Red Hat Enterprise Linux 3 Update 8 發行公告

這個《發行公告》包括下列的主題：

以下的部份包括 Red Hat Enterprise Linux 安裝程式 Anaconda 的特定資訊。

這個部份包含的是一般資訊，並非針對本文件的某些特定章節。

這個部份含括 Red Hat Enterprise Linux 3 Update 8 中核心的相關資訊。

這個更新包括對許多驅動程式的除錯修正，以下列出較重要的驅動程式更新。在某些例子中，我們以不同的名稱保留原本的驅動程式，以提供給想要在稍候轉換驅動程式設定到最新版本的公司使用。

下列裝置驅動程式已經新增或更新至 Red Hat Enterprise Linux 3 Update 8 中：

這個部份包含了從 Red Hat Enterprise Linux 3 所更新或新增、且為 Update 8 一部分的套件清單。

下列的套件已經新增到 Red Hat Enterprise Linux 3 Update 8 中：

下列的套件已經從 Red Hat Enterprise Linux 3 Update 8 中移除：

下列的套件已經從 Red Hat Enterprise Linux 3 Update 7 更新：

本節包括了 Red Hat 程式設計師的完整更新附註清單，稱為 更新紀錄（changelogs），這清單來自 Red Hat Enterprise Linux 3 Update 8 與上一個版本間的所有變動。有可能的話，我們會加上 Bugzilla ID 號碼，列出每個已解決問題的報告，以供參考。欲知更多詳情，請參閱 Red Hat Bugzilla 網站，網址為：

https://bugzilla.redhat.com/

OpenIPMI-1.4.14-1.3E.10
-----------------------
Thu Apr 13 2006
Phil Knirsch <pknirsch@redhat.com> 1.4.14-1.3E.10
- Updated ipmitool to version 1.8.7 (#181487, #182277)
- Removed obsolete patches due to impitool update


XFree86-4.3.0-107.EL
--------------------
Tue May 09 2006
Mike A. Harris <mharris@redhat.com> 4.3.0-107.EL
- Updated XFree86-4.3.0-ati-radeon-7000m-dell-server.patch to also address
  bug (#167336)
- Added XFree86-4.3.0-xkbdata-sun6-keys.patch to add Sun Type6 keyboard
  xkbdata support for bug (#165126)

Fri May 05 2006
Mike A. Harris <mharris@redhat.com> 4.3.0-106.EL
- Replaced XFree86-4.3.0-RN50-limit-pixel-clock-bug189927.patch with new patch
  from ATI XFree86-4.3.0-ati-RN50-limit-pixel-clock-bug189927.patch for
  issue on ATI RN50 chipsets (#189927)

Wed May 03 2006
Mike A. Harris <mharris@redhat.com> 4.3.0-105.EL
- Added XFree86-4.3.0-RN50-limit-pixel-clock-bug189927.patch to fix bandwidth
  related issue on ATI RN50 chipsets (#189927)

Tue May 02 2006
Mike A. Harris <mharris@redhat.com> 4.3.0-104.EL
- Fixed mkfontscale dependencies which were caused by a regression introduced
  in the fix for bug (#182093)

Tue Apr 25 2006
Mike A. Harris <mharris@redhat.com> 4.3.0-103.EL
- Added XFree86-4.3.0-Xnest-xkb-fix-bug184385.patch to attempt to re-enable
  XKB support in Xnest for bug (#184385)

Wed Apr 19 2006
Mike A. Harris <mharris@redhat.com> 4.3.0-102.EL
- Convert all rpm spec file "PreReq" usage to Requires(pre)/post/postun/preun,
  etc. and add missing Requires(post) and Requires(postun) dependencies for
  font subpackages, to fix bug (#182093)
- Added XFree86-4.3.0-xim-deadlock-fix-bug183244.patch to fix XIM deadlocks
  reported in bug (#183244)
- Added XFree86-4.3.0-xtrans-remove-TRANS_OPEN_MAX-limit-bug176328.patch to
  work around artificial fd limit imposed by Xtrans (#176328)
- Added XFree86-4.3.0-vesa-driver-memory-leak-bug172090.patch to fix a memory
  leak that has been reported in the vesa driver (#172090)

Mon Apr 03 2006
Adam Jackson <ajackson@redhat.com> 4.3.0-101.EL
- Increase G200SE memory probe stride to 4k to speed up startup.  Backported
  from Xorg head.

Tue Mar 07 2006
Adam Jackson <ajackson@redhat.com> 4.3.0-100.EL
- Added Matrox MGA G200SE support. (#183388)

Fri Feb 24 2006
Adam Jackson <ajackson@redhat.com> 4.3.0-99.EL
- Fixed native-pci patch to use PCIOsConfig by default again, as in RHEL3-U5
  and earlier.  (#172433)


ami-1.2.2-6.EL.1
----------------
Wed Apr 19 2006
Lawrence Lim <llim@redhat.com> 1.2.2-6.EL.1
- added series of patches courtesy of IBM
  - ami-1.2.2-3-close-hanja-win.patch to fix strange behavior by XmbRestIC with Hanja window (#161130)
  - ami-1.2.2-keyevent.patch to fix ami key events are out of order (#163261)
  - ami-1.2.2-bigendian64.patch to ami being killed during Korean input operation and ami on z64 (#162736, #164143)
  - ami-1.2.2-LTC16789.patch to fix XIM server does not work correctly with Xclient(s390x) (#164410)


anaconda-9.1.6.13-2.RHEL
------------------------
Tue May 30 2006
Paul Nasrat <pnasrat@redhat.com> - 9.1.6.13-2.RHEL
- Rebuild against later kudzu for (#140772)

Thu May 25 2006
Peter Jones <pjones@redhat.com> - 9.1.6.13-1.RHEL
- Add adp94xx driver to whitelist (#192951)

Thu May 11 2006
Peter Jones <pjones@redhat.com> - 9.1.6.12-1.RHEL
- Fix size checking of http header array (#191184).

Fri May 05 2006
Peter Jones <pjones@redhat.com> - 9.1.6.11-1.RHEL
- Use -Os in the loader after all, or else boot images are too large (#190835).
- Use a dynamic buffer for httpGetFileDesc in the loader (#188089).

Mon May 01 2006
Peter Jones <pjones@redhat.com> - 9.1.6.10-1.RHEL
- Correct module info parsing on driver disks (dcantrel, #164549).
- Add nicdelay= boot parameter (#162693).
- Handle control characters correctly in rescue mode shell (dcantrel, #126620).
- Set controlling terminal for rescue mode (dcantrel, #126620).
- Don't use -Os in the loader makefile (#188089).
- Allow vfat driver disks (#186400).


arts-8:1.1.3-2.4
----------------
Tue Mar 14 2006
Than Ngo <than@redhat.com> 8:1.1.3-2.4
- fix ticking sound problem on x86_64, #127792


aspell-2:0.33.7.1-25.3.rhel3
----------------------------
Mon Apr 10 2006
Ivana Varekova <varekova@redhat.com> - 2:0.33.7.1-25.3.rhel3
- fix sgml-mode problem - bug 145630


authconfig-4.3.7-4
------------------
Wed Feb 15 2006
Tomas Mraz <tmraz@redhat.com> 4.3.7-4
- don't crash when saving kerberos settings if admin_server
  is not defined (#178784)
- NIS config saved incorrectly with multiple servers (#153080)


authd-1.4.1-2.RHEL3
-------------------
Thu Feb 16 2006
Martin Stransky <stransky@redhat.com> - 1.4.1-2.RHEL3
- fix for #151905 - backported fix from RHEL4


autofs-1:4.1.3-184
------------------
Fri May 05 2006
Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-184
- Fix the included map support to allow a file map to include a nis map of
  the same name.  Fixes bz #190877.

Wed May 03 2006
Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-182
- Fix the OID for the automount objectclass in the documentation.  bz #150340

Wed May 03 2006
Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-180
- Only pass the -b option to autofs-ldap-auto-master if the BASEDN was
  specified.

Tue May 02 2006
Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-178
- Add support for included maps. Fixes bz #139813.
- Fix initial map source selection to use the name service switch file.
  Fixes bz #145152, #156035.

Thu Apr 13 2006
Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-176
- Allow for multiple direct map entries in the master map.  Fixes bz #172928.
- Keep the build process from stripping binaries.  Otherwise, we get debuginfo
  packages that are useless.  Fixes bz #147378.

Thu Feb 16 2006
Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-174
- Add a sysconfig variable which specifies a BASEDN to search for an LDAP
  master map.  Addresses bz #181834.

Fri Jan 20 2006
Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-172
- Actually apply the cache update fixes.  Addresses bz #173925.
- Add one fix to the patch that was missed from upstream.

