<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="3706">
<package pkgid="54e2417d667b3b2ef2ebef37c32145757be7b7bd" name="ImageMagick" arch="i386">
  <version epoch="0" ver="6.2.8.0" rel="12.el5"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-10.el5" date="1315519200">Fix memory allocation failure when using color option (616538)
  Fix hang when converting broken GIF (693989)
  Fix conversion of rotated landscape PDF (694922)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-11.el5" date="1315864800">Fix assertion failed when using "identify -verbose" when there's no
  image information available (502626)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-12.el5" date="1323813600">- Add fix for CVE-2010-4167 (767142)</changelog>
</package>
<package pkgid="ec46325c95cb7b6f2c32846ffae230ce207cc214" name="ImageMagick" arch="i386">
  <version epoch="0" ver="6.2.8.0" rel="15.el5_8"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-13.el5" date="1331762400">- Fix PostScript conversion failing with /undefinedfilename (797364)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-14.el5" date="1333749600">- Add fix for CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186
- Add fix for CVE-2012-0259 CVE-2012-0260 CVE-2012-1798</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-15.el5" date="1335391200">- Fix for PostScript conversion was incomplete, as larger documents
  would end up being cropped without the "-g" option (797364)</changelog>
</package>
<package pkgid="fc054e0da709be38dba91c2eb2eb1808e4ebb7cd" name="ImageMagick-c++" arch="i386">
  <version epoch="0" ver="6.2.8.0" rel="12.el5"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-10.el5" date="1315519200">Fix memory allocation failure when using color option (616538)
  Fix hang when converting broken GIF (693989)
  Fix conversion of rotated landscape PDF (694922)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-11.el5" date="1315864800">Fix assertion failed when using "identify -verbose" when there's no
  image information available (502626)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-12.el5" date="1323813600">- Add fix for CVE-2010-4167 (767142)</changelog>
</package>
<package pkgid="5769cdf30198fd7fd94b6f228fceb8c75567692c" name="ImageMagick-c++" arch="i386">
  <version epoch="0" ver="6.2.8.0" rel="15.el5_8"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-13.el5" date="1331762400">- Fix PostScript conversion failing with /undefinedfilename (797364)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-14.el5" date="1333749600">- Add fix for CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186
- Add fix for CVE-2012-0259 CVE-2012-0260 CVE-2012-1798</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-15.el5" date="1335391200">- Fix for PostScript conversion was incomplete, as larger documents
  would end up being cropped without the "-g" option (797364)</changelog>
</package>
<package pkgid="c86ad888f3c9a23dcb7d1a7619ad02e63eb2d937" name="ImageMagick-c++-devel" arch="i386">
  <version epoch="0" ver="6.2.8.0" rel="12.el5"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-10.el5" date="1315519200">Fix memory allocation failure when using color option (616538)
  Fix hang when converting broken GIF (693989)
  Fix conversion of rotated landscape PDF (694922)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-11.el5" date="1315864800">Fix assertion failed when using "identify -verbose" when there's no
  image information available (502626)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-12.el5" date="1323813600">- Add fix for CVE-2010-4167 (767142)</changelog>
</package>
<package pkgid="2c579e05951d28c6a44e330829c4e6ddc63eeeda" name="ImageMagick-c++-devel" arch="i386">
  <version epoch="0" ver="6.2.8.0" rel="15.el5_8"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-13.el5" date="1331762400">- Fix PostScript conversion failing with /undefinedfilename (797364)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-14.el5" date="1333749600">- Add fix for CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186
- Add fix for CVE-2012-0259 CVE-2012-0260 CVE-2012-1798</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-15.el5" date="1335391200">- Fix for PostScript conversion was incomplete, as larger documents
  would end up being cropped without the "-g" option (797364)</changelog>
</package>
<package pkgid="deefffafe765a2aaff1ca0ca2d97c5ea1bf5f717" name="ImageMagick-devel" arch="i386">
  <version epoch="0" ver="6.2.8.0" rel="12.el5"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-10.el5" date="1315519200">Fix memory allocation failure when using color option (616538)
  Fix hang when converting broken GIF (693989)
  Fix conversion of rotated landscape PDF (694922)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-11.el5" date="1315864800">Fix assertion failed when using "identify -verbose" when there's no
  image information available (502626)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-12.el5" date="1323813600">- Add fix for CVE-2010-4167 (767142)</changelog>
</package>
<package pkgid="6c9a8e470c9a518764ae04d8e7d51b6de24921a2" name="ImageMagick-devel" arch="i386">
  <version epoch="0" ver="6.2.8.0" rel="15.el5_8"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-13.el5" date="1331762400">- Fix PostScript conversion failing with /undefinedfilename (797364)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-14.el5" date="1333749600">- Add fix for CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186
- Add fix for CVE-2012-0259 CVE-2012-0260 CVE-2012-1798</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-15.el5" date="1335391200">- Fix for PostScript conversion was incomplete, as larger documents
  would end up being cropped without the "-g" option (797364)</changelog>
</package>
<package pkgid="94916ef644680a4731558dd1fa67ff1b34a0741a" name="ImageMagick-perl" arch="i386">
  <version epoch="0" ver="6.2.8.0" rel="12.el5"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-10.el5" date="1315519200">Fix memory allocation failure when using color option (616538)
  Fix hang when converting broken GIF (693989)
  Fix conversion of rotated landscape PDF (694922)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-11.el5" date="1315864800">Fix assertion failed when using "identify -verbose" when there's no
  image information available (502626)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-12.el5" date="1323813600">- Add fix for CVE-2010-4167 (767142)</changelog>
</package>
<package pkgid="f4bc11ff0fb2a757e812dc514c77a1052eee1cab" name="ImageMagick-perl" arch="i386">
  <version epoch="0" ver="6.2.8.0" rel="15.el5_8"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-13.el5" date="1331762400">- Fix PostScript conversion failing with /undefinedfilename (797364)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-14.el5" date="1333749600">- Add fix for CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186
- Add fix for CVE-2012-0259 CVE-2012-0260 CVE-2012-1798</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 6.2.8.0-15.el5" date="1335391200">- Fix for PostScript conversion was incomplete, as larger documents
  would end up being cropped without the "-g" option (797364)</changelog>
</package>
<package pkgid="86fac883df4ae45e1300740d773e3ca81f93da3f" name="OpenIPMI" arch="i386">
  <version epoch="0" ver="2.0.16" rel="16.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-14.el5" date="1340748000">- ipmitool: fixed wrong permissions on ipmievd.pid (#834190)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-15.el5" date="1346709600">- ipmitool: added -b, -B, -l and -T options to ipmitool man page
  (#846596)
- ipmitool: fixed man page documentation for delloem setled command
  (#797050)</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 2.0.16-16.el5" date="1350424800">- ipmitool: fix ipmi command retry shifts replies (#863310)</changelog>
</package>
<package pkgid="4b4e55b4d87ef9140d9f0f8ff9b6ad2902ccb62d" name="OpenIPMI-devel" arch="i386">
  <version epoch="0" ver="2.0.16" rel="16.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-14.el5" date="1340748000">- ipmitool: fixed wrong permissions on ipmievd.pid (#834190)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-15.el5" date="1346709600">- ipmitool: added -b, -B, -l and -T options to ipmitool man page
  (#846596)
- ipmitool: fixed man page documentation for delloem setled command
  (#797050)</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 2.0.16-16.el5" date="1350424800">- ipmitool: fix ipmi command retry shifts replies (#863310)</changelog>
</package>
<package pkgid="408eeb85d8c5d90deafcc62f93ea3ad55e7e85e5" name="OpenIPMI-gui" arch="i386">
  <version epoch="0" ver="2.0.16" rel="16.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-14.el5" date="1340748000">- ipmitool: fixed wrong permissions on ipmievd.pid (#834190)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-15.el5" date="1346709600">- ipmitool: added -b, -B, -l and -T options to ipmitool man page
  (#846596)
- ipmitool: fixed man page documentation for delloem setled command
  (#797050)</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 2.0.16-16.el5" date="1350424800">- ipmitool: fix ipmi command retry shifts replies (#863310)</changelog>
</package>
<package pkgid="4466cba0e6d6d077bbe39c927ff5a4579021924b" name="OpenIPMI-libs" arch="i386">
  <version epoch="0" ver="2.0.16" rel="16.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-14.el5" date="1340748000">- ipmitool: fixed wrong permissions on ipmievd.pid (#834190)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-15.el5" date="1346709600">- ipmitool: added -b, -B, -l and -T options to ipmitool man page
  (#846596)
- ipmitool: fixed man page documentation for delloem setled command
  (#797050)</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 2.0.16-16.el5" date="1350424800">- ipmitool: fix ipmi command retry shifts replies (#863310)</changelog>
</package>
<package pkgid="3367cd8043dea16b41ce2962c79e1153bdda239c" name="OpenIPMI-perl" arch="i386">
  <version epoch="0" ver="2.0.16" rel="16.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-14.el5" date="1340748000">- ipmitool: fixed wrong permissions on ipmievd.pid (#834190)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-15.el5" date="1346709600">- ipmitool: added -b, -B, -l and -T options to ipmitool man page
  (#846596)
- ipmitool: fixed man page documentation for delloem setled command
  (#797050)</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 2.0.16-16.el5" date="1350424800">- ipmitool: fix ipmi command retry shifts replies (#863310)</changelog>
</package>
<package pkgid="ba58fad7e0957c0e691b675dc4181c87d34ae417" name="OpenIPMI-python" arch="i386">
  <version epoch="0" ver="2.0.16" rel="16.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-14.el5" date="1340748000">- ipmitool: fixed wrong permissions on ipmievd.pid (#834190)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-15.el5" date="1346709600">- ipmitool: added -b, -B, -l and -T options to ipmitool man page
  (#846596)
- ipmitool: fixed man page documentation for delloem setled command
  (#797050)</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 2.0.16-16.el5" date="1350424800">- ipmitool: fix ipmi command retry shifts replies (#863310)</changelog>
</package>
<package pkgid="4f59e15ae8a04648ebe732b2577639201d9282d2" name="OpenIPMI-tools" arch="i386">
  <version epoch="0" ver="2.0.16" rel="16.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-14.el5" date="1340748000">- ipmitool: fixed wrong permissions on ipmievd.pid (#834190)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 2.0.16-15.el5" date="1346709600">- ipmitool: added -b, -B, -l and -T options to ipmitool man page
  (#846596)
- ipmitool: fixed man page documentation for delloem setled command
  (#797050)</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 2.0.16-16.el5" date="1350424800">- ipmitool: fix ipmi command retry shifts replies (#863310)</changelog>
</package>
<package pkgid="db70bc3fc147a747f281aa9342c682a6d00c8dc6" name="apr" arch="i386">
  <version epoch="0" ver="1.2.7" rel="11.el5_6.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.2.7-11.3" date="1288303200">- clear errno in apr_strtoi64 (#647121)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.2.7-11.4" date="1305064800">- fix recursion in apr_fnmatch() (CVE-2011-0419, #703518)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.2.7-11.5" date="1305928800">- fix apr_fnmatch() regressions (CVE-2011-1928, #706351)</changelog>
</package>
<package pkgid="5ffa6bfd53533d36ab71bdaac44fb39641d8211a" name="apr-devel" arch="i386">
  <version epoch="0" ver="1.2.7" rel="11.el5_6.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.2.7-11.3" date="1288303200">- clear errno in apr_strtoi64 (#647121)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.2.7-11.4" date="1305064800">- fix recursion in apr_fnmatch() (CVE-2011-0419, #703518)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.2.7-11.5" date="1305928800">- fix apr_fnmatch() regressions (CVE-2011-1928, #706351)</changelog>
</package>
<package pkgid="1df89f96a804d5dc004ff1febc7f88327d98cbc5" name="apr-docs" arch="i386">
  <version epoch="0" ver="1.2.7" rel="11.el5_6.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.2.7-11.3" date="1288303200">- clear errno in apr_strtoi64 (#647121)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.2.7-11.4" date="1305064800">- fix recursion in apr_fnmatch() (CVE-2011-0419, #703518)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.2.7-11.5" date="1305928800">- fix apr_fnmatch() regressions (CVE-2011-1928, #706351)</changelog>
</package>
<package pkgid="73bbc7fe9c0126ec950110ba510552cb00190a09" name="authconfig" arch="i386">
  <version epoch="0" ver="5.3.21" rel="7.el5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 5.3.21-5" date="1225490400">- fix regression in MD5 checkbox in authconfig-tui (#468392)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 5.3.21-6" date="1239919200">- fix path to nscd pid file (#471642)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 5.3.21-7" date="1300831200">- add command line options to enable SSSD in nsswitch.conf
  and pam configuration (#629021)</changelog>
</package>
<package pkgid="b7098d7003a6b3c3167b4fe3f6e7c33a71ff10f5" name="authconfig-gtk" arch="i386">
  <version epoch="0" ver="5.3.21" rel="7.el5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 5.3.21-5" date="1225490400">- fix regression in MD5 checkbox in authconfig-tui (#468392)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 5.3.21-6" date="1239919200">- fix path to nscd pid file (#471642)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 5.3.21-7" date="1300831200">- add command line options to enable SSSD in nsswitch.conf
  and pam configuration (#629021)</changelog>
</package>
<package pkgid="271b6a41c78f690319c90f606ef63d76224222b8" name="autofs" arch="i386">
  <version epoch="1" ver="5.0.1" rel="0.rc2.177.el5"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.1-0.rc2.175.el5" date="1347314400">- bz845503 - autofs initscript problems
  - fix status() return code now gets lost due to adding lock file check.
- Related: rhbz#845503</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.1-0.rc2.176.el5" date="1348610400">- bz859890 - no --timeout option usage demonstrated in auto.master FORMAT
  options man page section
  - add timeout option description to man page.
- Resolves: rhbz#859890</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.1-0.rc2.177.el5" date="1353880800">- bz714766 - autofs /net maps do not refresh list of shares exported on the NFS server
  - disable hosts map HUP signal update.
- Related: rhbz#714766</changelog>
</package>
<package pkgid="049dac3836b8d23d359ebceaa9cb05f6304107f6" name="automake" arch="noarch">
  <version epoch="0" ver="1.9.6" rel="3.el5"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 1.9.6-2.2" date="1266364800">- add fix for CVE-2009-4029</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 1.9.6-2.3" date="1267315200">- increase delay in self checks
- add delays in aclocal7 self check
  http://osdir.com/ml/sysutils.automake.bugs/2006-09/msg00012.html
- preserve timestamps of configure files</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.9.6-3" date="1392163200">- fix for CVE-2012-3386 -- 'make distcheck' was making the directory distdir
  world-writeable (#848470)</changelog>
</package>
<package pkgid="c40dce9d5b8ec3821daa4632f3c89e3c0ca7adfb" name="axis" arch="i386">
  <version epoch="0" ver="1.2.1" rel="2jpp.7.el5_9"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; - 0:1.2.1-2jpp_5fc" date="1153605600">- Rebuilt</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 0:0.9.13-4jpp.6" date="1154642400">- Added missing requirements</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:1.2.1-2jpp.7" date="1360706400">- Add missing connection hostname check against X.509 certificate name
- Resolves: CVE-2012-5784
- Add patches to build with java 1.6</changelog>
</package>
<package pkgid="d0b46af8df9d32e51546d4f771dd38143e8f90b3" name="axis" arch="i386">
  <version epoch="0" ver="1.2.1" rel="2jpp.8.el5_10"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 0:0.9.13-4jpp.6" date="1154649600">- Added missing requirements</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:1.2.1-2jpp.7" date="1360713600">- Add missing connection hostname check against X.509 certificate name
- Resolves: CVE-2012-5784
- Add patches to build with java 1.6</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:1.2.1-2jpp.8" date="1409788800">- Fix MITM security vulnerability
- Resolves: CVE-2014-3596</changelog>
</package>
<package pkgid="5096c1f8353c25cfe67d32489dfd7ce7f66ed535" name="axis-javadoc" arch="i386">
  <version epoch="0" ver="1.2.1" rel="2jpp.7.el5_9"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; - 0:1.2.1-2jpp_5fc" date="1153605600">- Rebuilt</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 0:0.9.13-4jpp.6" date="1154642400">- Added missing requirements</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:1.2.1-2jpp.7" date="1360706400">- Add missing connection hostname check against X.509 certificate name
- Resolves: CVE-2012-5784
- Add patches to build with java 1.6</changelog>
</package>
<package pkgid="14c053196df5278ca8bbdaac72ae1302876762f2" name="axis-javadoc" arch="i386">
  <version epoch="0" ver="1.2.1" rel="2jpp.8.el5_10"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 0:0.9.13-4jpp.6" date="1154649600">- Added missing requirements</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:1.2.1-2jpp.7" date="1360713600">- Add missing connection hostname check against X.509 certificate name
- Resolves: CVE-2012-5784
- Add patches to build with java 1.6</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:1.2.1-2jpp.8" date="1409788800">- Fix MITM security vulnerability
- Resolves: CVE-2014-3596</changelog>
</package>
<package pkgid="8548dc42e09dd176333e8837615f312f158c29c0" name="axis-manual" arch="i386">
  <version epoch="0" ver="1.2.1" rel="2jpp.7.el5_9"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; - 0:1.2.1-2jpp_5fc" date="1153605600">- Rebuilt</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 0:0.9.13-4jpp.6" date="1154642400">- Added missing requirements</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:1.2.1-2jpp.7" date="1360706400">- Add missing connection hostname check against X.509 certificate name
- Resolves: CVE-2012-5784
- Add patches to build with java 1.6</changelog>
</package>
<package pkgid="454b48d6283f266f6b1e71b866111460e5df14ed" name="axis-manual" arch="i386">
  <version epoch="0" ver="1.2.1" rel="2jpp.8.el5_10"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 0:0.9.13-4jpp.6" date="1154649600">- Added missing requirements</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:1.2.1-2jpp.7" date="1360713600">- Add missing connection hostname check against X.509 certificate name
- Resolves: CVE-2012-5784
- Add patches to build with java 1.6</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:1.2.1-2jpp.8" date="1409788800">- Fix MITM security vulnerability
- Resolves: CVE-2014-3596</changelog>
</package>
<package pkgid="1919b3eac2ba6718d7031275094cd7a166b02158" name="bash" arch="i386">
  <version epoch="0" ver="3.2" rel="32.el5"/>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 3.2-30" date="1302818400">- Added man page references to systemwide .bash_logout
  Resolves: #592979</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 3.2-31" date="1305324000">- Use `mktemp' for temporary files
  Resolves: #700157</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 3.2-32" date="1305324001">- Don't include backup files
  Resolves: #700157</changelog>
</package>
<package pkgid="54a03f6e15936f0adcac5bdc4c0430d82b0c4d9a" name="bash" arch="i386">
  <version epoch="0" ver="3.2" rel="33.el5.1"/>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 3.2-32" date="1305331200">- Don't include backup files
  Resolves: #700157</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 3.2-33" date="1371513600">- Fixed a bug that caused trap handlers to be executed recursively,
  corrupting internal data structures.
