 5-4" date="1357603200">- Add requires for kernel to prevent installing on wrong dist.
- Fix name of Extras repository
  [http://elrepo.org/bugs/view.php?id=339]</changelog><changelog author="Akemi Yagi &lt;toracat@elrepo.org&gt; - 5-3" date="1308182400">- Added extras repo
- Enable elrepo repo by default
- Clean up the code in the spec file [Alan Bartlett &lt;ajb@elrepo.org&gt;]</changelog><changelog author="Philip J Perry &lt;phil@elrepo.org&gt; - 5-2" date="1295740800">- Added mirrorlist
- Update license to GPLv2
- Fixed capitalisation in Description and Summary</changelog><changelog author="Akemi Yagi &lt;toracat@elrepo.org&gt; - 5-1" date="1287705600">- Release number now has 5-x format
- Added kernel repo
- Removed fasttrack repo
- Added mirror sites</changelog><changelog author="Philip J Perry &lt;phil@elrepo.org&gt; - 0.1-1" date="1237075200">- Initial elrepo-release package.</changelog></package>
<package pkgid="8272b9182745db1a6112cc1e215b77b3186e53fc" name="krb5-server" arch="i386"><version epoch="0" ver="1.6.1" rel="80.el5.slf5"/><changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1413244800">- Ran Regex: (Release: .*) =&gt; \1.slf5
--&gt;  Modify release string to note changes for SLF5
- Added Source: krb5.ini
--&gt;  Config file for automated patch script
- Added Patch: krb5_krb5-mwm-kshd.patch
--&gt;  Fix sync bug, see BZ#658217</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-80.el5" date="1409270400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-79.el5" date="1408752000">- incorporate fix for MITKRB5-SA-2014-001 (CVE-2014-4345, #1132785)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592000">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-77.el5" date="1406592000">- fix what appears to be a cosmetic error in the patch for self-tests
  for CVE-2014-4341</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-76.el5" date="1406160000">- run the backported self-tests, such as they are, for CVE-2014-4341</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-75.el5" date="1406160000">- pull in backported fix for denial of service by injection of malformed
  GSSAPI tokens (CVE-2014-4341, #1121509)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-74.el5" date="1399334400">- add patch based on one from Filip Krska to not call poll() with a negative
  timeout when the caller's intent is for us to just stop calling it (#1089732)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-73.el5" date="1398211200">- incorporate backported upstream patch for remote crash of KDCs which serve
  multiple realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-72.el5" date="1395792000">- add part-backported fix to avoid possible use-after-free when encrypting
  delegated creds (Jatin Nansi, #1004632)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-71.el5" date="1370044800">- add backported fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325030400">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-69.el5" date="1320278400">- ftp: fix a static analysis should-never-happen NULL dereference (#750823)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-68.el5" date="1319068800">- backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
  to talk to a KDC by using poll() if it's detected at compile-time, revised
  (#701444, RT#6905)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-67.el5" date="1318982400">- add backported patch by way of jbarbuc to free subkeys created by the
  KDC while processing TGS requests (#708516)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-66.el5" date="1318982400">- add backported patch by way of several people to better avoid false
  detection of replay attacks when talking to systems with coarse time
  resolution (#713500)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-65.el5" date="1318982400">- ftpd: add backported patch to check for errors when calling setegid
  (MITKRB5-SA-2011-005, CVE-2011-1526, #719098)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-64.el5" date="1318982400">- klist: don't trip over referral entries when invoked with -s (#729067,
  RT#6915)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-63.el5" date="1318982400">- unbreak processing of multi-line macros (#735363,#736132), broken by the
  original fix for #665833</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-62.el5" date="1308355200">- incorporate a fix to teach the file labeling bits about when replay caches
  are expunged (#712453)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-61.el5" date="1305072000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1303948800">- ftp: handle larger command inputs (#665833)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-60.el5" date="1303862400">- don't bail halfway through an unlock operation when the result will
  be discarded and the end-result not cleaned up (Martin Osvald, #586032)
- add a versioned dependency between krb5-server-ldap and krb5-libs (internal
  tooling)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-59.el5" date="1301961600">- don't discard the error code from an error message received in response
  to a change-password request (#658871, RT#6893)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-58.el5" date="1301529600">- ftpd: add patch from Jatin Nansi to correctly match "$user restrict"
  lines in /etc/ftpusers (#644215, RT#6889)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-57.el5" date="1300406400">- ftp: add modified patch from Rogan Kyuseok Lee to report the number of
  bytes transferred correctly when transferring large files on 32-bit
  systems (#648404)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-56.el5" date="1297987200">- backport fix for RT#6514: memory leak freeing rcache type "none" (#678205)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1297987200">- add upstream patch to fix hang or crash in the KDC when using the LDAP kdb
  backend (CVE-2011-0281, CVE-2011-0282, #671097)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-55.el5" date="1291161600">- incorporate upstream patch for checksum acceptance issues from
  MITKRB5-SA-2010-007 (CVE-2010-1323, #652308)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-54.el5" date="1286236800">- backport a fix to the previous change (#539423)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-53.el5" date="1285977600">- backport the k5login_directory and k5login_authoritative settings (#539423)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-52.el5" date="1284076800">- krshd: don't limit user names to 16 chars when utmp can handle names
  at least a bit longer than that (#611713)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-51.el5" date="1283558400">- fix a logic bug in computing key expiration times (RT#6762, #627038)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-50.el5" date="1283385600">- correct the post-rotate scriptlet in the kadmind logrotate config (more
  of #462658)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-49.el5" date="1278979200">- ftpd: backport changes to modify behavior to match telnetd,rshd,rlogind and
  accept GSSAPI auth to any service for which we have a matching key (#538075)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-47.el5" date="1278547200">- pull in fix for RT#5551 to treat the referral realm when seen in a ticket
  as though it were the local realm (#498554, also very likely #450122)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-46.el5" date="1278547200">- add aes256-cts:normal and aes128-cts:normal to the list of keysalts
  in the default kdc.conf (part of #565941)
- add a note to kdc.conf(5) pointing to the admin guide for the list of
  recognized key and salt types (the rest of #565941)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-45.el5" date="1278547200">- add logrotate configuration files for krb5kdc and kadmind (#462658)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-44.el5" date="1278547200">- libgssapi: backport patch from svn to stop returning context-expired errors
  when the ticket which was used to set up the context expires (#605367,
  upstream #6739)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-43.el5" date="1277856000">- enable building the -server-ldap subpackage (#514362)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-42.el5" date="1276214400">- stop caring about the endianness of stash files (#514741), which will be
  replaced by proper keytab files in later releases
- don't crash in krb5_get_init_creds_password() if the passed-in options
  struct is NULL and the client's keys have expired (#555875)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-41.el5" date="1275609600">- ksu: perform PAM account and session management before dropping privileges
  to those of the target user (#540769 and #596887, respectively)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1275004800">- add candidate patch to correct libgssapi null pointer dereference which
  could be triggered by malformed client requests (CVE-2010-1321, #583704)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-40.el5" date="1271116800">- fix a null pointer dereference and crash introduced in our PAM patch that
  would happen if ftpd was given the name of a user who wasn't known to the
  local system, limited to being triggerable by gssapi-authenticated clients by
  the default xinetd config (Olivier Fourdan, #569472)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-39.el5" date="1270598400">- add upstream patch to fix a few use-after-free bugs, including one in
  kadmind (CVE-2010-0629, #578186)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-38.el5" date="1268784000">- merge patch to correct KDC integer overflows which could be triggered by
  malformed RC4 and AES ciphertexts (CVE-2009-4212, #546348)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-37.el5" date="1268784000">- pull changes to libkrb5 to properly handle and chase "off-path" referrals
  back from 1.7 (#546538)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-36.el5" date="1242777600">- add an auth stack to ksu's PAM configuration so that it can successfully
  pam_setcred()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-35.el5" date="1242086400">- also set PAM_RUSER in ksu for completeness (#479071+#477033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-34.el5" date="1241568000">- fix various typos, except for bits pertaining to licensing (#499190)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-33.el5" date="1241568000">- kdb5_util: when renaming a database, if the new name's associated lock
  files don't exist, go ahead and create them (#442879)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1240531200">- ksu: perform PAM account and session management for the target user;
  authentication is still performed as before (#477033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1240358400">- fix typo in ksu's reporting of errors getting credentials (#462890)
- kadmind.init: stop setting up a keytab, as kadmind's been able to use
  the database directly for a while now (#473151)
- pull up patch to set PAM_RHOST (James Leddy, #479071)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5.3" date="1238803200">- update to revised patch for CVE-2009-0844/CVE-2009-0845</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5.2" date="1238198400">- add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism
  (#490636, CVE-2009-0844)
- add fix for NULL pointer dereference when handling certain error cases
  in the SPNEGO GSSAPI mechanism (#490636, CVE-2009-0845)
- add fix for attempt to free uninitialized pointer in the ASN.1 decoder
  (#491036, CVE-2009-0846)
- add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-32.el5" date="1231977600">- add patch to also report an error in rcp if close() returns an error,
  which could indicate an out-of-space error on an NFS filesystem (Tomas
  Smetana, #461902)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-31.el5" date="1227657600">- add a backported patch which adds a check on credentials obtained from
  a foreign realm to make sure that they're of an acceptable type, and
  if not, retry to the request to get one of the right type (Sadique Puthen,</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-30.el5" date="1225843200">- backport fix from 1.6.3 to register file-based ccaches created with
  the krb5_cc_new_unique() function with the global list, so that we
  don't crash when we go to close the ccache (#468729)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-29.el5" date="1220572800">- backport fix from 1.6.3 to abort a sequential scan of a keytab if the
  handle to the keytab has become invalidated during the scan (via Vince
  Worthington, #460911)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-28.el5" date="1220486400">- if we successfully change the user's password during an attempt to get
  initial credentials, but then fail to get initial creds from a non-master
  using the new password, retry against the master (#432334)
- telnet: remove the proviso in the man page which says that the "z" command
  only works in csh, as this is only true on systems where other shells don't
  implement job control (#433947)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1220054400">- avoid double-logging by not parsing /etc/krb5.conf twice (#434858)
- ftp: fix to not incorrectly reuse target filenames during mget when case-
  mapping is enabled (#442716)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-27.el5" date="1215820800">- don't forget to label the principal.ok lock file (#455033)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-26.el5" date="1213315200">- build with -fno-strict-aliasing (#451043)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-25.el5" date="1204761600">- add preliminary patch to fix use of uninitialized pointer / double-free in
  KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
- add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
  (#415321)
- add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
  (#415351)
- add preliminary patch to fix incorrect handling of high-numbered descriptors
  in the RPC library (CVE-2008-0947) (#433596)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-24.el5" date="1202515200">- kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
  an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
  interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-23.el5" date="1201824000">- backport changes from 1.6.3 which allow callers of the the sendto-kdc
  functions to override the failover behavior on a per-response basis, and
  default to failing over on service-unavailable errors (#230384)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-22.el5" date="1201737600">- add patch to fall back to TCP kpasswd servers for kdc-unreachable,
  can't-resolve-server, and response-too-big errors (#392631)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1201219200">- fold in some more changes to account for differing definitions of %{dist}
  (more of #427790)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-21.el5" date="1200441600">- add conditional logic to allow building only the krb5-server-ldap subpackage
  (#427790)
- use the right sequence numbers when generating password-set/change requests
  for kpasswd servers after the first one (#427789)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-20.el5" date="1198022400">- allocate space for the relative path including the nul-terminator (Jose
  Plans, #426085)
- fix a couple of spots where a file context wouldn't be freed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-19.el5" date="1197417600">- backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
  structure the same way we would one which was allocated by the calling
  application, to restore kinit's traditional behavior of doing a password
  change right when it detects an expired password (#413051)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-18.el5" date="1194652800">- fix syntax error in kadmin init script (#373011,#381011)
- turn off content/size/date verification on krb5.conf (#329771)
- fix storage of delegated krb5 credentials when they've been wrapped up in
  spnego (#319351)
- return a delegated credential handle even if the application didn't pass a
  location to store the flags which would be used to indicate that credentials
  were delegated (#314651)
- in login, allow PAM to interact with the user when they've been strongly
  authenticated (#309951)
- signal PAM when we're changing an expired password that it's an expired
  password, so that when cracklib flags a password as being weak it's treated
  as an error even if we're running as root (#308131)
- set the key expiration time in an AS-REP using the sooner of the client's
  entry's key expiration time and the entry's expiration time, instead of
  just the entry's expiration time (#250257)
- in ftp, don't lose track of a client socket when a server-side error
  causes a download to fail (#248618)
- in ftp, fix runique when mget is used (#247633)
- add the snippet documenting the kdc_tcp_ports option to kdc.conf's man
  page, using text taken from the administrator's guide (#282191)
- in kpasswd, when reading the client's principal name from the ccache fails
  for any reason, fall back to the user's name (#248631)
- init script cleanups (Michal Marciniszyn, #242500)
- tweak the telnet man page to refer to the telnet rlogin escape character
  as such instead of rereferring to it simly as the escape character or the
  telnet escape character (#247741)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-17.el5" date="1189555200">- ftpd: also do PAM session and credential management when ftp clients use
  strong authentication (#286291)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-16" date="1189123200">- update to revised patch for CVE-2007-3999</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-15" date="1189123200">- fix omission of files created by the db2 plugin when labeling (#228157)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-14" date="1188000000">- make krb5-workstation depend on the PAM configuration file used by login.krb5