Wed Jan 04 2006
Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-170
- Modify the cache update fix to not muck with the ldap module, as that one
  should be okay already.  Also incorporate some innocuous changes from
  upstream.


bash-2.05b-41.7
---------------
Tue May 30 2006
Tim Waugh <twaugh@redhat.com> 2.05b-41.7
- Fixed trap handling, broken by the signal handling patch (bug #192297).

Mon Apr 10 2006
Tim Waugh <twaugh@redhat.com> 2.05b-41.6
- Avoid writing history files during signal handling (bug #163235).
- Fix pipeline disposal race condition (bug #181656).


bind-20:9.2.4-14_EL3
--------------------
Tue Apr 04 2006
Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-14_EL3
- Fix bug 173961: prevent segfault in resolver.c ncache_adderesult
- allow named ability to dump core after setuid()
- rebuild for new U7 glibc, gcc & binutils


booty-0.31.2-1
--------------
Mon May 01 2006
Peter Jones <pjones@redhat.com> 0.31.2-1
- Add "console=tty0" for serial console command line (#146487).

Thu Sep 25 2003
Jeremy Katz <katzj@redhat.com> 
- modernize label for other OS (#71565)


chkconfig-1.3.13.4-0.3
----------------------
Fri Feb 24 2006
Bill Nottingham <notting@redhat.com> 1.3.13.4-0.3
- fix accidental enabling of LSB services on --add (#182987)


compat-db-4.0.14-5.3
--------------------
Wed Feb 15 2006
Tomas Mraz <tmraz@redhat.com> 4.0.14-5.3
- Better fix for the dangling symlink (#145728)

Wed Oct 12 2005
Paul Nasrat <pnasrat@redhat.com> 4.0.14-5.2
- Fix dangling symlink (#145728)


comps-2:3AS-0.20060608
----------------------


control-center-1:2.2.0.1-15.rhel3.5
-----------------------------------
Wed Apr 12 2006
Ray Strode <rstrode@redhat.com> 1:2.2.0.1-15.rhel3.5
- pull improved version of left handed patch from upstream
  (upstream bug 323724)

Wed Aug 31 2005
Ray Strode <rstrode@redhat.com> 1:2.2.0.1-15.rhel3.4
- fix issue with previous patch and wacom tablets

Wed Aug 24 2005
Ray Strode <rstrode@redhat.com> 1:2.2.0.1-15.rhel3.3
- apply left-handed mouse configuration to non-core-pointers (bug 126420)


coreutils-4.5.3-28.1
--------------------
Fri Feb 03 2006
Tim Waugh <twaugh@redhat.com> 4.5.3-28.1
- Back-ported "getgrouplist" patch from RHEL-4 (bug #169464).


crash-4.0-2.29
--------------
Thu May 25 2006
Dave Anderson <anderson@redhat.com> 4.0-2.29
- Updated fix for x86_64 "vm -p" failure w/read error on "pml page".
  BZ #193060

Wed May 24 2006
Dave Anderson <anderson@redhat.com> 4.0-2.27
- Fix for x86_64 "vm -p" failure w/read error on "pml page". 
  BZ #193060

Mon May 01 2006
Dave Anderson <anderson@redhat.com> 4.0-2.24
- Updated crash.patch file to reflect upstream 4.0-2.24 package.
- Search all x86_64 exception stacks for "bt" starting point.
  BZ #178701


curl-7.10.6-8.rhel3
-------------------
Thu Apr 13 2006
Ivana Varekova <varekova@redhat.com> 7.10.6-8.rhel3
- fix bug 170457 - curl doesn't properly expand numeric ranges


diskdumputils-1.3.3-1
---------------------
Mon May 01 2006
Dave Anderson <anderson@redhat.com> 1.3.3-1
Update source package to diskdumputils-1.3.3.tar.gz:
  - Make "/etc/init.d/diskdump checkswapdump" command fail  
    gracefully (quietly) when the swap partition is not configured.
    BZ #190388

Mon May 01 2006
Dave Anderson <anderson@redhat.com> 1.3.0-1
Update source package to diskdumputils-1.3.0.tar.gz:
  - Prevent diskdump startup failure when /usr is NFS mounted
    by moving utilities to /sbin.  BZ #170058
  - Implemented support for using swap partition as a diskdump
    partition.  BZ #182271
  - Introduced a new diskdump-success script to /var/crash/scripts
    directory.  BZ #172860


e2fsprogs-1.32-15.3
-------------------
Mon Apr 24 2006
Thomas Woerner <twoerner@redhat.com> - 1.32-15.3
- added support for 32M directory limit in e2fsck (#162576)
- fixed offline filesystem resizing issue (#144486)

Tue Apr 18 2006
Karel Zak <kzak@redhat.com> - 1.32-15.2
- fix unexpected fsck error message (#185534)


elfutils-0.94.1-2
-----------------
Wed May 24 2006
Roland McGrath <roland@redhat.com> - 0.94.1-2
- Rediff botched patch for robustification fixes.

Sun Apr 16 2006
Roland McGrath <roland@redhat.com> - 0.94.1-1
- Code relicensed under GPLv2.
- Backport more robustification fixes (#159908).
- eu-strip: fix ET_REL debuginfo files (#189114)

Wed Jun 08 2005
Roland McGrath <roland@redhat.com> - 0.94-1.1
- Make robust against integer overflow from bad input (#159908).

Fri Jan 16 2004
Jakub Jelinek <jakub@redhat.com> 0.94-1
- upgrade to 0.94

Fri Jan 16 2004
Jakub Jelinek <jakub@redhat.com> 0.93-1
- upgrade to 0.93


emacs-21.3-4.10
---------------
Thu Apr 06 2006
Chip Coldwell <coldwell@redhat.com> - 21.3-4.10
- fix format function for multibyte chars (Jens Petersen, 187859)


ethereal-0.99.0-EL3.2
---------------------
Tue May 02 2006
Radek Vokál <rvokal@redhat.com> 0.99.0-EL3.2
- add dumpcap

Wed Apr 26 2006
Radek Vokál <rvokal@redhat.com> 0.99.0-EL3.1
- upgrade to 0.99.0
- CVE-2006-1032 Multiple ethereal issues fixed (#18990)


evolution-connector-1.4.7-10
----------------------------
Tue Apr 18 2006
Ray Strode <rstrode@redhat.com> - 1.4.7-10
- Add Dave's Forms-Based Authentication patch to fix
  bug 152618

Tue Mar 01 2005
David Malcolm <dmalcolm@redhat.com> - 1.4.7-7
- Removed preun scriptlet as it uses a gconftool-2 option not supported in RHEL3 version

Mon Feb 28 2005
David Malcolm <dmalcolm@redhat.com> - 1.4.7-6
- Added patch to fix camel-stub marshalling bug on 64-bit architectures (#144817)


file-3.39-9.EL3.4
-----------------
Fri Apr 21 2006
Radek Vokal <rvokal@redhat.com> 3.39-9.EL3.4
- fix magic.mime for audio/x-wav (#146091)
- fix ASCII files vs MSX game cartridge dump (#185446)


freeradius-1.0.1-2.RHEL3.2
--------------------------
Fri Mar 24 2006
Thomas Woerner <twoerner@redhat.com> 1.0.1-2.RHEL3.2
- added two lost fixes from (#167676)

Fri Mar 24 2006
Thomas Woerner <twoerner@redhat.com> 1.0.1-2.RHEL3.1
- CVE-2006-1354: security fixes for EAP-MSCHAPv2 (#186083)
- other security related fixes (#167676)


ftp-0.17-17.2
-------------
Mon Apr 24 2006
Miroslav Lichvar <mlichvar@redhat.com> 0.17-17.2
- fix socket fd leak (#174599)

Tue Dec 07 2004
Thomas Woerner <twoerner@redhat.com> 0.17-17.1
- fixed mget with runique (#79367)


gcc-3.2.3-56
------------
Mon May 22 2006
Jakub Jelinek  <jakub@redhat.com> 3.2.3-56
- add workaround for buggy programs that link in their own unwinder
  and reexport it (#192259)
- make all globals in libgcc_eh.a hidden, so that newly (incorrectly)
  linked programs can't reexport the unwinder

Tue Apr 25 2006
Jakub Jelinek  <jakub@redhat.com> 3.2.3-55
- fix splitting of SSE conditional move patterns (Alexandre Oliva, #173224)
- fix unwinding through signal frames (#187810, PR other/26208, glibc BZ#300)
- fix for C++ overlapping stack temporaries (Ulrich Weigand, #186252, #187909,
  PR middle-end/15054)
- fix crash in zero-initialization of mmx registers (Richard Henderson,
  Alexandre Oliva, #180778)
- report unused parameter warnings even on optimized out functions/methods
  (Alexandre Oliva, Jan Hubicka, #181894)


gdb-6.3.0.0-1.129.EL3
---------------------
Wed May 17 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.129
- Add not-automatically-generated file to fopen64 patch (BZ 191948).