  Resolves: #964753</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 3.2-33.1" date="1410825600">- Check for fishy environment
  Resolves: #1141644</changelog>
</package>
<package pkgid="6dd653c39770fb7d8475f4d50b556f74de8c06d8" name="bash" arch="i386">
  <version epoch="0" ver="3.2" rel="33.el5_11.4"/>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 3.2-33.2" date="1411689600">- CVE-2014-7169
  Resolves: #1146321</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 3.2-33.3" date="1411689601">- CVE-2014-7169 - proper 3.2 backport - courtesy of Florian Weimer
  Related: #1146321</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 3.2-33.4" date="1411689602">- CVE-2014-7169 - bypass patch bug
  Related: #1146321</changelog>
</package>
<package pkgid="5f7c39e6134c85f3261d7f62a8800253bc05a744" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="16.P1.el5_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-15.P1" date="1288908000">- improve patch for #533229</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1" date="1291327200">- fixes for CVE-2010-3762, CVE-2010-3613 and CVE-2010-3614</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1.1" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
</package>
<package pkgid="5db4dd1752bfe6f42ff679ea53f1dc6294e2b88f" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-19.P1" date="1321653600">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
</package>
<package pkgid="b7138980d97ca12aa0a7f64ea74172708f3eba20" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
</package>
<package pkgid="5481745fa64992ec61ec46b7c0b8c70dabfe7c61" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
</package>
<package pkgid="08ed3b7d13316eb50ea520006072e43c7f9a78f9" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.5" date="1349906400">- fix CVE-2012-5166</changelog>
</package>
<package pkgid="a5a868637107ff485148a6cb572a591744aa732d" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.10"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="c249c27de95538a8e368e363a810c58535ceea16" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.11"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="cf2dd6d0a920e0fabfbe59c9914605979464a417" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.12"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Mensik &lt;pemensik@redhat.com&gt; - 30:9.3.6-25.P1.12" date="1484092800">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="37ef4224132b9775cc2571b68645246862e927f2" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-25.P1" date="1355184000">- fix race condition in socket module</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
</package>
<package pkgid="a8e61482e25375ec96ac4216f26eaee5f2728f7b" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="aabfea901a77dce6fb80d13e8e732984e69c1599" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256000">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
</package>
<package pkgid="b93e2c22437290cb6485c16965e373d0dbd1dc51" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.5"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="b328cfe06a05efa4eedacf5e607a0c6875f99d03" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="85483df661ee01646765297490a4dfed21647c35" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.8"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
</package>
<package pkgid="bcac2d0b050f32bffe7ac621ab49ae3c09191af9" name="bind" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="09fafcff08c8e05c6834a70b7d2db33be7ca9964" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="16.P1.el5_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-15.P1" date="1288908000">- improve patch for #533229</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1" date="1291327200">- fixes for CVE-2010-3762, CVE-2010-3613 and CVE-2010-3614</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1.1" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
</package>
<package pkgid="6c63e11fa0a255278fd69dc2eb8a4413a297e42f" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-19.P1" date="1321653600">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
</package>
<package pkgid="16738ef3e2baf95e7360ad7eef10b07e2d1b4d45" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
</package>
<package pkgid="a9194be2a7e48670c1cdfdee31a849530704fa15" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
</package>
<package pkgid="6784898bbe61b3c32010f72d76485fd8af540a50" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.5" date="1349906400">- fix CVE-2012-5166</changelog>
</package>
<package pkgid="dd3655631419804af5a7cf8fe86e64c48a32b75f" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.10"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="8a3138b639bc15ff504576fbbd310efd92e352a8" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.11"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="53a36271d44ecf69adede14afa3cb0ef1b7c3c83" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.12"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Mensik &lt;pemensik@redhat.com&gt; - 30:9.3.6-25.P1.12" date="1484092800">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="96b8c56d43189190fa367046f1f148f9b78307c6" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-25.P1" date="1355184000">- fix race condition in socket module</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
</package>
<package pkgid="b343c20953742e10159f8d200f8452fd1570e8e5" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="951916485812c5b29cf9f4da36c254fe1da3f615" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256000">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
</package>
<package pkgid="320db9313455852e664aa8dde149a321c17fa994" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.5"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="f43cf6890a018f2eae7243ee3811b78b0f4258f1" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="f258c3ddc0563b9bd1475f90482ad36bd5aa6ff4" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.8"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
</package>
<package pkgid="98ab141f324542d79b8e5a0c95f1b4153d5fc3af" name="bind-chroot" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="51117ddb5a377dd47610200352ed40e49d6b1337" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="16.P1.el5_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-15.P1" date="1288908000">- improve patch for #533229</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1" date="1291327200">- fixes for CVE-2010-3762, CVE-2010-3613 and CVE-2010-3614</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1.1" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
</package>
<package pkgid="a22e73302193dcf35f391767ef05513d8f28681c" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-19.P1" date="1321653600">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
</package>
<package pkgid="b832f0670bb2b3b06aa84bd59a251ac902a2da68" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
</package>
<package pkgid="3ed94cf66eb6bfafc8dff9936d3374397c7017fe" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
</package>
<package pkgid="0cd823928d9753ee833d82927adafa556403e5cd" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.5" date="1349906400">- fix CVE-2012-5166</changelog>
</package>
<package pkgid="b0e96a20093a4ba77984ff2b870b89b6aac3c38e" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.10"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="f58900f0b28b4c9d9a858690a07b35f06bc35bd5" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.11"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="68f3d7c80063d60930bc84985ebaabb595cf3d3e" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.12"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Mensik &lt;pemensik@redhat.com&gt; - 30:9.3.6-25.P1.12" date="1484092800">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="42c60b3ccfe3985fc2344c600a44da3a9d731304" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-25.P1" date="1355184000">- fix race condition in socket module</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
</package>
<package pkgid="83ec2ed0dbc9356ad674ef9f4ace17addca40908" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="b47ca3b31f2634b2cbb47be238f0bc2513cb8c17" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256000">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
</package>
<package pkgid="47e6fe1350b1154fcbb58ccad78038b98668ee87" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.5"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="61ed3980a83426d5e890ffeaf5148c6558410c58" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="823677baca4cd37980f04f36b1c99793b6385056" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.8"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
</package>
<package pkgid="a42a14908ab58108bceec73c5f7abcfd01c42f50" name="bind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="55901166e438b1b9cf55584e6811981ba610f4bc" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="16.P1.el5_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-15.P1" date="1288908000">- improve patch for #533229</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1" date="1291327200">- fixes for CVE-2010-3762, CVE-2010-3613 and CVE-2010-3614</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1.1" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
</package>
<package pkgid="cfa01b0090e37a44219d787984f4d6f53904b69b" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-19.P1" date="1321653600">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
</package>
<package pkgid="fa9e3e7db34633ac5086d97717fad663dfa12253" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
</package>
<package pkgid="edb8a819e1dfd5fb687b28515204ecbd3eb99b18" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
</package>
<package pkgid="a7122ae61c0f82c520ac0c5f18f02476a3c67ff7" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.5" date="1349906400">- fix CVE-2012-5166</changelog>
</package>
<package pkgid="62ecbc4389ae08fdd2b34bf376daec0b27f62e83" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.10"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="7bdc7be6afc964df7b10dc80839bbc1095cb3833" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.11"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="36998c700d75a1c1ec065c6b94efca1c8af6cb0f" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.12"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Mensik &lt;pemensik@redhat.com&gt; - 30:9.3.6-25.P1.12" date="1484092800">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="b3944e0574850508751fcd522d0623f1fae9e7a7" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-25.P1" date="1355184000">- fix race condition in socket module</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
</package>
<package pkgid="4aa17cebb83dd10fe2b9f41909fac11b5af5dbee" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="9040d2b4f2da28c7c1cc15c0359982adf0a06a1f" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256000">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
</package>
<package pkgid="bebbd6b83a598aac6d7ee6161caa6be01895791f" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.5"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="085be36db708de4d962fe9594617c1f582c34610" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="522fcea630facdbb904d98dca8a1b11568024f50" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.8"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
</package>
<package pkgid="b6014a2821ef8d6b22c8fd364a9b7b282c502420" name="bind-libbind-devel" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="020fba04aaf36c31841f4c3f0866d03973d0ea42" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="16.P1.el5_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-15.P1" date="1288908000">- improve patch for #533229</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1" date="1291327200">- fixes for CVE-2010-3762, CVE-2010-3613 and CVE-2010-3614</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1.1" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
</package>
<package pkgid="602b2ecac3abcffad2d86733609e5915d9d1d458" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-19.P1" date="1321653600">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
</package>
<package pkgid="2ef85924c7ea2f8e1311c6ee8a207c6c0dea85ee" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
</package>
<package pkgid="4b47df55d3a3c0499f7cd08627a5fe162c7cf055" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
</package>
<package pkgid="5c4d72f1ff83c32c505967e83d86bd457b74d16f" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.5" date="1349906400">- fix CVE-2012-5166</changelog>
</package>
<package pkgid="e28255d42ef324504aeb0b4651bf9d6b4296b078" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.10"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="9af280acc53161508bbc275101c35ec7af3c7a8c" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.11"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="a24640c7cde85f56a71e92b8b32c67c1d8d4b399" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.12"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Mensik &lt;pemensik@redhat.com&gt; - 30:9.3.6-25.P1.12" date="1484092800">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="a579c90de2e1681f4bec884fb9fcca6e04527c09" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-25.P1" date="1355184000">- fix race condition in socket module</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
</package>
<package pkgid="2abd626041ecb5bf717a5eb374994d0b902d4c88" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="f52f247e3dddf895e76a1fd34622c4ee0876c404" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256000">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
</package>
<package pkgid="f1979f3cb395c57ec997ba1a37d91bf40649cb4b" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.5"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="c62457076ccd4491e4d7b48c654917d0497f3005" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="d23a34e9b1c172af08dea3c97599153baf2ce37a" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.8"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
</package>
<package pkgid="191923249ef0905496227a0eaf5c04a42cdf8cb2" name="bind-libs" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="e7187cd0cc4150500d8e0a3267c078931817b0b5" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="16.P1.el5_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-15.P1" date="1288908000">- improve patch for #533229</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1" date="1291327200">- fixes for CVE-2010-3762, CVE-2010-3613 and CVE-2010-3614</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1.1" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
</package>
<package pkgid="c6a34f11b3e0b67a8a0642854fe50d9806f2f50f" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-19.P1" date="1321653600">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
</package>
<package pkgid="07068853cb8f84d6b30c459c4a91bf1261604b89" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
</package>
<package pkgid="d8474754bc234736ad6fa66c4aa322bf205c5d7f" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
</package>
<package pkgid="3a856b56f6ef8c8b3c567bbbd672e8b870b61e43" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.5" date="1349906400">- fix CVE-2012-5166</changelog>
</package>
<package pkgid="515022f5f20c0b0b55ddaa43e3c2a7a58281b390" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.10"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="76bb5ddb64f4cee8950a5dbd5e26b52d20345a25" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.11"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="9e4e2c36324909897268a2fbc062f1a90037a5a7" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.12"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Mensik &lt;pemensik@redhat.com&gt; - 30:9.3.6-25.P1.12" date="1484092800">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="5ecbd25995953daaf570e3a9d42ce82d20532093" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-25.P1" date="1355184000">- fix race condition in socket module</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
</package>
<package pkgid="f0409ef02ee9af5bada65439505289d7df6986e9" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="1a1cb6e693345db8e86362913d5098a430b780b5" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256000">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
</package>
<package pkgid="18eef89018cf7a744e97e8efb2c64042a8be30e9" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.5"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="ddef10dc463c703a7a7b3ffcebba9d7c5b3871a0" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="ebde1fc4d63f135bb1c5fd16e0262b8373889335" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.8"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
</package>
<package pkgid="73b8a42ce3bb515a3f7b22828c6561ed99741184" name="bind-sdb" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="10547cff05b757eba333b7d9f425bd3506abd595" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="16.P1.el5_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-15.P1" date="1288908000">- improve patch for #533229</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1" date="1291327200">- fixes for CVE-2010-3762, CVE-2010-3613 and CVE-2010-3614</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1.1" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
</package>
<package pkgid="cba57d6c2fc5d3b33356747b96694141f8235076" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-19.P1" date="1321653600">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
</package>
<package pkgid="8da95c6ddf0b844d3d7207221c87ee0cf9a53e47" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
</package>
<package pkgid="df650ac743d4ad760eb8b8bea6cee9226f288d8b" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
</package>
<package pkgid="2593ba87fef4cc0b8535e6e3ca5b567419d89574" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.5" date="1349906400">- fix CVE-2012-5166</changelog>
</package>
<package pkgid="27c174fc2a3da2e337034b109218e5f2d3ddf524" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.10"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="b443b08aef202617afa9d28656cb49887a24e68f" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.11"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="c82eba31534afc25731a64f731f58ee1fe038eda" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.12"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Mensik &lt;pemensik@redhat.com&gt; - 30:9.3.6-25.P1.12" date="1484092800">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="7528cb5916bb524fca5c99f703e37ec867eeb0f5" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-25.P1" date="1355184000">- fix race condition in socket module</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
</package>
<package pkgid="f1ed9b54654817feb8dfd009587eb6d72304dd9b" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="b07bef2e3ae113d1605acfe02ee92539a6fd96a8" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256000">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
</package>
<package pkgid="ad46c93787865a9515603051ea533c623a2e557a" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.5"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="f12490898c2b28340e311293c3317934133069e5" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="b85e02712119a8edde757ba6801b102d1e6be9f4" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.8"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
</package>
<package pkgid="57a7a6124fe153950e999cd7d55bebebf0a627b0" name="bind-utils" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="6763a7c98d16540980659f8f66a574f081777299" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-9.P2" date="1309903200">- fix CVE-2011-2464</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
</package>
<package pkgid="ef4ff2df135dbc1c0eae7e751a3ddff8aab9428f" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
</package>
<package pkgid="2a6a7d2f714b0f592bf0901c302e323c99f6b3b0" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.3"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.3" date="1347573600">- fix CVE-2012-4244</changelog>
</package>
<package pkgid="2684f08a78a020a001d0445d79e1f58160c3a0bc" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.4" date="1349906400">- fix CVE-2012-5166</changelog>
</package>
<package pkgid="cd348384acf1a1f0ab226e2572f22172fb0e3997" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="17.P2.el5_9.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-16.P2" date="1349906400">- fix CVE-2012-5166</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2" date="1351029600">- fix typo in initscript (caused by "kill the correct named" patch)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2.1" date="1364421600">- fix CVE-2013-2266</changelog>
</package>
<package pkgid="9022d8ab6a0787d30259bd99d563127b729dd669" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="17.P2.el5_9.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2" date="1351029600">- fix typo in initscript (caused by "kill the correct named" patch)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2.1" date="1364421600">- fix CVE-2013-2266</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-17.P2.2" date="1375048800">- fix for CVE-2013-4854</changelog>
</package>
<package pkgid="208ad09a6f9ecf07bf719a49818ff4878f5f41c2" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-19.P2" date="1375056000">- fix for CVE-2013-4854</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-20.P2" date="1394496000">- Fix init script to not unmount filesystem when ROOTDIR is empty (#1059118)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
</package>
<package pkgid="a4cc8490464819705e2faf77e030897c20be9d23" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-20.P2" date="1394496000">- Fix init script to not unmount filesystem when ROOTDIR is empty (#1059118)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
</package>
<package pkgid="ee46967af575870d2b777ba06829b2851293cdb3" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.10"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.9" date="1477958400">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.7.0-21.P2.10" date="1484006400">- Fix CVE-2016-9147</changelog>
</package>
<package pkgid="dfd90b61509683df0063397766b97bdadfdc57a8" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.2"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="6e6ce17eed3d0ceb4cc85bfc551de56204b3b8a7" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
</package>
<package pkgid="397af007024172368b95e457801fe50fd22374f5" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.4"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="b49fd681021056969c07f1fe69ed70d1e8e113d2" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="721dfab75b902fa22c0545ff5336ee143d32b6b6" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
</package>
<package pkgid="63c0b570929b47afc9ce6db3f5fc1f7bc02375e6" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.7"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="3ea36f55147ad75793e9eb0f96db197d8084b6be" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.8"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="77aab87e83c51abd687ae21729aaa0f68efb1d16" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.9" date="1477958400">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="8f6a276659a537eec6d8412e20ead3db0edb2ed8" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_6.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2" date="1291327200">- fix CVE-2010-3613 and CVE-2010-3614</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.1" date="1302645600">- work correctly when new DS is introduced in the trusted DNS tree (#675467)
- include root zone DNSKEY (#693788)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
</package>
<package pkgid="3fcd739522a31ba8974e299155b15b3ae8a50def" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_6.3"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.1" date="1302645600">- work correctly when new DS is introduced in the trusted DNS tree (#675467)
- include root zone DNSKEY (#693788)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.3" date="1309903200">- fix CVE-2011-2464</changelog>
</package>
<package pkgid="cee98f316e22b50a9053c57b0cac3d31c4fe13d4" name="bind97" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_7.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.3" date="1309903200">- fix CVE-2011-2464</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.4" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
</package>
<package pkgid="abe664ac8865ab1ab23e9861b18423e92a1108e7" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-9.P2" date="1309903200">- fix CVE-2011-2464</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
</package>
<package pkgid="8035714e0c9d825bf3a596ed8ab091a445bad39b" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
</package>
<package pkgid="00f25081bb656114b125928ad22922864311d604" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.3"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.3" date="1347573600">- fix CVE-2012-4244</changelog>
</package>
<package pkgid="132beea60695e13b5d445509a52594e0af3dfdda" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.4" date="1349906400">- fix CVE-2012-5166</changelog>
</package>
<package pkgid="e423bec1e45d42527abc9c823b0ac921c5acb8d3" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="17.P2.el5_9.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-16.P2" date="1349906400">- fix CVE-2012-5166</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2" date="1351029600">- fix typo in initscript (caused by "kill the correct named" patch)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2.1" date="1364421600">- fix CVE-2013-2266</changelog>
</package>
<package pkgid="9d5fea89205be5ae1286e2f8f5844749b9b62bf3" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="17.P2.el5_9.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2" date="1351029600">- fix typo in initscript (caused by "kill the correct named" patch)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2.1" date="1364421600">- fix CVE-2013-2266</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-17.P2.2" date="1375048800">- fix for CVE-2013-4854</changelog>
</package>
<package pkgid="8fdf4b3f8cb421283f49e2676669a0263eaa9e43" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-19.P2" date="1375056000">- fix for CVE-2013-4854</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-20.P2" date="1394496000">- Fix init script to not unmount filesystem when ROOTDIR is empty (#1059118)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
</package>
<package pkgid="6dcf7e1a238c21b2ae21a2d13796767d49400353" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-20.P2" date="1394496000">- Fix init script to not unmount filesystem when ROOTDIR is empty (#1059118)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
</package>
<package pkgid="68985fca8ac38cd84239da6a042f1cca1c09a312" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.10"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.9" date="1477958400">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.7.0-21.P2.10" date="1484006400">- Fix CVE-2016-9147</changelog>
</package>
<package pkgid="b1e312a45378082a6f9e8b3383f5e6183a281e4c" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.2"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="bbd54568eb09597ff655f8a762b826bc1140228e" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
</package>
<package pkgid="27e22a8af5598a7e880d8d27c4f4a845025c99f9" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.4"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="2a6bac1a8b0b25ac535745920323d552d03dd64c" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="fe5f3f20c46914fd19512fcaa2c176a65724bb3d" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
</package>
<package pkgid="39ea3bf7d12fd967d8f99b4fb59386dc5b278d97" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.7"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="99ada0e06451bfdf23b1af97e23598dac9adf03f" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.8"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="ad387fb2823ed6535cbd7052b135f8fdd767caf6" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.9" date="1477958400">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="e571ca2c1d9fee2e738e14512234d00501b4eb55" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_6.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2" date="1291327200">- fix CVE-2010-3613 and CVE-2010-3614</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.1" date="1302645600">- work correctly when new DS is introduced in the trusted DNS tree (#675467)
- include root zone DNSKEY (#693788)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
</package>
<package pkgid="178b5bf7ccb659861524edd837441b7b49b25493" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_6.3"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.1" date="1302645600">- work correctly when new DS is introduced in the trusted DNS tree (#675467)
- include root zone DNSKEY (#693788)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.3" date="1309903200">- fix CVE-2011-2464</changelog>
</package>
<package pkgid="171676a2b06b02f371dec2a1e9d9081668cc5b98" name="bind97-chroot" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_7.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.3" date="1309903200">- fix CVE-2011-2464</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.4" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
</package>
<package pkgid="1645841e4f31782eea8458a58f71fd7d9fa9c77a" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-9.P2" date="1309903200">- fix CVE-2011-2464</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
</package>
<package pkgid="cde1ce12533b55035421a43273c0dc4bf6b00f60" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
</package>
<package pkgid="7b32916ca05b332900016bd5b64e489370f8010c" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.3"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.3" date="1347573600">- fix CVE-2012-4244</changelog>
</package>
<package pkgid="a5d44a0023a31f24500841f7de94869d6b06d1ca" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.4" date="1349906400">- fix CVE-2012-5166</changelog>
</package>