- fix omission of kadmin log file when labeling (#253558)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-13" date="1187654400">- add preliminary patch to fix buffer overflow in rpcsec_gss implementation
  in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
  pointer in kadmind (#250976, CVE-2007-4000)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-12" date="1185494400">- kdc: default to listening for TCP clients as well (#248415)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-11" date="1184198400">- login: change to the user's home directory after dropping privileges,
  not before (#248050)
- turn off the ldap features</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-10" date="1182988800">- add a patch to allow applications to try to use a key with kvno=0, if
  found, in place of the "right" version for a request (Luke Howard, #230379)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-9" date="1182988800">- incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
  and MITKRB5-SA-2007-005 (CVE-2007-2798) (#239073)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-7" date="1182816000">- reintroduce missing %postun for the non-split_workstation case</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-6" date="1182816000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-5.1" date="1182816000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-5" date="1182729600">- add missing pam-devel build requirement, force selinux-or-fail build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-4" date="1182729600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-3" date="1182729600">- label all files at creation-time according to the SELinux policy (#228157)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- perform PAM account / session management in krshd (#182195,#195922)
- perform PAM authentication and account / session management in ftpd
- perform PAM authentication, account / session management, and password-
  changing in login.krb5 (#182195,#195922)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- preprocess kerberos.ldif into a format FDS will like better, and include
  that as a doc file as well</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1182556800">- switch man pages to being generated with the right paths in them
- drop old, incomplete SELinux patch
- add patch from Greg Hudson to make srvtab routines report missing-file errors
  at same point that keytab routines do (#241805)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-2" date="1180051200">- pull patch from svn to undo unintentional chattiness in ftp
- pull patch from svn to handle NULL krb5_get_init_creds_opt structures
  better in a couple of places where they're expected</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-1" date="1179964800">- update to 1.6.1
  - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
  - drop patch for sendto bug in 1.6, fixed in 1.6.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1179532800">- kadmind.init: don't fail outright if the default principal database
  isn't there if it looks like we might be using the kldap plugin
- kadmind.init: attempt to extract the key for the host-specific kadmin
  service when we try to create the keytab</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-6" date="1179360000">- omit dependent libraries from the krb5-config --libs output, as using
  shared libraries (no more static libraries) makes them unnecessary and
  they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
  (strips out libkeyutils, libresolv, libdl)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-5" date="1178323200">- pull in keyutils as a build requirement to get the "KEYRING:" ccache type,
  because we've merged</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-4" date="1178323200">- fix an uninitialized length value which could cause a crash when parsing
  key data coming from a directory server
- correct a typo in the krb5.conf man page ("ldap_server"-&gt;"ldap_servers")</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1176508800">- move the default acl_file, dict_file, and admin_keytab settings to
  the part of the default/example kdc.conf where they'll actually have
  an effect (#236417)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-24" date="1175817600">- merge security fixes from RHSA-2007:0095</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-3" date="1175644800">- add patch to correct unauthorized access via krb5-aware telnet
  daemon (#229782, CVE-2007-0956)
- add patch to fix buffer overflow in krb5kdc and kadmind
  (#231528, CVE-2007-0957)
- add patch to fix double-free in kadmind (#231537, CVE-2007-1216)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1174608000">- back out buildrequires: keyutils-libs-devel for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-2" date="1174608000">- add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
  dragging keyutils-libs in as a dependency</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-23" date="1174348800">- fix bug ID in changelog</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-22" date="1174003200">* Thu Mar 15 2007 Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-21
- add preliminary patch to fix buffer overflow in krb5kdc and kadmind
  (#231528, CVE-2007-0957)
- add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1172707200">- add patch to build semi-useful static libraries, but don't apply it unless
  we need them</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-20" date="1172620800">- temporarily back out %post changes, fix for #143289 for security update
- add preliminary patch to correct unauthorized access via krb5-aware telnet</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1171929600">- make profile.d scriptlets mode 644 instead of 755 (part of #225974)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6-1" date="1170201600">- clean up quoting of command-line arguments passed to the krsh/krlogin
  wrapper scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-19" date="1169769600">- refrain from killing any lingering members of our child's process group when
  logging that the child process has exited (Jose Plans, #143289)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1169510400">- initial update to 1.6, pre-package-reorg
- move workstation daemons to a new subpackage (#81836, #216356, #217301), and
  make the new subpackage require xinetd (#211885)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-18" date="1169510400">- make use of install-info more failsafe (Ville Skyttä, #223704)
- preserve timestamps on shell scriptlets at %install-time</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-17" date="1168992000">- move to using pregenerated PDF docs to cure multilib conflicts (#222721)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-16" date="1168646400">- update backport of the preauth module interface (part of #194654)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-14" date="1168387200">- apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
- apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-12" date="1166659200">- update backport of the preauth module interface</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1162252800">- update backport of the preauth module interface
- add proposed patches 4566, 4567
- add proposed edata reporting interface for KDC
- add temporary placeholder for module global context fixes</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-11" date="1161648000">- don't bail from the KDC init script if there's no database, it may be in
  a different location than the default (fenlason)
- remove the [kdc] section from the default krb5.conf -- doesn't seem to have
  been applicable for a while</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-10" date="1161216000">- rename krb5.sh and krb5.csh so that they don't overlap (#210623)
- way-late application of added error info in kadmind.init (#65853)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-9.pal_18695" date="1161216000">- add backport of in-development preauth module interface (#208643)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-9" date="1160438400">- provide docs in PDF format instead of as tex source (Enrico Scholz, #209943)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-8" date="1160006400">- add missing shebang headers to krsh and krlogin wrapper scripts (#209238)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-7" date="1157587200">- set SS_LIB at configure-time so that libss-using apps get working readline
  support (#197044)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-6" date="1155945600">- switch to the updated patch for MITKRB-SA-2006-001</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-5" date="1155081600">- apply patch to address MITKRB-SA-2006-001 (CVE-2006-3084)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-4" date="1154995200">- ensure that the gssapi library's been initialized before walking the
  internal mechanism list in gss_release_oid(), needed if called from
  gss_release_name() right after a gss_import_name() (#198092)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-3" date="1153872000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-2" date="1153872000">- pull up latest revision of patch to reduce lockups in rsh/rshd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.5-1.2" date="1153180800">- rebuild</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 1.5-1.1" date="1152748800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-1" date="1152230400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.5-0" date="1152144000">- update to 1.5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-9" date="1151107200">- mark profile.d config files noreplace (Laurent Rineau, #196447)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-8" date="1149811200">- add buildprereq for autoconf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-7" date="1148342400">- further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
  architectures, to avoid multilib conflicts; other changes will conspire to
  strip out the -L flag which uses this, so it should be harmless (#192692)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-6" date="1146268800">- adjust the patch which removes the use of rpath to also produce a
  krb5-config which is okay in multilib environments (#190118)
- make the name-of-the-tempfile comment which compile_et adds to error code
  headers always list the same file to avoid conflicts on multilib installations
- strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
- strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
  boxes</changelog><changelog author="Stepan Kasal &lt;skasal@redhat.com&gt; 1.4.3-5" date="1145059200">- Fix formatting typo in kinit.1 (krb5-kinit-man-typo.patch)</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; 1.4.3-4.1" date="1139616000">- bump again for double-long bug on ppc(64)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-4" date="1139270400">- give a little bit more information to the user when kinit gets the catch-all
  I/O error (#180175)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-3" date="1137715200">- rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
  declared, such as with recent glibc when _GNU_SOURCE isn't being used</changelog><changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; 1.4.3-2" date="1137715200">- Use full paths in krb5.sh to avoid path lookups</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt;" date="1134172800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1133481600">- login: don't truncate passwords before passing them into crypt(), in
  case they're significant (#149476)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.3-1" date="1132272000">- update to 1.4.3
- make ksu setuid again (#137934, others)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-4" date="1126656000">- mark %{krb5prefix}/man so that files which are packaged within it are
  flagged as %doc (#168163)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-3" date="1126051200">- add an xinetd configuration file for encryption-only telnetd, parallelling
  the kshell/ekshell pair (#167535)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-2" date="1125532800">- change the default configured encryption type for KDC databases to the
  compiled-in default of des3-hmac-sha1 (#57847)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.2-1" date="1123804800">- update to 1.4.2, incorporating the fixes for MIT-KRB5-SA-2005-002 and
  MIT-KRB5-SA-2005-003</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-6" date="1120089600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-5" date="1120089600">- fix telnet client environment variable disclosure the same way NetKit's
  telnet client did (CAN-2005-0488) (#159305)
- keep apps which call krb5_principal_compare() or krb5_realm_compare() with
  malformed or NULL principal structures from crashing outright (Thomas Biege)
  (#161475)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1120003200">- apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
  (#157104)
- apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-4" date="1119657600">- fix double-close in keytab handling
- add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-3" date="1116028800">- prevent spurious EBADF in krshd when stdin is closed by the client while
  the command is running (#151111)</changelog><changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 1.4.1-2" date="1116028800">- add deadlock patch, removed old patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4.1-1" date="1115424000">- update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
- when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
  file for the service, pass it as an argument for the -r flag</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-3" date="1111622400">- drop krshd patch for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1111104000">- add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
- add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-2" date="1111017600">- don't include &lt;term.h&gt; into the telnet client when we're not using curses</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.4-1" date="1109289600">- update to 1.4
  - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
    flag to specify that it should communicate with the server using the older
    protocol
  - new libkrb5support library
  - v5passwdd and kadmind4 are gone
  - versioned symbols
- pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
  it on to krb5kdc
- pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
  it on to kadmind
- pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
  it on to krb524d *instead of* "-m"
- set "forwardable" in [libdefaults] in the default krb5.conf to match the
  default setting which we supply for pam_krb5
- set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
  compiled-in default</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-3" date="1103587200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-2" date="1103587200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.6-1" date="1103587200">- update to 1.3.6, which includes the previous fix</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-8" date="1103587200">- apply fix from Tom Yu for MITKRB5-SA-2004-004 (CAN-2004-1189)</changelog><changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 1.3.5-7" date="1103328000">- fix deadlock during file transfer via rsync/krsh
- thanks goes to James Antill for hint</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-6" date="1101513600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-3" date="1101168000">- fix predictable-tempfile-name bug in krb5-send-pr (CAN-2004-0971, #140036)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1100649600">- silence compiler warning in kprop by using an in-memory ccache with a fixed
  name instead of an on-disk ccache with a name generated by tmpnam()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-2" date="1100649600">- fix globbing patch port mode (#139075)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.5-1" date="1099353600">- fix segfault in telnet due to incorrect checking of gethostbyname_r result
  codes (#129059)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1097884800">- remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
  supported keytypes in kdc.conf -- they produce exactly the same keys as
  rc4-hmac:normal because rc4 string-to-key ignores salts
- nuke kdcrotate -- there are better ways to balance the load on KDCs, and
  the SELinux policy for it would have been scary-looking
- update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-7" date="1093996800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-6" date="1093392000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-5" date="1093392000">- incorporate revised fixes from Tom Yu for CAN-2004-0642, CAN-2004-0644,
  CAN-2004-0772</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-4" date="1093305600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-3" date="1093305600">- incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
  (MITKRB5-SA-2004-002, #130732)
- incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-2" date="1090972800">- fix indexing error in server sorting patch (#127336)</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-0.1" date="1087257600">- update to 1.3.4 final</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.4-0" date="1086652800">- update to 1.3.4 beta1
- remove MITKRB5-SA-2004-001, included in 1.3.4</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-8" date="1086652800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-7" date="1086393600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-6" date="1086393600">- apply updated patch from MITKRB5-SA-2004-001 (revision 2004-06-02)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-5" date="1086134400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-4" date="1086134400">- apply patch from MITKRB5-SA-2004-001 (#125001)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.3.3-3" date="1084406400">- removed rpath</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-2" date="1082073600">- re-enable large file support, fell out in 1.3-1