Fri Apr 14 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.128
- Avoid race conditions caused by exceptions messing with signal masks.
(BZ 175270, BZ 175083, maybe BZ 172938).
- Hardcode /bin and /usr/bin paths into gstack (BZ 179829).
- Build in a subdir of the source tree instead of in a sibling directory.
- Switch to versioning scheme that uses the same base revision number
for all OSes, and uses a suffix to tell the builds apart and ensure
upgradability.

Thu Apr 13 2006
Stepan Kasal <skasal@redhat.com>    - 6.3.0.0-1.127
- Bump up release number.

Thu Apr 13 2006
Stepan Kasal <skasal@redhat.com>    - 6.3.0.0-1.123
- Use fopen64 where available.  Fixes BZ 178796.
- Use bigger numbers than int.  Fixes BZ 171783.

Wed Mar 08 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.122
- Bump up release number.

Wed Mar 08 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.119
- Fix regression in PIE debugging (BZ 133944) (re?)introduced by
the prelink fix (BZ 175075).  Improve testcase for the prelink fix.
- Revert dwarf2 frame identifier change.

Tue Mar 07 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.118
- Bump up release number.

Tue Mar 07 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.115
- Change dwarf2 frame identifiers to use the actual PC instead of the
function's entry point.
- Fix FSF and GDB contact addresses in new testcases.
- Do not try to compile x86_64-only CFA testcase on 32-bit x86.
- Change prelink test to issue untested instead of warning message if
system libraries are not prelinked.

Fri Mar 03 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.114
- Bump up release number.

Fri Mar 03 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.111
- Add support for "S" augmentation for signal stack frames.
- Add support for CFA value expressions and encodings.
- Various improvements to the prelink test.

Thu Feb 23 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.110
- Bump up release number.

Thu Feb 23 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.107
- Enable gdb to debug core files and executables with mismatched
prelink base addresses.  Fixes BZ 175075.

Tue Feb 14 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.106
- Bump up release number.

Tue Feb 14 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.103
- Adjust type-punning patch to include fix not needed upstream.

Tue Feb 14 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.102
- Bump up release number.

Tue Feb 14 2006
Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.99
- Use type-punning warning fixes as accepted upstream.

Fri Feb 10 2006
Jesse Keating <jkeating@redhat.com> - 6.3.0.0-1.98.2
- bump again for double-long bug on ppc(64)

Tue Feb 07 2006
Jesse Keating <jkeating@redhat.com> - 6.3.0.0-1.98.1
- rebuilt for new gcc4.1 snapshot and glibc changes

Mon Jan 16 2006
Alexandre Oliva <aoliva@redhat.com>        6.3.0.0-1.98
- Bump up release number.

Mon Dec 19 2005
Alexandre Oliva <aoliva@redhat.com>        6.3.0.0-1.94
- Fix type-punning warnings issued by GCC 4.1.

Fri Dec 16 2005
Jesse Keating <jkeating@redhat.com>
- rebuilt for new gcj


glibc-2.3.2-95.40
-----------------
Fri Apr 28 2006
Jakub Jelinek <jakub@redhat.com> 2.3.2-95.40
- add auto-propagate switch to nscd.conf for passwd and group databases.  When
  set to no, byname requests don't add by[ug]id cache entries and vice versa
  (#177154, IT#85571)
- for nscd hosts database, only cache the request as is, not any other
  names or addresses
- avoid nscd segfault when killed with SIGHUP if one or more databases are
  disabled (#189978, IT#92297)
- assorted NIS+ fixes (#184362, IT#89293)
- add %triggerin for tzdata to glibc-common, so that tzdata updates
  update /etc/localtime and /var/spool/postfix/etc/localtime if they
  exist


gnome-system-monitor-2.0.5-5
----------------------------
Thu Jan 05 2006
Soren Sandmann <sandmann@redhat.com> 2.0.5-5
- Add patch from Bastien Nocera to use 64 bit fields where appropriate.
  Bug 175377.
- Add patch to fix display of empty process names. Bug 144399.


gnupg-1.2.1-15
--------------
Mon Mar 13 2006
Nalin Dahyabhai <nalin@redhat.com> 1.2.1-15
- build assembly modules using CC instead of AS, so that flags such as -DPIC
  will be seen by the preprocessor
- build assembly modules with -Wa,--noexecstack

Mon Mar 13 2006
Nalin Dahyabhai <nalin@redhat.com> 1.2.1-14
- add patch from Werner Koch to error out on ambiguous armored signatures in
  message, with some more bits from Klaus Singvogel to handle argument parsing,
  backported (CVE-2006-0049, #185346)

Thu Mar 02 2006
Nalin Dahyabhai <nalin@redhat.com> 1.2.1-13
- add backport of patch from Werner Koch to fix the exit status when verifying
  signatures when no signature is provided (CVE-2006-0455, #183727)

Wed Feb 01 2006
Nalin Dahyabhai <nalin@redhat.com> 1.2.1-12
- backport fix for signing/encrypting/storing large files from 1.2.5 (#179506)

Wed Sep 07 2005
Nalin Dahyabhai <nalin@redhat.com> 1.2.1-11
- fix creation of ~/.gnupg on first run (#167392)


grep-2.5.1-24.6
---------------
Fri Feb 03 2006
Tim Waugh <twaugh@redhat.com> 2.5.1-24.6
- Prevent 'grep -P' from segfaulting (bug #171379).


groff-1.18.1-28.EL3.3
---------------------
Wed Apr 19 2006
Miroslav Lichvar <mlichvar@redhat.com> 1.18.1-28.EL3.3
- better handle iconv in nroff, add warning for non-utf8 (#88126, #161098)

Thu Jun 16 2005
Jindrich Novy <jnovy@redhat.com> 1.18.1-28.EL3.2
- fix typo in groffer script error message (#160657)
- quote temporary directory name in groffer script

Fri Jun 03 2005
Jindrich Novy <jnovy@redhat.com> 1.18.1-28.EL3.1
- additional fix for CAN-2004-0969 (#136313)

Fri Jun 03 2005
Jindrich Novy <jnovy@redhat.com> 1.18.1-28.EL3
- fix CAN-2004-0969, groffer script temporary file creation vulnerability (#136313)


httpd-2.0.46-57.ent
-------------------
Wed Mar 22 2006
Joe Orton <jorton@redhat.com> 2.0.46-57.ent
- fix unixd_set_proc_mutex_perms for non-sysvsem locks (#186092)


hwdata-0.101.24-1
-----------------
Fri May 26 2006
Karsten Hopp <karsten@redhat.de> 0.101.24-1
- added some monitors to MonitorsDB (#191694)

Tue May 02 2006
Phil Knirsch <pknirsch@redhat.com> - 0.101.23-1
- Updated PCI ids from upstream (#180402)
- Fixed missing monitor entry in MonitorsDB (#189446)


initscripts-7.31.31.EL-1
------------------------
Mon May 01 2006
Miloslav Trmac <mitr@redhat.com> - 7.31.31.EL-1
- Backport HOTPLUG documentation, add a note about bonding devices and hotplug
  (#189505)
- Fix comment and empty line handling in old-style route-* files (#114548)
- Avoid SASL usage in nss_ldap during system halt (#174511,
  <jlayton@redhat.com>)
- Add support for diskdump to swap (#182272, <ktokunag@redhat.com>)


ipsec-tools-0.2.5-0.7.rhel3.4
-----------------------------
Fri Mar 31 2006
Harald Hoyer <harald@redhat.com> 0.2.5-0.7.rhel3.4
- patch to delete certain rules (bug #173511)

Fri Mar 17 2006
Harald Hoyer <harald@redhat.com> 0.2.5-0.7.rhel3.3
- rebuilt

Wed Dec 14 2005
Harald Hoyer <harald@redhat.com> 0.2.5-0.7.rhel3.1
- add patch for DoS (CVE-2005-3732, #173841)


iputils-20020927-11.30.5
------------------------
Tue May 02 2006
Radek Vokál <rvokal@redhat.com> 11.30.5
- add missing rdisc init script (#151614)


iscsi-initiator-utils-3.6.3-4
-----------------------------
Thu Apr 13 2006
Mike Christie <mchristi@redhat.com> 3.6.3-4
- Red Hat BZ 156177 - fix iscsi-ls segfault


kbd-1.08-10.6
-------------
Tue Apr 25 2006
Miloslav Trmac <mitr@redhat.com> - 1.08-10.6
- Add a dummy keytable service to avoid %triggerun failure in 1.08-10.2