<package pkgid="77c061d047ded708eaf71ee5a679e1bd2d456b19" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="17.P2.el5_9.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-16.P2" date="1349906400">- fix CVE-2012-5166</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2" date="1351029600">- fix typo in initscript (caused by "kill the correct named" patch)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2.1" date="1364421600">- fix CVE-2013-2266</changelog>
</package>
<package pkgid="b82b16bd4a77920e028b6d513faa5fb23fcb0643" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="17.P2.el5_9.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2" date="1351029600">- fix typo in initscript (caused by "kill the correct named" patch)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2.1" date="1364421600">- fix CVE-2013-2266</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-17.P2.2" date="1375048800">- fix for CVE-2013-4854</changelog>
</package>
<package pkgid="ae8bc64ae6e42a05e891d4715fd72317d2f50154" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-19.P2" date="1375056000">- fix for CVE-2013-4854</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-20.P2" date="1394496000">- Fix init script to not unmount filesystem when ROOTDIR is empty (#1059118)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
</package>
<package pkgid="256f7e3bf4ca58bbde8cc69bc6771406da635b12" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-20.P2" date="1394496000">- Fix init script to not unmount filesystem when ROOTDIR is empty (#1059118)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
</package>
<package pkgid="9f4b505122c67b13ef698b7226560e595b02dadd" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.10"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.9" date="1477958400">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.7.0-21.P2.10" date="1484006400">- Fix CVE-2016-9147</changelog>
</package>
<package pkgid="5addda86d2ee30ee93e1cce88e5f88ef071269e5" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.2"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="473be47dbea90d957337b10403474c43b3daf920" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
</package>
<package pkgid="5167593edfe64cf78c794189603a8ff8ebfe9e57" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.4"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="6005ed75813dd7561286cac6d20c556cbeb9d609" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="e55019aea759e302c164a938b2aff3c370a98a27" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
</package>
<package pkgid="c6b7fcba4b614c29c339eb392dc4268d19531589" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.7"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="c22093d458266f0b92cb26b4b05e396aeaf1bcf7" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.8"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="03d61e6a93c14e873dc3edd047c41de462e708e7" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.9" date="1477958400">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="e51c361b5add7437da7150d8cceb628f3f7ed4ca" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_6.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2" date="1291327200">- fix CVE-2010-3613 and CVE-2010-3614</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.1" date="1302645600">- work correctly when new DS is introduced in the trusted DNS tree (#675467)
- include root zone DNSKEY (#693788)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
</package>
<package pkgid="7156ca318453de8d3e696a1431fc394a8cb88c79" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_6.3"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.1" date="1302645600">- work correctly when new DS is introduced in the trusted DNS tree (#675467)
- include root zone DNSKEY (#693788)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.3" date="1309903200">- fix CVE-2011-2464</changelog>
</package>
<package pkgid="fc01197eadf423324ff0e51fc312125c9cb5a5da" name="bind97-devel" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_7.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.3" date="1309903200">- fix CVE-2011-2464</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.4" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
</package>
<package pkgid="51730e71d9e1f3e356795c51b07f59c77ea99fe2" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-9.P2" date="1309903200">- fix CVE-2011-2464</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
</package>
<package pkgid="4c6d884bb2c1e2dacca2d02320051fc6d61ae85b" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
</package>
<package pkgid="65cd0d61b2b501dd753bd9e3d500b40eba26c288" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.3"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.3" date="1347573600">- fix CVE-2012-4244</changelog>
</package>
<package pkgid="d5d5260e1b8210254d99e8e4cf83d401eb458d89" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.4" date="1349906400">- fix CVE-2012-5166</changelog>
</package>
<package pkgid="833f6dae8abe811b4d86efc7bcbab39769c2c4c2" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="17.P2.el5_9.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-16.P2" date="1349906400">- fix CVE-2012-5166</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2" date="1351029600">- fix typo in initscript (caused by "kill the correct named" patch)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2.1" date="1364421600">- fix CVE-2013-2266</changelog>
</package>
<package pkgid="0be012bb23fef9817fb0f448f76c9ef000be6802" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="17.P2.el5_9.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2" date="1351029600">- fix typo in initscript (caused by "kill the correct named" patch)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2.1" date="1364421600">- fix CVE-2013-2266</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-17.P2.2" date="1375048800">- fix for CVE-2013-4854</changelog>
</package>
<package pkgid="9707aa43e925a5ad656069cdee9e80c8adebf458" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-19.P2" date="1375056000">- fix for CVE-2013-4854</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-20.P2" date="1394496000">- Fix init script to not unmount filesystem when ROOTDIR is empty (#1059118)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
</package>
<package pkgid="b955dc836559b3f0c159917590f95c9567f084e7" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-20.P2" date="1394496000">- Fix init script to not unmount filesystem when ROOTDIR is empty (#1059118)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
</package>
<package pkgid="fc4bf087b2c2a11656bf5b87406154d797ca7c4c" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.10"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.9" date="1477958400">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.7.0-21.P2.10" date="1484006400">- Fix CVE-2016-9147</changelog>
</package>
<package pkgid="84bf7d1d864db580dc5bbb90fea2b5407e442d25" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.2"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="6d3f3ff07ad08af5ee19bee9ba1cc6c6adb3f343" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
</package>
<package pkgid="033088a02cec86db9a9158cf760c17088e5fdb82" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.4"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="71e1799802df3a865150d76e4fd41f31122d2c45" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="ea1326985373382d04a80dd6f72a910fb27d38bd" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
</package>
<package pkgid="8531fc523e2a27e0c5e6d6a6f24e6213a9d36c0e" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.7"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="d229c52adbfbbe3f03bb7b410d7773d01bbf4623" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.8"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="d1f85c858a90e8931a5fa9e27cd2603c486caa51" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.9" date="1477958400">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="e5c00234835948ca9f3a9ca444ec3a8bdf1af9c9" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_6.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2" date="1291327200">- fix CVE-2010-3613 and CVE-2010-3614</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.1" date="1302645600">- work correctly when new DS is introduced in the trusted DNS tree (#675467)
- include root zone DNSKEY (#693788)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
</package>
<package pkgid="5011aab49d0de2055579862cbacf7ab3aa43f094" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_6.3"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.1" date="1302645600">- work correctly when new DS is introduced in the trusted DNS tree (#675467)
- include root zone DNSKEY (#693788)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.3" date="1309903200">- fix CVE-2011-2464</changelog>
</package>
<package pkgid="9e4c7ad5823942c05a5bf1ad93e01be76843dcc1" name="bind97-libs" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_7.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.3" date="1309903200">- fix CVE-2011-2464</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.4" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
</package>
<package pkgid="185450547de9b9488682066c2a068b41181255ea" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-9.P2" date="1309903200">- fix CVE-2011-2464</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
</package>
<package pkgid="0b6d593eddeeda14b771a30a226f606a518584f7" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
</package>
<package pkgid="edc448ee73fad846107ec2aa34dbf4902b21d58b" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.3"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.3" date="1347573600">- fix CVE-2012-4244</changelog>
</package>
<package pkgid="7d27be39cde6943b5189ce6949b9db6aad565106" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="10.P2.el5_8.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-10.P2.4" date="1349906400">- fix CVE-2012-5166</changelog>
</package>
<package pkgid="c6b0afd1054958749174f4aa172201265d8435e2" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="17.P2.el5_9.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-16.P2" date="1349906400">- fix CVE-2012-5166</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2" date="1351029600">- fix typo in initscript (caused by "kill the correct named" patch)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2.1" date="1364421600">- fix CVE-2013-2266</changelog>
</package>
<package pkgid="2c045f8cf6bb69a9da0dc7df0f7d67be38cb6a81" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="17.P2.el5_9.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2" date="1351029600">- fix typo in initscript (caused by "kill the correct named" patch)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-17.P2.1" date="1364421600">- fix CVE-2013-2266</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-17.P2.2" date="1375048800">- fix for CVE-2013-4854</changelog>
</package>
<package pkgid="eebf8f71a9dc11369749d1ed823b7539662a6240" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-19.P2" date="1375056000">- fix for CVE-2013-4854</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-20.P2" date="1394496000">- Fix init script to not unmount filesystem when ROOTDIR is empty (#1059118)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
</package>
<package pkgid="5d7dd2a11e3218aafacaba26186db04f05f87d8a" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-20.P2" date="1394496000">- Fix init script to not unmount filesystem when ROOTDIR is empty (#1059118)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
</package>
<package pkgid="92aa209d1ca17028ebc10d1406ba16eb212f9b53" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.10"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.9" date="1477958400">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.7.0-21.P2.10" date="1484006400">- Fix CVE-2016-9147</changelog>
</package>
<package pkgid="00370e3ee4ce1b10ecb3384ec207e802d5612e09" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.2"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2" date="1395705600">- Fix CVE-2014-0591</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="9890b032ccf98034d399c1bbd82d3ebdba0d32cb" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.7.0-21.P2.1" date="1418169600">- Fix CVE-2014-8500 (#1171972)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
</package>
<package pkgid="8b55d89ddc7156c0ddf458289374e6910ef51454" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.4"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.7.0-21.P2.2" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="6d7aeb9403012217ef242db34a325d8676c5792e" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.3" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="ccce5175a93ebeeb7b9933d49f169e3bd640b22c" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.4" date="1450137600">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
</package>
<package pkgid="dd07918a42e1e8d52495ba7784dbc18a17f5897d" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.7"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.5" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="719fe662c698ec766770201e2345b61b86d78860" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.8"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.6" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="c58747a12f5aae262730e02f6ef13719afcc8552" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="21.P2.el5_11.9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.7" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.8" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.7.0-21.P2.9" date="1477958400">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="bee0e17e5c616df6e05e3327b1844f698eef79e3" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_6.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2" date="1291327200">- fix CVE-2010-3613 and CVE-2010-3614</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.1" date="1302645600">- work correctly when new DS is introduced in the trusted DNS tree (#675467)
- include root zone DNSKEY (#693788)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
</package>
<package pkgid="d08770f2ebc1e285bd928991c4e45208b3653645" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_6.3"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.1" date="1302645600">- work correctly when new DS is introduced in the trusted DNS tree (#675467)
- include root zone DNSKEY (#693788)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.3" date="1309903200">- fix CVE-2011-2464</changelog>
</package>
<package pkgid="0460e2b32ed36c8106cbd95ee411adee29d25bd1" name="bind97-utils" arch="i386">
  <version epoch="32" ver="9.7.0" rel="6.P2.el5_7.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.2" date="1306533600">- fix CVE-2011-1910</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.3" date="1309903200">- fix CVE-2011-2464</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.7.0-6.P2.4" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
</package>
<package pkgid="d5b4ee907565a2a95cad8b5165aa8df1ededa1d9" name="boost" arch="i386">
  <version epoch="0" ver="1.33.1" rel="15.el5"/>
  <changelog author="Benjamin Kosnik &lt;bkoz@redhat.com&gt; 1.33.1-13" date="1314223200">- GCC 4.4 fixes
- Resolves: #567722</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-14" date="1317765600">- Delete leftover .orig files after patches are successfully applied</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-15" date="1323727200">- Fix bugs in parsing invalid regexps
- Resolves: #766755</changelog>
</package>
<package pkgid="ef7891b7e80a49d81c499032ea36fa87fa9cb89b" name="boost" arch="i386">
  <version epoch="0" ver="1.33.1" rel="16.el5_9"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-14" date="1317765600">- Delete leftover .orig files after patches are successfully applied</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-15" date="1323727200">- Fix bugs in parsing invalid regexps
- Resolves: #766755</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-16" date="1360792800">- In Boost.Pool, be careful not to overflow allocated chunk size.</changelog>
</package>
<package pkgid="9d34c1b0ba6f755e13958b997eccc8d1bad73547" name="boost-devel" arch="i386">
  <version epoch="0" ver="1.33.1" rel="15.el5"/>
  <changelog author="Benjamin Kosnik &lt;bkoz@redhat.com&gt; 1.33.1-13" date="1314223200">- GCC 4.4 fixes
- Resolves: #567722</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-14" date="1317765600">- Delete leftover .orig files after patches are successfully applied</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-15" date="1323727200">- Fix bugs in parsing invalid regexps
- Resolves: #766755</changelog>
</package>
<package pkgid="1a59f842906567c762b2b7a22dbe76187c93a610" name="boost-devel" arch="i386">
  <version epoch="0" ver="1.33.1" rel="16.el5_9"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-14" date="1317765600">- Delete leftover .orig files after patches are successfully applied</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-15" date="1323727200">- Fix bugs in parsing invalid regexps
- Resolves: #766755</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-16" date="1360792800">- In Boost.Pool, be careful not to overflow allocated chunk size.</changelog>
</package>
<package pkgid="e21e1594ce7b062810e86f6bcc4cfc4d6aa6a9d5" name="boost-doc" arch="i386">
  <version epoch="0" ver="1.33.1" rel="15.el5"/>
  <changelog author="Benjamin Kosnik &lt;bkoz@redhat.com&gt; 1.33.1-13" date="1314223200">- GCC 4.4 fixes
- Resolves: #567722</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-14" date="1317765600">- Delete leftover .orig files after patches are successfully applied</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-15" date="1323727200">- Fix bugs in parsing invalid regexps
- Resolves: #766755</changelog>
</package>
<package pkgid="79b915e09c6a3ff7c8bf4d908dbe36d399a27efd" name="boost-doc" arch="i386">
  <version epoch="0" ver="1.33.1" rel="16.el5_9"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-14" date="1317765600">- Delete leftover .orig files after patches are successfully applied</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-15" date="1323727200">- Fix bugs in parsing invalid regexps
- Resolves: #766755</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.33.1-16" date="1360792800">- In Boost.Pool, be careful not to overflow allocated chunk size.</changelog>
</package>
<package pkgid="3408629d329162fd81fd10e93b882246e7da7eff" name="busybox" arch="i386">
  <version epoch="1" ver="1.2.0" rel="13.el5"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.2.0-11" date="1319752800">- Resolves: #689659
  "'busybox cp' does not return a correct exit code when 'No space left on device'"</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.2.0-12" date="1323208800">- Resolves: #756723
  "Kdump fails after findfs subcommand of busybox fails"</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.2.0-13" date="1325368800">- Resolves: #768083 "busybox various flaws" including:
  "buffer underflow in decompression"
  "udhcpc insufficient checking of DHCP options"</changelog>
</package>
<package pkgid="4d07390f0fc89c0e6f5bd2fd53d2d422da7f7842" name="busybox-anaconda" arch="i386">
  <version epoch="1" ver="1.2.0" rel="13.el5"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.2.0-11" date="1319752800">- Resolves: #689659
  "'busybox cp' does not return a correct exit code when 'No space left on device'"</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.2.0-12" date="1323208800">- Resolves: #756723
  "Kdump fails after findfs subcommand of busybox fails"</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.2.0-13" date="1325368800">- Resolves: #768083 "busybox various flaws" including:
  "buffer underflow in decompression"
  "udhcpc insufficient checking of DHCP options"</changelog>
</package>
<package pkgid="d3866ded4e33ea99949191fad68018fe55606476" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="16.P1.el5_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-15.P1" date="1288908000">- improve patch for #533229</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1" date="1291327200">- fixes for CVE-2010-3762, CVE-2010-3613 and CVE-2010-3614</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-16.P1.1" date="1321480800">- fix DOS against recursive servers (#754398)</changelog>
</package>
<package pkgid="4a750fe8d4eb3656df9fdca3c18d2402d07174d2" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-19.P1" date="1321653600">- fix DOS against recursive servers (#754398)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
</package>
<package pkgid="ee1268e9e70b4f5bcd6ebffec4588c14ebd7baa7" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1" date="1322863200">- zone-&gt;curmaster before return in dns_zone_setmasterswithkeys()
- named could fail to send a uncompressable zone</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.1" date="1338847200">- fix CVE-2012-1667 and CVE-2012-1033</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
</package>
<package pkgid="bc8b8d1f7217949886b2cfa85837faa8fa5835da" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.4"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.2" date="1343253600">- fix CVE-2012-3817</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
</package>
<package pkgid="3582beea896dcfa6d94819d28cb19a81a3448668" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="20.P1.el5_8.5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.3" date="1347573600">- fix CVE-2012-4244</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.4" date="1347573601">- bind-chroot-admin: set correct permissions on /etc/named.conf during update</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-20.P1.5" date="1349906400">- fix CVE-2012-5166</changelog>
</package>
<package pkgid="f74796e2519b8da56da1a56db83ad212fdb204ca" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.10"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="9e7fb24e767630f7705a64953d8373f06f49542e" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.11"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="ba1744a925e7a8feb3fb4dfcb28afdf708e8d876" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.12"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.10" date="1476835200">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.11" date="1477958400">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Mensik &lt;pemensik@redhat.com&gt; - 30:9.3.6-25.P1.12" date="1484092800">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="dcc5a63fa8a65d910ceed43bf0b1a0906cf02d61" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.2"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 30:9.3.6-25.P1" date="1355184000">- fix race condition in socket module</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
</package>
<package pkgid="d36585ea98b9ee38ab1bc47e7ddeb9c7a44f072e" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.1" date="1418256000">- Fix CVE-2014-8500 (#1171971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256001">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="6c0336fb33592ab2f0013e959c3767c45998b997" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 30:9.3.6-25.P1.2" date="1418256000">- Remove files backup after patching (Related: #1171971)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
</package>
<package pkgid="36954668cca0544dabddcef718d06176fa21f1ae" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.5"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 30:9.3.6-25.P1.3" date="1438041600">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="2626a4990ea45622cb96283466acdc3fec4f3f8f" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.4" date="1441238400">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.5" date="1441238401">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="f6845c5a061f7b7795ffa57501227beef19750be" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.8"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.6" date="1453161600">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
</package>
<package pkgid="96f6121ad9aea5c64c6a2d5f70da21ef30771a4c" name="caching-nameserver" arch="i386">
  <version epoch="30" ver="9.3.6" rel="25.P1.el5_11.9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.7" date="1457568000">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.8" date="1458000000">- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 30:9.3.6-25.P1.9" date="1474675200">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="bec83f2156af927488ad047dba252e358d598d7c" name="ccid" arch="i386">
  <version epoch="0" ver="1.3.8" rel="2.el5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@fedoraproject.org&gt; - 1.2.1-4" date="1203465600">- Autorebuild for GCC 4.3</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 1.3.8-1" date="1219795200">- update to ccid 1.3.8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 1.3.8-2" date="1366761600">- fix voltage issue</changelog>
</package>
<package pkgid="44e12040e653c620cc81fccf19c24c75954823a8" name="certmonger" arch="i386">
  <version epoch="0" ver="0.50" rel="3.el5"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.50-1" date="1318629600">- really fix these this time:
 - getcert: error out when "list -c" finds no matching CA (#743488)
 - getcert: error out when "list -i" finds no matching request (#743485)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.50-2" date="1322517600">- incorporate patch from Rob Crittenden to start supplying Referer:
  headers when we submit XML-RPC requests (#757883)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.50-3" date="1322517601">- backport fix to not crash when we get a D-Bus error with no name (#756745)</changelog>
</package>
<package pkgid="a4abdd48d6045362f9cd8a48d948fcb6ca52c862" name="compat-openldap" arch="i386">
  <version epoch="0" ver="2.3.43_2.2.29" rel="27.el5_10"/>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-25" date="1326326400">- fix: disable static libraries stripping (#684630)</changelog>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-26" date="1340755200">- fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#812772)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064145)</changelog>
</package>
<package pkgid="2fdfd05cb2185d7466693b59fa01d3654aa364a7" name="compat-openldap" arch="i386">
  <version epoch="0" ver="2.3.43_2.2.29" rel="29.el5_11"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064146)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-28" date="1397088000">- fix: syncprov psearch race condition (#999811)</changelog>
  <changelog author="Mat&#xFA;&#x161; Hon&#x11B;k &lt;mhonek@redhat.com&gt; - 2.3.43-29" date="1442534400">- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263170)</changelog>
</package>
<package pkgid="ad435e724d307901dafe6e2c30c853b9869d9b91" name="crash" arch="i386">
  <version epoch="0" ver="5.1.8" rel="3.el5_11"/>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 5.1.8-1.el5" date="1317772800">- Rebase to upstream version 5.1.8.
  Resolves: rhbz#715072

- Fix for the x86_64 "bt" command if the shutdown NMI is issued to a
  32-bit task that has executed a "sysenter" instruction and the RSP
  still contains the zero value loaded from the MSR_IA32_SYSENTER_ESP
  register.  The backtrace issued a warning message indicating 
  "WARNING: possibly bogus exception frame", and was unable to make a 
  transition from the NMI exception stack back to the process stack. 
  Resolves: rhbz#676408

- Fix for the x86 "bt" command for several backtraces of non-crashing
  active tasks that fail with "bt: cannot resolve stack trace" errors
  due to the failure to properly transition from the shutdown NMI stack 
  back to the process stack.
  Resolves: rhbz#713050

- Fix to more correctly determine the KVM I/O hole size and location.
  The I/O hole size to this point in time is either 1GB or 512MB, but
  its setting is hardwired into the Qemu code that was used to create 
  the dumpfile.  The dumpfile is a "savevm" file that is designed to be
  used for guest migration, and since inter-version save/load is not 
  supported, the I/O hole information does not have to be encoded into the
  dumpfile.  Without the patch, the I/O hole for dumpfiles created by 
  older Qemu version was not being set to 1GB, so if the KVM guest was 
  configured with more than 3GB of memory, the crash session would 
  typically display numerous "read error" messages during session 
  initialization.
  Resolves: rhbz#715070

- Fix for KVM dumpfiles from guests that were provisioned with more
  than 3.5GB of RAM.  KVM virtual systems contain an I/O hole in the
  physical memory region from 0xe0000000 to 0x100000000 (3.5GB to 4GB).
  If a guest is provisioned with more than 3.5GB of RAM, then the
  memory above 3.5GB is "pushed up" to start at 0x100000000 (4GB).
  But the "ram" device headers in the KVM dumpfiles do not reflect
  that, and so without the patch, numerous error messages would be
  displayed during invocation, and in all probability, the session
  would fail.
  Resolves: rhbz#716327</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 5.1.8-2.el5" date="1354665600">- Fix to handle xen dom0 dumpfiles created with "makedumpfile -d1" on very
  large systems, where the ELF vmcore may be mistakenly determined to be
  an old-style netdump vmcore.  
  Resolves: rhbz#876046</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 5.1.8-3.el5" date="1424217600">- Fix for kernel CVE-2014-9322
  Resolves: rhbz#1192396</changelog>
</package>
<package pkgid="69275a86b8c956c617be03cd7f2f6237a22f402c" name="crash-devel" arch="i386">
  <version epoch="0" ver="5.1.8" rel="3.el5_11"/>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 5.1.8-1.el5" date="1317772800">- Rebase to upstream version 5.1.8.
  Resolves: rhbz#715072

- Fix for the x86_64 "bt" command if the shutdown NMI is issued to a
  32-bit task that has executed a "sysenter" instruction and the RSP
  still contains the zero value loaded from the MSR_IA32_SYSENTER_ESP
  register.  The backtrace issued a warning message indicating 
  "WARNING: possibly bogus exception frame", and was unable to make a 
  transition from the NMI exception stack back to the process stack. 
  Resolves: rhbz#676408

- Fix for the x86 "bt" command for several backtraces of non-crashing
  active tasks that fail with "bt: cannot resolve stack trace" errors
  due to the failure to properly transition from the shutdown NMI stack 
  back to the process stack.
  Resolves: rhbz#713050