- patch rcp to use long long and %lld format specifiers when reporting file
  sizes on large files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.3-1" date="1081900800">- update to 1.3.3</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.2-1" date="1078963200">- update to 1.3.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-12" date="1078790400">- rebuild</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt; 1.3.1-11.1" date="1078272000">- rebuilt</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt; 1.3.1-11" date="1076716800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-10" date="1076371200">- catch krb4 send_to_kdc cases in kdc preference patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-9" date="1075766400">- remove patch to set TERM in klogind which, combined with the upstream fix in
  1.3.1, actually produces the bug now (#114762)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-8" date="1074556800">- when iterating over lists of interfaces which are "up" from getifaddrs(),
  skip over those which have no address (#113347)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1073952000">- prefer the kdc which last replied to a request when sending requests to kdcs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-7" date="1069718400">- fix combination of --with-netlib and --enable-dns (#82176)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- remove libdefault ticket_lifetime option from the default krb5.conf, it is
  ignored by libkrb5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-6" date="1064534400">- fix bug in patch to make rlogind start login with a clean environment a la
  netkit rlogin, spotted and fixed by Scott McClung</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-5" date="1064361600">- include profile.d scriptlets in krb5-devel so that krb5-config will be in
  the path if krb5-workstation isn't installed, reported by Kir Kolyshkin</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1063065600">- add more etypes (arcfour) to the default enctype list in kdc.conf
- don't apply previous patch, refused upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-4" date="1062806400">- fix 32/64-bit bug storing and retrieving the issue_date in v4 credentials</changelog><changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; 1.3.1-3" date="1062633600">- Don't check for write access on /etc/krb5.conf if SELinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-2" date="1061942400">- fixup some int/pointer varargs wackiness</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-1" date="1060128000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3.1-0" date="1060041600">- update to 1.3.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-2" date="1059091200">- pull fix for non-compliant encoding of salt field in etype-info2 preauth
  data from 1.3.1 beta 1, until 1.3.1 is released.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-1" date="1058832000">- update to 1.3</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.8-4" date="1057622400">- correctly use stdargs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.3-0.beta.4" date="1055980800">- test update to 1.3 beta 4
- ditch statglue build option
- krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; 1.2.8-2" date="1053561600">- gcc 3.3 doesn't implement varargs.h, include stdarg.h instead</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.8-1" date="1049932800">- update to 1.2.8</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-14" date="1049155200">- fix double-free of enc_part2 in krb524d</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-13" date="1048291200">- update to latest patch kit for MITKRB5-SA-2003-004</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-12" date="1048118400">- add patch included in MITKRB5-SA-2003-003 (CAN-2003-0028)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-11" date="1047945600">- add patches from patchkit from MITKRB5-SA-2003-004 (CAN-2003-0138 and
  CAN-2003-0139)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-10" date="1046995200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-9" date="1046995200">- fix buffer underrun in unparsing certain principals (CAN-2003-0082)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-8" date="1044403200">- add patch to document the reject-bad-transited option in kdc.conf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1044316800">- add patch to fix server-side crashes when principals have no
  components (CAN-2003-0072)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-7" date="1043366400">- add patch from Mark Cox for exploitable bugs in ftp client</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-5" date="1042675200">- use PICFLAGS when building code from the ktany patch</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 1.2.7-4" date="1042156800">- debloat</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; 1.2.7-3" date="1041984000">- include .so.* symlinks as well as .so.*.*</changelog><changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 1.2.7-2" date="1039478400">- always #include &lt;errno.h&gt; to access errno, never do it directly
- enable LFS on a bunch of other 32-bit arches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1039046400">- increase the maximum name length allowed by kuserok() to the higher value
  used in development versions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1038873600">- install src/krb524/README as README.krb524 in the -servers package,
  includes information about converting for AFS principals</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.7-1" date="1037404800">- update to 1.2.7
- disable use of tcl</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1037059200">- update to 1.2.7-beta2 (internal only, not for release), dropping dnsparse
  and kadmind4 fixes</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-5" date="1035417600">- add patch for buffer overflow in kadmind4 (not used by default)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-4" date="1034380800">- drop a hunk from the dnsparse patch which is actually redundant (thanks to
  Tom Yu)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-3" date="1034208000">- patch to handle truncated dns responses</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-2" date="1034035200">- remove hashless key types from the default kdc.conf, they're not supposed to
  be there, noted by Sam Hartman on krbdev</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.6-1" date="1033171200">- update to 1.2.6</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-7" date="1031961600">- use %{_lib} for the sake of multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-6" date="1028332800">- add patch from Tom Yu for exploitable bugs in rpc code used in kadmind</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-5" date="1027468800">- fix bug in krb5.csh which would cause the path check to always succeed</changelog><changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 1.2.5-4" date="1027123200">- build even libdb.a with -fPIC and $RPM_OPT_FLAGS.</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1022457600">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.5-1" date="1020297600">- update to 1.2.5
- disable statglue</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.4-1" date="1015027200">- update to 1.2.4</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-5" date="1014249600">- rebuild in new environment
- reenable statglue</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1012089600">- prereq chkconfig for the server subpackage</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-3" date="1011225600">- build without -g3, which gives us large static libraries in -devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-2" date="1011139200">- reintroduce ld.so.conf munging in the -libs %post</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.3-1" date="1010707200">- rename the krb5 package back to krb5-libs; the previous rename caused
  something of an uproar
- update to 1.2.3, which includes the FTP and telnetd fixes
- configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
  the default behavior instead of enabling the feature (the feature is enabled
  by --enable-dns, which we still use)
- reenable optimizations on Alpha
- support more encryption types in the default kdc.conf (heads-up from post
  to comp.protocols.kerberos by Jason Heiss)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.2-14" date="996883200">- rename the krb5-libs package to krb5 (naming a subpackage -libs when there
  is no main package is silly)
- move defaults for PAM to the appdefaults section of krb5.conf -- this is
  the area where the krb5_appdefault_* functions look for settings)
- disable statglue (warning: breaks binary compatibility with previous
  packages, but has to be broken at some point to work correctly with
  unpatched versions built with newer versions of glibc)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.2.2-13" date="996883200">- bump release number and rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996710400">- add patch to fix telnetd vulnerability</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="995673600">- tweak statglue.c to fix stat/stat64 aliasing problems
- be cleaner in use of gcc to build shlibs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- use gcc to build shared libraries</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993686400">- add patch to support "ANY" keytab type (i.e.,
  "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
  patch from Gerald Britton, #42551)
- build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
- patch ftpd to use long long and %lld format specifiers to support the SIZE
  command on large files (also #30697)
- don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
- implement reload in krb5kdc and kadmind init scripts (#41911)
- lose the krb5server init script (not using it any more)</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="993427200">- Bump release + rebuild.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991180800">- pass some structures by address instead of on the stack in krb5kdc</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990576000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988329600">- add patch from Tom Yu to fix ftpd overflows (#37731)</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt;" date="987638400">- disable optimizations on the alpha again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985996800">- add in glue code to make sure that libkrb5 continues to provide a
  weak copy of stat()</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="984700800">- build alpha with -O0 for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="984096000">- fix the kpropd init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983836800">- update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
- re-enable optimization on Alpha</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="981676800">- build alpha with -O0 for now
- own /var/kerberos</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="981504000">- own the directories which are created for each package (#26342)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- gettextize init scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- add some comments to the ksu patches for the curious
- re-enable optimization on alphas</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979603200">- fix krb5-send-pr (#18932) and move it from -server to -workstation
- buildprereq libtermcap-devel
- temporariliy disable optimization on alphas
- gettextize init scripts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- force -fPIC</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975715200">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973036800">- add bison as a BuildPrereq (#20091)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- change /usr/dict/words to /usr/share/dict/words in default kdc.conf (#20000)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- apply kpasswd bug fixes from David Wragg</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970704000">- make krb5-libs obsolete the old krb5-configs package (#18351)
- don't quit from the kpropd init script if there's no principal database so
  that you can propagate the first time without running kpropd manually
- don't complain if /etc/ld.so.conf doesn't exist in the -libs %post</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968803200">- fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
  (#11588)
- fix heap corruption bug in FTP client (#14301)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966470400">- fix summaries and descriptions
- switched the default transfer protocol from PORT to PASV as proposed on
  bugzilla (#16134), and to match the regular ftp package's behavior</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="964051200">- rebuild to compress man pages.</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="963705600">- move initscript back</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963619200">- disable servers by default to keep linuxconf from thinking they need to be
  started when they don't</changelog><changelog author="Prospector &lt;bugzilla@redhat.com&gt;" date="963532800">- automatic rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963273600">- change cleanup code in post to not tickle chkconfig
- add grep as a Prereq: for -libs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- move condrestarts to postun
- make xinetd configs noreplace
- add descriptions to xinetd configs
- add /etc/init.d as a prereq for the -server package
- patch to properly truncate $TERM in krlogind</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962409600">- update to 1.2.1
- back out Tom Yu's patch, which is a big chunk of the 1.2 -&gt; 1.2.1 update
- start using the official source tarball instead of its contents</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
- pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
  compatible with other stuff in 6.2, so no need)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962236800">- tweak graceful start/stop logic in post and preun</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962064000">- update to the 1.2 release
- ditch a lot of our patches which went upstream
- enable use of DNS to look up things at build-time
- disable use of DNS to look up things at run-time in default krb5.conf
- change ownership of the convert-config-files script to root.root
- compress PS docs
- fix some typos in the kinit man page
- run condrestart in server post, and shut down in preun</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961459200">- only remove old krb5server init script links if the init script is there</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961286400">- disable kshell and eklogin by default</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961113600">- patch mkdir/rmdir problem in ftpcmd.y
- add condrestart option to init script
- split the server init script into three pieces and add one for kpropd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="961027200">- make sure workstation servers are all disabled by default
- clean up krb5server init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- apply second set of buffer overflow fixes from Tom Yu
- fix from Dirk Husung for a bug in buffer cleanups in the test suite
- work around possibly broken rev binary in running test suite
- move default realm configs from /var/kerberos to /var/kerberos</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960336000">- make ksu and v4rcp owned by root</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- use %{_infodir} to better comply with FHS
- move .so files to -devel subpackage
- tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
- fix package descriptions again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="959212800">- change a LINE_MAX to 1024, fix from Ken Raeburn
- add fix for login vulnerability in case anyone rebuilds without krb4 compat
- add tweaks for byte-swapping macros in krb.h, also from Ken
- add xinetd config files
- make rsh and rlogin quieter
- build with debug to fix credential forwarding
- add rsh as a build-time req because the configure scripts look for it to
  determine paths</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958608000">- fix config_subpackage logic</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958521600">- remove setuid bit on v4rcp and ksu in case the checks previously added
  don't close all of the problems in ksu
- apply patches from Jeffrey Schiller to fix overruns Chris Evans found
- reintroduce configs subpackage for use in the errata
- add PreReq: sh-utils</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958435200">- fix double-free in the kdc (patch merged into MIT tree)
- include convert-config-files script as a documentation file</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="957398400">- patch ksu man page because the -C option never works
- add access() checks and disable debug mode in ksu
- modify default ksu build arguments to specify more directories in CMD_PATH
  and to use getusershell()</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="957398400">- fix configure stuff for ia64</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="955411200">- add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
- change Requires: for/in subpackages to include 1.6.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954979200">- add man pages for kerberos(1), kvno(1), .k5login(5)
- add kvno to -workstation</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954806400">- Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
  a %config file anyway.
- Make krb5.conf a noreplace config file.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="954460800">- Make klogind pass a clean environment to children, like NetKit's rlogind does.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952560000">- Don't enable the server by default.
- Compress info pages.