Fri Apr 21 2006
Miloslav Trmac <mitr@redhat.com> - 1.08-10.3
- Make the %triggerun script condition more precise, ignore failure of the
  script (#170567)


kernel-2.4.21-43.EL
-------------------
Fri May 12 2006
Ernie Petrides <petrides@redhat.com> kernel-2.4.21-43.EL
- fix e1000 packet-split regression caused in -40.6.EL (Neil Horman)
- fix QLogic symbol regression caused in -40.10.EL (Nobuhiro Tachino)

Fri May 05 2006
Ernie Petrides <petrides@redhat.com> kernel-2.4.21-42.EL
- fix scatterlist loop limit in -41.EL SCSI tape dev fix (Chip Coldwell)
- use configured timeout in LVS connection sync daemon (Andy Gospodarek)
- fix netconsole hang regression in U7 from -37.11.EL fix (Jeff Moyer)
- update SCSI whitelist for new HP tape autoloader devs (Chip Coldwell)
- revert link-watch patch due to -41.EL boot-up hangs (Ernie Petrides)
- update Emulex lpfc storage driver (again) to 7.3.6 (Chip Coldwell)

Tue Apr 25 2006
Ernie Petrides <petrides@redhat.com> kernel-2.4.21-41.EL
- make NFS "intr" option really work as advertised (Steve Dickson)
- resolve IPMI start-up race during module load (Peter Martuccelli)
- prevent SCSI tape device panic when allow_dio=1 (Chip Coldwell)
- fix x86 kernel boot with non-zero-based APIC IDs (Jim Paradis)
- fix bonding failover under heavy UDP traffic (Andy Gospodarek)
- avoid MCAs from accessing /proc/kcore on ia64 (Ernie Petrides)
- add blacklist entries for IBM RSA-II devices (Konrad Rzeszutek)
- update QLogic driver to more recent 7.07.04b6 (Mike Christie)

Mon Apr 24 2006
Ernie Petrides <petrides@redhat.com> kernel-2.4.21-40.10.EL
- prevent reentry into reboot_notifier functions (Ernie Petrides)
- implement diskdump support in QLogic driver (Nobuhiro Tachino)
- fix exec() after ptrace() on thread group leader (Peter Staubach)
- add appropriate locking around MD list traversal (Doug Ledford)
- fix autofs4 ENOENTs for successful replicated mounts (Jeff Moyer)
- fix audit killing of 32-bit-compat cmds on x86_64 (Ernie Petrides)
- correct ppc64 handling of veth removal during init (David Howells)
- fix revalidation of devices with large sector sizes (Jeff Knaggs)

Fri Apr 21 2006
Ernie Petrides <petrides@redhat.com> kernel-2.4.21-40.9.EL
- prevent USB devio oops from async SIGPIPE delivery (Pete Zaitcev)
- update cciss disk driver to version 2.4.60.RH1 (Tom Coughlan)
- update SCSI whitelist for HP, Xyratex devices (Tom Coughlan)
- update Emulex lpfc storage driver to 7.3.5 (Chip Coldwell)
- fix MD size for 1-TB arrays on 64-bit arches (Doug Ledford)
- fix reboot problems on Dell PowerEdge 6400, 6450 (Norm Murray)
- suppress "request_module[net-pf-0]" messages (Ernie Petrides)
- prevent x86/x86_64 FP info leak on AMD cpus (Jim Paradis)

Thu Apr 20 2006
Ernie Petrides <petrides@redhat.com> kernel-2.4.21-40.8.EL
- add vm-defragment sysctl for __alloc_pages() retries (Larry Woodman)
- fix page cache consistency with mmap'ed files over NFS (Jeff Layton)
- fix USB serial driver oopses with device disconnects (Pete Zaitcev)
- update QLogic driver to 7.07.04b4 (w/new firmware) (Mike Christie)
- correct cpu-to-APIC ID mappings with >8 cpus on x86 (Jatin Nansi)
- prevent deadlocks using netfilter ip_queue module (Thomas Graf)
- incorporate Dell's dcdbas driver version 5.6.0-1 (Neil Horman)
- fix Alloc-PE value when lvm_snapshot_alloc() fails (Milan Broz)

Wed Apr 19 2006
Ernie Petrides <petrides@redhat.com> kernel-2.4.21-40.7.EL
- allow IBM x336/x260/x460 to boot without "acpi=noirq" (Konrad Rzeszutek)
- add EM64T "maxdma=X" option to avoid DMA alloc failures (Larry Woodman)
- eliminate spurious GART TLB machine check errors on x86_64 (Jim Paradis)
- fix x86_64 32-bit-compat support for sched_rr_get_interval() (Jim Paradis)
- assign/propagate rlimit_rss for root/multi-threaded tasks (Larry Woodman)
- implement diskdump support in megaraid_sas driver (Nobuhiro Tachino)
- fix anomalous getcwd() result over NFS as root/nobody (Peter Staubach)
- incorporate adp94xx driver version 1.0.8 for 9410 Razor (Konrad Rzeszutek)

Thu Apr 06 2006
Ernie Petrides <petrides@redhat.com> kernel-2.4.21-40.6.EL
- fix x86_64 sigreturn/vsyscall regression from -40.4.EL (Ernie Petrides)
- ensure interrupted NFS lock requests are cleaned up (Steve Dickson)
- avoid double clock intrs with ATI/ServerWorks chipsets (Brian Maly)
- update tg3 network driver to version 3.52RH (John Linville)
- update e1000 network driver to version 7.0.33-k2 (John Linville)
- prevent megaraid2 hang w/extra reboot-notify call (David Milburn)
- add x86_64 32-bit-compat PTRACE_GETEVENTMSG support (Chris Snook)
- eliminate "i8253 count too high!" warnings on Athlons (Brian Maly)

Mon Mar 27 2006
Ernie Petrides <petrides@redhat.com> kernel-2.4.21-40.5.EL
- enable users to perform diskdumps to swap partitions (Kei Tokunaga)
- zero out scatterlist buffer in SCSI st tape driver (Chip Coldwell)
- resolve IPMI driver load issue on HS40 blades (Peter Martuccelli)
- update bnx2 net driver to 1.4.38 with menuconfig fix (John Linville)
- increase USB HCRESET timeout for new HP systems w/iLO2 (Norm Murray)
- copy extra siginfo si_fd value on x86_64/ppc64/s390x (Ernie Petrides)
- prevent zero IP packet ID vulnerability with no firewall (Thomas Graf)
- fix padding info leak w/getsockopt() SO_ORIGINAL_DST opt (Thomas Graf)

Fri Mar 10 2006
Ernie Petrides <petrides@redhat.com> kernel-2.4.21-40.4.EL
- fix O_DIRECT reads of the final partial block of a file (Jeff Moyer)
- prevent reassignment of locks for close-on-exec files (Peter Staubach)
- reconnect USB storage devices to the correct interface (Pete Zaitcev)
- correct IPMI event id for kernel-generated events (Peter Martuccelli)
- fix double faults on EM64Ts from non-canonical RIPs (Ernie Petrides)
- avoid truncated data values following ppc64 sig return (Neil Horman)
- fix netdump operation over Broadcom bnx2 devices (Andy Gospodarek)
- fix ia64 big-endian unaligned access handling (Anil Keshavamurthy)

Thu Feb 23 2006
Ernie Petrides <petrides@redhat.com> kernel-2.4.21-40.3.EL
- update QLogic driver to 7.07.02-RH1 (w/new firmware) (Mike Christie)
- make exported dump_stack() interface useful on x86_64 (Jeff Layton)
- fix 32-bit overflows for BHs/inodes with >4GB memory (Larry Woodman)
- avoid printing SCSI errors for missing removable media (Pete Zaitcev)
- fix memory leak in error path of e1000 loopback test (John Linville)
- fix bonding driver to allow VLAN traffic over bond (John Linville)
- fix bonding driver to let slave use bond's MAC addr (John Linville)
- add support for MCP51/MCP55 in forcedeth driver (Andy Gospodarek)