- Fix to more correctly determine the KVM I/O hole size and location.
  The I/O hole size to this point in time is either 1GB or 512MB, but
  its setting is hardwired into the Qemu code that was used to create 
  the dumpfile.  The dumpfile is a "savevm" file that is designed to be
  used for guest migration, and since inter-version save/load is not 
  supported, the I/O hole information does not have to be encoded into the
  dumpfile.  Without the patch, the I/O hole for dumpfiles created by 
  older Qemu version was not being set to 1GB, so if the KVM guest was 
  configured with more than 3GB of memory, the crash session would 
  typically display numerous "read error" messages during session 
  initialization.
  Resolves: rhbz#715070

- Fix for KVM dumpfiles from guests that were provisioned with more
  than 3.5GB of RAM.  KVM virtual systems contain an I/O hole in the
  physical memory region from 0xe0000000 to 0x100000000 (3.5GB to 4GB).
  If a guest is provisioned with more than 3.5GB of RAM, then the
  memory above 3.5GB is "pushed up" to start at 0x100000000 (4GB).
  But the "ram" device headers in the KVM dumpfiles do not reflect
  that, and so without the patch, numerous error messages would be
  displayed during invocation, and in all probability, the session
  would fail.
  Resolves: rhbz#716327</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 5.1.8-2.el5" date="1354665600">- Fix to handle xen dom0 dumpfiles created with "makedumpfile -d1" on very
  large systems, where the ELF vmcore may be mistakenly determined to be
  an old-style netdump vmcore.  
  Resolves: rhbz#876046</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 5.1.8-3.el5" date="1424217600">- Fix for kernel CVE-2014-9322
  Resolves: rhbz#1192396</changelog>
</package>
<package pkgid="ba77e3afe6993ad0b15b557872dff48c69db965b" name="cups" arch="i386">
  <version epoch="1" ver="1.3.7" rel="30.el5"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; 1:1.3.7-28" date="1316124000">- Web interface didn't show completed jobs for printer (STR #3436, bug #625900)
- Serial backend didn't allow a raw job to be canceled (STR #3649, bug #625955)
- Fixed condition in textonly filter to create temporary file
  regardless of the number of copies specified. (bug #660518)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; 1:1.3.7-29" date="1320789600">- The imageto* filters could crash with bad GIF files
  (CVE-2011-2896, STR #3867, STR #3914, bug #752118).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30" date="1326924000">- Backported patch to fix transcoding for ASCII (bug #759081, STR #3832).</changelog>
</package>
<package pkgid="82c1043fe3c6b6faaed6b6608e2ebc1983930a08" name="cups" arch="i386">
  <version epoch="1" ver="1.3.7" rel="30.el5_9.3"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30:.1" date="1360274400">- Applied patch to fix CVE-2012-5519 (privilege escalation for users
  in SystemGroup or with equivalent polkit permission).  This prevents
  HTTP PUT requests with paths under /admin/conf/ other than that for
  cupsd.conf, and also prevents such requests altering certain
  configuration directives such as PageLog and FileDevice (bug #875898).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30:.2" date="1360965600">- Added documentation for new CVE-2012-5519 option.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30:.3" date="1361829600">- Fix for CVE-2012-5519 patch: handle blacklisted lines that have no
  value part gracefully.</changelog>
</package>
<package pkgid="9254314b815eefd949d3f38980f56776e9d981cd" name="cups-devel" arch="i386">
  <version epoch="1" ver="1.3.7" rel="30.el5"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; 1:1.3.7-28" date="1316124000">- Web interface didn't show completed jobs for printer (STR #3436, bug #625900)
- Serial backend didn't allow a raw job to be canceled (STR #3649, bug #625955)
- Fixed condition in textonly filter to create temporary file
  regardless of the number of copies specified. (bug #660518)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; 1:1.3.7-29" date="1320789600">- The imageto* filters could crash with bad GIF files
  (CVE-2011-2896, STR #3867, STR #3914, bug #752118).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30" date="1326924000">- Backported patch to fix transcoding for ASCII (bug #759081, STR #3832).</changelog>
</package>
<package pkgid="c6d3837a298cdc8d10bf3df5d50ac3c64b128e78" name="cups-devel" arch="i386">
  <version epoch="1" ver="1.3.7" rel="30.el5_9.3"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30:.1" date="1360274400">- Applied patch to fix CVE-2012-5519 (privilege escalation for users
  in SystemGroup or with equivalent polkit permission).  This prevents
  HTTP PUT requests with paths under /admin/conf/ other than that for
  cupsd.conf, and also prevents such requests altering certain
  configuration directives such as PageLog and FileDevice (bug #875898).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30:.2" date="1360965600">- Added documentation for new CVE-2012-5519 option.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30:.3" date="1361829600">- Fix for CVE-2012-5519 patch: handle blacklisted lines that have no
  value part gracefully.</changelog>
</package>
<package pkgid="8faeea9f31518ffa7959dac62647eaaa7da71bc2" name="cups-libs" arch="i386">
  <version epoch="1" ver="1.3.7" rel="30.el5"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; 1:1.3.7-28" date="1316124000">- Web interface didn't show completed jobs for printer (STR #3436, bug #625900)
- Serial backend didn't allow a raw job to be canceled (STR #3649, bug #625955)
- Fixed condition in textonly filter to create temporary file
  regardless of the number of copies specified. (bug #660518)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; 1:1.3.7-29" date="1320789600">- The imageto* filters could crash with bad GIF files
  (CVE-2011-2896, STR #3867, STR #3914, bug #752118).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30" date="1326924000">- Backported patch to fix transcoding for ASCII (bug #759081, STR #3832).</changelog>
</package>
<package pkgid="33aa7625635fa546b6dfc5b88b8f32cd65d31939" name="cups-libs" arch="i386">
  <version epoch="1" ver="1.3.7" rel="30.el5_9.3"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30:.1" date="1360274400">- Applied patch to fix CVE-2012-5519 (privilege escalation for users
  in SystemGroup or with equivalent polkit permission).  This prevents
  HTTP PUT requests with paths under /admin/conf/ other than that for
  cupsd.conf, and also prevents such requests altering certain
  configuration directives such as PageLog and FileDevice (bug #875898).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30:.2" date="1360965600">- Added documentation for new CVE-2012-5519 option.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30:.3" date="1361829600">- Fix for CVE-2012-5519 patch: handle blacklisted lines that have no
  value part gracefully.</changelog>
</package>
<package pkgid="c44ad7cba5d7eb447f07dd91e7b45b31b4c9e909" name="cups-lpd" arch="i386">
  <version epoch="1" ver="1.3.7" rel="30.el5"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; 1:1.3.7-28" date="1316124000">- Web interface didn't show completed jobs for printer (STR #3436, bug #625900)
- Serial backend didn't allow a raw job to be canceled (STR #3649, bug #625955)
- Fixed condition in textonly filter to create temporary file
  regardless of the number of copies specified. (bug #660518)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; 1:1.3.7-29" date="1320789600">- The imageto* filters could crash with bad GIF files
  (CVE-2011-2896, STR #3867, STR #3914, bug #752118).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30" date="1326924000">- Backported patch to fix transcoding for ASCII (bug #759081, STR #3832).</changelog>
</package>
<package pkgid="b5cbe376ea088b268a09c6d187d2572852842e4a" name="cups-lpd" arch="i386">
  <version epoch="1" ver="1.3.7" rel="30.el5_9.3"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30:.1" date="1360274400">- Applied patch to fix CVE-2012-5519 (privilege escalation for users
  in SystemGroup or with equivalent polkit permission).  This prevents
  HTTP PUT requests with paths under /admin/conf/ other than that for
  cupsd.conf, and also prevents such requests altering certain
  configuration directives such as PageLog and FileDevice (bug #875898).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30:.2" date="1360965600">- Added documentation for new CVE-2012-5519 option.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.3.7-30:.3" date="1361829600">- Fix for CVE-2012-5519 patch: handle blacklisted lines that have no
  value part gracefully.</changelog>
</package>
<package pkgid="2d477ec4839ea62581c67241e632a523b2adb958" name="curl" arch="i386">
  <version epoch="0" ver="7.15.5" rel="15.el5"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-13" date="1312408800">- add a new option CURLOPT_GSSAPI_DELEGATION (#723643)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-14" date="1319234400">- fix stack smashing in the FTP implementation (#652557)
- fix proxy kerberos authentication (#657396)
- update running_handles counter properly in curl_multi_remove_handle (#688871)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-15" date="1319752800">- introduce the --delegation option of curl (#746849)</changelog>
</package>
<package pkgid="a170bdf13d458bc15abb25f9186a397b102cf8d5" name="curl" arch="i386">
  <version epoch="0" ver="7.15.5" rel="16.el5_9"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-14" date="1319234400">- fix stack smashing in the FTP implementation (#652557)
- fix proxy kerberos authentication (#657396)
- update running_handles counter properly in curl_multi_remove_handle (#688871)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-15" date="1319752800">- introduce the --delegation option of curl (#746849)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-16" date="1365890400">- fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944)</changelog>
</package>
<package pkgid="3e1e950eaedb5a1d25361e255933002dec534d21" name="curl" arch="i386">
  <version epoch="0" ver="7.15.5" rel="17.el5_9"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-15" date="1319752800">- introduce the --delegation option of curl (#746849)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-16" date="1365890400">- fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-17" date="1371247200">- fix heap-based buffer overflow in curl_easy_unescape() (CVE-2013-2174)</changelog>
</package>
<package pkgid="043504355f5b4877dbfcc5c6c5a3f344b8e466c0" name="curl" arch="i386">
  <version epoch="0" ver="7.15.5" rel="9.el5_6.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.15.5-9.el5_6.1" date="1295388000">- proxy tunnel support for LDAP requests (#670523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.15.5-9.el5_6.2" date="1295906400">- avoid use of uninitialized variable on failure of a LDAP request (#670523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-9.el5_6.3" date="1308866400">- do not delegate GSSAPI credentials (CVE-2011-2192)</changelog>
</package>
<package pkgid="320bf3d20e488ebb2ce84877443faa2057c3c100" name="curl-devel" arch="i386">
  <version epoch="0" ver="7.15.5" rel="15.el5"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-13" date="1312408800">- add a new option CURLOPT_GSSAPI_DELEGATION (#723643)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-14" date="1319234400">- fix stack smashing in the FTP implementation (#652557)
- fix proxy kerberos authentication (#657396)
- update running_handles counter properly in curl_multi_remove_handle (#688871)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-15" date="1319752800">- introduce the --delegation option of curl (#746849)</changelog>
</package>
<package pkgid="7926e6c4fd02fc1a432e281473221a4a7dc7efcc" name="curl-devel" arch="i386">
  <version epoch="0" ver="7.15.5" rel="16.el5_9"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-14" date="1319234400">- fix stack smashing in the FTP implementation (#652557)
- fix proxy kerberos authentication (#657396)
- update running_handles counter properly in curl_multi_remove_handle (#688871)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-15" date="1319752800">- introduce the --delegation option of curl (#746849)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-16" date="1365890400">- fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944)</changelog>
</package>
<package pkgid="e0d881bd853373e010f082f8632d3348dbcedf98" name="curl-devel" arch="i386">
  <version epoch="0" ver="7.15.5" rel="17.el5_9"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-15" date="1319752800">- introduce the --delegation option of curl (#746849)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-16" date="1365890400">- fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-17" date="1371247200">- fix heap-based buffer overflow in curl_easy_unescape() (CVE-2013-2174)</changelog>
</package>
<package pkgid="d75bf6eec883c1d38a5d70cc1f18210b4bfd80a9" name="curl-devel" arch="i386">
  <version epoch="0" ver="7.15.5" rel="9.el5_6.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.15.5-9.el5_6.1" date="1295388000">- proxy tunnel support for LDAP requests (#670523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.15.5-9.el5_6.2" date="1295906400">- avoid use of uninitialized variable on failure of a LDAP request (#670523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.15.5-9.el5_6.3" date="1308866400">- do not delegate GSSAPI credentials (CVE-2011-2192)</changelog>
</package>
<package pkgid="48e28ef430ffe4772f324283aeacbeae2d2a6d22" name="cvs" arch="i386">
  <version epoch="0" ver="1.11.22" rel="11.el5_8.1"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.11.22-10" date="1319580000">- Set PAM_TTY and PAM_RHOST on PAM authentication (Resolves: #538376)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.11.22-11" date="1325628000">- Fix assertion on CVSROOT with dot directory (Resolves: #769298)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.11.22-11.el5_8.1" date="1328133600">- Fix CVE-2012-0804 (Resolves: #784341)</changelog>
</package>
<package pkgid="d638121514b1193b8f23261ed80a21ab7fec2bb7" name="cvs-inetd" arch="i386">
  <version epoch="0" ver="1.11.22" rel="11.el5_8.1"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.11.22-10" date="1319580000">- Set PAM_TTY and PAM_RHOST on PAM authentication (Resolves: #538376)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.11.22-11" date="1325628000">- Fix assertion on CVSROOT with dot directory (Resolves: #769298)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.11.22-11.el5_8.1" date="1328133600">- Fix CVE-2012-0804 (Resolves: #784341)</changelog>
</package>
<package pkgid="57dfba36c4367371458990cad4c122a4c2b09a32" name="cyrus-imapd" arch="i386">
  <version epoch="0" ver="2.3.7" rel="12.el5_7.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-11" date="1301695200">- rebuild with updated patch</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-12" date="1305756000">- fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability</changelog>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 2.3.7-12.1" date="1315346400">- Resolves: #735389 - CVE-2011-3208 nntpd buffer overflow</changelog>
</package>
<package pkgid="06f53750ace5acc40e5e426565ef5c5674f34be0" name="cyrus-imapd" arch="i386">
  <version epoch="0" ver="2.3.7" rel="12.el5_7.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-12" date="1305756000">- fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability</changelog>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 2.3.7-12.1" date="1315346400">- Resolves: #735389 - CVE-2011-3208 nntpd buffer overflow</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-12.2" date="1317420000">- fix CVE-2011-3481: NULL pointer dereference via crafted 
  References header in email (#738391)
- fix CVE-2011-3372: nntpd authentication bypass (#740822)</changelog>
</package>
<package pkgid="7fa3e7bb40e1fa3e8a85e3e7ad9702d1c028cef3" name="cyrus-imapd" arch="i386">
  <version epoch="0" ver="2.3.7" rel="7.el5_6.4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-7.2" date="1252015200">- bump release for rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-7.3" date="1253224800">- fix more buffer overflows in cyrus sieve (CVE-2009-3235)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-7.4" date="1305756000">- fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability</changelog>
</package>
<package pkgid="076f13a19cc35d18421abc1c3ece74f23bd72790" name="cyrus-imapd-devel" arch="i386">
  <version epoch="0" ver="2.3.7" rel="12.el5_7.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-11" date="1301695200">- rebuild with updated patch</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-12" date="1305756000">- fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability</changelog>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 2.3.7-12.1" date="1315346400">- Resolves: #735389 - CVE-2011-3208 nntpd buffer overflow</changelog>
</package>
<package pkgid="b6b171ac4c9b1849c9c01b0e94e6d548b6221d33" name="cyrus-imapd-devel" arch="i386">
  <version epoch="0" ver="2.3.7" rel="12.el5_7.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-12" date="1305756000">- fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability</changelog>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 2.3.7-12.1" date="1315346400">- Resolves: #735389 - CVE-2011-3208 nntpd buffer overflow</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-12.2" date="1317420000">- fix CVE-2011-3481: NULL pointer dereference via crafted 
  References header in email (#738391)
- fix CVE-2011-3372: nntpd authentication bypass (#740822)</changelog>
</package>
<package pkgid="52b53426b08aec715956fc7eac953148966bd74e" name="cyrus-imapd-devel" arch="i386">
  <version epoch="0" ver="2.3.7" rel="7.el5_6.4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-7.2" date="1252015200">- bump release for rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-7.3" date="1253224800">- fix more buffer overflows in cyrus sieve (CVE-2009-3235)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-7.4" date="1305756000">- fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability</changelog>
</package>
<package pkgid="b577e86e6157670f9d0c3593c5fcdf2e14e28ee2" name="cyrus-imapd-perl" arch="i386">
  <version epoch="0" ver="2.3.7" rel="12.el5_7.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-11" date="1301695200">- rebuild with updated patch</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-12" date="1305756000">- fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability</changelog>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 2.3.7-12.1" date="1315346400">- Resolves: #735389 - CVE-2011-3208 nntpd buffer overflow</changelog>
</package>
<package pkgid="6ade0811d6aebeb9fcf609fda227abd2d59b46f7" name="cyrus-imapd-perl" arch="i386">
  <version epoch="0" ver="2.3.7" rel="12.el5_7.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-12" date="1305756000">- fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability</changelog>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 2.3.7-12.1" date="1315346400">- Resolves: #735389 - CVE-2011-3208 nntpd buffer overflow</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-12.2" date="1317420000">- fix CVE-2011-3481: NULL pointer dereference via crafted 
  References header in email (#738391)
- fix CVE-2011-3372: nntpd authentication bypass (#740822)</changelog>
</package>
<package pkgid="a1b0a4b1f98bc400e0c15819f5cfdd773a860740" name="cyrus-imapd-perl" arch="i386">
  <version epoch="0" ver="2.3.7" rel="7.el5_6.4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-7.2" date="1252015200">- bump release for rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-7.3" date="1253224800">- fix more buffer overflows in cyrus sieve (CVE-2009-3235)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-7.4" date="1305756000">- fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability</changelog>
</package>
<package pkgid="2bdc3ab31e52adb8a8f746038424500583ce2b9b" name="cyrus-imapd-utils" arch="i386">
  <version epoch="0" ver="2.3.7" rel="12.el5_7.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-11" date="1301695200">- rebuild with updated patch</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-12" date="1305756000">- fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability</changelog>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 2.3.7-12.1" date="1315346400">- Resolves: #735389 - CVE-2011-3208 nntpd buffer overflow</changelog>
</package>
<package pkgid="4754fdef542d3ab3fbe2a9ce367ed24bc7dd5443" name="cyrus-imapd-utils" arch="i386">
  <version epoch="0" ver="2.3.7" rel="12.el5_7.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-12" date="1305756000">- fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability</changelog>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 2.3.7-12.1" date="1315346400">- Resolves: #735389 - CVE-2011-3208 nntpd buffer overflow</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-12.2" date="1317420000">- fix CVE-2011-3481: NULL pointer dereference via crafted 
  References header in email (#738391)
- fix CVE-2011-3372: nntpd authentication bypass (#740822)</changelog>
</package>
<package pkgid="c1b269fa7267fdd33999edc6795a829eabd4bb9d" name="cyrus-imapd-utils" arch="i386">
  <version epoch="0" ver="2.3.7" rel="7.el5_6.4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-7.2" date="1252015200">- bump release for rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-7.3" date="1253224800">- fix more buffer overflows in cyrus sieve (CVE-2009-3235)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.3.7-7.4" date="1305756000">- fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability</changelog>
</package>
<package pkgid="0d9f094fa453ad1f2b4bc3e9d9ad2a32a6011834" name="cyrus-sasl" arch="i386">
  <version epoch="0" ver="2.1.22" rel="7.el5_8.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.1.22-5" date="1240956000">- install the shared version of pluginviewer and other tools (#473197)
- remove potentially patented srp plugin which was not built
  anyway (#368421)
- include crypt.h for missing prototype (#433583)
- implement reload as conditional restart in the init script (#448154)
- set the LDAP_OPT_TIMEOUT in the ldap plugin (#475726)</changelog>
  <changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 2.1.22-6" date="1267048800">- solve race condition (#560532)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.22-7.1" date="1345500000">- fix several memory leaks (#837053)</changelog>
</package>
<package pkgid="798872fb350d759b09b092513dc9293b3da1a6fc" name="cyrus-sasl-devel" arch="i386">
  <version epoch="0" ver="2.1.22" rel="7.el5_8.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.1.22-5" date="1240956000">- install the shared version of pluginviewer and other tools (#473197)
- remove potentially patented srp plugin which was not built
  anyway (#368421)
- include crypt.h for missing prototype (#433583)
- implement reload as conditional restart in the init script (#448154)
- set the LDAP_OPT_TIMEOUT in the ldap plugin (#475726)</changelog>
  <changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 2.1.22-6" date="1267048800">- solve race condition (#560532)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.22-7.1" date="1345500000">- fix several memory leaks (#837053)</changelog>
</package>
<package pkgid="7b2eeeca8a95893015fe4d3eddd9faafd8b9b4c7" name="cyrus-sasl-gssapi" arch="i386">
  <version epoch="0" ver="2.1.22" rel="7.el5_8.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.1.22-5" date="1240956000">- install the shared version of pluginviewer and other tools (#473197)
- remove potentially patented srp plugin which was not built
  anyway (#368421)
- include crypt.h for missing prototype (#433583)
- implement reload as conditional restart in the init script (#448154)
- set the LDAP_OPT_TIMEOUT in the ldap plugin (#475726)</changelog>
  <changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 2.1.22-6" date="1267048800">- solve race condition (#560532)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.22-7.1" date="1345500000">- fix several memory leaks (#837053)</changelog>
</package>
<package pkgid="17da0c5cbfd3f018152f68ebbb2f5dad5a1e8747" name="cyrus-sasl-ldap" arch="i386">
  <version epoch="0" ver="2.1.22" rel="7.el5_8.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.1.22-5" date="1240956000">- install the shared version of pluginviewer and other tools (#473197)
- remove potentially patented srp plugin which was not built
  anyway (#368421)
- include crypt.h for missing prototype (#433583)
- implement reload as conditional restart in the init script (#448154)
- set the LDAP_OPT_TIMEOUT in the ldap plugin (#475726)</changelog>
  <changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 2.1.22-6" date="1267048800">- solve race condition (#560532)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.22-7.1" date="1345500000">- fix several memory leaks (#837053)</changelog>
</package>
<package pkgid="7b51c075c8019727696a501c35048bcb8f1d8db4" name="cyrus-sasl-lib" arch="i386">
  <version epoch="0" ver="2.1.22" rel="7.el5_8.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.1.22-5" date="1240956000">- install the shared version of pluginviewer and other tools (#473197)
- remove potentially patented srp plugin which was not built
  anyway (#368421)
- include crypt.h for missing prototype (#433583)
- implement reload as conditional restart in the init script (#448154)
- set the LDAP_OPT_TIMEOUT in the ldap plugin (#475726)</changelog>
  <changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 2.1.22-6" date="1267048800">- solve race condition (#560532)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.22-7.1" date="1345500000">- fix several memory leaks (#837053)</changelog>
</package>
<package pkgid="864c874e2d03e377c7b3ecc764147e65efdaec68" name="cyrus-sasl-md5" arch="i386">
  <version epoch="0" ver="2.1.22" rel="7.el5_8.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.1.22-5" date="1240956000">- install the shared version of pluginviewer and other tools (#473197)
- remove potentially patented srp plugin which was not built
  anyway (#368421)
- include crypt.h for missing prototype (#433583)
- implement reload as conditional restart in the init script (#448154)
- set the LDAP_OPT_TIMEOUT in the ldap plugin (#475726)</changelog>
  <changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 2.1.22-6" date="1267048800">- solve race condition (#560532)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.22-7.1" date="1345500000">- fix several memory leaks (#837053)</changelog>
</package>
<package pkgid="060de372b5585fa8dcf7a2c6ecbe3067c07a9100" name="cyrus-sasl-ntlm" arch="i386">
  <version epoch="0" ver="2.1.22" rel="7.el5_8.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.1.22-5" date="1240956000">- install the shared version of pluginviewer and other tools (#473197)
- remove potentially patented srp plugin which was not built
  anyway (#368421)
- include crypt.h for missing prototype (#433583)
- implement reload as conditional restart in the init script (#448154)
- set the LDAP_OPT_TIMEOUT in the ldap plugin (#475726)</changelog>
  <changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 2.1.22-6" date="1267048800">- solve race condition (#560532)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.22-7.1" date="1345500000">- fix several memory leaks (#837053)</changelog>
</package>
<package pkgid="4f628e7547beef51ae7291c9847a33cb32619ef3" name="cyrus-sasl-plain" arch="i386">
  <version epoch="0" ver="2.1.22" rel="7.el5_8.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.1.22-5" date="1240956000">- install the shared version of pluginviewer and other tools (#473197)
- remove potentially patented srp plugin which was not built
  anyway (#368421)
- include crypt.h for missing prototype (#433583)
- implement reload as conditional restart in the init script (#448154)
- set the LDAP_OPT_TIMEOUT in the ldap plugin (#475726)</changelog>
  <changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 2.1.22-6" date="1267048800">- solve race condition (#560532)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.22-7.1" date="1345500000">- fix several memory leaks (#837053)</changelog>
</package>
<package pkgid="cb53b2a7e6af7248e619bd65333540b0f8da9f60" name="cyrus-sasl-sql" arch="i386">
  <version epoch="0" ver="2.1.22" rel="7.el5_8.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.1.22-5" date="1240956000">- install the shared version of pluginviewer and other tools (#473197)
- remove potentially patented srp plugin which was not built
  anyway (#368421)
- include crypt.h for missing prototype (#433583)
- implement reload as conditional restart in the init script (#448154)
- set the LDAP_OPT_TIMEOUT in the ldap plugin (#475726)</changelog>
  <changelog author="Jan F. Chadima &lt;jchadima@redhat.com&gt; - 2.1.22-6" date="1267048800">- solve race condition (#560532)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.22-7.1" date="1345500000">- fix several memory leaks (#837053)</changelog>
</package>
<package pkgid="59f3d5f1d1d66b29c189bce4bab2d9f2fe50651a" name="dbus" arch="i386">
  <version epoch="0" ver="1.1.2" rel="16.el5_7"/>
  <changelog author="David Zeuthen &lt;davidz@redhat.com&gt; - 1.1.2-14.el5_7" date="1261173600">- CVE-2009-1189 dbus: invalid fix for CVE-2008-3834</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.2-15.el5_7" date="1300485600">- Fix for CVE-2010-4352
- Resolves: #684850</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.1.2-16" date="1311890400">- CVE-2011-2200
- Resolves: #725311</changelog>
</package>
<package pkgid="95ccc70a82b22371208d79cc998142d2e1f42660" name="dbus-devel" arch="i386">
  <version epoch="0" ver="1.1.2" rel="16.el5_7"/>
  <changelog author="David Zeuthen &lt;davidz@redhat.com&gt; - 1.1.2-14.el5_7" date="1261173600">- CVE-2009-1189 dbus: invalid fix for CVE-2008-3834</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.2-15.el5_7" date="1300485600">- Fix for CVE-2010-4352
- Resolves: #684850</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.1.2-16" date="1311890400">- CVE-2011-2200
- Resolves: #725311</changelog>
</package>
<package pkgid="09d1a3a9891d3fe151673a8cd9cb5918cd1bffa6" name="dbus-glib" arch="i386">
  <version epoch="0" ver="0.73" rel="11.el5_9"/>
  <changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 0.73-8" date="1221516000">- Update to 0.73 with backports from 0.74
- Resolves: #455792</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 0.73-10" date="1272578400">- Add patch to fix CVE-2010-1172