- Add defaults for the PAM module to krb5.conf</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952387200">- Correct copyright: it's exportable now, provided the proper paperwork is
  filed with the government.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952128000">- apply Mike Friedman's patch to fix format string problems
- don't strip off argv[0] when invoking regular rsh/rlogin</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952041600">- run kadmin.local correctly at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="951782400">- pass absolute path to kadm5.keytab if/when extracting keys at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="951004800">- fix info page insertions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="950140800">- tweak server init script to automatically extract kadm5 keys if
  /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
- adjust package descriptions</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="949622400">- fix for potentially gzipped man pages</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="948499200">- fix comments in krb5-configs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="947289600">- move /usr/kerberos/bin to end of PATH</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="946425600">- install kadmin header files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="945820800">- patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
- add installation of info docs
- remove krb4 compat patch because it doesn't fix workstation-side servers</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="945734400">- remove hesiod dependency at build-time</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="945648000">- rebuild on 1.1.1</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="939340800">- clean up init script for server, verify that it works [jlkatz]
- clean up rotation script so that rc likes it better
- add clean stanza</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="939081600">- backed out ncurses and makeshlib patches
- update for krb5-1.1
- add KDC rotation to rc.boot, based on ideas from Michael's C version</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="938390400">- added -lncurses to telnet and telnetd makefiles</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="931219200">- added krb5.csh and krb5.sh to /etc/profile.d</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="930096000">- broke out configuration files</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="929404800">- fixed server package so that it works now</changelog><changelog author="Nalin Dahyabhai &lt;nsdahya1@eos.ncsu.edu&gt;" date="926812800">- started changelog (previous package from zedz.net)
- updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
- added --force to makeinfo commands to skip errors during build</changelog></package>
<package pkgid="e62c39e5474d1935452749a7f2600f3177fd28fb" name="libpacemaker-devel" arch="i386"><version epoch="0" ver="1.0.1" rel="6.2.sl5"/><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1227045600">- version 1.0.1-1
- Update source tarball to revision: 6fc5ce8302ab (stable-1.0) tip
- Statistics:
    Changesets:      170
    Diff:            816 files changed, 7633 insertions(+), 6286 deletions(-)
- Changes since Pacemaker-1.0.1
+ High: ais: Allow the crmd to get callbacks whenever a node's state changes
+ High: ais: Create an option for starting the mgmtd daemon automatically
+ High: ais: Ensure HA_RSCTMP exists for use by resource agents
+ High: ais: Hook up the openais.conf config logging options
+ High: ais: Zero out the PID of disconnecting clients
+ High: cib: Ensure global updates cause a disk write when appropriate
+ High: Core: Add an extra snaity check to getXpathResults() to prevent segfaults
+ High: Core: Don't redefine __FUNCTION__ unnecessarily
+ High: Core: Repair the ability to have comments in the configuration
+ High: crmd: Bug:1975 - crmd should wait indefinitely for stonith operations to complete
+ High: crmd: Ensure PE processing does not occur for all error cases in do_pe_invoke_callback
+ High: crmd: Requests to the CIB should cause any prior PE calculations to be ignored
+ High: heartbeat: Wait for membership 'up' events before removing stale node status data
+ High: PE: Bug LF:1988 - Ensure recurring operations always have the correct target-rc set
+ High: PE: Bug LF:1988 - For unmanaged resources we need to skip the usual can_run_resources() checks
+ High: PE: Ensure the terminate node attribute is handled correctly
+ High: PE: Fix optional colocation
+ High: PE: Improve up the detection of 'new' nodes joining the cluster
+ High: PE: Prevent assert failures in master_color() by ensuring unmanaged masters are always reallocated to their current location
+ High: Tools: crm cli: parser: return False on syntax error and None for comments
+ High: Tools: crm cli: unify template and edit commands
+ High: Tools: crm_shadow - Show more line number information after validation failures
+ High: Tools: hb2openais: add option to upgrade the CIB to v3.0
+ High: Tools: hb2openais: add U option to getopts and update usage
+ High: Tools: hb2openais: backup improved and multiple fixes
+ High: Tools: hb2openais: fix class/provider reversal
+ High: Tools: hb2openais: fix testing
+ High: Tools: hb2openais: move the CIB update to the end
+ High: Tools: hb2openais: update logging and set logfile appropriately
+ High: Tools: LF:1969 - Attrd never sets any properties in the cib
+ High: Tools: Make attrd functional on OpenAIS
+ Medium: ais: Hook up the options for specifying the expected number of nodes and total quorum votes
+ Medium: ais: Look for pacemaker options inside the service block with 'name: pacemaker' instead of creating an addtional configuration block
+ Medium: ais: Provide better feedback when nodes change nodeid's (in openais.conf)
+ Medium: cib: Always store cib contents on disk with num_updates=0
+ Medium: cib: Ensure remote access ports are cleaned up on shutdown
+ Medium: crmd: Detect deleted resource operations automatically
+ Medium: crmd: Erase a node's resource operations and transient attributes after a successful STONITH
+ Medium: crmd: Find a more appropriate place to update quorum and refresh attrd attributes
+ Medium: crmd: Fix the handling of unexpected PE exits to ensure the current CIB is stored
+ Medium: crmd: Fix the recording of pending operations in the CIB
+ Medium: crmd: Initiate an attrd refresh _after_ the status section has been fully repopulated
+ Medium: crmd: Only the DC should update quorum in an openais cluster
+ Medium: Ensure meta attributes are used consistantly
+ Medium: PE: Allow group and clone level resource attributes
+ Medium: PE: Bug N:437719 - Ensure scores from colocated resources count when allocating groups
+ Medium: PE: Prevent lsb scripts from being used in globally unique clones
+ Medium: PE: Make a best-effort guess at a migration threshold for people with 0.6 configs
+ Medium: Resources: controld - ensure we are part of a clone with globally_unique=false
+ Medium: Tools: attrd - Automatically refresh all attributes after a CIB replace operation
+ Medium: Tools: Bug LF:1985 - crm_mon - Correctly process failed cib queries to allow reconnection after cluster restarts
+ Medium: Tools: Bug LF:1987 - crm_verify incorrectly warns of configuration upgrades for the most recent version
+ Medium: Tools: crm (bnc#441028): check for key error in attributes management
+ Medium: Tools: crm_mon - display the meaning of the operation's rc code instead of the status
+ Medium: Tools: crm_mon - Fix the display of timing data
+ Medium: Tools: crm_verify - check that we're being asked to validate a complete config
+ Medium: xml: Relax the restriction on the contents of rsc_locaiton.node</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1224194400">- version 1.0.0-1
- Update source tarball to revision: 388654dfef8f tip
- Statistics:
    Changesets:      261
    Diff:            3021 files changed, 244985 insertions(+), 111596 deletions(-)
- Changes since f805e1b30103
+ High: add the crm cli program
+ High: ais: Move the service id definition to a common location and make sure it is always used
+ High: build: rename hb2openais.sh to .in and replace paths with vars
+ High: cib: Implement --create for crm_shadow
+ High: cib: Remove dead files
+ High: Core: Allow the expected number of quorum votes to be configrable
+ High: Core: cl_malloc and friends were removed from Heartbeat
+ High: Core: Only call xmlCleanupParser() if we parsed anything.  Doing so unconditionally seems to cause a segfault
+ High: hb2openais.sh: improve pingd handling; several bugs fixed
+ High: hb2openais: fix clone creation; replace EVMS strings
+ High: new hb2openais.sh conversion script
+ High: PE: Bug LF:1950 - Ensure the current values for all notification variables are always set (even if empty)
+ High: PE: Bug LF:1955 - Ensure unmanaged masters are unconditionally repromoted to ensure they are monitored correctly.
+ High: PE: Bug LF:1955 - Fix another case of filtering causing unmanaged master failures
+ High: PE: Bug LF:1955 - Umanaged mode prevents master resources from being allocated correctly
+ High: PE: Bug N:420538 - Anit-colocation caused a positive node preference
+ High: PE: Correctly handle unmanaged resources to prevent them from being started elsewhere
+ High: PE: crm_resource - Fix the --migrate command
+ High: PE: MAke stonith-enabled default to true and warn if no STONITH resources are found
+ High: PE: Make sure orphaned clone children are created correctly
+ High: PE: Monitors for unmanaged resources don't need to wait for start/promote/demote actions to complete
+ High: stonithd (LF 1951): fix remote stonith operations
+ High: stonithd: fix handling of timeouts
+ High: stonithd: fix logic for stonith resource priorities
+ High: stonithd: implement the fence-timeout instance attribute
+ High: stonithd: initialize value before reading fence-timeout
+ High: stonithd: set timeouts for fencing ops to the timeout of the start op
+ High: stonithd: stonith rsc priorities (new feature)
+ High: Tools: Add hb2openais - a tool for upgrading a Heartbeat cluster to use OpenAIS instead
+ High: Tools: crm_verify - clean up the upgrade logic to prevent crash on invalid configurations
+ High: Tools: Make pingd functional on Linux
+ High: Update version numbers for 1.0 candidates
+ Medium: ais: Add support for a synchronous call to retrieve the node's nodeid
+ Medium: ais: Use the agreed service number
+ Medium: Build: Reliably detect heartbeat libraries during configure
+ Medium: Build: Supply prototypes for libreplace functions when needed
+ Medium: Build: Teach configure how to find corosync
+ Medium: Core: Provide better feedback if Pacemaker is started by a stack it doesn't support
+ Medium: crmd: Avoid calling GHashTable functions with NULL
+ Medium: crmd: Delay raising I_ERROR when the PE exits until we've had a chance to save the current CIB
+ Medium: crmd: Hook up the stonith-timeout option to stonithd
+ Medium: crmd: Prevent potential use-of-NULL in global_timer_callback
+ Medium: crmd: Rationalize the logging of graph aborts
+ Medium: PE: Add a stonith_timeout option and remove new options that are better set in rsc_defaults
+ Medium: PE: Allow external entities to ask for a node to be shot by creating a terminate=true transient node attribute
+ Medium: PE: Bug LF:1950 - Notifications do not contain all documented resource state fields
+ Medium: PE: Bug N:417585 - Don't restart group children who's individual score drops below zero
+ Medium: PE: Detect clients that disconnect before receiving their reply
+ Medium: PE: Implement a true maintenance mode
+ Medium: PE: Implement on-fail=standby for NTT.  Derived from a patch by Satomi TANIGUCHI
+ Medium: PE: Print the correct message when stonith is disabled
+ Medium: PE: ptest - check the input is valid before proceeding
+ Medium: PE: Revert group stickiness to the 'old way'
+ Medium: PE: Use the correct attribute for action 'requires' (was prereq)
+ Medium: stonithd: Fix compilation without full heartbeat install
+ Medium: stonithd: exit with better code on empty host list
+ Medium: tools: Add a new regression test for CLI tools
+ Medium: tools: crm_resource - return with non-zero when a resource migration command is invalid
+ Medium: tools: crm_shadow - Allow the admin to start with an empty CIB (and no cluster connection)
+ Medium: xml: pacemaker-0.7 is now an alias for the 1.0 schema</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1222120800">- version 0.7.3-1
- Update source tarball to revision: 33e677ab7764+ tip
- Statistics:
    Changesets:      133
    Diff:            89 files changed, 7492 insertions(+), 1125 deletions(-)
- Changes since f805e1b30103
+ High: Tools: add the crm cli program
+ High: Core: cl_malloc and friends were removed from Heartbeat
+ High: Core: Only call xmlCleanupParser() if we parsed anything.  Doing so unconditionally seems to cause a segfault
+ High: new hb2openais.sh conversion script
+ High: PE: Bug LF:1950 - Ensure the current values for all notification variables are always set (even if empty)
+ High: PE: Bug LF:1955 - Ensure unmanaged masters are unconditionally repromoted to ensure they are monitored correctly.