Fri Feb 17 2006
Ernie Petrides <petrides@redhat.com> kernel-2.4.21-40.2.EL
- prevent syslog-only netdump config from dumping memory (Dave Anderson)
- fix double AIO completion for reads issued during writes (Jeff Moyer)
- add 10 ms TRSTRCY delay to USB hub port reset handling (Pete Zaitcev)
- warn about installs of x86_64 RPMs run on EM64T systems (Eric Paris)
- fix 32-bit overflow in vmap() check with >4GB memory (Larry Woodman)
- prevent /proc/scsi/scsi access oops in dpt_i2o driver (Don Howard)
- correct parsing of "mce=..." boot option on x86_64 (Jim Paradis)
- fix race between unmount and prune_one_dentry() (Dave Anderson)

Wed Feb 15 2006
Ernie Petrides <petrides@redhat.com> kernel-2.4.21-40.1.EL
- (this is the first build for RHEL 3 Update 8)
- fix excessive firmware load times in qla2200 driver (Jeff Layton)
- fix missing bit in ECC syndrome reporting on x86_64 (Jeff Layton)
- correct hang with radeon driver when DRM DRI is active (Don Howard)
- fix mm_struct reference leak in ioctx_alloc() error path (Jeff Moyer)
- fix autofs4 hang due to race between mount/expire events (Jeff Moyer)
- switch IPSEC SAs over properly as recommended by RFC 2408 (Dave Miller)
- avoid NFS deadlocks due to holding multiple pkmap entries (Neil Horman)
- update forcedeth driver to v0.30 w/ethtool additions (Chris Lalancette)


kernel-utils-1:2.4-8.37.15
--------------------------
Thu Apr 20 2006
Dave Jones <davej@redhat.com>
- Update microcode_ctl to 1.13 (new ucode). (#180920)


kinput2-v3.1-12.EL3.1
---------------------
Fri May 26 2006
Akira TAGOH <tagoh@redhat.com> - v3.1-12.EL3.1
- Patches from IBM:
  - kinput2-v3.1-reset-168369.patch: applied to get XmbResetIC() working
    properly with XIMInitialState. (#168369)
- kinput2-v3.1-Xsji3clib-fix-typo.patch: applied a patch from Dave Jones
  to fix a typo.
- kinput2-v3.1-fix-gcc-warning.patch: applied to fix some gcc warnings.


krb5-1.2.7-56
-------------
Mon Apr 24 2006
Nalin Dahyabhai <nalin@redhat.com> 1.2.7-56
- rebuild

Mon Apr 24 2006
Nalin Dahyabhai <nalin@redhat.com> 1.2.7-55
- fix crash due to null file pointer in the ftp client in PORT mode (#99310)

Tue Feb 14 2006
Nalin Dahyabhai <nalin@redhat.com> 1.2.7-54
- revert changes for (#168163)

Mon Jan 23 2006
Nalin Dahyabhai <nalin@redhat.com> 1.2.7-53
- don't cache the default realm across contexts, so that
  krb5_set_default_realm() will actually work as intended (#117214)


kudzu-1.1.22.15-1
-----------------
Tue Apr 18 2006
Bill Nottingham <notting@redhat.com> 1.1.22.15-1
- fix matching by driver (#154510, #140772)


lftp-2.6.3-6
------------
Tue Nov 29 2005
Jason Vas Dias <jvdias@redhat.com> 2.6.3-6
- fix bug 171190: Chdir broken on VMS server


libaio-0.3.96-7
---------------
Thu Apr 27 2006
Jeff Moyer <jmoyer@redhat.com> - 0.3.96-7
- Fix libaio.h so it will compile with c++ compilers.  Fixes bz #189527.


libtiff-3.5.7-25.el3.1
----------------------
Wed Apr 26 2006
Matthias Clasen <mclasen@redhat.com> 
- Fix multiple vulnerabilities (#189933, CVE-2006-2024)

Thu Feb 10 2005
Matthias Clasen <mclasen@redhat.com>
- Use mkstemp instead of mktemp


lockdev-1.0.1-5.1
-----------------
Mon Apr 24 2006
Karel Zak <kzak@redhat.com>  1.0.1-5.1
- fix #149467 - lockdev errs on /dev/input/ttyACM0 (3-component pathname)

Fri Oct 22 2004
Adrian Havill <havill@redhat.com> 1.0.1-5
- don't unlock files if pid still exists (#128104)


logrotate-3.6.9-2.RHEL3
-----------------------
Mon Feb 27 2006
Peter Vrabec <pvrabec@redhat.com> 3.6.9-2.RHEL3
- Fix #168295


logwatch-4.3.2-3.rhel3
----------------------
Fri Apr 21 2006
Ivana Varekova <varekova@redhat.com> 4.3.2-3.rhel3
- fix #187149 - logwatch samba config doesn't account for gzipped log files
- fix #184102 - logwatch script for cron fails when hostname contains hyphen
- change kernel_iptables_host_min_count support patch

Thu Apr 13 2006
Ivana Varekova <varekova@redhat.com> 4.3.2-2.rhel3
- fix #133940 - automount script problems
- fix #167348 - kernel_iptables_host_min_count support
- fix #168469 - up2date script problem


ltrace-0.4-1.4.EL3
------------------
Mon Apr 24 2006
Petr Machata <pmachata@redhat.com> - 0.4-1.4.EL3
- include %{ix86} to ExclusiveArch, instead of mere i386
- Upstream 0.4
  - opt_x patch: New structure for opt_x list elements, now with
    'found'.  Using it in options.c, elf.c.
  - testsuite patch: Automated testsuite for ltrace.
  - svn fix for opt_x patch
  - patches for testsuite for s390{,x}
  - turn off opd translation on ia64, GElf already gives us function
    address.


mailman-3:2.1.5.1-25.rhel3.4
----------------------------
Thu Mar 02 2006
Harald Hoyer <harald@redhat.com> - 3:2.1.5.1-25.rhel3.4
- fixed fix for CVE-2005-3573

Fri Feb 24 2006
Harald Hoyer <harald@redhat.com> - 3:2.1.5.1-25.rhel3.3
- fixed fix for CVE-2005-3573

Tue Feb 21 2006
Harald Hoyer <harald@redhat.com> - 3:2.1.5.1-25.rhel3.2
- removed pseudo virus file from tarball

Mon Dec 12 2005
Harald Hoyer <harald@redhat.com> - 3:2.1.5-25.rhel3.1
- fix for bug #173139 (CVE-2005-3573 Mailman Denial of Service)
- fix for bug #176089 (CVE-2005-4153 Mailman Denial of Service)


man-pages-1.60-5.rhel3
----------------------
Wed Apr 26 2006
Ivana Varekova <varekova@redhat.com> 1.60-5.rhel3
- fix bug 129037 - update nscd.conf man page
- fix bug 144653 - fix host.equiv man page

Wed Jul 20 2005
Ivana Varekova <varekova@redhat.com> 1.60-4.3.rhel3
- fix bug 151042 - sched_setaffinity call description is broken 
- fix bug 150765 - missing resolver.5 manpage


mdadm-1.5.0-9.1
---------------
Thu Mar 09 2006
Doug Ledford <dledford@redhat.com> - 1.5.0-9.1
- Fix a bug in the monitor code that kept mdadm from sending emails on
  failure events properly


net-snmp-5.0.9-2.30E.20
-----------------------
Fri Apr 21 2006
Radek Vokal <rvokal@redhat.com> 5.0.9-2.30E.20
- fix for missing entries in /proc (#183904)
- fix snmpwalk Counter32 wrap problem on 64bit systems (#170659)


netdump-0.7.16-1.1
------------------
Tue May 02 2006
Dave Anderson <anderson@redhat.com> - 0.7.16-1.1
Bumped release to avoid collision with devel branch, and to keep
  it less than RHEL-4 branch.

Tue May 02 2006
Dave Anderson <anderson@redhat.com> - 0.7.16-1
- Add -a/--addr option to allow binding to a specific address.  BZ #171405
- Update README and netdump-server.8 to advise the user that the
  4 script files are run in the foreground, blocking the netdump-server
  from handling any other crash or log requests.  BZ #179457


nfs-utils-1.0.6-44EL
--------------------
Wed May 03 2006
<SteveD@RedHat.com> 1.0.6-44EL
- Added MOUNTD_NFS_V1 variable to version 1 of the
  mount protocol can be turned off (bz 175730)


openmotif-2.2.3-5.RHEL3.7
-------------------------
Tue May 16 2006
Thomas Woerner <twoerner@redhat.com> 2.2.3-5.RHEL3.7
- fixed yet another XmList out of bound access found by John W. Lockhart (qa)

Wed May 10 2006
Thomas Woerner <twoerner@redhat.com> 2.2.3-5.RHEL3.6
- fixed another XmList out of bound access found by John W. Lockhart (qa)

Wed Apr 26 2006
Thomas Woerner <twoerner@redhat.com> 2.2.3-5.RHEL3.5
- fixed bug in OnTheSpot patch, which broke non IIIMF input for TextFields.