  Drop broken-xml.patch which this one now incorporates
  Resolves: #585395</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.73-11" date="1361397600">- Add patch to fix CVE-2013-0292
- Resolves: #913072</changelog>
</package>
<package pkgid="dc67026374fed5e50ddea1f222f2651e0bab63ba" name="dbus-glib-devel" arch="i386">
  <version epoch="0" ver="0.73" rel="11.el5_9"/>
  <changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 0.73-8" date="1221516000">- Update to 0.73 with backports from 0.74
- Resolves: #455792</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 0.73-10" date="1272578400">- Add patch to fix CVE-2010-1172
  Drop broken-xml.patch which this one now incorporates
  Resolves: #585395</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.73-11" date="1361397600">- Add patch to fix CVE-2013-0292
- Resolves: #913072</changelog>
</package>
<package pkgid="519492cd163995b9e06c364bb551fab8335c0355" name="dbus-libs" arch="i386">
  <version epoch="0" ver="1.1.2" rel="16.el5_7"/>
  <changelog author="David Zeuthen &lt;davidz@redhat.com&gt; - 1.1.2-14.el5_7" date="1261173600">- CVE-2009-1189 dbus: invalid fix for CVE-2008-3834</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.2-15.el5_7" date="1300485600">- Fix for CVE-2010-4352
- Resolves: #684850</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.1.2-16" date="1311890400">- CVE-2011-2200
- Resolves: #725311</changelog>
</package>
<package pkgid="e951e5199becb0a156ce74e0c094024391071561" name="dbus-x11" arch="i386">
  <version epoch="0" ver="1.1.2" rel="16.el5_7"/>
  <changelog author="David Zeuthen &lt;davidz@redhat.com&gt; - 1.1.2-14.el5_7" date="1261173600">- CVE-2009-1189 dbus: invalid fix for CVE-2008-3834</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.2-15.el5_7" date="1300485600">- Fix for CVE-2010-4352
- Resolves: #684850</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.1.2-16" date="1311890400">- CVE-2011-2200
- Resolves: #725311</changelog>
</package>
<package pkgid="dfa3e85581531563d2d5bec76bf802999b0f4aca" name="devhelp" arch="i386">
  <version epoch="0" ver="0.12" rel="23.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.12-21" date="1271282400">- Rebuild against xulrunner</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.12-22" date="1328911200">- Patched for new xulrunner</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.12-23" date="1353016800">- Patched for new xulrunner</changelog>
</package>
<package pkgid="c39340340682e34e4ed029d5ac5d336ef1d7c86d" name="devhelp-devel" arch="i386">
  <version epoch="0" ver="0.12" rel="23.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.12-21" date="1271282400">- Rebuild against xulrunner</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.12-22" date="1328911200">- Patched for new xulrunner</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.12-23" date="1353016800">- Patched for new xulrunner</changelog>
</package>
<package pkgid="73214b52f3bbf2a56332e8802dbd5257f6872e29" name="dhclient" arch="i386">
  <version epoch="12" ver="3.0.5" rel="29.el5_7.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-28" date="1302213600">- Better fix for CVE-2011-0997: making domain-name check more lenient (RHBZ #690577)
- dhclient requests interface-mtu option by default (RHBZ #694264)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-29" date="1302300000">- dhclient.conf(5), dhclient(8) mention that interface-mtu option
  is also requested by default (RHBZ #694264)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-29.1" date="1313100000">- A pair of defects cause the server to halt upon processing certain packets
  (CVE-2011-2748, CVE-2011-2749, #729880)</changelog>
</package>
<package pkgid="b97bc153a7dca83814f8d5fd8aa455f4bb2046d5" name="dhclient" arch="i386">
  <version epoch="12" ver="3.0.5" rel="31.el5_8.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-30" date="1313100000">- A pair of defects cause the server to halt upon processing certain packets
  (CVE-2011-2748, CVE-2011-2749, #729881)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-31" date="1315951200">- Propagate libdhcp timeout to internal timeout_arg (RHBZ #736515)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-31.1" date="1343340000">- An error in the handling of malformed client identifiers can
  cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843124)</changelog>
</package>
<package pkgid="3b0f80216fe61f495a856e72f09dad5a9804a255" name="dhcp" arch="i386">
  <version epoch="12" ver="3.0.5" rel="29.el5_7.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-28" date="1302213600">- Better fix for CVE-2011-0997: making domain-name check more lenient (RHBZ #690577)
- dhclient requests interface-mtu option by default (RHBZ #694264)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-29" date="1302300000">- dhclient.conf(5), dhclient(8) mention that interface-mtu option
  is also requested by default (RHBZ #694264)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-29.1" date="1313100000">- A pair of defects cause the server to halt upon processing certain packets
  (CVE-2011-2748, CVE-2011-2749, #729880)</changelog>
</package>
<package pkgid="f9a5622bdfd6fd93b456f040cd6fac118f37c8bd" name="dhcp" arch="i386">
  <version epoch="12" ver="3.0.5" rel="31.el5_8.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-30" date="1313100000">- A pair of defects cause the server to halt upon processing certain packets
  (CVE-2011-2748, CVE-2011-2749, #729881)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-31" date="1315951200">- Propagate libdhcp timeout to internal timeout_arg (RHBZ #736515)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-31.1" date="1343340000">- An error in the handling of malformed client identifiers can
  cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843124)</changelog>
</package>
<package pkgid="eaa6d79f4376655aea2eac83062cc3947f1e1d40" name="dhcp-devel" arch="i386">
  <version epoch="12" ver="3.0.5" rel="29.el5_7.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-28" date="1302213600">- Better fix for CVE-2011-0997: making domain-name check more lenient (RHBZ #690577)
- dhclient requests interface-mtu option by default (RHBZ #694264)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-29" date="1302300000">- dhclient.conf(5), dhclient(8) mention that interface-mtu option
  is also requested by default (RHBZ #694264)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-29.1" date="1313100000">- A pair of defects cause the server to halt upon processing certain packets
  (CVE-2011-2748, CVE-2011-2749, #729880)</changelog>
</package>
<package pkgid="081e0f8b39dd16b50f3d5ba5a721659209f255f1" name="dhcp-devel" arch="i386">
  <version epoch="12" ver="3.0.5" rel="31.el5_8.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-30" date="1313100000">- A pair of defects cause the server to halt upon processing certain packets
  (CVE-2011-2748, CVE-2011-2749, #729881)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-31" date="1315951200">- Propagate libdhcp timeout to internal timeout_arg (RHBZ #736515)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-31.1" date="1343340000">- An error in the handling of malformed client identifiers can
  cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843124)</changelog>
</package>
<package pkgid="4a9b11a59289377599624a58fa7d003cf74b8ef4" name="dovecot" arch="i386">
  <version epoch="0" ver="1.0.7" rel="7.el5_7.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.7-6" date="1225490400">- added missing directory in file list
- Resolves: #436287</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.7-7" date="1227564000">- permissions of deliver and dovecot.conf from 1.0.7-5 reverted
- password can be stored in different file readable only for root now
- Resolves: #436287, CVE-2008-4870</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.7-7.1" date="1312840800">- fix potential crash when parsing header names that contain NUL characters (#728670)</changelog>
</package>
<package pkgid="c8308bb9a4e55f8e3ac96a20c6623db16aff661c" name="ecryptfs-utils" arch="i386">
  <version epoch="0" ver="75" rel="5.el5_7.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; 75-5" date="1243980000">- add icon to gui</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 75-5.1" date="1313100000">- security fixes:
- privilege escalation via mountpoint race conditions (CVE-2011-1831, CVE-2011-1832)
- race condition when checking source during mount (CVE-2011-1833)
- mtab corruption via improper handling (CVE-2011-1834)
- key poisoning via insecure temp directory handling (CVE-2011-1835)
- arbitrary file overwrite via lock counter race (CVE-2011-1837)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 75-5.2" date="1314136800">- do not forget to set the group id in mount.ecryptfs_private</changelog>
</package>
<package pkgid="54a7489335acae563b7ad5d877f0a3f79ccbe8c8" name="ecryptfs-utils-devel" arch="i386">
  <version epoch="0" ver="75" rel="5.el5_7.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; 75-5" date="1243980000">- add icon to gui</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 75-5.1" date="1313100000">- security fixes:
- privilege escalation via mountpoint race conditions (CVE-2011-1831, CVE-2011-1832)
- race condition when checking source during mount (CVE-2011-1833)
- mtab corruption via improper handling (CVE-2011-1834)
- key poisoning via insecure temp directory handling (CVE-2011-1835)
- arbitrary file overwrite via lock counter race (CVE-2011-1837)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 75-5.2" date="1314136800">- do not forget to set the group id in mount.ecryptfs_private</changelog>
</package>
<package pkgid="c2463728ef1233ebac66f7760a6565c01a1519d2" name="ecryptfs-utils-gui" arch="i386">
  <version epoch="0" ver="75" rel="5.el5_7.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; 75-5" date="1243980000">- add icon to gui</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 75-5.1" date="1313100000">- security fixes:
- privilege escalation via mountpoint race conditions (CVE-2011-1831, CVE-2011-1832)
- race condition when checking source during mount (CVE-2011-1833)
- mtab corruption via improper handling (CVE-2011-1834)
- key poisoning via insecure temp directory handling (CVE-2011-1835)
- arbitrary file overwrite via lock counter race (CVE-2011-1837)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 75-5.2" date="1314136800">- do not forget to set the group id in mount.ecryptfs_private</changelog>
</package>
<package pkgid="4914a8a9431f31e8f0b18e3cfaeb38cf4367a04b" name="elinks" arch="i386">
  <version epoch="0" ver="0.11.1" rel="8.el5_9"/>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; 0.11.1-6" date="1190757600">- fix #297611 - CVE-2007-5034 elinks reveals POST data to HTTPS proxy</changelog>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; 0.11.1-7" date="1253916000">- fix #235411 - CVE-2007-2027 - elinks tries to load .po files
  from non-absolute path
- fix #523258 - CVE-2008-7224 - entity_cache static array buffer
  overflow</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.11.1-8" date="1351548000">- do not delegate GSSAPI credentials (CVE-2012-4545)</changelog>
</package>
<package pkgid="5ef31d28d6570603d6c20fe91764c2a56fa923c9" name="expat" arch="i386">
  <version epoch="0" ver="1.95.8" rel="11.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.95.8-9" date="1274997600">- add security fix for CVE-2009-3720 (#531711)
- add security fix for CVE-2009-3560, without regression (#556415)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.95.8-10" date="1334268000">- add security fix for CVE-2012-1148 (#811823)
- add security fix for CVE-2012-0876 (#811831)
- run test suite during build</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.95.8-11" date="1335564000">- use symbol version for XML_SetHashSalt (CVE-2012-0876, #816306)</changelog>
</package>
<package pkgid="152b04622289e4568dc2693f8002671fc7cd5ff4" name="expat-devel" arch="i386">
  <version epoch="0" ver="1.95.8" rel="11.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.95.8-9" date="1274997600">- add security fix for CVE-2009-3720 (#531711)
- add security fix for CVE-2009-3560, without regression (#556415)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.95.8-10" date="1334268000">- add security fix for CVE-2012-1148 (#811823)
- add security fix for CVE-2012-0876 (#811831)
- run test suite during build</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.95.8-11" date="1335564000">- use symbol version for XML_SetHashSalt (CVE-2012-0876, #816306)</changelog>
</package>
<package pkgid="894feb9f6a8e128ca0c3c9c7fad2546aa442681f" name="finch" arch="i386">
  <version epoch="0" ver="2.6.6" rel="11.el5.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.2" date="1341439200">- Add patch for CVE-2012-2318 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.3" date="1341439201">- Add patch for CVE-2012-3374 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.4" date="1341871200">- Add patch for CVE-2011-2485 (RH bug #837559).</changelog>
</package>
<package pkgid="8d5ccf07f08d8e5892e567ad336183cd1738a735" name="finch" arch="i386">
  <version epoch="0" ver="2.6.6" rel="17.el5_9.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-16.el5" date="1361570400">- Add patch for CVE-2013-0273 (RH bug #910651).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-17.el5" date="1361570401">- Add patch for CVE-2013-0274 (RH bug #910651).</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 2.6.6-17.el5_9.1" date="1362434400">- Fix spec file for disttag</changelog>
</package>
<package pkgid="5fd6b033181c7978fe7558794d4b00284cef82ce" name="finch" arch="i386">
  <version epoch="0" ver="2.6.6" rel="32.el5"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-30.el5" date="1391040000">- Add patch for CVE-2013-6490 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-31.el5" date="1391040001">- Add patch for CVE-2014-0020 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-32.el5" date="1391472000">- Fix regression in CVE-2013-6483.</changelog>
</package>
<package pkgid="954b7ef2de387a0b6ce1d7a0374bc8553510e9ad" name="finch" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.1" date="1318370400">- Add patch for CVE-2011-1091 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.2" date="1318370401">- Add patch for CVE-2011-3594 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.1" date="1318456800">- I messed up the release tag.  Fix it to use the proper form.</changelog>
</package>
<package pkgid="c9dd66a30effc91aae44e5a175ea3993e97f2e3a" name="finch" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.2" date="1323727200">- Add patch for CVE-2011-4601 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.3" date="1323727201">- Add patch for CVE-2011-4602 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.4" date="1323727202">- Add patch for CVE-2011-4603 (RH bug #766450).</changelog>
</package>
<package pkgid="0ad1d63c112436576482ab6bb5f9255fcba59f1b" name="finch-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="11.el5.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.2" date="1341439200">- Add patch for CVE-2012-2318 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.3" date="1341439201">- Add patch for CVE-2012-3374 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.4" date="1341871200">- Add patch for CVE-2011-2485 (RH bug #837559).</changelog>
</package>
<package pkgid="2876a27d9688dd63d349c9f736362ecda13e0f0f" name="finch-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="17.el5_9.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-16.el5" date="1361570400">- Add patch for CVE-2013-0273 (RH bug #910651).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-17.el5" date="1361570401">- Add patch for CVE-2013-0274 (RH bug #910651).</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 2.6.6-17.el5_9.1" date="1362434400">- Fix spec file for disttag</changelog>
</package>
<package pkgid="e8cb1d389676069c992141507d1a17bfec29cc8a" name="finch-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="32.el5"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-30.el5" date="1391040000">- Add patch for CVE-2013-6490 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-31.el5" date="1391040001">- Add patch for CVE-2014-0020 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-32.el5" date="1391472000">- Fix regression in CVE-2013-6483.</changelog>
</package>
<package pkgid="9623d344a727fa043bfcdc1d4a0dedfade9e2a20" name="finch-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.1" date="1318370400">- Add patch for CVE-2011-1091 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.2" date="1318370401">- Add patch for CVE-2011-3594 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.1" date="1318456800">- I messed up the release tag.  Fix it to use the proper form.</changelog>
</package>
<package pkgid="b77c16f6bf95e50cadea11e4485fde5d109a4f27" name="finch-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.2" date="1323727200">- Add patch for CVE-2011-4601 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.3" date="1323727201">- Add patch for CVE-2011-4602 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.4" date="1323727202">- Add patch for CVE-2011-4603 (RH bug #766450).</changelog>
</package>
<package pkgid="8a2ec3492823e33344f0a135ac02ee8ff1521f38" name="firefox" arch="i386">
  <version epoch="0" ver="10.0.10" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349560800">- Update to 10.0.8 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.8-2" date="1349992800">- Fixed rhbz#865284 - add the storage.nfs_filesystem
  config key to property list
- disable OOP for wrapped plugins (nspluginwrapper)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.10-1" date="1351202400">- Update to 10.0.10 ESR</changelog>
</package>
<package pkgid="d1520e223166ce17d3833bd073f2cb6dea37fe26" name="firefox" arch="i386">
  <version epoch="0" ver="10.0.11" rel="1.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.10-1" date="1351202400">- Update to 10.0.10 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.10-2" date="1352152800">- Enabled OOP for wrapped plugins (rhbz#871568)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.11-1" date="1353103200">- Update to 10.0.11 ESR</changelog>
</package>
<package pkgid="1e6b48c5fa032aef49a157bddcd35d63a9b734ff" name="firefox" arch="i386">
  <version epoch="0" ver="10.0.12" rel="1.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.10-2" date="1352152800">- Enabled OOP for wrapped plugins (rhbz#871568)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.11-1" date="1353103200">- Update to 10.0.11 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.12-1" date="1357336800">- Update to 10.0.12 ESR</changelog>
</package>
<package pkgid="62ff78c1aee530a31efcf87b2330cb7ff9048c7a" name="firefox" arch="i386">
  <version epoch="0" ver="10.0.3" rel="1.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0-3" date="1328652000">- Update to 10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.1-1" date="1328824800">- Update to 10.0.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.3-1" date="1331071200">- Update to 10.0.3 ESR</changelog>
</package>
<package pkgid="495cbeaa7df6df436c30a3c736b6b939b9cabd31" name="firefox" arch="i386">
  <version epoch="0" ver="10.0.4" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.1-1" date="1328824800">- Update to 10.0.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.3-1" date="1331071200">- Update to 10.0.3 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.4-1" date="1335132000">- Update to 10.0.4 ESR</changelog>
</package>
<package pkgid="8ec47a3854fc8c9fc7311b538758fcdb982b9189" name="firefox" arch="i386">
  <version epoch="0" ver="10.0.5" rel="1.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.3-1" date="1331071200">- Update to 10.0.3 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.4-1" date="1335132000">- Update to 10.0.4 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.5-1" date="1338588000">- Update to 10.0.5 ESR</changelog>
</package>
<package pkgid="36d778f45198f123bd29f5512d81f8f883c2193c" name="firefox" arch="i386">
  <version epoch="0" ver="10.0.6" rel="1.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.5-1" date="1338588000">- Update to 10.0.5 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.5-2" date="1340661600">- Added fix for mozbz#703633, rhbz#818341</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.6-1" date="1342476000">- Update to 10.0.6 ESR</changelog>
</package>
<package pkgid="1ac85e4d196c577aa9e4ac073c16b3b38f213b8f" name="firefox" arch="i386">
  <version epoch="0" ver="10.0.7" rel="1.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.5-2" date="1340661600">- Added fix for mozbz#703633, rhbz#818341</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.6-1" date="1342476000">- Update to 10.0.6 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.7-1" date="1346018400">- Update to 10.0.7 ESR</changelog>
</package>
<package pkgid="595728c5e6c0f92b5777c6b3ab50e2891c323d73" name="firefox" arch="i386">
  <version epoch="0" ver="10.0.8" rel="1.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.6-1" date="1342476000">- Update to 10.0.6 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.7-1" date="1346018400">- Update to 10.0.7 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349560800">- Update to 10.0.8 ESR</changelog>
</package>
<package pkgid="faa5199c51b07d974e85275c141d67ea7293f12a" name="firefox" arch="i386">
  <version epoch="0" ver="17.0.10" rel="1.el5_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-4" date="1378252800">- Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
  pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.9-1" date="1379030400">- Update to 17.0.9 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.10-1" date="1382572800">- Update to 17.0.10 ESR</changelog>
</package>
<package pkgid="fc3bcdc918c08149dc1b5351c14a9a0c3447433b" name="firefox" arch="i386">
  <version epoch="0" ver="17.0.3" rel="1.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-1" date="1358200800">- Update to 17.0.2 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-2" date="1358287200">- Added NM preferences</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361052000">- Update to 17.0.3 ESR</changelog>
</package>
<package pkgid="0c416259ebb91a22c6beae7b94f6b4bc4ef22693" name="firefox" arch="i386">
  <version epoch="0" ver="17.0.5" rel="1.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-2" date="1358287200">- Added NM preferences</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361052000">- Update to 17.0.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364594400">- Update to 17.0.5 ESR</changelog>
</package>
<package pkgid="ced5b9eb17d9e3c76c1f2d6e057cbe72fbf18b15" name="firefox" arch="i386">
  <version epoch="0" ver="17.0.6" rel="1.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364594400">- Update to 17.0.5 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.5-2" date="1366322400">- Updated Xulrunner SDK check</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-1" date="1368223200">- Update to 17.0.6 ESR</changelog>
</package>
<package pkgid="1883f9aa9af7dc7056339329aadd85b9b7c4787f" name="firefox" arch="i386">
  <version epoch="0" ver="17.0.7" rel="1.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.5-2" date="1366322400">- Updated Xulrunner SDK check</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-1" date="1368223200">- Update to 17.0.6 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.7-1" date="1371679200">- Update to 17.0.7 ESR</changelog>
</package>
<package pkgid="cc904550d274334311c71b5328437996aba05d54" name="firefox" arch="i386">
  <version epoch="0" ver="17.0.8" rel="1.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-1" date="1368223200">- Update to 17.0.6 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.7-1" date="1371679200">- Update to 17.0.7 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-1" date="1375308000">- Update to 17.0.8 ESR</changelog>
</package>
<package pkgid="7653975a8d166611d6a900b1dd57df8c62e179c1" name="firefox" arch="i386">
  <version epoch="0" ver="17.0.9" rel="1.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-3" date="1378166400">- Fixed rhbz#818636 - Firefox allows install of addons,
  disregarding xpinstall.enabled flag set as false.</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-4" date="1378252800">- Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
  pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.9-1" date="1379030400">- Update to 17.0.9 ESR</changelog>
</package>
<package pkgid="3f196633687c3d1f00c5dd3b679fa1bd8109ec8a" name="firefox" arch="i386">
  <version epoch="0" ver="24.2.0" rel="1.el5_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.10-1" date="1382572800">- Update to 17.0.10 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.1.0-2" date="1385596800">- Update to 24.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.2.0-1" date="1386374400">- Update to 24.2.0 ESR</changelog>
</package>
<package pkgid="7a9ee29df59809e74d2cda07ff60dd6b09dee646" name="firefox" arch="i386">
  <version epoch="0" ver="24.3.0" rel="2.el5_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.2.0-2" date="1388793600">- Added workaround for rhbz#1044010 - JIT crashes</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.2.0-3" date="1389139200">- Added workaround for rhbz#1044010 - JIT crashes,
  disabled baseline JIT</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.3.0-2" date="1391299200">- Update to 24.3.0 ESR Build 2</changelog>
</package>
<package pkgid="71705791f825e709164bab2b03cd53a523e55a9b" name="firefox" arch="i386">
  <version epoch="0" ver="24.4.0" rel="1.el5_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.3.0-2" date="1391299200">- Update to 24.3.0 ESR Build 2</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.3.0-3" date="1393545600">- Fixed rhbz#1054832 - Firefox does not support Camellia cipher</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.4.0-1" date="1395014400">- Update to 24.4.0 ESR</changelog>
</package>
<package pkgid="d6fc9c54e429ee9a501c3b829f39003230fbf4da" name="firefox" arch="i386">
  <version epoch="0" ver="24.5.0" rel="1.el5_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.4.0-2" date="1395878400">- fixed rhbz#1067343 - Broken languagepack configuration
  after firefox update</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.4.0-3" date="1397606400">- Added a workaround for Bug 1054242 - RHEVM: Extremely high memory
  usage in Firefox 24 ESR on RHEL 6.5</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.5.0-1" date="1398211200">- Update to 24.5.0 ESR</changelog>
</package>
<package pkgid="28ed55dc5ada4f71c916877116227454254dc68f" name="firefox" arch="i386">
  <version epoch="0" ver="24.6.0" rel="1.el5_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.5.0-1" date="1398211200">- Update to 24.5.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.5.0-2" date="1400889600">- Added build fix rhbz#1095227</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.6.0-1" date="1401926400">- Update to 24.6.0 ESR</changelog>
</package>
<package pkgid="7d08195630eabe2d5d2f0a609fc1bacf4423d07c" name="firefox" arch="i386">
  <version epoch="0" ver="24.7.0" rel="1.el5_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.5.0-2" date="1400889600">- Added build fix rhbz#1095227</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.6.0-1" date="1401926400">- Update to 24.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.7.0-1" date="1405641600">- Update to 24.7.0 ESR</changelog>
</package>
<package pkgid="7d56fa07cfe9e56f5693a4c98f012c4a033d4ec5" name="firefox" arch="i386">
  <version epoch="0" ver="24.8.0" rel="2.el5_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.7.0-1" date="1405641600">- Update to 24.7.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.7.0-2" date="1407974400">- Test ppc build (disabled libicu on ppc)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.8.0-2" date="1409097600">- Update to 24.8.0 ESR</changelog>
</package>
<package pkgid="19b20aa079421fdc721b09bcfcb0a1da00f8aeae" name="firefox" arch="i386">
  <version epoch="0" ver="3.6.18" rel="1.el5_6"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 3.6.15-1" date="1299621600">- Update to 3.6.15</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 3.6.17-1" date="1303164000">- Update to 3.6.17</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 3.6.18-1" date="1308002400">- Update to 3.6.18</changelog>
</package>
<package pkgid="e1d229b68600fadbd7a8743a3ed78df0553bfe61" name="firefox" arch="i386">
  <version epoch="0" ver="3.6.20" rel="2.el5"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 3.6.17-1" date="1303164000">- Update to 3.6.17</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 3.6.18-1" date="1308002400">- Update to 3.6.18</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 3.6.20-2" date="1312495200">- Update to 3.6.20</changelog>
</package>
<package pkgid="cbf8946651043a580e6b21d1cdd938d510017b70" name="firefox" arch="i386">
  <version epoch="0" ver="3.6.22" rel="1.el5_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 3.6.18-1" date="1308002400">- Update to 3.6.18</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 3.6.20-2" date="1312495200">- Update to 3.6.20</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 3.6.22-1" date="1315260000">- Update to 3.6.22</changelog>
</package>
<package pkgid="5b955c8b153577ceb85ad947b26a7754cb22be60" name="firefox" arch="i386">
  <version epoch="0" ver="3.6.23" rel="2.el5_7"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 3.6.22-1" date="1315260000">- Update to 3.6.22</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.6.23-1" date="1317160800">- Update to 3.6.23</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 3.6.23-2" date="1317247200">- Build fix</changelog>
</package>
<package pkgid="bcbf66aff9911cc8c8edbc9d131b6c1942a6bd62" name="firefox" arch="i386">
  <version epoch="0" ver="3.6.24" rel="3.el5_7"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.6.23-1" date="1317160800">- Update to 3.6.23</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 3.6.23-2" date="1317247200">- Build fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 3.6.24-3" date="1320184800">- Update to 3.6.24</changelog>
</package>
<package pkgid="18e02a3a1eac660a723745fff4884332d38a6cfc" name="firefox" arch="i386">
  <version epoch="0" ver="3.6.26" rel="1.el5_7"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 3.6.23-2" date="1317247200">- Build fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 3.6.24-3" date="1320184800">- Update to 3.6.24</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 3.6.26-1" date="1327960800">- Update to 3.6.26</changelog>