+ High: PE: Bug LF:1955 - Fix another case of filtering causing unmanaged master failures
+ High: PE: Bug LF:1955 - Umanaged mode prevents master resources from being allocated correctly
+ High: PE: Bug N:420538 - Anit-colocation caused a positive node preference
+ High: PE: Correctly handle unmanaged resources to prevent them from being started elsewhere
+ High: PE: crm_resource - Fix the --migrate command
+ High: PE: MAke stonith-enabled default to true and warn if no STONITH resources are found
+ High: PE: Make sure orphaned clone children are created correctly
+ High: PE: Monitors for unmanaged resources don't need to wait for start/promote/demote actions to complete
+ High: stonithd (LF 1951): fix remote stonith operations
+ High: Tools: crm_verify - clean up the upgrade logic to prevent crash on invalid configurations
+ Medium: ais: Add support for a synchronous call to retrieve the node's nodeid
+ Medium: ais: Use the agreed service number
+ Medium: PE: Allow external entities to ask for a node to be shot by creating a terminate=true transient node attribute
+ Medium: PE: Bug LF:1950 - Notifications do not contain all documented resource state fields
+ Medium: PE: Bug N:417585 - Don't restart group children who's individual score drops below zero
+ Medium: PE: Implement a true maintenance mode
+ Medium: PE: Print the correct message when stonith is disabled
+ Medium: stonithd: exit with better code on empty host list
+ Medium: xml: pacemaker-0.7 is now an alias for the 1.0 schema</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1219269600">- version 0.7.1-1
- Update source tarball to revision: f805e1b30103+ tip
- Statistics:
    Changesets:      184
    Diff:            513 files changed, 43408 insertions(+), 43783 deletions(-)
- Testing Notes:
+ Test hardware:
+ All testing was performed with STONITH enabled
+ Pending bugs encountered during testing:
- Changes since 0.7.0-19
+ Fix compilation when GNUTLS isnt found
+ Hg: Use the default branch name for dev
+ High: admin: Fix use-after-free in crm_mon
+ High: Build: Remove testing code that prevented heartbeat-only builds
+ High: cib: Use single quotes so that the xpath queries for nvpairs will succeed
+ High: crmd: Always connect to stonithd when the TE starts and ensure we notice if it dies
+ High: crmd: Correctly handle a dead PE process
+ High: crmd: Make sure async-failures cause the failcount to be incrimented
+ High: PE: Bug LF:1941 - Handle failed clone instance probes when clone-max &lt; #nodes
+ High: PE: Parse resource ordering sets correctly
+ High: PE: Prevent use-of-NULL - order-&gt;rsc_rh will not always be non-NULL
+ High: PE: Unpack colocation sets correctly
+ High: Tools: crm_mon - Prevent use-of-NULL for orphaned resources
+ Medium: ais: Add support for a synchronous call to retrieve the node's nodeid
+ Medium: ais: Allow transient clients to receive membership updates
+ Medium: ais: Avoid double-free in error path
+ Medium: ais: Include in the mebership nodes for which we haven't determined their hostname
+ Medium: ais: Spawn the PE from the ais plugin instead of the crmd
+ Medium: cib: By default, new configurations use the latest schema
+ Medium: cib: Clean up the CIB if it was already disconnected
+ Medium: cib: Only incriment num_updates if something actually changed
+ Medium: cib: Prevent use-after-free in client after abnormal termination of the CIB
+ Medium: Core: Fix memory leak in xpath searches
+ Medium: Core: Get more details regarding parser errors
+ Medium: Core: Repair expand_plus_plus - don't call char2score on unexpanded values
+ Medium: Core: Switch to the libxml2 parser - its significantly faster
+ Medium: Core: Use a libxml2 library function for xml -&gt; text conversion
+ Medium: crmd: Asynchronous failure actions have no parameters
+ Medium: crmd: Avoid calling glib functions with NULL
+ Medium: crmd: Do not allow an election to promote a node from S_STARTING
+ Medium: crmd: Do not vote if we've not completed the local startup
+ Medium: crmd: Fix te_update_diff() now that get_object_root() functions differently
+ Medium: crmd: Fix the lrmd xpath expressions to not contain quotes
+ Medium: crmd: If we get a join offer during an election, better restart the election
+ Medium: crmd: No further processing is needed when using the LRM's API call for failing resources
+ Medium: crmd: Only update have-quorum if the value changed
+ Medium: crmd: Repair the input validation logic in do_te_invoke
+ Medium: cts: CIB's can no longer contain comments
+ Medium: cts: Enable a bunch of tests that were incorrectly disabled
+ Medium: cts: The libxml2 parser wont allow v1 resources to use integers as parameter names
+ Medium: Don't use the cluster UID and GID directly.  Look them up based on the configured value of HA_CCMUSER
+ Medium: Fix compilation when heartbeat is not supported
+ Medium: PE: Allow groups to be involved in optional ordering constraints
+ Medium: PE: Allow sets of operations to be reused by multiple resources
+ Medium: PE: Bug LF:1941 - Mark extra clone instances as orphans and don't show inactive ones
+ Medium: PE: Determin the correct migration-threshold during resource expansion
+ Medium: PE: Implement no-quorum-policy=suicide (FATE #303619)
+ Medium: pengine: Clean up resources after stopping old copies of the PE
+ Medium: pengine: Teach the PE how to stop old copies of itself
+ Medium: Tools: Backport hb_report updates
+ Medium: Tools: cib_shadow - On create, spawn a new shell with CIB_shadow and PS1 set accordingly
+ Medium: Tools: Rename cib_shadow to crm_shadow</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1216418400">- version 0.7.0-19
- Update source tarball to revision: 007c3a1c50f5 (unstable) tip
- Statistics:
    Changesets:      108
    Diff:            216 files changed, 4632 insertions(+), 4173 deletions(-)
- Changes added since unstable-0.7
+ High: admin: Fix use-after-free in crm_mon
+ High: ais: Change the tag for the ais plugin to "pacemaker" (used in openais.conf)
+ High: ais: Log terminated processes as an error
+ High: cib: Performance - Reorganize things to avoid calculating the XML diff twice
+ High: PE: Bug LF:1941 - Handle failed clone instance probes when clone-max &lt; #nodes
+ High: PE: Fix memory leak in action2xml
+ High: PE: Make OCF_ERR_ARGS a node-level error rather than a cluster-level one
+ High: PE: Properly handle clones that are not installed on all nodes
+ Medium: admin: cibadmin - Show any validation errors if the upgrade failed
+ Medium: admin: cib_shadow - Implement --locate to display the underlying filename
+ Medium: admin: cib_shadow - Implement a --diff option
+ Medium: admin: cib_shadow - Implement a --switch option
+ Medium: admin: crm_resource - create more compact constraints that don't use lifetime (which is deprecated)
+ Medium: ais: Approximate born_on for OpenAIS based clusters
+ Medium: cib: Remove do_id_check, it is a poor substitute for ID validation by a schema
+ Medium: cib: Skip construction of pre-notify messages if no-one wants one
+ Medium: Core: Attempt to streamline some key functions to increase performance
+ Medium: Core: Clean up XML parser after validation
+ Medium: crmd: Detect and optimize the crm's behavior when processing diffs of an LRM refresh
+ Medium: Fix memory leaks when resetting the name of an XML object
+ Medium: PE: Prefer the current location if it is one of a group of nodes with the same (highest) score</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1214431200">- version 0.7.0-1
- Update source tarball to revision: bde0c7db74fb tip
- Statistics:
    Changesets:      439
    Diff:            676 files changed, 41310 insertions(+), 52071 deletions(-)
- Changes added since stable-0.6
+ High: A new tool for setting up and invoking CTS
+ High: Admin: All tools now use --node (-N) for specifying node unames
+ High: Admin: All tools now use --xml-file (-x) and --xml-text (-X) for specifying where to find XML blobs
+ High: cib: Cleanup the API - remove redundant input fields
+ High: cib: Implement CIB_shadow - a facility for making and testing changes before uploading them to the cluster
+ High: cib: Make registering per-op callbacks an API call and renamed (for clarity) the API call for requesting notifications
+ High: Core: Add a facility for automatically upgrading old configurations
+ High: Core: Adopt libxml2 as the XML processing library - all external clients need to be recompiled
+ High: Core: Allow sending TLS messages larger than the MTU
+ High: Core: Fix parsing of time-only ISO dates
+ High: Core: Smarter handling of XML values containing quotes
+ High: Core: XML memory corruption - catch, and handle, cases where we're overwriting an attribute value with itself
+ High: Core: The xml ID type doesn't allow UUIDs that start with a number
+ High: Core: Implement XPath based versions of query/delete/replace/modify
+ High: Core: Remove some HA2.0.(3,4) compatability code
+ High: crmd: Overhaul the detection of nodes that are starting vs. failed
+ High: PE: Bug LF:1459 - Allow failures to expire
+ High: PE: Have the PE do non-persistent configuration upgrades before performing calculations
+ High: PE: Replace failure-stickiness with a simple 'migration-threshold'
+ High: TE: Simplify the design by folding the tengine process into the crmd
+ Medium: Admin: Bug LF:1438 - Allow the list of all/active resource operations to be queried by crm_resource
+ Medium: Admin: Bug LF:1708 - crm_resource should print a warning if an attribute is already set as a meta attribute
+ Medium: Admin: Bug LF:1883 - crm_mon should display fail-count and operation history
+ Medium: Admin: Bug LF:1883 - crm_mon should display operation timing data
+ Medium: Admin: Bug N:371785 - crm_resource -C doesn't also clean up fail-count attributes
+ Medium: Admin: crm_mon - include timing data for failed actions
+ Medium: ais: Read options from the environment since objdb isn't completely usable yet
+ Medium: cib: Add sections for op_defaults and rsc_defaults
+ Medium: cib: Better matching notification callbacks (for detecting duplicates and removal)
+ Medium: cib: Bug LF:1348 - Allow rules and attribute sets to be referenced for use in other objects
+ Medium: cib: BUG LF:1918 - By default, all cib calls now timeout after 30s
+ Medium: cib: Detect updates that decrease the version tuple
+ Medium: cib: Implement a client-side operation timeout - Requires LHA update
+ Medium: cib: Implement callbacks and async notifications for remote connections
+ Medium: cib: Make cib-&gt;cmds-&gt;update() an alias for modify at the API level (also implemented in cibadmin)
+ Medium: cib: Mark the CIB as disconnected if the IPC connection is terminated
+ Medium: cib: New call option 'cib_can_create' which can be passed to modify actions - allows the object to be created if it doesn't exist yet
+ Medium: cib: Reimplement get|set|delete attributes using XPath
+ Medium: cib: Remove some useless parts of the API
+ Medium: cib: Remove the 'attributes' scaffolding from the new format
+ Medium: cib: Implement the ability for clients to connect to remote servers
+ Medium: Core: Add support for validating xml against RelaxNG schemas
+ Medium: Core: Allow more than one item to be modified/deleted in XPath based operations
+ Medium: Core: Fix the sort_pairs function for creating sorted xml objects
+ Medium: Core: iso8601 - Implement subtract_duration and fix subtract_time
+ Medium: Core: Reduce the amount of xml copying occuring
+ Medium: Core: Support value='value+=N' XML updates (in addtion to value='value++')
+ Medium: crmd: Add support for lrm_ops-&gt;fail_rsc if its available