Fri Mar 31 2006
Thomas Woerner <twoerner@redhat.com> 2.2.3-5.RHEL3.4
- fixed XmListReplacePositions problem (#180361)
- fixed XmList out of bound accesses (#180356)
- fixed pasting into TextField (#180362)
- fixed update of cursor position of preedit text when input style is OnTheSpot
  (#180355)
- fixed memory leak in XmGetVisibility Function (#187497)
- fixed crash in IconFile if there is a large number of files in home (#144494)

Wed Mar 29 2006
Thomas Woerner <twoerner@redhat.com> 2.2.3-5.RHEL3.3
- fixed CVE-2005-3964: libUil buffer overflows (#180357)


openmotif21-2.1.30-9.RHEL3.8
----------------------------
Fri Apr 28 2006
Thomas Woerner <twoerner@redhat.com> 2.1.30-9.RHEL3.8
- fixed memory leak in XmGetVisibility function (#171053)

Wed Mar 29 2006
Thomas Woerner <twoerner@redhat.com> 2.1.30-9.RHEL3.7
- fixed CVE-2005-3964: libUil buffer overflows (#180359)


openssh-3.6.1p2-33.30.9
-----------------------
Fri Apr 28 2006
Tomas Mraz <tmraz@redhat.com> 3.6.1p2-33.30.9
- return correct status from scp on remote to remote copy (#190155)

Thu Apr 06 2006
Tomas Mraz <tmraz@redhat.com> 3.6.1p2-33.30.8
- corrected a mistake in the last login patch

Thu Apr 06 2006
Tomas Mraz <tmraz@redhat.com> 3.6.1p2-33.30.7
- backported fix for CVE-2003-0386 (DNS reverse mapping should be ignored
  if it looks like IP address) (#164661)
- removed another syslog call from signal handler (#173129)
- stop only the main daemon from the init script (#167866)
- prevent double shell expansion on scp local to local and remote
  to remote copy CVE-2006-0225 (#170463)
- display correctly last login message even for non-root user (#172564)


pam-0.75-69
-----------
Tue May 09 2006
Tomas Mraz <tmraz@redhat.com> 0.75-69
- support large uids in pam_tally (#191031)

Fri Apr 14 2006
Tomas Mraz <tmraz@redhat.com> 0.75-68
- install /etc/security/opasswd (#127524)
- set config file for pam_group correctly (#176651)
- link libpam to all modules (#183363)


pciutils-2.1.10-7.EL3.1
-----------------------
Thu Apr 27 2006
Harald Hoyer <harald@redhat.com> 2.1.10-7.EL3.1
- patch to display secondary status frequency in clear text (bz #171035)
- added update-pciids shell script and manpage (bz #178581)


pdksh-5.2.14-21.5
-----------------
Fri May 19 2006
Karsten Hopp <karsten@redhat.de> 5.2.14-21.5
- fix signal names (#192137)

Tue May 02 2006
Karsten Hopp <karsten@redhat.de> 5.2.14-21.4
- fix commandline prompt in emacs/gemacs modes (#169371)
- don't wait for tty input in non-interactive scripts (#162737)


perl-2:5.8.0-94.EL3
-------------------
Fri May 19 2006
Jason Vas Dias <jvdias@redhat.com> - 2:5.8.0-94.EL3
- fix bug 192140 / upstream bug 38214: 
  B::Deparse failure on assignment with split -
  apply patch contributed by John Fautley<jfautley@redhat.com> of GES

Mon Apr 24 2006
Jason Vas Dias <jvdias@redhat.com> - 2:5.8.0-93.EL3
- fix minor security issue CVE-2003-0618: suidperl could be used to
  reveal locations of files in hidden directories
- fix perl header file generation

Thu Mar 23 2006
Jason Vas Dias <jvdias@redhat.com> - 2:5.8.0-92.0
- fix bug 122278: prevent utf8.c's Perl_swash_init() from changing 
                  active namespace (so now Class::Loader works with 
                  UTF-8 enabled). This should be the last UTF-8 issue!

Wed Mar 22 2006
Jason Vas Dias <jvdias@redhat.com> - 2:5.8.0-91.0
- fix bug 186250: backport undef checks from Encode.pm v2.12 to v1.83

Thu Mar 16 2006
Jason Vas Dias <jvdias@redhat.com> - 2:5.8.0-90.9
- fix bug 185623: files open for append must do lseek(fd,0,SEEK_END)

Tue Mar 14 2006
Jason Vas Dias <jvdias@redhat.com> - 2:5.8.0-90.8
- fix bug 185241: restore ioctl 3rd arg minimum length of 256
- fix bug 84671:  cleanup NDBM removal; restore DBM_Filter* .
- ship perl headers for /usr/include/asm/ (required by most other headers)

Fri Jan 27 2006
Jason Vas Dias <jvdias@redhat.com> - 2:5.8.0-90.6
- fix bug 179139: fix waitpid() when interrupted by signal


perl-DBD-MySQL-2.1021-4.EL3
---------------------------
Fri Mar 17 2006
Jason Vas Dias <jvdias@redhat.com>
- Fix bug 112904: 
  Only turn ssl on if /usr/include/mysql/my_config* contains '#define HAVE_OPENSSL 1'
  (currently, SSL is NOT enabled in RHEL-3 mysql-3.23.58-16.RHEL3.1). 
  If DBD::mysql enables ssl when mysql does not, then DBD::mysql will contain
  unresolved symbol references under PERL_DL_NONLAZY=1.


perl-XML-Parser-2.31-16.EL3
---------------------------
Thu Jan 12 2006
Jason Vas Dias <jvdias@redhat.com>
- fix bug 142972: backport memory leak fix from 2.34


php-4.3.2-30.ent
----------------
Wed Apr 12 2006
Joe Orton <jorton@redhat.com> 4.3.2-30.ent
- imap: add fix for overflow in imap_fetch_overview() (#174999)

Tue Apr 11 2006
Joe Orton <jorton@redhat.com> 4.3.2-29.ent
- add security fix for new phpinfo() XSS (CVE-2006-0996, #187510)

Mon Apr 03 2006
Joe Orton <jorton@redhat.com> 4.3.2-28.ent
- add security fixes from upstream:
 * XSS issues in "html_errors" mode (CVE-2006-0208, #178028)
 * mbstring header validation (CVE-2005-3883, #174463)
 * binary safeness in html_decode (CVE-2006-1490, #187230)
- rebuild to pick up uw-imap client security fix (CVE-2005-2933, #174528)
- add PEAR DB autoExecute fix (Christian Rose, #163490)
- revert parse_str fix (#173142)

Fri Nov 25 2005
Joe Orton <jorton@redhat.com> 4.3.2-27.ent
- fix parse_str regresssion (#173142)


procps-2.0.17-13.9
------------------
Wed Feb 08 2006
Karel Zak <kzak@redhat.com> 2.0.17-13.9
- fix #167802 - top process time reporting problem
- fix #177453 - top (size) vs. ps (vsize) vs. /proc/$pid/status (VmSize)

Tue Jul 19 2005
Karel Zak <kzak@redhat.com> 2.0.17-13.8
- fix #155883 - RHEL3: slabtop calculation overflow


psmisc-21.3-2.1
---------------
Fri Apr 21 2006
Karel Zak <kzak@redhat.com> 21.3-2.1
- fix #174585 - killall crashes on long variable name
- fix #170382 - buffer overflow detected in fuser


pvm-3.4.5-6_EL3
---------------
Tue May 31 2005
Jason Vas Dias<jvdias@redhat.com> 3.4.5-4
- fix bug 158303: x86_64 build needs -fPIC
- fix bug 155785: PVM_ARCH should be LINUX on i386, not LINUXI386
                  add LINUXPPC64 arch to pvmgetarch

Tue Mar 08 2005
Jason Vas Dias<jvdias@redhat.com> 3.4.5-3_FC4
- GCC4 build: fix forward declaration of Pvmtevdid (globals.h)

Fri Feb 25 2005
Jason Vas Dias<jvdias@redhat.com> 3.4.5-2_FC4
- Fix bug 147337 - invalid format string in pvmlog.c
- make version compare > that of FC3

Wed Feb 02 2005
Jason Vas Dias<jvdias@redhat.com> 3.4.5-1
- Upgrade to upstream version 3.4.5 (bug 143156).


python-2.2.3-6.3
----------------
Mon May 01 2006
Mihai Ibanescu <misa@redhat.com> 2.2.3-6.3
- Fixed bug #185352 (get_python_lib on RHEL3 64-bit always returns
  plat-specific path) - thanks to Joshua Jensen and Dag Wieers for their
  feedback.