</package>
<package pkgid="7b26a1a2bb725e49b9eaadd9792fa365622a7cb7" name="firefox" arch="i386">
  <version epoch="0" ver="31.1.0" rel="6.el5"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.1.0-4" date="1410307200">- Build with system NSS/NSPR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.1.0-5" date="1410393600">- Added workaround for rhbz#1134876</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.1.0-6" date="1410480000">- Enable all NPAPI plugins by default to keep compatibility
  with the FF24 line</changelog>
</package>
<package pkgid="171b9cc0066958a0692d5c9d55823495aefd67fd" name="firefox" arch="i386">
  <version epoch="0" ver="31.2.0" rel="3.el5_11"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.1.0-5" date="1410393600">- Added workaround for rhbz#1134876</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.1.0-6" date="1410480000">- Enable all NPAPI plugins by default to keep compatibility
  with the FF24 line</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.2.0-3" date="1412726400">- Update to 31.2.0 ESR
- Fix for mozbz#1042889</changelog>
</package>
<package pkgid="ada725d5ad3f60b688b0f63828587e0ce7db43e6" name="firefox" arch="i386">
  <version epoch="0" ver="31.3.0" rel="4.el5_11"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.2.0-4" date="1414108800">- ppc build fix (rhbz#1151959)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.2.0-5" date="1415664000">- splice workaround (rhbz#1150082)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.3.0-4" date="1417046400">- Update to 31.3.0 ESR Build 2
- Fix for geolocation API (rhbz#1063739)</changelog>
</package>
<package pkgid="4b420d3c707ebfbdcc04f96eac4c1e71c1d9320c" name="firefox" arch="i386">
  <version epoch="0" ver="31.4.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.3.0-7" date="1418256000">- Added Python 2.7 to build Firefox</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.3.0-9" date="1418774400">- Fixed problems with dictionaries (mozbz#1097550)
- Fixed rhbz#1164855 - firefox.desktop is missing
  x-scheme-handler MimeType entries</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.4.0-1" date="1420588800">- Update to 31.4.0 ESR</changelog>
</package>
<package pkgid="2dbd00de8281c5038f38bfb04390ac57d27054b6" name="firefox" arch="i386">
  <version epoch="0" ver="31.5.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.3.0-9" date="1418774400">- Fixed problems with dictionaries (mozbz#1097550)
- Fixed rhbz#1164855 - firefox.desktop is missing
  x-scheme-handler MimeType entries</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.4.0-1" date="1420588800">- Update to 31.4.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.5.0-1" date="1424304000">- Update to 31.5.0 ESR Build 2</changelog>
</package>
<package pkgid="6d5858de8cb8aa8fe54dbb6016b0b6a2afddc3d0" name="firefox" arch="i386">
  <version epoch="0" ver="31.5.3" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.5.1-1" date="1426896000">- Update to 31.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.5.2-1" date="1426896001">- Update to 31.5.2 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.5.3-1" date="1426982400">- Update to 31.5.3 ESR</changelog>
</package>
<package pkgid="d64a4326aae24dc147f74ae6de2735d7932e146e" name="firefox" arch="i386">
  <version epoch="0" ver="31.6.0" rel="2.el5_11"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.5.3-1" date="1426982400">- Update to 31.5.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.6.0-1" date="1427328000">- Update to 31.6.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.6.0-1" date="1427414400">- Update to 31.6.0 ESR Build 2</changelog>
</package>
<package pkgid="ff2e0723ae8d0386a37c173bc732cb3972ba5ea8" name="firefox" arch="i386">
  <version epoch="0" ver="38.0" rel="4.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;- 38.0-2" date="1430784000">- Update to 38.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.0-3" date="1431043200">- Removed unused patches</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.0-4" date="1431388800">- Obsolete Firefox 31</changelog>
</package>
<package pkgid="519a4d359cbf6b45ec8d86de87e1b5eb65cfda99" name="firefox" arch="i386">
  <version epoch="0" ver="38.1.0" rel="1.el5_11"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.0.1-1" date="1431734400">- Update to 38.0.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.0.1-2" date="1431993600">- Added fix for rhbz#1221368 - splice patch</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.0-1" date="1435363200">- Update to 38.1.0 ESR</changelog>
</package>
<package pkgid="b3593d204f38d38d22e636bda7a528a928a48d7f" name="firefox" arch="i386">
  <version epoch="0" ver="38.1.1" rel="1.el5_11"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.0.1-2" date="1431993600">- Added fix for rhbz#1221368 - splice patch</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.0-1" date="1435363200">- Update to 38.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.1-1" date="1438905600">- Update to 38.1.1 ESR</changelog>
</package>
<package pkgid="eb435a602599e3b2fabbecca476c05e67991efde" name="firefox" arch="i386">
  <version epoch="0" ver="38.2.0" rel="4.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.0-1" date="1435363200">- Update to 38.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.1-1" date="1438905600">- Update to 38.1.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.2.0-4" date="1438992000">- Update to 38.2.0 ESR</changelog>
</package>
<package pkgid="974bf34f50671d3f714f77a94f2e26c4c8e480a3" name="firefox" arch="i386">
  <version epoch="0" ver="38.2.1" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.1-1" date="1438905600">- Update to 38.1.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.2.0-4" date="1438992000">- Update to 38.2.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.2.1-1" date="1440633600">- Update to 38.2.1 ESR</changelog>
</package>
<package pkgid="79e41d576ff036c28fd2b946b95af0e724cf2111" name="firefox" arch="i386">
  <version epoch="0" ver="38.3.0" rel="2.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.2.0-4" date="1438992000">- Update to 38.2.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.2.1-1" date="1440633600">- Update to 38.2.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.3.0-2" date="1442361600">- Update to 38.3.0 ESR</changelog>
</package>
<package pkgid="8076757381e9b8bbeaae30eb543e9ad0732371d2" name="firefox" arch="i386">
  <version epoch="0" ver="38.4.0" rel="1.el5_11"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.2.1-1" date="1440633600">- Update to 38.2.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.3.0-2" date="1442361600">- Update to 38.3.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.4.0-1" date="1446163200">- Update to 38.4.0 ESR</changelog>
</package>
<package pkgid="16e12acad5d2b556dbfe7e7a060f134132b5fa1c" name="firefox" arch="i386">
  <version epoch="0" ver="38.5.0" rel="2.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.3.0-2" date="1442361600">- Update to 38.3.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.4.0-1" date="1446163200">- Update to 38.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.5.0-2" date="1449878400">- Update to 38.5.0 ESR</changelog>
</package>
<package pkgid="37a823f81bce50fa15adc8013b265065f34c2606" name="firefox" arch="i386">
  <version epoch="0" ver="38.6.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.4.0-1" date="1446163200">- Update to 38.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.5.0-2" date="1449878400">- Update to 38.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.6.0-1" date="1453420800">- Update to 38.6.0 ESR</changelog>
</package>
<package pkgid="c5b5e8d2da5c079ef5deb27e220afd80048e2fca" name="firefox" arch="i386">
  <version epoch="0" ver="38.6.1" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.5.0-2" date="1449878400">- Update to 38.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.6.0-1" date="1453420800">- Update to 38.6.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.6.1-1" date="1455235200">- Update to 38.6.1 ESR</changelog>
</package>
<package pkgid="5b1508ec1db1fdb10b88affc049eb679b6c8212c" name="firefox" arch="i386">
  <version epoch="0" ver="38.7.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.6.0-1" date="1453420800">- Update to 38.6.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.6.1-1" date="1455235200">- Update to 38.6.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.7.0-1" date="1457049600">- Update to 38.7.0 ESR</changelog>
</package>
<package pkgid="c9e3eca0d13f734f19122e571b158b3209fabd29" name="firefox" arch="i386">
  <version epoch="0" ver="45.1.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.0.1-1" date="1459987200">- Update to 45.0.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.0.2-1" date="1460505600">- Update to 45.0.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.1.0-1" date="1461283200">- Update to 45.1.0 ESR</changelog>
</package>
<package pkgid="ecc968da1ac34bf88f38e2b3440579326590f05e" name="firefox" arch="i386">
  <version epoch="0" ver="45.2.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.1.1-1" date="1462406400">- Update to 45.1.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.1.1-2" date="1462924800">- Added fix for mozbz#1270046 - new Samba auth response</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.2.0-1" date="1464998400">- Update to 45.2.0 ESR</changelog>
</package>
<package pkgid="eca4dd3a482720462960c2d1bf5e7058342951a0" name="firefox" arch="i386">
  <version epoch="0" ver="45.3.0" rel="1.el5_11"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.2.0-2" date="1466467200">- Added fix for mozbz#975832, rhbz#1343202</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.2.0-3" date="1468281600">- Added fix for mozbz#256180</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.3.0-1" date="1469664000">- Update to 45.3.0 ESR</changelog>
</package>
<package pkgid="14e33b8cc20638d308693bec55d4a1312ab438f9" name="firefox" arch="i386">
  <version epoch="0" ver="45.4.0" rel="1.el5_11"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.2.0-3" date="1468281600">- Added fix for mozbz#256180</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.3.0-1" date="1469664000">- Update to 45.3.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-1" date="1473292800">- Update to 45.4.0 ESR</changelog>
</package>
<package pkgid="620c8d8f5244e84357193377f56bb9cf17bf7883" name="firefox" arch="i386">
  <version epoch="0" ver="45.5.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-2" date="1474934400">- Added Laszlo Ersek patch for aarch64 crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-3" date="1477958400">- Added upcoming upstream patches mozbz#1018486</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1478649600">- Update to 45.5.0 ESR</changelog>
</package>
<package pkgid="3cfbc7aad5dc8c6ce4a55445aac3cf54ddceda7e" name="firefox" arch="i386">
  <version epoch="0" ver="45.5.1" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-3" date="1477958400">- Added upcoming upstream patches mozbz#1018486</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1478649600">- Update to 45.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480550400">- Update to 45.5.1 ESR</changelog>
</package>
<package pkgid="6ee7872fa1dadde411544f967324ccf234d2ba25" name="firefox" arch="i386">
  <version epoch="0" ver="45.6.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1478649600">- Update to 45.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480550400">- Update to 45.5.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.6.0-1" date="1481500800">- Update to 45.6.0 ESR</changelog>
</package>
<package pkgid="61428ce5f7c66f61fc5ed3f6d7b8cdfe8ec2cfa9" name="firefox" arch="i386">
  <version epoch="0" ver="45.7.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.6.0-1" date="1481500800">- Update to 45.6.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-2" date="1484179200">- Enabled ffmpeg &gt; 54.35.1 (rhbz#1330898, mozbz#1263665)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.7.0-1" date="1484870400">- Updated to 45.7.0 (B1)</changelog>
</package>
<package pkgid="e97d3f2d824dbce85be2791ef9daa967fb84a2d4" name="firefox" arch="i386">
  <version epoch="0" ver="45.7.0" rel="2.el5_11"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-2" date="1484179200">- Enabled ffmpeg &gt; 54.35.1 (rhbz#1330898, mozbz#1263665)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.7.0-1" date="1484870400">- Updated to 45.7.0 (B1)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.7.0-2" date="1486166400">- Enabled ppc/s390 arches (rhbz#1418765)</changelog>
</package>
<package pkgid="e972225ba7089716c5b0a25fbea4f31bd76d1610" name="firefox" arch="i386">
  <version epoch="0" ver="45.8.0" rel="2.el5_11"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.7.0-2" date="1486166400">- Enabled ppc/s390 arches (rhbz#1418765)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488499200">- Update to 45.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-2" date="1488844800">- Update to 45.8.0 ESR (B2)</changelog>
</package>
<package pkgid="98452ac835f812c85f7dd2450978581c53944b67" name="foomatic" arch="i386">
  <version epoch="0" ver="3.0.2" rel="38.3.el5_7.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.0.2-38.1" date="1163628000">- Avoid duplicate PPDs (bug #214963).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.0.2-38.3" date="1233612000">- Better margin defaults (bug #244348).
- Ship a defaultspooler file to avoid the need for spooler
  auto-detection (bug #454684).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.0.2-38.3:.1" date="1311717600">- Applied patch to fix improper sanitization of command line options
  (CVE-2011-2697, bug #721001).</changelog>
</package>
<package pkgid="6a55070aaa4a2321942a3b4f17581a10c97e0705" name="freeradius2" arch="i386">
  <version epoch="0" ver="2.1.12" rel="4.el5_8"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-2" date="1322085600">- resolves: bug#609633
  Fix certificate creation regression described in 756442</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1348610400">- resolves: bug#855315
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="72cf7e77006a1d2b8ffd9e9cd3d569b945f4231e" name="freeradius2" arch="i386">
  <version epoch="0" ver="2.1.12" rel="5.el5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1344376800">resolves: bug#818885 possible errors in /etc/raddb/sql/postgresql/admin.sql template
  resolves: bug#781877 rlm_dbm_parser has man pages in rlm_dbm_parse.8.gz
  resolves: bug#787111 logrotate script does not reload running daemon
  resolves: bug#846471 freeradius not compiled with --with-udpfromto
  resolves: bug#846474 shadow password expiration does not work
  resolves: bug#846475 Segfault with freeradius-perl threading
  resolves: bug#846476 radtest script is not working with eap-md5 option</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-5" date="1348610400">- resolves: bug#855308
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="2b1faf6c0993af60d1fa6bde971fc36c9cddefc0" name="freeradius2-krb5" arch="i386">
  <version epoch="0" ver="2.1.12" rel="4.el5_8"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-2" date="1322085600">- resolves: bug#609633
  Fix certificate creation regression described in 756442</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1348610400">- resolves: bug#855315
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="c10dacc7cdd6c79fb8422f0401323914400e79d3" name="freeradius2-krb5" arch="i386">
  <version epoch="0" ver="2.1.12" rel="5.el5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1344376800">resolves: bug#818885 possible errors in /etc/raddb/sql/postgresql/admin.sql template
  resolves: bug#781877 rlm_dbm_parser has man pages in rlm_dbm_parse.8.gz
  resolves: bug#787111 logrotate script does not reload running daemon
  resolves: bug#846471 freeradius not compiled with --with-udpfromto
  resolves: bug#846474 shadow password expiration does not work
  resolves: bug#846475 Segfault with freeradius-perl threading
  resolves: bug#846476 radtest script is not working with eap-md5 option</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-5" date="1348610400">- resolves: bug#855308
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="d1f784532b9c6b1b5b36d4d9eff30df4e622aef4" name="freeradius2-ldap" arch="i386">
  <version epoch="0" ver="2.1.12" rel="4.el5_8"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-2" date="1322085600">- resolves: bug#609633
  Fix certificate creation regression described in 756442</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1348610400">- resolves: bug#855315
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="a9bef4a3af57dd03033a676b8342b6cb177f3475" name="freeradius2-ldap" arch="i386">
  <version epoch="0" ver="2.1.12" rel="5.el5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1344376800">resolves: bug#818885 possible errors in /etc/raddb/sql/postgresql/admin.sql template
  resolves: bug#781877 rlm_dbm_parser has man pages in rlm_dbm_parse.8.gz
  resolves: bug#787111 logrotate script does not reload running daemon
  resolves: bug#846471 freeradius not compiled with --with-udpfromto
  resolves: bug#846474 shadow password expiration does not work
  resolves: bug#846475 Segfault with freeradius-perl threading
  resolves: bug#846476 radtest script is not working with eap-md5 option</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-5" date="1348610400">- resolves: bug#855308
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="ba941647e450aef905da1f5d5757af5906bc7fca" name="freeradius2-mysql" arch="i386">
  <version epoch="0" ver="2.1.12" rel="4.el5_8"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-2" date="1322085600">- resolves: bug#609633
  Fix certificate creation regression described in 756442</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1348610400">- resolves: bug#855315
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="ce40d1b37f27f32b9a3ef0dd86655ef41b615d9a" name="freeradius2-mysql" arch="i386">
  <version epoch="0" ver="2.1.12" rel="5.el5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1344376800">resolves: bug#818885 possible errors in /etc/raddb/sql/postgresql/admin.sql template
  resolves: bug#781877 rlm_dbm_parser has man pages in rlm_dbm_parse.8.gz
  resolves: bug#787111 logrotate script does not reload running daemon
  resolves: bug#846471 freeradius not compiled with --with-udpfromto
  resolves: bug#846474 shadow password expiration does not work
  resolves: bug#846475 Segfault with freeradius-perl threading
  resolves: bug#846476 radtest script is not working with eap-md5 option</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-5" date="1348610400">- resolves: bug#855308
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="eb67fc1230000133c261a5dea2936bd3bfa4c1b0" name="freeradius2-perl" arch="i386">
  <version epoch="0" ver="2.1.12" rel="4.el5_8"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-2" date="1322085600">- resolves: bug#609633
  Fix certificate creation regression described in 756442</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1348610400">- resolves: bug#855315
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="995231412d5b37e042c2a9b10d51b4109476d2be" name="freeradius2-perl" arch="i386">
  <version epoch="0" ver="2.1.12" rel="5.el5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1344376800">resolves: bug#818885 possible errors in /etc/raddb/sql/postgresql/admin.sql template
  resolves: bug#781877 rlm_dbm_parser has man pages in rlm_dbm_parse.8.gz
  resolves: bug#787111 logrotate script does not reload running daemon
  resolves: bug#846471 freeradius not compiled with --with-udpfromto
  resolves: bug#846474 shadow password expiration does not work
  resolves: bug#846475 Segfault with freeradius-perl threading
  resolves: bug#846476 radtest script is not working with eap-md5 option</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-5" date="1348610400">- resolves: bug#855308
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="d1ef4a022562dddb65f26ac2e66a154a792b90ab" name="freeradius2-postgresql" arch="i386">
  <version epoch="0" ver="2.1.12" rel="4.el5_8"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-2" date="1322085600">- resolves: bug#609633
  Fix certificate creation regression described in 756442</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1348610400">- resolves: bug#855315
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="0587e89ab2a61a5a837884d2056a6d1dfa529983" name="freeradius2-postgresql" arch="i386">
  <version epoch="0" ver="2.1.12" rel="5.el5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1344376800">resolves: bug#818885 possible errors in /etc/raddb/sql/postgresql/admin.sql template
  resolves: bug#781877 rlm_dbm_parser has man pages in rlm_dbm_parse.8.gz
  resolves: bug#787111 logrotate script does not reload running daemon
  resolves: bug#846471 freeradius not compiled with --with-udpfromto
  resolves: bug#846474 shadow password expiration does not work
  resolves: bug#846475 Segfault with freeradius-perl threading
  resolves: bug#846476 radtest script is not working with eap-md5 option</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-5" date="1348610400">- resolves: bug#855308
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="0473ed03ef7c8434c5aadc321461be499f812747" name="freeradius2-python" arch="i386">
  <version epoch="0" ver="2.1.12" rel="4.el5_8"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-2" date="1322085600">- resolves: bug#609633
  Fix certificate creation regression described in 756442</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1348610400">- resolves: bug#855315
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="92e75cf7ed4653821cc35f88be011e19c78dd942" name="freeradius2-python" arch="i386">
  <version epoch="0" ver="2.1.12" rel="5.el5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1344376800">resolves: bug#818885 possible errors in /etc/raddb/sql/postgresql/admin.sql template
  resolves: bug#781877 rlm_dbm_parser has man pages in rlm_dbm_parse.8.gz
  resolves: bug#787111 logrotate script does not reload running daemon
  resolves: bug#846471 freeradius not compiled with --with-udpfromto
  resolves: bug#846474 shadow password expiration does not work
  resolves: bug#846475 Segfault with freeradius-perl threading
  resolves: bug#846476 radtest script is not working with eap-md5 option</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-5" date="1348610400">- resolves: bug#855308
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="90036d10227338169f49baf7d8fdc5cf0ee8d20b" name="freeradius2-unixODBC" arch="i386">
  <version epoch="0" ver="2.1.12" rel="4.el5_8"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-2" date="1322085600">- resolves: bug#609633
  Fix certificate creation regression described in 756442</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1348610400">- resolves: bug#855315
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="694b00a3fa331c5413505c9f31240c75ea911ef4" name="freeradius2-unixODBC" arch="i386">
  <version epoch="0" ver="2.1.12" rel="5.el5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1344376800">resolves: bug#818885 possible errors in /etc/raddb/sql/postgresql/admin.sql template
  resolves: bug#781877 rlm_dbm_parser has man pages in rlm_dbm_parse.8.gz
  resolves: bug#787111 logrotate script does not reload running daemon
  resolves: bug#846471 freeradius not compiled with --with-udpfromto
  resolves: bug#846474 shadow password expiration does not work
  resolves: bug#846475 Segfault with freeradius-perl threading
  resolves: bug#846476 radtest script is not working with eap-md5 option</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-5" date="1348610400">- resolves: bug#855308
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="31b85d5d55d37df70505e72b9f367a89b86744e2" name="freeradius2-utils" arch="i386">
  <version epoch="0" ver="2.1.12" rel="4.el5_8"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-2" date="1322085600">- resolves: bug#609633
  Fix certificate creation regression described in 756442</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1348610400">- resolves: bug#855315
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="669da823c7017f41c0855d0a47b7f09bced7fd4f" name="freeradius2-utils" arch="i386">
  <version epoch="0" ver="2.1.12" rel="5.el5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-3" date="1325800800">- resolves: bug#756442
  also fixes bug#760193</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1344376800">resolves: bug#818885 possible errors in /etc/raddb/sql/postgresql/admin.sql template
  resolves: bug#781877 rlm_dbm_parser has man pages in rlm_dbm_parse.8.gz
  resolves: bug#787111 logrotate script does not reload running daemon
  resolves: bug#846471 freeradius not compiled with --with-udpfromto
  resolves: bug#846474 shadow password expiration does not work
  resolves: bug#846475 Segfault with freeradius-perl threading
  resolves: bug#846476 radtest script is not working with eap-md5 option</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-5" date="1348610400">- resolves: bug#855308
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
</package>
<package pkgid="00c2f8ab3a3dac539b1603d985bc55ad496ee18e" name="freetype" arch="i386">
  <version epoch="0" ver="2.2.1" rel="28.el5_7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28" date="1285884000">- Modify freetype-2.2.1-CVE-2010-3054.patch
- Resolves: #638142</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_5.1" date="1289426400">- Add freetype-2.2.1-CVE-2010-3855.patch
    (Protect against invalid `runcnt' values.)
- Resolves: #651759</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_7.1" date="1319234400">- Add freetype-2.2.1-CVE-2011-3256.patch
    (Handle some border cases.)
- Resolves: #747081</changelog>
</package>
<package pkgid="8a45541c56ae4c284cca3c949883d21a4b921ba6" name="freetype" arch="i386">
  <version epoch="0" ver="2.2.1" rel="28.el5_7.2"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_5.1" date="1289426400">- Add freetype-2.2.1-CVE-2010-3855.patch
    (Protect against invalid `runcnt' values.)
- Resolves: #651759</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_7.1" date="1319234400">- Add freetype-2.2.1-CVE-2011-3256.patch
    (Handle some border cases.)
- Resolves: #747081</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_7.2" date="1321394400">- Add freetype-2.2.1-CVE-2011-3439.patch
    (Various loading fixes.)
- Resolves: #754009</changelog>
</package>
<package pkgid="d0f1ce7ca19ff2193e7bd65c5a64e1ca0776b86e" name="freetype" arch="i386">
  <version epoch="0" ver="2.2.1" rel="31.el5_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-30" date="1319234400">- Add freetype-2.2.1-CVE-2011-3256.patch
    (Handle some border cases.)
- Resolves: #747082</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-31" date="1321394400">- Add freetype-2.2.1-CVE-2011-3439.patch
    (Various loading fixes.)
- Resolves: #754010</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-31.el5_8.1" date="1333490400">- Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
  1137, 1139, 1140, 1141, 1142, 1143, 1144}
- Protect against invalid string offsets in pcf_get_properties()
- Check bytes per row for overflow in _bdf_parse_glyphs()
- Resolves: #806266</changelog>
</package>
<package pkgid="f0f8c4be343851baef76bc1a780a7f25030b4dda" name="freetype" arch="i386">
  <version epoch="0" ver="2.2.1" rel="32.el5_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-31" date="1321394400">- Add freetype-2.2.1-CVE-2011-3439.patch
    (Various loading fixes.)
- Resolves: #754010</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-32" date="1333490400">- Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
  1137, 1139, 1140, 1141, 1142, 1143, 1144}
- Protect against invalid string offsets in pcf_get_properties()
- Check bytes per row for overflow in _bdf_parse_glyphs()
- Resolves: #806267</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-32.el5_9.1" date="1359064800">- Fix CVE-2012-5669
    (Use correct array size for checking `glyph_enc')
- Resolves: #903539</changelog>
</package>
<package pkgid="e6cf408b79e6209e8249d20e23fc187369af756f" name="freetype-demos" arch="i386">
  <version epoch="0" ver="2.2.1" rel="28.el5_7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28" date="1285884000">- Modify freetype-2.2.1-CVE-2010-3054.patch
- Resolves: #638142</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_5.1" date="1289426400">- Add freetype-2.2.1-CVE-2010-3855.patch
    (Protect against invalid `runcnt' values.)
- Resolves: #651759</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_7.1" date="1319234400">- Add freetype-2.2.1-CVE-2011-3256.patch
    (Handle some border cases.)
- Resolves: #747081</changelog>
</package>
<package pkgid="cf89bb1d0c112aee4d9d872b99f579f18e607f9f" name="freetype-demos" arch="i386">
  <version epoch="0" ver="2.2.1" rel="28.el5_7.2"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_5.1" date="1289426400">- Add freetype-2.2.1-CVE-2010-3855.patch
    (Protect against invalid `runcnt' values.)
- Resolves: #651759</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_7.1" date="1319234400">- Add freetype-2.2.1-CVE-2011-3256.patch
    (Handle some border cases.)
- Resolves: #747081</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_7.2" date="1321394400">- Add freetype-2.2.1-CVE-2011-3439.patch
    (Various loading fixes.)
- Resolves: #754009</changelog>
</package>
<package pkgid="ba87773c091b9819637dc430a43dee5ae16f2cf5" name="freetype-demos" arch="i386">
  <version epoch="0" ver="2.2.1" rel="31.el5_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-30" date="1319234400">- Add freetype-2.2.1-CVE-2011-3256.patch
    (Handle some border cases.)
- Resolves: #747082</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-31" date="1321394400">- Add freetype-2.2.1-CVE-2011-3439.patch
    (Various loading fixes.)
- Resolves: #754010</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-31.el5_8.1" date="1333490400">- Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
  1137, 1139, 1140, 1141, 1142, 1143, 1144}
- Protect against invalid string offsets in pcf_get_properties()
- Check bytes per row for overflow in _bdf_parse_glyphs()
- Resolves: #806266</changelog>
</package>
<package pkgid="211ea96e204603a00dd5592c84a51f26d1816ca1" name="freetype-demos" arch="i386">
  <version epoch="0" ver="2.2.1" rel="32.el5_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-31" date="1321394400">- Add freetype-2.2.1-CVE-2011-3439.patch
    (Various loading fixes.)
