# changelog

author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-392.el5]
changelog:
  - [redhat] kabi: Adding symbol pci_num_vf (Jiri Olsa) [999389]
  - [fs] gfs2: Allocate directory memory with GFP_NOFS (Robert S Peterson) [1103256]
  - [kernel] compat: compat_sys_times: don't take tasklist_lock (Mateusz Guzik) [984541]
  - [fs] nfs4: Add recovery for individual stateids (Dave Wysochanski) [867570]
  - [fs] nfs4: Don't start state recovery in nfs4_close_done (Dave Wysochanski) [867570]
  - [s390] kernel: fix save and restore of the fp-control register (Hendrik Brueckner) [1034342]
  - [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [902454]
  - [net] bridge: send query as soon as leave is received (Amerigo Wang) [902454]
  - [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [902454]
  - [net] bridge: Fix typo that may render snooping less effective (Amerigo Wang) [902454]
  - [net] AF_UNIX: EOF on non-blocking SOCK_SEQPACKET (Swapnil Nagarkar) [1025410]
  - [fs] gfs2: clear directory cache from master directory at unmount (Robert S Peterson) [859964]
  - [net] netlink: Make netlink processing routines semi-synchronious (Daniel Borkmann) [947562]
  - [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103649]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-393.el5]
changelog:
  - [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1081785]
  - [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1081785]
  - [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1081785]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1081785]
  - [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1081785]
  - [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1081785]
  - [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1081785]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1102768]
  - [fs] ext3: explicitly rm inode from orphan list after failed io (Eric Sandeen) [1088041]
  - [infiniband] mlx4: Fix BlueFlame race (Amir Vadai) [1088582]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-394.el5]
changelog:
  - Revert: [net] bridge: Fix typo that may render snooping less effective (Amerigo Wang) [902454]
  - Revert: [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [902454]
  - Revert: [net] bridge: send query as soon as leave is received (Amerigo Wang) [902454]
  - Revert: [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [902454]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-395.el5]
changelog:
  - [fs] gfs2: When glock is freed make sure it gets unlocked in DLM (Abhijith Das) [1022254]
  - [fs] gfs2: Requeue work if reply becomes pending during work_func (Abhijith Das) [1022254]
  - [fs] gfs2: Wait for glock demotes when evicting an inode (Abhijith Das) [1022254]
  - [fs] gfs2: Attempt to close GLF_DIRTY timing windows (Abhijith Das) [1022254]
  - [fs] gfs2: Change truncate page allocation to be GFP_NOFS (Abhijith Das) [1022254]
  - [net] tg3: Poll cpmu link state on APE + ASF enabled devices (Ivan Vecera) [1097866]
  - [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [924590]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-396.el5]
changelog:
  - [s390] kernel: fix restore of invalid floating-point-control (Hendrik Brueckner) [1121953]
  - [fs] cifs: Use cifs_set_ops() in fill_in_inode() functions (Sachin Prabhu) [1108624]
  - [fs] cifs: Fix cifs_set_ops() (Sachin Prabhu) [1108624]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-397.el5]
changelog:
  - [fs] gfs2: Detect and release delayed bufdata structures (Robert S Peterson) [516025]
  - [fs] nfs: don't invalidate dentries that act as mountpoints (Steve Dickson) [1117211]
  - [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102703] {CVE-2014-3917}
  - [scsi] Initialize eh_timeout value earlier on probe (Ewan Milne) [1119532]
  - [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1080194]
  - [fs] skip atime update on a frozen filesystem (Aaron Tomlin) [1000836]
  - [xen] x86: check segment descriptor read in 64-bit OUTS emulation (Radim Krcmar) [1012959]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-400.el5]
changelog:
  - [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
  - [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
  - [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}