Mon Feb 06 2006
Mihai Ibanescu <misa@redhat.com> 2.2.3-6.2
- Fixed bug #166335, CVE-2005-2491 - PCRE heap overflow


quota-1:3.10-8
--------------
Thu Oct 13 2005
Steve Dickson <steved@redhat.com> 3.10-8
- 158599 - rquotad doesn't handle -p option correctly.


rdist-1:6.1.5-35.30.3
---------------------
Wed Apr 26 2006
Phil Knirsch <pknirsch@redhat.com> 6.1.5-35.30.3
- Fixed recompile errors on IA64 (#180774)


redhat-config-users-1.1.18-8
----------------------------
Thu Feb 16 2006
Nils Philippsen <nphilipp@redhat.com> 1.1.18-8
- show properties of non shadow accounts (#168524, patch by Joseph Whiter)


redhat-release-3AS-13.8.0
-------------------------


redhat-rpm-config-8.0.28-4
--------------------------
Wed Apr 19 2006
Dennis Gregorovic <dgregor@redhat.com> - 8.0.28-4
- refactored to apply patches in prep stage

Tue Apr 18 2006
Dennis Gregorovic <dgregor@redhat.com> - 8.0.28-3
- Added redhat-rpm-config-macros.strip.patch (bz #189118)


rh-postgresql-7.3.15-2
----------------------
Mon May 22 2006
Tom Lane <tgl@redhat.com> 7.3.15-2
- Respin with non-fuzzy patch to get rid of ".orig" files sneaking into
  the package

Mon May 22 2006
Tom Lane <tgl@redhat.com> 7.3.15-1
- Update to PostgreSQL 7.3.15 (includes fixes for CVE-2006-2313, CVE-2006-2314,
  CVE-2006-0553, CVE-2006-0591; see bugs #192171, 181836); also various
  data-loss-grade bugs


rhn-applet-2.1.25-15
--------------------
Tue May 02 2006
Robin Norwood <rnorwood@redhat.com> - 2.1.26-1
- bugzilla: 182211 - check for kernel in the right location for ia64 boxes.

Tue May 02 2006
Robin Norwood <rnorwood@redhat.com> - 2.1.25-1
- bugzilla: 180268 - Properly verify the config file.


rhnlib-1.8.7-3
--------------
Tue May 02 2006
Bret McMillan <bretm@redhat.com> 1.8.7-1
- bz #175153, better support for HTTP redirects


rp-pppoe-3.5-4.2
----------------
Sun Jan 23 2005
Than Ngo <than@redhat.com> 3.5-4.2
- use iptables instead ipchains #128877, #145254
- fix adsl connect for using MTU/MRU #135012


rpm-4.2.3-30_nonptl
-------------------
Mon Apr 10 2006
Paul Nasrat <pnasrat@redhat.com> - 4.2.3-30_nonptl
- Enable ignoresize on erasures (#172897)

Mon Apr 10 2006
Paul Nasrat <pnasrat@redhat.com> - 4.2.3-29_nonptl
- Add obsoletes to man page (#139759)

Thu Apr 06 2006
Paul Nasrat <pnasrat@redhat.com> - 4.2.3-28_nonptl
- Fix cli handling of ia32e (#167858)

Thu Apr 06 2006
Paul Nasrat <pnasrat@redhat.com> - 4.2.3-27_nonptl
- Close scriptlet fd (#147717)

Thu Apr 06 2006
Paul Nasrat <pnasrat@redhat.com> - 4.2.3-26_nonptl
- Fix scriptlet deadlock (#185322, #146549)

Mon Sep 19 2005
Jeremy Katz <katzj@redhat.com> - 4.2.3-25_nonptl
- ppc inline asm causes segfault  (#168708)


rpmdb-redhat-3-0.20060608
-------------------------


rsh-0.17-17.7
-------------
Thu Feb 09 2006
Karel Zak <kzak@redhat.com> 0.17-17.7
- fix #174146 - RHEL3: pam_access.so does not work with rexec for IP/hostname restriction
- fix #174363 - RHEL3: rcp outputs negative file size when over 2GB
- fix #177943 - RHEL3: Option (-D) to disable ip/hostname mismatch checking for rshd
- fix #178916 - Line feeds when password needs changing with rlogin


samba-0:3.0.9-1.3E.9
--------------------
Mon Apr 17 2006
Jay Fenlason <fenlason@redhat.com> 0:3.0.9-1.3E.9
- Include the -recycle patch to close
  bz#169865 utime fails when group member moves file to the recycle bin

Mon Apr 10 2006
Jay Fenlason <fenlason@redhat.com> 0:3.0.9-1.3E.8
- Include the unbreak-v2-quota-support patch from Bastien Nocera
  <bnocera@redhat.com> to close
  bz#179103 v2 quota support is broken
- Include newer crc32.c to close
  bz#172800 New, improved and open source friendly crc32.c


sed-4.0.7-8.EL3
---------------
Fri Apr 14 2006
Petr Machata <pmachata@redhat.com> - 4.0.7-8.EL3
- Enable escape sequences for 'y' option. (#187574)

Fri Apr 14 2006
Petr Machata <pmachata@redhat.com> - 4.0.7-6.EL3
- Prevent sed from segfaulting with -i on readonly directory (patch by
  Jakub Jelinek) (#169193)

Thu Apr 13 2006
Petr Machata <pmachata@redhat.com> - 4.0.7-5.EL3
- Introduce naming scheme consistent with other packages.

Wed Apr 05 2006
Petr Machata <pmachata@redhat.com> - 4.0.7-4
- #185374:
  - Add checked variants of filesystem functions (ported from 4.1.4)
  - Follow symlinks before rename (avoid symlink overwrite)
  - Add -c flag for copy instead of rename (avoid ownership change)


sendmail-8.12.11-4.RHEL3.4
--------------------------
Mon Mar 20 2006
Thomas Woerner <twoerner@redhat.com> 8.12.11-4.RHEL3.4
- fixed another time_t timeout problem in the VU patch in usersmtp.c

Sat Mar 18 2006
Thomas Woerner <twoerner@redhat.com> 8.12.11-4.RHEL3.3
- fixed adaption failure in VU#834865

Fri Mar 10 2006
Thomas Woerner <twoerner@redhat.com> 8.12.11-4.RHEL3.2
- fixed VU#834865 (#184465)

Fri May 13 2005
Thomas Woerner <twoerner@redhat.com> 8.12.11-4.RHEL3.1.1
- enabled _FFR_DEAL_WITH_ERROR_SSL to stop read error messages on saturated
  networks (#146635), thanks to Kevin Krafthefer for the hint


squid-7:2.5.STABLE3-6.3E.18
---------------------------
Tue Apr 11 2006
Martin Stransky <stransky@redhat.com> 7:2.5.STABLE3-6.3E.18
- fix for #181825 - redirector 302 redirects not working for CONNECT method
- fix for #72896  - squid does not support >1024 file descriptors


squirrelmail-1.4.6-5.el3
------------------------
Tue Apr 04 2006
Warren Togami <wtogami@redhat.com> 1.4.6-5
- Fix Chinese and Korean too

Fri Mar 24 2006
Warren Togami <wtogami@redhat.com> 1.4.6-4
- Fix outgoing Japanese mail to iso-2022-jp for now (#185767)

Fri Mar 03 2006
Warren Togami <wtogami@redhat.com> 1.4.6-3
- Fix regex in doc mangling (#183943 Michal Jaegermann)

Fri Mar 03 2006
David Woodhouse <dwmw2@redhat.com> 1.4.6-2
- Add a %build section, move the file mangling to it.
  (#162852 Nicolas Mailhot)

Wed Mar 01 2006
David Woodhouse <dwmw2@redhat.com> 1.4.6-1
- Upgrade to 1.4.6 proper for CVE-2006-0377 CVE-2006-0195 CVE-2006-0188
- Script the charset changes instead of using a patch
- Convert the ko_KR files to UTF-8, dropping invalid characters from
  what's theoretically supposed to be EUC-KR in the original.

Tue Jan 17 2006
Warren Togami <wtogami@redhat.com> 1.4.6-0.cvs20050812.3
- do not remove mo files
- require php-mbstring

Fri Dec 09 2005
Jesse Keating <jkeating@redhat.com>
- rebuilt

Mon Sep 12 2005
David Woodhouse <dwmw2@redhat.com> 1.4.6-0.cvs20050812.2
- Convert all locales to UTF-8 instead of legacy character sets to
  work around bug #162852. Except for ko_KR, because iconv doesn't
  believe its help files are actually in EUC-KR as claimed.