- Resolves: #754010</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-32" date="1333490400">- Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
  1137, 1139, 1140, 1141, 1142, 1143, 1144}
- Protect against invalid string offsets in pcf_get_properties()
- Check bytes per row for overflow in _bdf_parse_glyphs()
- Resolves: #806267</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-32.el5_9.1" date="1359064800">- Fix CVE-2012-5669
    (Use correct array size for checking `glyph_enc')
- Resolves: #903539</changelog>
</package>
<package pkgid="2f8a03ead25a7f210bff1e58d19ef3d1e4d52f96" name="freetype-devel" arch="i386">
  <version epoch="0" ver="2.2.1" rel="28.el5_7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28" date="1285884000">- Modify freetype-2.2.1-CVE-2010-3054.patch
- Resolves: #638142</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_5.1" date="1289426400">- Add freetype-2.2.1-CVE-2010-3855.patch
    (Protect against invalid `runcnt' values.)
- Resolves: #651759</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_7.1" date="1319234400">- Add freetype-2.2.1-CVE-2011-3256.patch
    (Handle some border cases.)
- Resolves: #747081</changelog>
</package>
<package pkgid="c8cc13b2aec2df2b969441237721b09f380e7bec" name="freetype-devel" arch="i386">
  <version epoch="0" ver="2.2.1" rel="28.el5_7.2"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_5.1" date="1289426400">- Add freetype-2.2.1-CVE-2010-3855.patch
    (Protect against invalid `runcnt' values.)
- Resolves: #651759</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_7.1" date="1319234400">- Add freetype-2.2.1-CVE-2011-3256.patch
    (Handle some border cases.)
- Resolves: #747081</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-28.el5_7.2" date="1321394400">- Add freetype-2.2.1-CVE-2011-3439.patch
    (Various loading fixes.)
- Resolves: #754009</changelog>
</package>
<package pkgid="ab59331c1f7e518801fb786cd131575107922202" name="freetype-devel" arch="i386">
  <version epoch="0" ver="2.2.1" rel="31.el5_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-30" date="1319234400">- Add freetype-2.2.1-CVE-2011-3256.patch
    (Handle some border cases.)
- Resolves: #747082</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-31" date="1321394400">- Add freetype-2.2.1-CVE-2011-3439.patch
    (Various loading fixes.)
- Resolves: #754010</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-31.el5_8.1" date="1333490400">- Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
  1137, 1139, 1140, 1141, 1142, 1143, 1144}
- Protect against invalid string offsets in pcf_get_properties()
- Check bytes per row for overflow in _bdf_parse_glyphs()
- Resolves: #806266</changelog>
</package>
<package pkgid="70db907c217ec75d1b0b687dfa9c9bb7764b8a69" name="freetype-devel" arch="i386">
  <version epoch="0" ver="2.2.1" rel="32.el5_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-31" date="1321394400">- Add freetype-2.2.1-CVE-2011-3439.patch
    (Various loading fixes.)
- Resolves: #754010</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-32" date="1333490400">- Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
  1137, 1139, 1140, 1141, 1142, 1143, 1144}
- Protect against invalid string offsets in pcf_get_properties()
- Check bytes per row for overflow in _bdf_parse_glyphs()
- Resolves: #806267</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.2.1-32.el5_9.1" date="1359064800">- Fix CVE-2012-5669
    (Use correct array size for checking `glyph_enc')
- Resolves: #903539</changelog>
</package>
<package pkgid="8423fca58630f59fd4454dcada91bf60c98c2fb9" name="gdm" arch="i386">
  <version epoch="1" ver="2.16.0" rel="59.sl5.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.16.0-59" date="1319846400">- Terminate smartcard helper immediately on SIGTERM instead of after
  shutdown.
Resolves: #658506</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.16.0-59.1" date="1376956800">- Don't try to pre-create directories that are internal
  implementation details of X.
  Resolves: #997619 CVE-2013-4169</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1378425600">- Added Patch: gdm-change-theme.patch
--&gt;  The theme from TUV is not the theme we want to use
- Added Source: gdm.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="6e2702de53f84cff97faf220eb1cac31ac06bf57" name="gdm-docs" arch="i386">
  <version epoch="1" ver="2.16.0" rel="59.sl5.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.16.0-59" date="1319846400">- Terminate smartcard helper immediately on SIGTERM instead of after
  shutdown.
Resolves: #658506</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.16.0-59.1" date="1376956800">- Don't try to pre-create directories that are internal
  implementation details of X.
  Resolves: #997619 CVE-2013-4169</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1378425600">- Added Patch: gdm-change-theme.patch
--&gt;  The theme from TUV is not the theme we want to use
- Added Source: gdm.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="e41efb1e122a1585fdd775aaa97cad998753bfc2" name="ghostscript" arch="i386">
  <version epoch="0" ver="8.70" rel="14.el5_8.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-13" date="1323122400">- Applied patch to prevent null pointer dereference (CVE-2010-4054,
  bug #646086).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-14" date="1324591200">- Applied upstream fix to last patch (CVE-2010-4054, bug #646086).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-14:.1" date="1346968800">- Added inputChan lower-bounds checking to icclib (bug #854227,
  CVE-2012-4405).</changelog>
</package>
<package pkgid="56be7fd36e4cea70bdcbee1f2f62228c9db9af2d" name="ghostscript" arch="i386">
  <version epoch="0" ver="8.70" rel="6.el5_7.6"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 8.70-6:.4" date="1322085600">- Applied patch to avoid reading initialization files from CWD
  (CVE-2010-2055, bug #599564).
- Applied patch to prevent integer underflow in TrueType bytecode
  interpreter (CVE-2009-3743, bug #627902).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-6:.5" date="1323208800">- Applied patch to prevent null pointer dereference (CVE-2010-4054,
  bug #646086).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-6:.6" date="1324504800">- Applied upstream fix to last patch (CVE-2010-4054, bug #646086).</changelog>
</package>
<package pkgid="b181b1dfa887e13ec908e42894391e8f7e646d2f" name="ghostscript-devel" arch="i386">
  <version epoch="0" ver="8.70" rel="14.el5_8.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-13" date="1323122400">- Applied patch to prevent null pointer dereference (CVE-2010-4054,
  bug #646086).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-14" date="1324591200">- Applied upstream fix to last patch (CVE-2010-4054, bug #646086).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-14:.1" date="1346968800">- Added inputChan lower-bounds checking to icclib (bug #854227,
  CVE-2012-4405).</changelog>
</package>
<package pkgid="d176d4a6e7550a015c165aa0b78b55b8b477fc58" name="ghostscript-devel" arch="i386">
  <version epoch="0" ver="8.70" rel="6.el5_7.6"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 8.70-6:.4" date="1322085600">- Applied patch to avoid reading initialization files from CWD
  (CVE-2010-2055, bug #599564).
- Applied patch to prevent integer underflow in TrueType bytecode
  interpreter (CVE-2009-3743, bug #627902).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-6:.5" date="1323208800">- Applied patch to prevent null pointer dereference (CVE-2010-4054,
  bug #646086).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-6:.6" date="1324504800">- Applied upstream fix to last patch (CVE-2010-4054, bug #646086).</changelog>
</package>
<package pkgid="1495e0e4416e66dac56e389d1ed8cea9b7944c74" name="ghostscript-gtk" arch="i386">
  <version epoch="0" ver="8.70" rel="14.el5_8.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-13" date="1323122400">- Applied patch to prevent null pointer dereference (CVE-2010-4054,
  bug #646086).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-14" date="1324591200">- Applied upstream fix to last patch (CVE-2010-4054, bug #646086).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-14:.1" date="1346968800">- Added inputChan lower-bounds checking to icclib (bug #854227,
  CVE-2012-4405).</changelog>
</package>
<package pkgid="2b773223a62d22ba0589b019ed220f6b3d977836" name="ghostscript-gtk" arch="i386">
  <version epoch="0" ver="8.70" rel="6.el5_7.6"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 8.70-6:.4" date="1322085600">- Applied patch to avoid reading initialization files from CWD
  (CVE-2010-2055, bug #599564).
- Applied patch to prevent integer underflow in TrueType bytecode
  interpreter (CVE-2009-3743, bug #627902).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-6:.5" date="1323208800">- Applied patch to prevent null pointer dereference (CVE-2010-4054,
  bug #646086).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-6:.6" date="1324504800">- Applied upstream fix to last patch (CVE-2010-4054, bug #646086).</changelog>
</package>
<package pkgid="c34d7bb975c38ede02fb5a8dd4248549011731d9" name="gimp" arch="i386">
  <version epoch="2" ver="2.2.13" rel="2.0.7.el5_6.2"/>
  <changelog author="Nils Philippsen &lt;nphilipp@redhat.com&gt; - 2:2.2.13-2.0.6" date="1189461600">- replace gimp_error() by gimp_message()/gimp_quit() in a few plugins so they
  don't crash but gracefully exit when encountering error conditions
- fix endianness issues in the PSP plugin to avoid it doing (seemingly) endless
  loops when loading images
- fix endianness issues in the PCX plugin which cause it to not detect corrupt
  images</changelog>
  <changelog author="Nils Philippsen &lt;nphilipp@redhat.com&gt; - 2:2.2.13-2.0.7" date="1190066400">- validate bytesperline header field when loading PCX files (#247573)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.7.2" date="1305756000">- fix various overflows (#537356, #666793, #689831, #703403, #703405, #703407,
  - unfuzz gimphelpmissing, icontheme patches</changelog>
</package>
<package pkgid="1fff0f34de0129c0f06154c386c7107cd9a5e1bc" name="gimp" arch="i386">
  <version epoch="2" ver="2.2.13" rel="2.0.7.el5_8.5"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.7.el5_8.2" date="1305756000">- fix various overflows (#537356, #666793, #689831, #703403, #703405, #703407,
  - unfuzz gimphelpmissing, icontheme patches</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.7.el5_8.4" date="1342821600">- fix overflows in PSD plugin (CVE-2009-3909, CVE-2012-3402)
- fix heap corruption and overflow in GIF plug-in (CVE-2011-2896)
- fix overflow in CEL plug-in (CVE-2012-3403)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.7.el5_8.5" date="1345154400">- fix overflow in GIF loader (CVE-2012-3481)</changelog>
</package>
<package pkgid="4fc54b48cd0b0cfd8cbd8eb422d4d1b1acf0d965" name="gimp" arch="i386">
  <version epoch="2" ver="2.2.13" rel="3.el5_10"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.11.el5_10" date="1364428800">- fix overflow in XWD loader (CVE-2012-5576)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.12.el5_10" date="1364515200">- build with -fno-strict-aliasing</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-3.el5_10" date="1385510400">- fix overflow in XWD loader (CVE-2013-1913, CVE-2013-1978)</changelog>
</package>
<package pkgid="a5686cd1b2cd9e0f51fa45159fd26be1e66d8ea6" name="gimp-devel" arch="i386">
  <version epoch="2" ver="2.2.13" rel="2.0.7.el5_6.2"/>
  <changelog author="Nils Philippsen &lt;nphilipp@redhat.com&gt; - 2:2.2.13-2.0.6" date="1189461600">- replace gimp_error() by gimp_message()/gimp_quit() in a few plugins so they
  don't crash but gracefully exit when encountering error conditions
- fix endianness issues in the PSP plugin to avoid it doing (seemingly) endless
  loops when loading images
- fix endianness issues in the PCX plugin which cause it to not detect corrupt
  images</changelog>
  <changelog author="Nils Philippsen &lt;nphilipp@redhat.com&gt; - 2:2.2.13-2.0.7" date="1190066400">- validate bytesperline header field when loading PCX files (#247573)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.7.2" date="1305756000">- fix various overflows (#537356, #666793, #689831, #703403, #703405, #703407,
  - unfuzz gimphelpmissing, icontheme patches</changelog>
</package>
<package pkgid="b3e08c3d420fb33b40b9d30ecbe35093196bf854" name="gimp-devel" arch="i386">
  <version epoch="2" ver="2.2.13" rel="2.0.7.el5_8.5"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.7.el5_8.2" date="1305756000">- fix various overflows (#537356, #666793, #689831, #703403, #703405, #703407,
  - unfuzz gimphelpmissing, icontheme patches</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.7.el5_8.4" date="1342821600">- fix overflows in PSD plugin (CVE-2009-3909, CVE-2012-3402)
- fix heap corruption and overflow in GIF plug-in (CVE-2011-2896)
- fix overflow in CEL plug-in (CVE-2012-3403)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.7.el5_8.5" date="1345154400">- fix overflow in GIF loader (CVE-2012-3481)</changelog>
</package>
<package pkgid="f848550a941efd5017037a6ec409d4924461905e" name="gimp-devel" arch="i386">
  <version epoch="2" ver="2.2.13" rel="3.el5_10"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.11.el5_10" date="1364428800">- fix overflow in XWD loader (CVE-2012-5576)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.12.el5_10" date="1364515200">- build with -fno-strict-aliasing</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-3.el5_10" date="1385510400">- fix overflow in XWD loader (CVE-2013-1913, CVE-2013-1978)</changelog>
</package>
<package pkgid="82c7aa5ce248a5ae334e64fc91fbb46a6778b7d6" name="gimp-libs" arch="i386">
  <version epoch="2" ver="2.2.13" rel="2.0.7.el5_6.2"/>
  <changelog author="Nils Philippsen &lt;nphilipp@redhat.com&gt; - 2:2.2.13-2.0.6" date="1189461600">- replace gimp_error() by gimp_message()/gimp_quit() in a few plugins so they
  don't crash but gracefully exit when encountering error conditions
- fix endianness issues in the PSP plugin to avoid it doing (seemingly) endless
  loops when loading images
- fix endianness issues in the PCX plugin which cause it to not detect corrupt
  images</changelog>
  <changelog author="Nils Philippsen &lt;nphilipp@redhat.com&gt; - 2:2.2.13-2.0.7" date="1190066400">- validate bytesperline header field when loading PCX files (#247573)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.7.2" date="1305756000">- fix various overflows (#537356, #666793, #689831, #703403, #703405, #703407,
  - unfuzz gimphelpmissing, icontheme patches</changelog>
</package>
<package pkgid="941acb4cfe8aeb87f06f100f4187480e2ede63f7" name="gimp-libs" arch="i386">
  <version epoch="2" ver="2.2.13" rel="2.0.7.el5_8.5"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.7.el5_8.2" date="1305756000">- fix various overflows (#537356, #666793, #689831, #703403, #703405, #703407,
  - unfuzz gimphelpmissing, icontheme patches</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.7.el5_8.4" date="1342821600">- fix overflows in PSD plugin (CVE-2009-3909, CVE-2012-3402)
- fix heap corruption and overflow in GIF plug-in (CVE-2011-2896)
- fix overflow in CEL plug-in (CVE-2012-3403)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.7.el5_8.5" date="1345154400">- fix overflow in GIF loader (CVE-2012-3481)</changelog>
</package>
<package pkgid="9c436bb138decf834fa8b7de788faf9f31a7e46b" name="gimp-libs" arch="i386">
  <version epoch="2" ver="2.2.13" rel="3.el5_10"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.11.el5_10" date="1364428800">- fix overflow in XWD loader (CVE-2012-5576)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-2.0.12.el5_10" date="1364515200">- build with -fno-strict-aliasing</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 2:2.2.13-3.el5_10" date="1385510400">- fix overflow in XWD loader (CVE-2013-1913, CVE-2013-1978)</changelog>
</package>
<package pkgid="b89fb45e3ecbf4e3fe00d928137d7eb9ea090797" name="glibc" arch="i386">
  <version epoch="0" ver="2.5" rel="107.el5_9.4"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.2" date="1365631200">- Call feraiseexcept only if exceptions are not masked (#861871).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-107.3" date="1365717600">- Fix multibyte character processing crash in regexp (CVE-2013-0242, #951130)
  - Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951130)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.4" date="1365804000">- Add missing patch to avoid use after free (#816647).</changelog>
</package>
<package pkgid="b587226cec1eef724cd77e71da1df90ba3543b34" name="glibc" arch="i686">
  <version epoch="0" ver="2.5" rel="107.el5_9.4"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.2" date="1365631200">- Call feraiseexcept only if exceptions are not masked (#861871).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-107.3" date="1365717600">- Fix multibyte character processing crash in regexp (CVE-2013-0242, #951130)
  - Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951130)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.4" date="1365804000">- Add missing patch to avoid use after free (#816647).</changelog>
</package>
<package pkgid="4faa86c2a6f5817b6481d59ac384105c6211a408" name="glibc" arch="i386">
  <version epoch="0" ver="2.5" rel="118.el5_10.2"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.5-118" date="1376006400">- Revert incomplete fix for bug #758193.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
</package>
<package pkgid="016ff06a14e935b7cc7b63ea44481cdc0eb2b25b" name="glibc" arch="i686">
  <version epoch="0" ver="2.5" rel="118.el5_10.2"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.5-118" date="1376006400">- Revert incomplete fix for bug #758193.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
</package>
<package pkgid="5b4d1f5679104ec684f94f115b5edd0a96198056" name="glibc" arch="i386">
  <version epoch="0" ver="2.5" rel="118.el5_10.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.3" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
</package>
<package pkgid="c307e50ad599dd3c15230e5ea481452ae47524a5" name="glibc" arch="i686">
  <version epoch="0" ver="2.5" rel="118.el5_10.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.3" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
</package>
<package pkgid="7d338c9eae27bd2f6bd2588fb767654ac70fbe98" name="glibc" arch="i386">
  <version epoch="0" ver="2.5" rel="123.el5_11.1"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-122" date="1397779200">- Fix patch for integer overflows in *valloc and memalign. 
  (CVE-2013-4332,#1011805).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
</package>
<package pkgid="4479549a93458503cd78f620c6f9399054649d06" name="glibc" arch="i686">
  <version epoch="0" ver="2.5" rel="123.el5_11.1"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-122" date="1397779200">- Fix patch for integer overflows in *valloc and memalign. 
  (CVE-2013-4332,#1011805).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
</package>
<package pkgid="b2cb4cb0500413654cc8cff0834b4beddd8e48b9" name="glibc" arch="i386">
  <version epoch="0" ver="2.5" rel="123.el5_11.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-123.3" date="1438387200">- Fix invalid-free when using getaddrinfo() and AI_IDN (CVE-2013-7424,</changelog>
</package>
<package pkgid="ea16f455b7bfb59c64e5fac0dc981e5f4102b4fa" name="glibc" arch="i686">
  <version epoch="0" ver="2.5" rel="123.el5_11.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-123.3" date="1438387200">- Fix invalid-free when using getaddrinfo() and AI_IDN (CVE-2013-7424,</changelog>
</package>
<package pkgid="7d2151d1ba47604e1d8c270637d23b0e068741e5" name="glibc" arch="i386">
  <version epoch="0" ver="2.5" rel="65.el5_7.3"/>
  <changelog author="Andreas Schwab &lt;schwab@redhat.com&gt; - 2.5-65.el5_7.1" date="1319580000">- Correct cycle detection during dependency sorting (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.2" date="1324332000">- Check values from TZ file header (#767687)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.3" date="1327442400">- Use correct type when casting d_tag (#767687)
- Report write error  in addmnt even for cached streams (#767687)
- ldd: Never run file directly (#767687).
- Workaround misconfigured system (#767687)</changelog>
</package>
<package pkgid="2c260559665d51d6e9590494b66272327ab2af5e" name="glibc" arch="i686">
  <version epoch="0" ver="2.5" rel="65.el5_7.3"/>
  <changelog author="Andreas Schwab &lt;schwab@redhat.com&gt; - 2.5-65.el5_7.1" date="1319580000">- Correct cycle detection during dependency sorting (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.2" date="1324332000">- Check values from TZ file header (#767687)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.3" date="1327442400">- Use correct type when casting d_tag (#767687)
- Report write error  in addmnt even for cached streams (#767687)
- ldd: Never run file directly (#767687).
- Workaround misconfigured system (#767687)</changelog>
</package>
<package pkgid="63986004c7c0dd603c21df962b54bfe001b1e64e" name="glibc" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.1"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-80" date="1324245600">- Check values from TZ file header (#767688)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81" date="1326924000">- Correct test for detecting cycle during topo sort (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.1" date="1330380000">- Add dist tag
- Filter out &lt;built-in&gt; when building file lists (#784646).
- Avoid "nargs" integer overflow which could be used to bypass FORTIFY_SOURCE (#794813)</changelog>
</package>
<package pkgid="263e61ca4e94d69b5b4127b95ba3c14daf113fc0" name="glibc" arch="i686">
  <version epoch="0" ver="2.5" rel="81.el5_8.1"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-80" date="1324245600">- Check values from TZ file header (#767688)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81" date="1326924000">- Correct test for detecting cycle during topo sort (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.1" date="1330380000">- Add dist tag
- Filter out &lt;built-in&gt; when building file lists (#784646).
- Avoid "nargs" integer overflow which could be used to bypass FORTIFY_SOURCE (#794813)</changelog>
</package>
<package pkgid="36cf37096536ca20f493914d6ad229e9899577eb" name="glibc" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.4"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.2" date="1333663200">- Fix memory leak in NIS endgrent (#810323)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.3" date="1340316000">- Fix unbound alloca in vfprintf (#833720)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-81.el5_8.4" date="1341525600">- Fix iconv() segfault if the invalid multibyte character 0xffff is input when converting from IBM930 (#837896)</changelog>
</package>
<package pkgid="ccb7cbf2761e1b81bd990bc410e7dc61f35a6abf" name="glibc" arch="i686">
  <version epoch="0" ver="2.5" rel="81.el5_8.4"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.2" date="1333663200">- Fix memory leak in NIS endgrent (#810323)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.3" date="1340316000">- Fix unbound alloca in vfprintf (#833720)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-81.el5_8.4" date="1341525600">- Fix iconv() segfault if the invalid multibyte character 0xffff is input when converting from IBM930 (#837896)</changelog>
</package>
<package pkgid="89070e5cba3bd0b4c8b7d0e8e7353914f01f33c3" name="glibc" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.7"/>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.5" date="1342821600">- Do not use PT_IEEE_IP ptrace calls (#839411)
- Update ULPs (#839411)
- Fix various transcendentals in non-default rounding modes (#839411)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.6" date="1344981600">- Fix integer overflow leading to buffer overflow in strto* (#847929)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.7" date="1344981601">- Fix out of bounds array access in strto* exposed by 847929 patch.</changelog>
</package>
<package pkgid="6358755fcea96be4a428c9d7bca5083d874d4eb6" name="glibc" arch="i686">
  <version epoch="0" ver="2.5" rel="81.el5_8.7"/>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.5" date="1342821600">- Do not use PT_IEEE_IP ptrace calls (#839411)
- Update ULPs (#839411)
- Fix various transcendentals in non-default rounding modes (#839411)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.6" date="1344981600">- Fix integer overflow leading to buffer overflow in strto* (#847929)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.7" date="1344981601">- Fix out of bounds array access in strto* exposed by 847929 patch.</changelog>
</package>
<package pkgid="43c67f1a8e334684e1fa189e83f5c20ad9fcf9d7" name="glibc-common" arch="i386">
  <version epoch="0" ver="2.5" rel="107.el5_9.4"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.2" date="1365631200">- Call feraiseexcept only if exceptions are not masked (#861871).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-107.3" date="1365717600">- Fix multibyte character processing crash in regexp (CVE-2013-0242, #951130)
  - Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951130)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.4" date="1365804000">- Add missing patch to avoid use after free (#816647).</changelog>
</package>
<package pkgid="626aa1bddc5bd2887993ffd83d7b69c700504e40" name="glibc-common" arch="i386">
  <version epoch="0" ver="2.5" rel="118.el5_10.2"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.5-118" date="1376006400">- Revert incomplete fix for bug #758193.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
</package>
<package pkgid="73a6f6d94a4150635628e193e70f1a6da6321cc5" name="glibc-common" arch="i386">
  <version epoch="0" ver="2.5" rel="118.el5_10.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.3" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
</package>
<package pkgid="0466825ef07249f41c2d797ebe961a11f84097ad" name="glibc-common" arch="i386">
  <version epoch="0" ver="2.5" rel="123.el5_11.1"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-122" date="1397779200">- Fix patch for integer overflows in *valloc and memalign. 