+ Medium: crmd: HB - watch link status for node leaving events
+ Medium: crmd: Bug LF:1924 - Improved handling of lrmd disconnects and shutdowns
+ Medium: crmd: Do not wait for actions with a start_delay over 5 minutes. Confirm them immediately
+ Medium: PE: Bug LF:1328 - Don't fencing nodes in clusters without managed resources
+ Medium: PE: Bug LF:1461 - Give transient node attributes (in &lt;status/&gt;) preference over persistent ones (in &lt;nodes/&gt;)
+ Medium: PE: Bug LF:1884, Bug LF:1885 - Implement N:M ordering and colocation constraints
+ Medium: PE: Bug LF:1886 - Create a resource and operation 'defaults' config section
+ Medium: PE: Bug LF:1892 - Allow recurring actions to be triggered at known times
+ Medium: PE: Bug LF:1926 - Probes should complete before stop actions are invoked
+ Medium: PE: Fix the standby when it's set as a transient attribute
+ Medium: PE: Implement a global 'stop-all-resources' option
+ Medium: PE: Implement cibpipe, a tool for performing/simulating config changes "offline"
+ Medium: PE: We don't allow colocation with specific clone instances
+ Medium: Tools: pingd - Implement a stack-independant version of pingd
+ Medium: xml: Ship an xslt for upgrading from 0.6 to 0.7</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1213912800">- version 0.6.5-1
- Update source tarball to revision: b9fe723d1ac5 tip
- Statistics:
    Changesets:      48
    Diff:            37 files changed, 1204 insertions(+), 234 deletions(-)
- Changes since Pacemaker-0.6.4
+ High: Admin: Repair the ability to delete failcounts
+ High: ais: Audit IPC handling between the AIS plugin and CRM processes
+ High: ais: Have the plugin create needed /var/lib directories
+ High: ais: Make sure the sync and async connections are assigned correctly (not swapped)
+ High: cib: Correctly detect configuration changes - num_updates does not count
+ High: PE: Apply stickiness values to the whole group, not the individual resources
+ High: PE: Bug N:385265 - Ensure groups are migrated instead of remaining partially active on the current node
+ High: PE: Bug N:396293 - Enforce manditory group restarts due to ordering constraints
+ High: PE: Correctly recover master instances found active on more than one node
+ High: PE: Fix memory leaks reported by Valgrind
+ Medium: Admin: crm_mon - Misc improvements from Satomi Taniguchi
+ Medium: Bug LF:1900 - Resource stickiness should not allow placement in asynchronous clusters
+ Medium: crmd: Ensure joins are completed promptly when a node taking part dies
+ Medium: PE: Avoid clone instance shuffling in more cases
+ Medium: PE: Bug LF:1906 - Remove an optimization in native_merge_weights() causing group scores to behave eratically
+ Medium: PE: Make use of target_rc data to correctly process resource operations
+ Medium: PE: Prevent a possible use of NULL in sort_clone_instance()
+ Medium: TE: Include target rc in the transition key - used to correctly determin operation failure</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1211493600">- version 0.6.4-1
- Update source tarball to revision: 226d8e356924 tip
- Statistics:
    Changesets:       55
    Diff:             199 files changed, 7103 insertions(+), 12378 deletions(-)
- Changes since Pacemaker-0.6.3
+ High: crmd: Bug LF:1881 LF:1882 - Overhaul the logic for operation cancelation and deletion
+ High: crmd: Bug LF:1894 - Make sure cancelled recurring operations are cleaned out from the CIB
+ High: PE: Bug N:387749 - Colocation with clones causes unnecessary clone instance shuffling
+ High: PE: Ensure 'master' monitor actions are cancelled _before_ we demote the resource
+ High: PE: Fix assert failure leading to core dump - make sure variable is properly initialized
+ High: PE: Make sure 'slave' monitoring happens after the resource has been demoted
+ High: PE: Prevent failure stickiness underflows (where too many failures become a _positive_ preference)
+ Medium: Admin: crm_mon - Only complain if the output file could not be opened
+ Medium: Common: filter_action_parameters - enable legacy handling only for older versions
+ Medium: PE: Bug N:385265 - The failure stickiness of group children is ignored until it reaches -INFINITY
+ Medium: PE: Implement master and clone colocation by exlcuding nodes rather than setting one's score to INFINITY (similar to cs: 756afc42dc51)
+ Medium: TE: Bug LF:1875 - Correctly find actions to cancel when their node leaves the cluster</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1208988000">- version 0.6.3-1
- Update source tarball to revision: fd8904c9bc67 tip
- Statistics:
    Changesets:      117
    Diff:            354 files changed, 19094 insertions(+), 11338 deletions(-)
- Changes since Pacemaker-0.6.2
+ High: Admin: Bug LF:1848 - crm_resource - Pass set name and id to delete_resource_attr() in the correct order
+ High: Build: SNMP has been moved to the management/pygui project
+ High: crmd: Bug LF1837 - Unmanaged resources prevent crmd from shutting down
+ High: crmd: Prevent use-after-free in lrm interface code (Patch based on work by Keisuke MORI)
+ High: PE: Allow the cluster to make progress by not retrying failed demote actions
+ High: PE: Anti-colocation with slave shouldn't prevent master colocation
+ High: PE: Bug LF 1768 - Wait more often for STONITH ops to complete before starting resources
+ High: PE: Bug LF1836 - Allow is-managed-default=false to be overridden by individual resources
+ High: PE: Bug LF185 - Prevent pointless master/slave instance shuffling by ignoring the master-pref of stopped instances
+ High: PE: Bug N-191176 - Implement interleaved ordering for clone-to-clone scenarios
+ High: PE: Bug N-347004 - Ensure clone notifications are always sent when an instance is stopped/started
+ High: PE: Bug N-347004 - Include notification ordering is correct for interleaved clones
+ High: PE: Bug PM-11 - Directly link probe_complete to starting clone instances
+ High: PE: Bug PM1 - Fix setting failcounts when applied to complex resources
+ High: PE: Bug PM12, LF1648 - Extensive revision of group ordering
+ High: PE: Bug PM7 - Ensure masters are always demoted before they are stopped
+ High: PE: Create probes after allocation to allow smarter handling of anonymous clones
+ High: PE: Don't prioritize clone instances that must be moved
+ High: PE: Fix error in previous commit that allowed more than the required number of masters to be promoted
+ High: PE: Group start ordering fixes
+ High: PE: Implement promote/demote ordering for cloned groups
+ High: TE: Repair failcount updates
+ High: TE: Use the correct offset when updating failcount
+ Medium: Admin: Add a summary output that can be easily parsed by CTS for audit purposes
+ Medium: Build: Make configure fail if bz2 or libxml2 are not present
+ Medium: Build: Re-instate a better default for LCRSODIR
+ Medium: CIB: Bug LF-1861 - Filter irrelvant error status from synchronous CIB clients
+ Medium: Core: Bug 1849 - Invalid conversion of ordinal leap year to gregorian date
+ Medium: Core: Drop compataibility code for 2.0.4 and 2.0.5 clusters
+ Medium: crmd: Bug LF-1860 - Automatically cancel recurring ops before demote and promote operations (not only stops)
+ Medium: crmd: Save the current CIB contents if we detect the PE crashed
+ Medium: PE: Bug LF:1866 - Fix version check when applying compatability handling for failed start operations
+ Medium: PE: Bug LF:1866 - Restore the ability to have start failures not be fatal
+ Medium: PE: Bug PM1 - Failcount applies to all instances of non-unique clone
+ Medium: PE: Correctly set the state of partially active master/slave groups
+ Medium: PE: Don't claim to be stopping an already stopped orphan
+ Medium: PE: Ensure implies_left ordering constraints are always effective
+ Medium: PE: Indicate each resource's 'promotion' score
+ Medium: PE: Prevent a possible use-of-NULL
+ Medium: PE: Reprocess the current action if it changed (so that any prior dependancies are updated)
+ Medium: TE: Bug LF-1859 - Wait for fail-count updates to complete before terminating the transition
+ Medium: TE: Bug LF:1859 - Don't abort graphs due to our own failcount updates
+ Medium: TE: Bug LF:1859 - Prevent the TE from interupting itself</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1203026400">- version 0.6.2-1
- Update source tarball to revision: 28b1a8c1868b tip
- Statistics:
    Changesets:    11
    Diff:          7 files changed, 58 insertions(+), 18 deletions(-)
- Changes since Pacemaker-0.6.1
+ haresources2cib.py: set default-action-timeout to the default (20s)
+ haresources2cib.py: update ra parameters lists
+ Medium: SNMP: Allow the snmp subagent to be built (patch from MATSUDA, Daiki)
+ Medium: Tools: Make sure the autoconf variables in haresources2cib are expanded</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1202853600">- version 0.6.1-1
- Update source tarball to revision: e7152d1be933 tip
- Statistics:
    Changesets:    25
    Diff:          37 files changed, 1323 insertions(+), 227 deletions(-)
- Changes since Pacemaker-0.6.0
+ High: CIB: Ensure changes to top-level attributes (like admin_epoch) cause a disk write
+ High: CIB: Ensure the archived file hits the disk before returning
+ High: CIB: Repair the ability to do 'atomic incriment' updates (value="value++")
+ High: crmd: Bug #7 - Connecting to the crmd immediately after startup causes use-of-NULL
+ Medium: CIB: Mask cib_diff_resync results from the caller - they don't need to know
+ Medium: crmd: Delay starting the IPC server until we're fully functional
+ Medium: CTS: Fix the startup patterns
+ Medium: PE: Bug 1820 - Allow the first resource in a group to be migrated
+ Medium: PE: Bug 1820 - Check the colocation dependancies of resources to be migrated</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1200348000">- version 0.6.0-2
- This is the first release of the Pacemaker Cluster Resource Manager formerly part of Heartbeat.
- For those looking for the GUI, mgmtd, CIM or TSA components, they are now found in
  the new pacemaker-pygui project.  Build dependancies prevent them from being
  included in Heartbeat (since the built-in CRM is no longer supported) and,
  being non-core components, are not included with Pacemaker.
- Update source tarball to revision: c94b92d550cf
- Statistics:
    Changesets:      347
    Diff:            2272 files changed, 132508 insertions(+), 305991 deletions(-)
- Test hardware:
  + 6-node vmware cluster (sles10-sp1/256Mb/vmware stonith) on a single host (opensuse10.3/2Gb/2.66Ghz Quad Core2)
  + 7-node EMC Centera cluster (sles10/512Mb/2Ghz Xeon/ssh stonith)
- Notes: Heartbeat Stack
  + All testing was performed with STONITH enabled
  + The CRM was enabled using the "crm respawn" directive
  + Testing
    2-nodes ::= 1000 CTS iterations (passed)
    4-nodes ::= 1000 CTS iterations (passed)
    6-nodes ::= 2000 CTS iterations (passed)
  + Total estimated cluster transitions: 18000
- Notes: OpenAIS Stack
  + This release contains a preview of support for the OpenAIS cluster stack
  + The current release of the OpenAIS project is missing two important
    patches that we require.  OpenAIS packages containing these patches are
    available for most major distributions at:
      http://download.opensuse.org/repositories/server:/ha-clustering
  + The OpenAIS stack is not currently recommended for use in clusters that
    have shared data as STONITH support is not yet implimented
  + pingd is not yet available for use with the OpenAIS stack
  + 3 significant OpenAIS issues were found during testing of 4 and 6 node
    clusters.  We are activly working together with the OpenAIS project to
    get these resolved.