Sun Aug 14 2005
Warren Togami <wtogami@redhat.com> 1.4.6-0.cvs20050812.1
- snapshot of 1.4.6 because 1.4.5 upstream was a bad release
  this hopefully will also work on PHP5 too...


strace-4.5.14-0.EL3.1
---------------------
Tue May 23 2006
Stepan Kasal <skasal@redhat.com>    - 4.5.14-0.EL3.1
- Fix a regression introduced by the rlimit32 patch.

Fri Apr 21 2006
Stepan Kasal <skasal@redhat.com>    - 4.5.14-0.EL3
- new upstream version
- Note: this version fixes decoding subcalls (#174354).
- Note: it also implements qual_flags support for each personality (#173986).
- Interpret struct rlimit according to personality on x86-64 (#171394).


sysreport-1.3.7.2-15
--------------------
Tue Apr 18 2006
Than Ngo <than@redhat.com> 1.3.7.2-15
- fix syntax error

Mon Apr 10 2006
Than Ngo <than@redhat.com> 1.3.7.2-14
- collect /etc/securetty #177653
- add flag to collect dmidecode output #183274


tcsh-6.12-13.EL3
----------------
Wed Feb 15 2006
Miloslav Trmac <mitr@redhat.com> - 6.12-13.EL3
- Report meaningful $HOSTTYPE and $MACHTYPE on ia64, ppc64, s390, s390x and
  x86_64 (#115531)

Wed Feb 01 2006
Miloslav Trmac <mitr@redhat.com> - 6.12-12.EL3
- Rebuild with newer compiler to fix #169792


tftp-0.39-0.EL3.4
-----------------
Mon Apr 10 2006
Radek Vokal <rvokal@redhat.com> - 0.39-0.EL3.4
- tftp-server logs in localtime (#172274)

Tue Jul 19 2005
Radek Vokal <rvokal@redhat.com> - 0.39-0.EL3.3
- rebuilt

Wed Dec 22 2004
Radek Vokal <rvokal@redhat.com> - 0.39-0.EL3.2
- tftp-server doesn't reject valid /etc/tftpd/rules format (#143536)


tzdata-2006a-2.EL3.1
--------------------
Wed Mar 29 2006
Petr Machata <pmachata@redhat.com> - 2006a-2.EL3.1
- Bump release for rebuild.

Fri Mar 17 2006
Petr Machata <pmachata@redhat.com> - 2006a-2.EL3
- Sri Lanka changes time zone to GMT+5:30 starting 13/4/06 (#184514)
- Changing name of base file.  It makes no sense to change the name
  for each release, but we need to change contents occassionally.


up2date-4.4.69-10
-----------------
Mon May 08 2006
James Bowes <jbowes@redhat.com> 4.4.69-6
- bump required version of rhnlib for pkg/iso redirect.

Tue May 02 2006
James Bowes <jbowes@redhat.com> 4.4.69-3
- fix for #87837, inaccurate error message when missing '-f' for kernel updates
- fix for #125049, misleading usage message: "Please specify either -l, -u, ...
- fix for #126528, up2date +get source fails if no source available
- fix for #168312, up2date config file is not ignored in rpm -V
- fix for #171057, CRM# 696030 repomd error after up2date
- fix for #171643, repomd error after up2date
- fix for #s 179896, 179898  rpm verify fails due to config files in .spec not marked ...

Mon Apr 24 2006
Bret McMillan <bretm@redhat.com> 4.4.69-1
- fix for #178498, #176123 -- make --channel limit the channel universes for various operations
- fix for #162106, RHN 'sync packages to system' installing i386 glibc on i686
- fix for #175593, up2date --whatprovides doesn't handle compat arch provides

Wed Feb 01 2006
Adrian Likins <alikins@redhat.com> 4.4.6800000000000eleventybillion
- gratuitous version rev to test up2date of up2date

Tue Jan 31 2006
Bret McMillan <bretm@redhat.com> 4.4.67-4
- fix release tag


util-linux-2.11y-31.17
----------------------
Thu May 25 2006
Karel Zak <kzak@redhat.com> 2.11y-31.17
- rebuild

Tue May 02 2006
Steve Dickson <steved@redhat.com> 2.11y-31.16
- fix #174185 NFS mount version does not drop back to v2 when v3
         is not available

Fri Apr 28 2006
Karel Zak <kzak@redhat.com> 2.11y-31.15
- fix #170378 - /usr/bin/floppy doesn't work with /dev/fd0
- fix #170379 - losetup (and mount -o loop) wrap at 2GB
- fix #170380 - login will attempt to run if it has no read/write access to its terminal
- fix #170381 - login's timeout can fail - needs to call siginterrupt(SIGALRM,1)
- fix #176290 - raw(8) manpage has old information about dd
- fix #177449 - /bin/login always invokes pam_start with "login" PAM service
- fix #185305 - Correct mount documentation (--bind vs. -o)
- fix #188488 - "sfdisk -l" tries to open partitions
- fix #188982 - mount man page clarifications
- fix #177969 - add support for labels in swap partitions (P2)

Mon Jan 30 2006
Steve Dickson <steved@redhat.com> 2.11y-31.14
- fix #177953 Maded the retry option govern forground mounts like 
              it does with background mounts, in accordance to 
              the man page.

Wed Oct 19 2005
Steve Dickson <steved@redhat.com> 2.11y-31.13
- fix #187113 Changed nfsmount to first try the UDP transport when
              querying the remote rpc.mountd, then tcp iff tcp is
              specified. This tremendously increases the total number
              of tcp mounts that can occur. (see also #170714)

Fri Oct 07 2005
Steve Dickson <steved@redhat.com> 2.11y-31.12
- fix #139355 Documentation for 'rsize' and 'wsize' NFS mount 
              options is misleading


vixie-cron-4.1-11.EL3
---------------------
Thu Mar 16 2006
Jason Vas Dias <jvdias@redhat.com> - 4.1-11.EL3
- remove unecessary 'session optional pam_krb5.so' from /etc/pam.d/crond


vsftpd-1.2.1-3E.6
-----------------
Fri Feb 24 2006
Radek Vokal <rvokal@redhat.com> 1.2.1-3E.6
- rebuilt

Fri Feb 24 2006
Radek Vokal <rvokal@redhat.com> 1.2.1-3E.5
- fix file corruption with simultaneous uploads (#162511)

Mon Feb 07 2005
Radek Vokal <rvokal@redhat.com> 1.2.1-3E.4
- don't allow reading non-root config files (#145548)

Wed Dec 08 2004
Radek Vokal <rvokal@redhat.com> 1.2.1-3E.2
- increased maximum lenght of username (#139803)


xinitrc-3.32.2-1
----------------
Fri May 05 2006
Mike A. Harris <mharris@redhat.com> 3.32.2-1
- Fix same problem in Xclients script as was fixed in xinput script (#163638)

Sat Sep 24 2005
Mike A. Harris <mharris@redhat.com> 3.32.1-1
- Fix input method selection for KDE environments to enable Korean input
  method to work properly.  (#163638)


xscreensaver-1:4.10-20
----------------------
Tue May 16 2006
Ray Strode <rstrode@redhat.com> 1:4.10-20
- fix typos in temp file patch, found by Radek Biba
  <rbiba@redhat.com> 
- fix one more problem found by Radek Biba
  <rbiba@redhat.com> in the temp files patch

Tue Apr 11 2006
Ray Strode <rstrode@redhat.com> 1:4.10-19
- don't allow the screensaver to lock if xscreensaver can't
  acquire a keyboard grab. CVE-2004-2655. Bug 188149

Wed Feb 22 2006
Ray Strode <rstrode@redhat.com> 1:4.10-18
- fix temp file names to be to non-predicatable (bug 182286)


xterm-179-6.EL3
---------------
Tue Nov 29 2005
Jason Vas Dias <jvdias@redhat.com>
- fix bug 159358: don't write double utmp entry

Wed Jun 22 2005
Mike A. Harris <mharris@redhat.com> 179-5.EL.1
- Added xterm-179-fix-simultaneous-into-and-e-options-bug124518.patch to
  fix problem when -into and -e are used simultaneously.  (#124518)


ypserv-2.8-21
-------------
Sat Mar 18 2006
Steve Dickson <steved@redhat.com> 2.8-21
- Fixed typo in ypserv-ypxfrd.init (bz 185402)

Mon Mar 13 2006
Chris Feist <cfeist@redhat.com> 2.8-20
- Fixed an issue with ypserv dns lookups on 64 bit archs. (bz #185331)
- Fixed a potential issue with calling syslog from a signal handler.
  (bz #185334)