author: Akemi Yagi <toracat@centos.org> [2.6.18-400.el5.centos.plus]
changelog:
  - Roll in CentOS Branding
  - added new config files for i686, x86_64 with extra features turned on
    including all Network Adapters, all Video4Linux adapers, all Radio devices,
    JFS, ReiserFS, NCP (Novell partitions) and LDM (Windows Dynamic
    Partitions) BusLogic support.
  - removed the rhel and olpc sections at the beginning of the prep section
    that apply generic templates
  - added reiserfs patch (bug 3156)
  - Note: NTFS is broken in 5.3 (kernels >=2.6.18-128), therefore is not enabled.
    see bug 3363 bugzilla 481495
  - Note: FUSE is enabled in distro kernel as of 5.4 (kernels >=2.6.8.164)
  - Note: Intel wiki LEDS is enabled in distro kernel in 5.4 (bug 3544)
  - Note: Do not enable CONFIG_RTxxxx_LEDS=y ; one or more of them will
    cause compilation to fail.
  - Note: INFINIBAND_AMSO1100 disabled in 5.4 because enabling it leads to a
    comlilation error.
  - added acpi-early-pdc patches (bug 4139)
  - added alps-E6400.patch (bug 4192)
  - added usb-allow-restart.patch (bug 4196)
  - enabled "cx88-dvb.ko" and related modules (bug 4365)
  - replaced bug4192 patch with the one from upstream [bugzilla 564086]
  - enabled irDA modules (bug 4683)
  - three cplus centos patches are now in 5.6, therefore removed.
  - added jfs patch (bug 4747)
  - added sata_via patch (bug 4851)
  - added ata-sch-slave.patch (bug 4923)
  - Two centos patches are now in 5.8, therefore removed.
  - pata_acpi is now disabled (bug 5537)
  - add a patch snd_pci_quirk_lookup-bug6214.patch [bug#6214] (removed as of 2.6.18-371)
  - added readpage over i_node patch (bug#6351) (removed as of 2.6.18-371)
  - added acpi-video-device-notify patch (bug 6415)
  - enabled CONFIG_USB_SUSPEND (bug 273).


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-5.1
changelog:
  - Break out utilities into separate package so rpm -V libselinux will work
  - Stop writing to stderr when matchpathcon has an error
  Resolves: #190314


author: Miroslav Grepl <mgrepl@redhat.com> - 1.33.4-5.6
changelog:
  - Add
    - selinux_virtual_domain_context_path
    - selinux_virtual_image_context_path
  Resolves:#582612


author: 17:30:23 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0rc2-1)
   * Added the well known automagiacally adjust drbd_config.h to
     make drbd compile on every by vendor's backports defaced 
     kernel. ( Linux-2.6.x only of course )
   * Fixed races with starting and finishing resync processes 
     while heavy application IO is going on.
   * Ported DRBD to the new crypto API (and added a emulation of the
     now API on top of the old one for older 2.6.x kernels)
   * Code to perform better on ethernet networks with jumbo
     frames.
   * Bugfixes to our request code (race conditions).
   * Every error code that is returned by drbdsetup has a 
     textual description by now.


author: 10:10:26 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.1-1)
   * Fixed some race conditions that could trigger an OOPS when the loca disk
     failes and DRBD detaches itself from the failing disk.
   * Added a missing call to drbd_try_outdate_peer().
   * LVM's LVs expose ambiguous queue settings. When a RAID-0 (md) PV is
     used the present a segment size of 64k but at the same time allow only
     8 sectors. Fixed DRBD to deal with that fact corretly.
   * New option "always-asbp" to also use the after-after-split-brain-policy
     handlers, even it is not possible to determine from the UUIDs that
     the data of the two nodes was related in the past.
   * More verbosity in case a bio_add_page() fails.
   * Replaced kmalloc()/memset() with kzmalloc(), and a wrapper for older kernls
   * A fast version of drbd_al_to_on_disk_bm(). This is necessary for short
     (even sub-second) switchover times while having large "al-extents" settings.
   * Fixed drbdadm's array overflows (of on stack objects)
   * drbdsetup can now dump its usage in a XML format
   * New init script for gentoo
   * Fixed Typos in the usage of /proc/sysrq-trigger in the example config.