  + Testing
    2-nodes ::= 1000 CTS iterations (passed)
    4-nodes ::= 1000 CTS iterations (sporadic problems - see pending bugs)
    6-nodes ::= 1000 CTS iterations (significant problems - see pending bugs)
  + Total estimated cluster transitions: 12000
- Pending bugs encountered during testing:
  + OpenAIS   #1736 - Openais membership took 20s to stabilize
  + Heartbeat #1750 - ipc_bufpool_update: magic number in head does not match
  + OpenAIS   #1793 - Assertion failure in memb_state_gather_enter()
  + OpenAIS   #1796 - Cluster message corruption
- Changes since Heartbeat-2.1.2-24
+ High: Add OpenAIS support
+ High: Admin: crm_uuid - Look in the right place for Heartbeat UUID files
+ High: admin: Exit and indicate a problem if the crmd exits while crmadmin is performing a query
+ High: cib: Fix CIB_OP_UPDATE calls that modify the whole CIB
+ High: cib: Fix compilation when supporting the heartbeat stack
+ High: cib: Fix memory leaks caused by the switch to get_message_xml()
+ High: cib: HA_VALGRIND_ENABLED needs to be set _and_ set to 1|yes|true
+ High: cib: Use get_message_xml() in preference to cl_get_struct()
+ High: cib: Use the return value from call to write() in cib_send_plaintext()
+ High: Core: ccm nodes can legitimately have a node id of 0
+ High: Core: Fix peer-process tracking for the Heartbeat stack
+ High: Core: Heartbeat doesn't send status notifications for nodes that were already part of the cluster.  Fake them instead
+ High: CRM: Add children to HA_Messages such that the field name matches F_XML_TAGNAME
+ High: crm: Adopt a more flexible appraoch to enabling Valgrind
+ High: crm: Fix compilation when bzip2 is not installed
+ High: CRM: Future-proof get_message_xml()
+ High: crmd: Filter election responses based on time not FSA state
+ High: crmd: Handle all possible peer states in crmd_ha_status_callback()
+ High: crmd: Make sure the current date/time is set - prevents use-of-NULL when evaluating rules
+ High: crmd: Relax an assertion regrading  ccm membership instances
+ High: crmd: Use (node-&gt;processes&amp;crm_proc_ais) to accurately update the CIB after replace operations
+ High: crmd: Heartbeat: Accurately record peer client status
+ High: PE: Bug 1777 - Allow colocation with a resource in the Stopped state
+ High: PE: Bug 1822 - Prevent use-of-NULL in PromoteRsc()
+ High: PE: Implement three recovery policies based on op_status and op_rc
+ High: PE: Parse fail-count correctly (it may be set to ININFITY)
+ High: PE: Prevent graph-loop when stonith agents need to be moved around before a STONITH op
+ High: PE: Prevent graph-loops when two operations have the same name+interval
+ High: te: Cancel active timers when destroying graphs
+ High: TE: Ensure failcount is set correctly for failed stops/starts
+ High: TE: Update failcount for oeprations that time out
+ Medium: admin: Prevent hang in crm_mon -1 when there is no cib connection - Patch from Junko IKEDA
+ Medium: cib: Require --force|-f when performing potentially dangerous commands with cibadmin
+ Medium: cib: Tweak the shutdown code
+ Medium: Common: Only count peer processes of active nodes
+ Medium: Core: Create generic cluster sign-in method
+ Medium: core: Fix compilation when Heartbeat support is disabled
+ Medium: Core: General cleanup for supporting two stacks
+ Medium: Core: iso6601 - Support parsing of time-only strings
+ Medium: core: Isolate more code that's only needed when SUPPORT_HEARTBEAT is enabled
+ Medium: crm: Improved logging of errors in the XML parser
+ Medium: crmd: Fix potential use-of-NULL in string comparison
+ Medium: crmd: Reimpliment syncronizing of CIB queries and updates when invoking the PE
+ Medium: crm_mon: Indicate when a node is both in standby mode and offline
+ Medium: PE: Bug 1822 - Don't try an promote groups if not all of it is active
+ Medium: PE: on_fail=nothing is an alias for 'ignore' not 'restart'
+ Medium: PE: Prevent a potential use-of-NULL in cron_range_satisfied()
+ snmp subagent: fix a problem on displaying an unmanaged group
+ snmp subagent: use the syslog setting
+ snmp: v2 support (thanks to Keisuke MORI)
+ snmp_subagent - made it not complain about some things if shutting down</changelog><changelog author="Andrew Beekhof &lt;abeekhof@suse.de&gt;" date="1197324000">- version 0.6.0-1
- Initial package check-in</changelog></package>
<package pkgid="dad87890cb9fd6006d789c7144209d7072d2a5e1" name="pssh" arch="noarch"><version epoch="0" ver="2.3.1" rel="1.el5"/><changelog author="Pat Riehecky 2.3.1-1" date="1352851200">- Initial build off of checkout from upstream</changelog></package>
<package pkgid="4d92efcd94c412580b88978e70e8a8263d81310b" name="rgang" arch="noarch"><version epoch="0" ver="3.4" rel="2"/><changelog author="Connie Sieh &lt;csieh@fnal.gov&gt;  3.4-2" date="1385078400">- Made the spec file generic.  Removed the references to CMS
- Changed the rsync to a cp so we are not dependent on rsync</changelog><changelog author="Tim Skirvin &lt;tskirvin@fnal.gov&gt;  3.4-1" date="1370908800">- re-working the .spec file
- added a man page, docs are installing into /usr/share/docs</changelog><changelog author="Lisa Giachetti &lt;lisa@fnal.gov&gt;  3.4-1" date="1370908800">- Made version prior to 3.4-1</changelog><changelog author="Ron Rechenmacker   3.4" date="1370908800">- Author of rgang</changelog></package>
<package pkgid="2133ca3be9b0a7df8cd6e0dcb03e255909c3545f" name="openssh" arch="i386"><version epoch="0" ver="4.3p2" rel="82.el5.slf"/><changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt; 4.3p2-82.el5.slf" date="1333490400">For SLF we add legacy GSSAPI
  Spec change: Add management of vulnkey
- Added patch FERMI-CHANGES-TO-SPEC-FILE-openssh-4.3p2.patch
- Added patch FERMI-openssh-4.3p2-fermi-pam-sshd.patch
  Configures pam to use kerberos right away
- Added patch FERMI-openssh-4.3p2-fermi-ssh-config.patch
  Turns on GSSAPI by default
- Added patch FERMI-openssh-4.3p2-fermi-sshd-config.patch
  Turns on GSSAPI by default
- Added patch FERMI-openssh-4.3p2-fermi-gss_hostname_for_CMS.patch
  Added for CMS, GSSAPIStrictAcceptorCheck may be better under SL6
- Added patch openssh_4.3p2-8ubuntu1.5-trimmed.diff
  Modified slightly from upstream so it works with RH better
- Added patch openssh_4.3p2-8ubuntu1.5.diff
- Added patch openssh-4.3p2-8ubuntu1.diff
- Added patch openssh-TROYS_CHANGELOG
- Prevented application of patch openssh-4.3p2-gssapi-no-spnego.patch
  conflicts with legacy GSSAPI patch
- Prevented application of patch openssh-4.3p2-gssapi-canohost.patch
  conflicts with legacy GSSAPI patch
- Prevented application of patch openssh-TROYS_CHANGELOG
  History from Troy, not a real patch
- Prevented application of patch openssh-4.3p2-8ubuntu1.diff
  History from Troy
- Prevented application of patch openssh_4.3p2-8ubuntu1.5.diff
  Full upstream patch, unmodified
- Prevented application of patch FERMI-CHANGES-TO-SPEC-FILE-openssh-4.3p2.patch</changelog><changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 4.3p2-82" date="1325628000">- improve RNG seeding from /dev/random (#681291,#708056)</changelog><changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 4.3p2-81" date="1322776800">- make ssh(1)'s ConnectTimeout option apply to both the TCP connection and
  SSH banner exchange (#750725)</changelog><changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 4.3p2-80" date="1322258400">- use IPV6_V6ONLY for sshd inet6 listening socket (#640857)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-79" date="1319234400">- add LANGUAGE to the sent/accepted evvironment (#710229)
- ssh-copy-id copies now id_rsa.pub by default (#731930)
- repairs man pages (#731925)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-78" date="1317852000">- set cloexec on accept socket (#642935)
- add umask to sftp (#720598)
- enable lastolg for big uids (#706315)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-77" date="1314309600">- enable selinux domain transition to passwd_t (#689406)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-76" date="1313186400">- enable pubkey auth in the fips mode (#674747)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-75" date="1301349600">- improve resseding the prng from /dev/urandom or /dev/random respectively (#681291)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-73" date="1300917600">- periodically ressed the prng from /dev/urandom or /dev/random respectively (#681291)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-72" date="1292450400">- change cipher preferences (#661716)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-71" date="1291932000">- change cipher preferences (#661716)
- enable to run sshd as non root user (#661669)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-70" date="1291759200">- reenable rekeying (#659242)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-69" date="1288735200">- add nss keys to key audit patch (#632402)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-68" date="1288735200">- key audit patch (#632402)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-47" date="1284501600">- supply forced command documentation (#532559)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-46" date="1281996000">- compile in the OpenSSL engine support</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-45" date="1277848800">- record lastlog with big uid (#616396)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-44" date="1277848800">- add OpenSSL engine support (#594815)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-43" date="1277848800">- backport forced command directive (#532559)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-42" date="1277762400">- stderr does not more disturb sftp (#576765)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-41" date="1264197600">- add RAND_cleanup at the exit of each program using RAND (#557166)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-40" date="1259704800">- revert adjustable buffer length patch (#508914)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-39" date="1257976800">- set adjustable buffer length  (#508914)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-38" date="1257458400">- set better buffer length in latency patch (#508914)
- close error file descriptor before running external subsystem (#530358)
- prevent initscript from hanging when generates the keys (#531738)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-37" date="1253052000">- minimize chroot patch to be compatible with upstream (#522141)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-36.1" date="1250632800">- revert latency patch to solve scp stall regression (#508914)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-36" date="1245794400">- tiny change in chroot sftp capability into openssh-server solve ls speed problem (#440240)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-35" date="1243375200">- workaround to plaintext recovery attack against CBC ciphers CVE-2008-5161 (#502230)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-34" date="1242424800">- disable protocol 1 in the FIPS mode</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-33" date="1241128800">- fix scp hangup on exit (#454812)
- call integrity checks only on binaries which are part of the OpenSSH FIPS
  modules</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-32" date="1240264800">- log if FIPS mode is initialized (#492363)
- check the integrity of the binaries in the FIPS mode (#467268)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-31" date="1239228000">- fix ssh hangup on exit (#454812)</changelog><changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 4.3p2-30" date="1238191200">- add chroot sftp capability into openssh-server (#440240)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-29" date="1222984800">- allow options for the sshd subsystem for the sftp logging support (#452619)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-28" date="1221170400">- use OpenSSL RNG directly (needed for FIPS-140-2 compliance)
- when in FIPS mode do not try to use algorithms which are not allowed (#447936)
- improve transfer speed on high latency connections (#227722)
- more correct 'service sshd status' reporting (#430877)
- add logging support to the sftp server (#452619)
- small scp manual page improvement (#433381)</changelog><changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 4.3p2-26.el5_2.1" date="1218837600">- CVE-2007-4752 - Prevent ssh(1) from using a trusted X11 cookie if creation of an
  untrusted cookie fails (#280361)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-26" date="1200434400">- drain acks on sftp write failures (#251565)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-24" date="1184364000">- fixed audit log injection problem (CVE-2007-3102) (#248059)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-23" date="1182463200">- document where the nss certificate and token dbs are looked for</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-22" date="1182376800">- experimental support for PKCS#11 tokens through libnss3 (#183423)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-21" date="1175637600">- fix an information leak in Kerberos password authentication (CVE-2006-5052)
  (#234638)
- correctly setup context when empty level requested (#234951)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-20" date="1174341600">- and always request default level as returned by getseuserbyname (#231695)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-19" date="1174341600">- check requested level context against a context with the same role (#231695)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-18" date="1172613600">- reject connection if requested mls range is not obtained (#229278)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-17" date="1171058400">- allow selecting non-default roles and audit role changes (#227733)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-16" date="1168552800">- support also level selection on unlabeled networks (#220487)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-15" date="1166824800">- make sshd work with mls networking (patch by Klaus Weidner) (#220487)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-14" date="1164924000">- fix gssapi with DNS loadbalanced clusters (#216857)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-13" date="1164751200">- improved pam_session patch so it doesn't regress, the patch is necessary
  for the pam_session_close to be called correctly as uid 0 (#167488)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-10.1" date="1163196000">- CVE-2006-5794 - properly detect failed key verify in monitor (#214642)
- kill all ssh sessions when stop is called in halt or reboot runlevel (#213008)
- remove -TERM option from killproc so we don't race on sshd restart (#213490)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-10" date="1159826400">- improve gssapi-no-spnego patch (#208102)
- CVE-2006-4924 - prevent DoS on deattack detector (#207957)
- CVE-2006-5051 - don't call cleanups from signal handler (#208459)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-9" date="1156370400">- don't report duplicate syslog messages, use correct local time (#189158)
- don't allow spnego as gssapi mechanism (from upstream)
- fixed memleaks found by Coverity (from upstream)
- allow ip options except source routing (#202856) (patch by HP)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-8" date="1155074400">- drop the pam-session patch from the previous build (#201341)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-7" date="1153432800">- dropped old ssh obsoletes
- call the pam_session_open/close from the monitor when privsep is
  enabled so it is always called as root (patch by Darren Tucker)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-6" date="1153173600">- improve selinux patch (by Jan Kiszka)
- upstream patch for buffer append space error (#191940)
- fixed typo in configure.ac (#198986)
- added pam_keyinit to pam configuration (#198628)
- improved error message when askpass dialog cannot grab
  keyboard input (#198332)
- buildrequires xauth instead of xorg-x11-xauth
- fixed a few rpmlint warnings</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 4.3p2-5.1" date="1152741600">- rebuild</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-5" date="1145052000">- don't request pseudoterminal allocation if stdin is not tty (#188983)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-4" date="1141336800">- allow access if audit is not compiled in kernel (#183243)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-3" date="1140818400">- enable the subprocess in chroot to send messages to system log
- sshd should prevent login if audit call fails</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-2" date="1140559200">- print error from scp if not remote (patch by Bjorn Augustsson #178923)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p2-1" date="1139868000">- new version</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 4.3p1-2.1" date="1139608800">- bump again for double-long bug on ppc(64)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p1-2" date="1139263200">- fixed another place where syslog was called in signal handler
- pass locale environment variables to server, accept them there (#179851)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.3p1-1" date="1138831200">- new version, dropped obsolete patches</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.2p1-10" date="1135116000">- hopefully make the askpass dialog less confusing (#174765)</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt;" date="1134165600">- rebuilt</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.2p1-9" date="1132696800">- drop x11-ssh-askpass from the package
- drop old build_6x ifs from spec file
- improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
  characters to person looking at the display
- less hackish fix for the __USE_GNU problem</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 4.2p1-8" date="1132351200">- work around missing gccmakedep by wrapping makedepend in a local script
- remove now-obsolete build dependency on "xauth"</changelog><changelog author="Warren Togami &lt;wtogami@redhat.com&gt; - 4.2p1-7" date="1132264800">- xorg-x11-devel -&gt; libXt-devel
- rebuild for new xauth location so X forwarding works
- buildreq audit-libs-devel
- buildreq automake for aclocal
- buildreq imake for xmkmf
-  -D_GNU_SOURCE in flags in order to get it to build
   Ugly hack to workaround openssh defining __USE_GNU which is
   not allowed and causes problems according to Ulrich Drepper
   fix this the correct way after FC5test1</changelog><changelog author="Jeremy Katz &lt;katzj@redhat.com&gt; - 4.2p1-6" date="1131573600">- rebuild against new openssl</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-5" date="1130536800">- put back the possibility to skip SELinux patch
- add patch for user login auditing by Steve Grubb</changelog><changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; 4.2p1-4" date="1129672800">- Change selinux patch to use get_default_context_with_rolelevel in libselinux.</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-3" date="1129240800">- Update selinux patch to use getseuserbyname</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-2" date="1128722400">- use include instead of pam_stack in pam config
- use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
- upstream patch for displaying authentication errors</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.2p1-1" date="1126044000">- upgrade to a new upstream version</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-5" date="1124229600">- use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
- install ssh-copy-id from contrib (#88707)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-4" date="1122501600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-3" date="1120082400">- fix small regression caused by the nologin patch (#161956)
- fix race in getpeername error checking (mindrot #1054)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-2" date="1118354400">- use only pam_nologin for nologin testing</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.1p1-1" date="1118095200">- upgrade to a new upstream version
- call pam_loginuid as a pam session module</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.0p1-3" date="1116280800">- link libselinux only to sshd (#157678)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.0p1-2" date="1112652000">- fixed Local/RemoteForward in ssh_config.5 manpage
- fix fatal when Local/RemoteForward is used and scp run (#153258)
- don't leak user validity when using krb5 authentication</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 4.0p1-1" date="1111701600">- upgrade to 4.0p1