author: 21:32:39 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.2-1)
   * Removed a bug that could cause an OOPS in drbd_al_to_on_disk_bm()
   * Improved the robustness of the UUID based algorithm that decides
     about the resync direction.
   * Fixed the error handling in case a the open() of a backing
     blockdevice fails.
   * Fixed a race condition that could cause a "drbdadm disconnect" to hang.
   * More verbosity in we can not claim a backing block device.
   * More verbosity and paranoia in the bitmap area.
   * On some vendor kernels 8.0.1 did not load because of kzalloc. fixed.
   * Fault injection can now not only be turned on or off, but can be 
     enabled on a per device basis.
   * Fixed the scripts and files needed to build drbd into a kernel.


author: 17:10:14 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.3-1)
   * Fixed a race condition that could cause us to continue to traverse a bio
     after it was freed. (led to an OOPS)
   * Fixed a race condition that could cause us to use members of an ee, after
     it was freed. (led to various weirdness)
   * Language fixes for the man pages.
   * The drbdsetup commands (events, wait-connect,...) release the lock now.
   * Minor fixes and updates to the user land tools and to the peer outdater.


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-390.el5]
changelog:
  - [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1090806]
  - [net] ndisc: Update neigh->updated with write lock (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1090806]
  - [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [980268]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [980268]
  - [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [980268]
  - [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [980268]
  - [fs] knfsd: demote some printk()s to dprintk()s (J. Bruce Fields) [984732]
  - [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093312] {CVE-2014-2678}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-391.el5]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1080606]
  - [net] forcedeth: run loopback test only on chips that support it (Ivan Vecera) [661959]
  - [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1109888]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-402.el5]
changelog:
  - [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
  - [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
  - [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
  - [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
  - [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
  - [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
  - [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
  - [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
  - [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}


author: Johnny Hughes <johnny@centos.org> 2.2.46-1
changelog:
  - upgraded to upstream version 2.2.46
  - added e2fsprogs-devel and ncurses-devel as build requirements.


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.3-2.2
changelog:
  - fixed postfix privilege problem with symlinks in the mail spool directory
    (CVE-2008-2936)
    Resolves: rhbz#456718


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.3.3-5
changelog:
  - Packaged example scripts
    Resolves: rhbz#251677
  - Fixed recipient duplicate elimination
    Resolves: rhbz#474541
  - Compiled with mysql support
    Resolves: rhbz#502412
  - Clarified documentation about reject_invalid_helo_hostname
    Resolves: rhbz#514948
  - Fixed milter communication if single header is larger than 64k
    Resolves: rhbz#617069
  - Improved init script to check for PID
    Resolves: rhbz#645348
  - Fixed mailq, newaliases, sendmail, aliases man pages display
    Resolves: rhbz#664627


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.3.3-7
changelog:
  - Dropped unnecessary requires
    Resolves: rhbz#915901
  - Backported TLS cache redirection from postfix-2.6
    Resolves: rhbz#977629


author: Johnny Hughes <johnny@centos.org> - 2:2.3.3-7.0.1.el5.centos
changelog:
  - Added PGSQL support
  - bumped up the release by adding .0.1 to ensure this package is newer than the one in base


author: Daniel de Kok <daniel@centos.org> 36-2
changelog:
  - Kernel 2.6.18-53.el5 now defines some CPU_.*FROZEN macros, but doesn't
    define others. Modify compatibility macros to check each case.


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.2-1
changelog:
  - new version 2.3.2 with major upstream fixes:
    - corrupted queue file after a request to modify a short message header
    - panic after spurious Milter request when a client was rejected
    - maked the Milter more tolerant for redundant "data cleanup" requests
  - applying pflogsumm-conn-delays-dsn-patch from postfix tree to pflogsumm


author: Johnny Hughes <johnny@centos.org>
changelog:
  - Initial use in CentOS-5
  - Added paevar and modified paevar, smpvar, xenvar, xdumpvar to follow
    EL5 and not FC6 naming conventions.