- remove obsolete groups patch</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1111010400">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-12" date="1109628000">- rebuild so that configure can detect that krb5_init_ets is gone now</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-11" date="1109023200">- don't call syslog in signal handler
- allow password authentication when copying from remote
  to remote machine (#103364)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt;" date="1107986400">- add spaces to messages in initscript (#138508)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-10" date="1107900000">- enable trusted forwarding by default if X11 forwarding is 
  required by user (#137685 and duplicates)
- disable protocol 1 support by default in sshd server config (#88329)
- keep the gnome-askpass dialog above others (#69131)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt;" date="1107554400">- change permissions on pam.d/sshd to 0644 (#64697)
- patch initscript so it doesn't kill opened sessions if
  the sshd daemon isn't running anymore (#67624)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-9" date="1104789600">- don't use initlog</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.1" date="1101765600">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096927200">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095717600">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095199200">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095112800">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094162400">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094162400">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094162400">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093989600">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093384800">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091397600">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087336800">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087336800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086818400">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086645600">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086300000">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086127200">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086127200">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079474400">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078351200">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078178400">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077832800">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077832800">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077573600">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076709600">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075154400">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075154400">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074117600">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070488800">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069192800">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068501600">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068156000">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067032800">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066082400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066082400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064008800">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064008800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064008800">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063836000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063836000">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063836000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063836000">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063749600">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063749600">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063749600">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063749600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063749600">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062799200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062799200">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061935200">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060725600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060725600">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059429600">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058911200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055800800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055800800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054850400">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054764000">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048543200">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045260000">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044914400">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043272800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041976800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037138400">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034719200">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033768800">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031868000">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030658400">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029362400">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025215200">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025042400">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024956000">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024696800">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023487200">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022882400">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022623200">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021672800">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021672800">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017784800">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016748000">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015538400">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015538400">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015538400">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015365600">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014242400">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013637600">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011823200">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009663200">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007503200">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005948000">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005688800">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005256800">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005170400">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001628000">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000418400">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999813600">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998344800">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997999200">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997394400">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997308000">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997135200">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996098400">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994888800">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993506400">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992901600">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991951200">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990828000">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990741600">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988927200">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988840800">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987631200">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986767200">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986248800">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985384800">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985298400">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985125600">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983656800">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983570400">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983224800">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982879200">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982706400">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982620000">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982360800">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982101600">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981583200">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980287200">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979941600">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979855200">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977349600">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976053600">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975535200">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975448800">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975362400">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975276000">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974844000">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974757600">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974498400">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973634400">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972943200">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971215200">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970783200">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970524000">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968277600">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967068000">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963871200">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963439200">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962920800">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962834400">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962575200">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962488800">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962316000">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962143200">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960588000">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960069600">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953157600">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946245600">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942703200">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942530400">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942184800">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942098400">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941320800">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941234400">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941148000">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941061600">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="aed3012a40e0f6193afddc77979b1a66fb3e4df5" name="kernel-module-drbd-2.6.18-398.el5PAE" arch="i686"><version epoch="0" ver="8.3.7" rel="1.sl5"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 8.3.7-1" date="1271116800">- Update to 8.3.7
- Separated the kernel module out to a separate rpm
  This is because the driver is now in the generic kernel
- Combined spec files from atrpms and normal SL kernel module specs</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.3.6-27" date="1259539200">- Update to 8.3.6.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.3.2-25" date="1252454400">- Update to 8.3.2.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.3.1-24" date="1240272000">- Update to 8.3.1.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.2.7-23" date="1228694400">- Update to 8.2.7.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.2.6-22" date="1223078400">- Update to 8.2.6.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.2.5-21" date="1206230400">- Update to 8.2.5.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.2.1-20" date="1195862400">- Update to 8.2.1.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 8.0.4-18" date="1185926400">- Update to 8.0.4.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.24-17" date="1185926400">- Update to 0.7.24.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.23-15" date="1168732800">- Update to 0.7.23.
- Fix summary (#1110).</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.22-14" date="1167782400">- Update to 0.7.22.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.21-13" date="1161561600">- Update to 0.7.21.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt; - 0.7.20-12" date="1153180800">- Update to 0.7.20.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1143331200">- Update to 0.7.17.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1141776000">- Update to 0.7.16.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1121212800">- Update to 0.7.11.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1114128000">- Update to 0.7.10.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1106524800">- Update to 0.7.8.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1105574400">- Update to 0.7.7.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1096848000">- Update to 0.7.5.</changelog><changelog author="Axel Thimm &lt;Axel.Thimm@ATrpms.net&gt;" date="1087689600">- Initial build.</changelog></package>
<package pkgid="5e3b9146f008ed9132fbec1504d866e08dc4921a" name="augeas-libs" arch="i386"><version epoch="0" ver="1.0.0" rel="1.el5"/><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 1.0.0-1" date="1357336800">- New version; remove all patches</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.10.0-3" date="1326232800">- Add patches for bugs 247 and 248 (JSON lens)</changelog><changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 0.10.0-2" date="1322949600">- Add patch to resolve missing libxml2 requirement in augeas.pc.</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.10.0-1" date="1322863200">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.9.0-1" date="1311631200">- New version; removed patch pathx-whitespace-ea010d8</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.8.1-2" date="1304460000">- Add patch pathx-whitespace-ea010d8.patch to fix BZ 700608</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.8.1-1" date="1302904800">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.8.0-1" date="1298498400">- New version</changelog><changelog author="Matthew Booth &lt;mbooth@redhat.com&gt; - 0.7.4-1" date="1290463200">- Update to version 0.7.4</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.7.3-1" date="1281132000">- Remove upstream patches</changelog><changelog author="Matthew Booth &lt;mbooth@redhat.com&gt; - 0.7.2-2" date="1278108000">- Add lens for grub's device.map</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.7.2-1" date="1277244000">- Fix ownership of /usr/share/augeas. BZ 569393</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.7.1-1" date="1271887200">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.7.0-1" date="1263506400">- Remove patch vim-ftdetect-syntax.patch. It's upstream</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.6.0-2" date="1260914400">- Fix ftdetect file for vim</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.6.0-1" date="1259618400">- Install vim syntax files</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.3-1" date="1252965600">- Remove separate xorg.aug, included in upstream source</changelog><changelog author="Matthew Booth &lt;mbooth@redhat.com&gt; - 0.5.2-2" date="1251237600">- Include new xorg lens from upstream</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.2-1" date="1247522400">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.1-1" date="1244239200">- Install fadot</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.0-2" date="1238191200">- fadot isn't being installed just yet</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.5.0-1" date="1237932000">- New program /usr/bin/fadot</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.4.2-1" date="1236636000">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.4.1-1" date="1235772000">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.4.0-1" date="1233957600">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.3.6-1" date="1233007200">- New version</changelog><changelog author="David Lutterkort &lt;lutter@redhat.com&gt; - 0.3.5-1" date="1230069600">- New version</changelog><changelog author="David Lutterkort &lt;dlutter@redhat.com&gt; - 0.0.4-1" date="1203976800">- Initial specfile</changelog></package>
<package pkgid="eb2662261de55ba825c181448d1b418547a5f51f" name="zz_apache_no_browsable_directory" arch="noarch"><version epoch="0" ver="1.0" rel="4"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.0-4" date="1358467200">- Comment addition is now in its own block so that failure
   to leave a comment doesn't prevent the config changes
   from happening.</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.0-3" date="1354665600">- Sets up mod_userdir with no indexes too
- Now leaves a comment behind saying what it did
- Now archives httpd.conf before making the edits</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.0-2" date="1354320000">- Improved internal documentation</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.0-1" date="1354147200">- Trigger is now far more selective about when it runs</changelog><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.0-0" date="1354060800">- Initial build at the request of computing security</changelog></package>
<package pkgid="45f5116c222919f4978899aaeded0139020e09f5" name="tetex-revtex" arch="noarch"><version epoch="0" ver="4.1" rel="1.sl5.1"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt;" date="1354579200">- pulled from PUIAS, thanks!</changelog><changelog author="Josko Plazonic &lt;plazonic@math.princeton.edu&gt;" date="1268956800">- initial build</changelog></package>
<package pkgid="030bfde404b5ab532470a07816f225a6b0657e76" name="tetex-natbib" arch="noarch"><version epoch="0" ver="8.31a" rel="1.sl5.1"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt;" date="1354579200">- pulled from PUIAS, thanks!</changelog><changelog author="Josko Plazonic &lt;plazonic@math.princeton.edu&gt;" date="1268956800">- initial build</changelog></package>
<package pkgid="4f837d9c3087cb57d583caf1f5e7316d0056859d" name="Fermi-release" arch="i386"><version epoch="31" ver="5.11" rel="2.slf"/><changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; - 5.8-0.slf.rolling" date="1329955200">- refactored to match what we are doing in SL5.8
- Fixed firefox bookmark deployment</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.7-0.1.rolling" date="1312502400">- Moved everything to 57
- Changed sources to be 5rolling</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.6-1" date="1307491200">- Changed sources to point to 56</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.5-0.1.rolling" date="1270684800">- Updated out of date bookmarks
- Moved everything to 55
- Changed sources to be 5rolling instead</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.3-2" date="1247616000">- Added RPM-GPG-KEY-sl*</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.3-1" date="1235520000">- Changed sources to point to 53</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.2-1" date="1213401600">- Changed sources to point to 52</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.2-0.1.rolling" date="1211587200">- Moved everything over to 52
- Added new redhat rpm keys</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.1-1" date="1194566400">- Moved everything to 51
- Added the new redhat rpm key
- Changed sources to be 5rolling instead of 50</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.0-3" date="1175558400">- Changed sources to be 50 instead of 5rolling
- Added the centos 5 GPG key</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.0-3" date="1175558400">- Changed sources to reflect the new directory structure
- added trigger to get rid of additional cd's page of firstboot
- added more rpm GPG keys</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.0-2" date="1175040000">- Added bookmarks fix</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.0-1" date="1165536000">- First pass at the spec file</changelog></package>

</otherdata>