  (CVE-2013-4332,#1011805).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
</package>
<package pkgid="27a70cb7b4dca6a368bfd6dc0cf1349a126ed654" name="glibc-common" arch="i386">
  <version epoch="0" ver="2.5" rel="123.el5_11.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-123.3" date="1438387200">- Fix invalid-free when using getaddrinfo() and AI_IDN (CVE-2013-7424,</changelog>
</package>
<package pkgid="33d6d1fb4366c75e3ee820facff3b6481238eb3e" name="glibc-common" arch="i386">
  <version epoch="0" ver="2.5" rel="65.el5_7.3"/>
  <changelog author="Andreas Schwab &lt;schwab@redhat.com&gt; - 2.5-65.el5_7.1" date="1319580000">- Correct cycle detection during dependency sorting (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.2" date="1324332000">- Check values from TZ file header (#767687)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.3" date="1327442400">- Use correct type when casting d_tag (#767687)
- Report write error  in addmnt even for cached streams (#767687)
- ldd: Never run file directly (#767687).
- Workaround misconfigured system (#767687)</changelog>
</package>
<package pkgid="99be6e868dabac09715ffac2df26952719c35c01" name="glibc-common" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.1"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-80" date="1324245600">- Check values from TZ file header (#767688)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81" date="1326924000">- Correct test for detecting cycle during topo sort (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.1" date="1330380000">- Add dist tag
- Filter out &lt;built-in&gt; when building file lists (#784646).
- Avoid "nargs" integer overflow which could be used to bypass FORTIFY_SOURCE (#794813)</changelog>
</package>
<package pkgid="fa665cf444241a2b9e389ea9ca7c87da7ac8940c" name="glibc-common" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.4"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.2" date="1333663200">- Fix memory leak in NIS endgrent (#810323)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.3" date="1340316000">- Fix unbound alloca in vfprintf (#833720)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-81.el5_8.4" date="1341525600">- Fix iconv() segfault if the invalid multibyte character 0xffff is input when converting from IBM930 (#837896)</changelog>
</package>
<package pkgid="85f23ee75ddfeecf70fd3c75ba9bfc1da077423d" name="glibc-common" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.7"/>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.5" date="1342821600">- Do not use PT_IEEE_IP ptrace calls (#839411)
- Update ULPs (#839411)
- Fix various transcendentals in non-default rounding modes (#839411)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.6" date="1344981600">- Fix integer overflow leading to buffer overflow in strto* (#847929)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.7" date="1344981601">- Fix out of bounds array access in strto* exposed by 847929 patch.</changelog>
</package>
<package pkgid="a97ce77e452685521998db6b0f6b9b1ac96633c9" name="glibc-devel" arch="i386">
  <version epoch="0" ver="2.5" rel="107.el5_9.4"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.2" date="1365631200">- Call feraiseexcept only if exceptions are not masked (#861871).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-107.3" date="1365717600">- Fix multibyte character processing crash in regexp (CVE-2013-0242, #951130)
  - Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951130)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.4" date="1365804000">- Add missing patch to avoid use after free (#816647).</changelog>
</package>
<package pkgid="279496b80f0e7fb8363d3f0d023ed4e1d6450221" name="glibc-devel" arch="i386">
  <version epoch="0" ver="2.5" rel="118.el5_10.2"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.5-118" date="1376006400">- Revert incomplete fix for bug #758193.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
</package>
<package pkgid="97a106ef109d089fb7e1f710d90659b8221bf11f" name="glibc-devel" arch="i386">
  <version epoch="0" ver="2.5" rel="118.el5_10.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.3" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
</package>
<package pkgid="4722d89e2d5ae8c32e3647843c7225ab74597b95" name="glibc-devel" arch="i386">
  <version epoch="0" ver="2.5" rel="123.el5_11.1"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-122" date="1397779200">- Fix patch for integer overflows in *valloc and memalign. 
  (CVE-2013-4332,#1011805).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
</package>
<package pkgid="0f5a75716fdb49c7e78675e24e18d1b6b02a027f" name="glibc-devel" arch="i386">
  <version epoch="0" ver="2.5" rel="123.el5_11.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-123.3" date="1438387200">- Fix invalid-free when using getaddrinfo() and AI_IDN (CVE-2013-7424,</changelog>
</package>
<package pkgid="a6442d976be827994e5d065485bf290f80500284" name="glibc-devel" arch="i386">
  <version epoch="0" ver="2.5" rel="65.el5_7.3"/>
  <changelog author="Andreas Schwab &lt;schwab@redhat.com&gt; - 2.5-65.el5_7.1" date="1319580000">- Correct cycle detection during dependency sorting (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.2" date="1324332000">- Check values from TZ file header (#767687)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.3" date="1327442400">- Use correct type when casting d_tag (#767687)
- Report write error  in addmnt even for cached streams (#767687)
- ldd: Never run file directly (#767687).
- Workaround misconfigured system (#767687)</changelog>
</package>
<package pkgid="051a9011ee05fa0841ca0f7d991273098f1b3f1a" name="glibc-devel" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.1"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-80" date="1324245600">- Check values from TZ file header (#767688)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81" date="1326924000">- Correct test for detecting cycle during topo sort (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.1" date="1330380000">- Add dist tag
- Filter out &lt;built-in&gt; when building file lists (#784646).
- Avoid "nargs" integer overflow which could be used to bypass FORTIFY_SOURCE (#794813)</changelog>
</package>
<package pkgid="18b0ca09525374a26bb527f2fcf940d39f0f021f" name="glibc-devel" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.4"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.2" date="1333663200">- Fix memory leak in NIS endgrent (#810323)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.3" date="1340316000">- Fix unbound alloca in vfprintf (#833720)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-81.el5_8.4" date="1341525600">- Fix iconv() segfault if the invalid multibyte character 0xffff is input when converting from IBM930 (#837896)</changelog>
</package>
<package pkgid="d1d7ff8eabb8edaef0317b9478a1f36aa10ed20d" name="glibc-devel" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.7"/>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.5" date="1342821600">- Do not use PT_IEEE_IP ptrace calls (#839411)
- Update ULPs (#839411)
- Fix various transcendentals in non-default rounding modes (#839411)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.6" date="1344981600">- Fix integer overflow leading to buffer overflow in strto* (#847929)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.7" date="1344981601">- Fix out of bounds array access in strto* exposed by 847929 patch.</changelog>
</package>
<package pkgid="50472262f29a0d60de7bf9e4cb5f66eb24d5095e" name="glibc-headers" arch="i386">
  <version epoch="0" ver="2.5" rel="107.el5_9.4"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.2" date="1365631200">- Call feraiseexcept only if exceptions are not masked (#861871).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-107.3" date="1365717600">- Fix multibyte character processing crash in regexp (CVE-2013-0242, #951130)
  - Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951130)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.4" date="1365804000">- Add missing patch to avoid use after free (#816647).</changelog>
</package>
<package pkgid="d1b29dbe33f32e3d17f15b41d2b9402aed7f7b60" name="glibc-headers" arch="i386">
  <version epoch="0" ver="2.5" rel="118.el5_10.2"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.5-118" date="1376006400">- Revert incomplete fix for bug #758193.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
</package>
<package pkgid="081a007d8b450cdce148788fa0944a5b1e19195c" name="glibc-headers" arch="i386">
  <version epoch="0" ver="2.5" rel="118.el5_10.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.3" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
</package>
<package pkgid="eb9687625a2f718f10aadddc49c44ccf72b34f34" name="glibc-headers" arch="i386">
  <version epoch="0" ver="2.5" rel="123.el5_11.1"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-122" date="1397779200">- Fix patch for integer overflows in *valloc and memalign. 
  (CVE-2013-4332,#1011805).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
</package>
<package pkgid="ae45be089c82ca635fb7fe2b7ced09400300a911" name="glibc-headers" arch="i386">
  <version epoch="0" ver="2.5" rel="123.el5_11.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-123.3" date="1438387200">- Fix invalid-free when using getaddrinfo() and AI_IDN (CVE-2013-7424,</changelog>
</package>
<package pkgid="617716f0add967d8e5e776417e08d6916d27d5db" name="glibc-headers" arch="i386">
  <version epoch="0" ver="2.5" rel="65.el5_7.3"/>
  <changelog author="Andreas Schwab &lt;schwab@redhat.com&gt; - 2.5-65.el5_7.1" date="1319580000">- Correct cycle detection during dependency sorting (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.2" date="1324332000">- Check values from TZ file header (#767687)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.3" date="1327442400">- Use correct type when casting d_tag (#767687)
- Report write error  in addmnt even for cached streams (#767687)
- ldd: Never run file directly (#767687).
- Workaround misconfigured system (#767687)</changelog>
</package>
<package pkgid="7def48e367e084194b4054c3af647e83e80a55ea" name="glibc-headers" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.1"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-80" date="1324245600">- Check values from TZ file header (#767688)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81" date="1326924000">- Correct test for detecting cycle during topo sort (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.1" date="1330380000">- Add dist tag
- Filter out &lt;built-in&gt; when building file lists (#784646).
- Avoid "nargs" integer overflow which could be used to bypass FORTIFY_SOURCE (#794813)</changelog>
</package>
<package pkgid="36ad7c031a27b70cca3e51d9fcd7c6116263c1d2" name="glibc-headers" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.4"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.2" date="1333663200">- Fix memory leak in NIS endgrent (#810323)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.3" date="1340316000">- Fix unbound alloca in vfprintf (#833720)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-81.el5_8.4" date="1341525600">- Fix iconv() segfault if the invalid multibyte character 0xffff is input when converting from IBM930 (#837896)</changelog>
</package>
<package pkgid="d6fff2882e637ef2943d95b2de324d347f4ae31e" name="glibc-headers" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.7"/>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.5" date="1342821600">- Do not use PT_IEEE_IP ptrace calls (#839411)
- Update ULPs (#839411)
- Fix various transcendentals in non-default rounding modes (#839411)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.6" date="1344981600">- Fix integer overflow leading to buffer overflow in strto* (#847929)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.7" date="1344981601">- Fix out of bounds array access in strto* exposed by 847929 patch.</changelog>
</package>
<package pkgid="15f07ef8aec9d34c375ea6387da8123d520895fa" name="glibc-utils" arch="i386">
  <version epoch="0" ver="2.5" rel="107.el5_9.4"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.2" date="1365631200">- Call feraiseexcept only if exceptions are not masked (#861871).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-107.3" date="1365717600">- Fix multibyte character processing crash in regexp (CVE-2013-0242, #951130)
  - Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951130)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.4" date="1365804000">- Add missing patch to avoid use after free (#816647).</changelog>
</package>
<package pkgid="2bc3665c8d20f4e804075d6cc14b478fed32b241" name="glibc-utils" arch="i386">
  <version epoch="0" ver="2.5" rel="118.el5_10.2"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.5-118" date="1376006400">- Revert incomplete fix for bug #758193.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
</package>
<package pkgid="2cb31d8ef00d6d3cf80163d18490826989df7543" name="glibc-utils" arch="i386">
  <version epoch="0" ver="2.5" rel="118.el5_10.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.3" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
</package>
<package pkgid="a30d12d9f6dab7a9595f8a604dfb542ded6f83d5" name="glibc-utils" arch="i386">
  <version epoch="0" ver="2.5" rel="123.el5_11.1"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-122" date="1397779200">- Fix patch for integer overflows in *valloc and memalign. 
  (CVE-2013-4332,#1011805).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
</package>
<package pkgid="57ae55589acb2ed4def575c7f1fd00dd6178c54a" name="glibc-utils" arch="i386">
  <version epoch="0" ver="2.5" rel="123.el5_11.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-123.3" date="1438387200">- Fix invalid-free when using getaddrinfo() and AI_IDN (CVE-2013-7424,</changelog>
</package>
<package pkgid="5820d3d6baa5f3c0e8ea34c5d0d6011eb480ec0d" name="glibc-utils" arch="i386">
  <version epoch="0" ver="2.5" rel="65.el5_7.3"/>
  <changelog author="Andreas Schwab &lt;schwab@redhat.com&gt; - 2.5-65.el5_7.1" date="1319580000">- Correct cycle detection during dependency sorting (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.2" date="1324332000">- Check values from TZ file header (#767687)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.3" date="1327442400">- Use correct type when casting d_tag (#767687)
- Report write error  in addmnt even for cached streams (#767687)
- ldd: Never run file directly (#767687).
- Workaround misconfigured system (#767687)</changelog>
</package>
<package pkgid="9685792806676914c0380f192007e9a4f97339a6" name="glibc-utils" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.1"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-80" date="1324245600">- Check values from TZ file header (#767688)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81" date="1326924000">- Correct test for detecting cycle during topo sort (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.1" date="1330380000">- Add dist tag
- Filter out &lt;built-in&gt; when building file lists (#784646).
- Avoid "nargs" integer overflow which could be used to bypass FORTIFY_SOURCE (#794813)</changelog>
</package>
<package pkgid="fbb81df4911026e33cc49bf351f68b045bd3a1d8" name="glibc-utils" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.4"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.2" date="1333663200">- Fix memory leak in NIS endgrent (#810323)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.3" date="1340316000">- Fix unbound alloca in vfprintf (#833720)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-81.el5_8.4" date="1341525600">- Fix iconv() segfault if the invalid multibyte character 0xffff is input when converting from IBM930 (#837896)</changelog>
</package>
<package pkgid="2621b2b74c88630379296c0f8ac40ad306f87cc9" name="glibc-utils" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.7"/>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.5" date="1342821600">- Do not use PT_IEEE_IP ptrace calls (#839411)
- Update ULPs (#839411)
- Fix various transcendentals in non-default rounding modes (#839411)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.6" date="1344981600">- Fix integer overflow leading to buffer overflow in strto* (#847929)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.7" date="1344981601">- Fix out of bounds array access in strto* exposed by 847929 patch.</changelog>
</package>
<package pkgid="df1df7c8664e1c34ff96ed538d171b20e131c091" name="glx-utils" arch="i386">
  <version epoch="0" ver="6.5.1" rel="7.11.el5_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.9" date="1313618400">- mesa-6.5.1-glu-invert-matrix.patch: Fix matrix inversion math (#508438)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.10" date="1320962400">- mesa-6.5.1-nonconformant-visual.patch: Don't warn about the non-
  conformant synthetic Composite visual (#442738)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 6.5.1-7.11" date="1368655200">- CVE-2013-1993 - buffer overflows in DRI protocol (#963066)</changelog>
</package>
<package pkgid="e4109ae9d60632a5a63fd8ef31245a88f4287e83" name="gnome-vfs2" arch="i386">
  <version epoch="0" ver="2.16.2" rel="10.el5"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.16.2-8.el5" date="1301436000">- Fix Gnome trashcan doesn't work on ext4 filesystems (#594836)
- Fix a crash in ImageMagick after conversion is done (#472253)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.16.2-9.el5" date="1342648800">- Prevent deleting items linking out of the trash (#586015)
- Do not stat every file on an ClearCase mvfs filesystem (#822817)
- Do not silently skip directory having no read permission during copy (#772307)
- Allow trashing symlink to filesystem root that does not support trashing (#621394)
- CVE-2009-2473 gnome-vfs2 embedded neon: billion laughs DoS attack (#540548)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.16.2-10.el5" date="1346277600">- Prevent trash applet crashing (#848822)</changelog>
</package>
<package pkgid="9052956165fceb2c890e370f68d4445fad5a3609" name="gnome-vfs2-devel" arch="i386">
  <version epoch="0" ver="2.16.2" rel="10.el5"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.16.2-8.el5" date="1301436000">- Fix Gnome trashcan doesn't work on ext4 filesystems (#594836)
- Fix a crash in ImageMagick after conversion is done (#472253)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.16.2-9.el5" date="1342648800">- Prevent deleting items linking out of the trash (#586015)
- Do not stat every file on an ClearCase mvfs filesystem (#822817)
- Do not silently skip directory having no read permission during copy (#772307)
- Allow trashing symlink to filesystem root that does not support trashing (#621394)
- CVE-2009-2473 gnome-vfs2 embedded neon: billion laughs DoS attack (#540548)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.16.2-10.el5" date="1346277600">- Prevent trash applet crashing (#848822)</changelog>
</package>
<package pkgid="7c5974c10bce402278c88eb0e149f612a6807f51" name="gnome-vfs2-smb" arch="i386">
  <version epoch="0" ver="2.16.2" rel="10.el5"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.16.2-8.el5" date="1301436000">- Fix Gnome trashcan doesn't work on ext4 filesystems (#594836)
- Fix a crash in ImageMagick after conversion is done (#472253)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.16.2-9.el5" date="1342648800">- Prevent deleting items linking out of the trash (#586015)
- Do not stat every file on an ClearCase mvfs filesystem (#822817)
- Do not silently skip directory having no read permission during copy (#772307)
- Allow trashing symlink to filesystem root that does not support trashing (#621394)
- CVE-2009-2473 gnome-vfs2 embedded neon: billion laughs DoS attack (#540548)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.16.2-10.el5" date="1346277600">- Prevent trash applet crashing (#848822)</changelog>
</package>
<package pkgid="58d32cc1533593f236aa1ab2d8828f9ba36c4ef0" name="gnupg" arch="i386">
  <version epoch="0" ver="1.4.5" rel="18.el5_10.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.4.5-17" date="1381449600">- fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
- fix CVE-2013-4242 GnuPG susceptible to Yarom/Falkner side-channel attack
- fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.4.5-18" date="1381536000">- fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.4.5-18.1" date="1389052800">- fix CVE-2013-4576 acoustic side channel attack on RSA private keys</changelog>
</package>
<package pkgid="57c86558586249826145c308d53b4a0d7b33bfb3" name="gnupg" arch="i386">
  <version epoch="0" ver="1.4.5" rel="18.el5_10"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.4.5-15" date="1276214400">- fix error when decrypting certain files (#510500)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.4.5-17" date="1381449600">- fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
- fix CVE-2013-4242 GnuPG susceptible to Yarom/Falkner side-channel attack
- fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.4.5-18" date="1381536000">- fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted</changelog>
</package>
<package pkgid="62c203f373cbedb85f1b39da6559c4e45a3d362d" name="gnupg2" arch="i386">
  <version epoch="0" ver="2.0.10" rel="6.el5_10"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.10-4" date="1280793600">- fix use after free when importing certain X509 certificates
  CVE-2010-2547 (#618156)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.10-5" date="1381449600">- fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
- fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.10-6" date="1381536000">- fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted</changelog>
</package>
<package pkgid="d31f7466f1c02cbf6d7624e2cbe4e6be56d66446" name="gnutls" arch="i386">
  <version epoch="0" ver="1.4.1" rel="10.el5_9.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-9" date="1332453600">- fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
- fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)
- fix CVE-2012-1573 - security issue in packet parsing (#805432)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10" date="1339020000">- do not generate invalid certificate requests without challenge password
- store subject DN instead of issuer DN in the CA list</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10.1" date="1361484000">- fix CVE-2013-1619 - fix TLS-CBC timing attack (#908238)</changelog>
</package>
<package pkgid="f4bbf39272ba031557d948e5fb5b2fce17cb06d8" name="gnutls" arch="i386">
  <version epoch="0" ver="1.4.1" rel="10.el5_9.2"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10" date="1339020000">- do not generate invalid certificate requests without challenge password
- store subject DN instead of issuer DN in the CA list</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10.1" date="1361484000">- fix CVE-2013-1619 - fix TLS-CBC timing attack (#908238)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10.2" date="1369692000">- fix CVE-2013-2116 - fix DoS regression in CVE-2013-1619
  upstream patch (#966754)</changelog>
</package>
<package pkgid="a29703ebea5165cd503cca88db2b51712588a267" name="gnutls" arch="i386">
  <version epoch="0" ver="1.4.1" rel="14.el5_10"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-12" date="1369699200">- fix CVE-2013-2116 - fix DoS regression in CVE-2013-1619
  upstream patch (#966754)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-13" date="1393459200">- fix issues of CVE-2014-0092 (#1069888)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-14" date="1393545600">- Renamed gnutls-1.4.1-cve-2014-0092-1.patch to cve-2014-5138.patch
- Renamed gnutls-1.4.1-cve-2014-0092-2.patch to cve-2014-0092.patch</changelog>
</package>
<package pkgid="a34380e0f573a187e79719740be3f4ca4869bccb" name="gnutls" arch="i386">
  <version epoch="0" ver="1.4.1" rel="16.el5_10"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-14" date="1393545600">- Renamed gnutls-1.4.1-cve-2014-0092-1.patch to cve-2014-5138.patch
- Renamed gnutls-1.4.1-cve-2014-0092-2.patch to cve-2014-0092.patch</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-15" date="1401408000">- fix session ID length check and null pointer dereference (#1102355)
- fix minitasn1 issues (#1102355)
- Renamed gnutls-1.4.1-cve-2014-5138.patch to cve-2009-5138.patch</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-16" date="1401494400">- added missing check for null pointer (#1102355)</changelog>
</package>
<package pkgid="ec95252829482a4e73115ec6fd263fd77577bc6f" name="gnutls" arch="i386">
  <version epoch="0" ver="1.4.1" rel="7.el5_8.2"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-7" date="1268172000">- fix safe renegotiation on SSL3 protocol</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-7.1" date="1328824800">- fix multiple possible NULL dereferences and other problems
  that can potentially lead to segfault in the client</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-7.2" date="1332453600">- fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
- fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)
- fix CVE-2012-1573 - security issue in packet parsing (#805432)</changelog>
</package>
<package pkgid="a79b0bc76f4d925103591bc872435fe1962d4dd4" name="gnutls-devel" arch="i386">
  <version epoch="0" ver="1.4.1" rel="10.el5_9.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-9" date="1332453600">- fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
- fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)
- fix CVE-2012-1573 - security issue in packet parsing (#805432)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10" date="1339020000">- do not generate invalid certificate requests without challenge password
- store subject DN instead of issuer DN in the CA list</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10.1" date="1361484000">- fix CVE-2013-1619 - fix TLS-CBC timing attack (#908238)</changelog>
</package>
<package pkgid="fbbaac85c1b66d01f15ccbb5ad82b4b3ac0cf540" name="gnutls-devel" arch="i386">
  <version epoch="0" ver="1.4.1" rel="10.el5_9.2"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10" date="1339020000">- do not generate invalid certificate requests without challenge password
- store subject DN instead of issuer DN in the CA list</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10.1" date="1361484000">- fix CVE-2013-1619 - fix TLS-CBC timing attack (#908238)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10.2" date="1369692000">- fix CVE-2013-2116 - fix DoS regression in CVE-2013-1619
  upstream patch (#966754)</changelog>
</package>
<package pkgid="a899ea8419e3d95e72a23b9482c48f50a7a131c0" name="gnutls-devel" arch="i386">
  <version epoch="0" ver="1.4.1" rel="14.el5_10"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-12" date="1369699200">- fix CVE-2013-2116 - fix DoS regression in CVE-2013-1619
  upstream patch (#966754)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-13" date="1393459200">- fix issues of CVE-2014-0092 (#1069888)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-14" date="1393545600">- Renamed gnutls-1.4.1-cve-2014-0092-1.patch to cve-2014-5138.patch
- Renamed gnutls-1.4.1-cve-2014-0092-2.patch to cve-2014-0092.patch</changelog>
</package>
<package pkgid="b50deb66dd2e655181608e419683d13c2b005d8e" name="gnutls-devel" arch="i386">
  <version epoch="0" ver="1.4.1" rel="16.el5_10"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-14" date="1393545600">- Renamed gnutls-1.4.1-cve-2014-0092-1.patch to cve-2014-5138.patch
- Renamed gnutls-1.4.1-cve-2014-0092-2.patch to cve-2014-0092.patch</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-15" date="1401408000">- fix session ID length check and null pointer dereference (#1102355)
- fix minitasn1 issues (#1102355)
- Renamed gnutls-1.4.1-cve-2014-5138.patch to cve-2009-5138.patch</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-16" date="1401494400">- added missing check for null pointer (#1102355)</changelog>
</package>
<package pkgid="277fc31036881918988bba48eaf1ecb140044378" name="gnutls-devel" arch="i386">
  <version epoch="0" ver="1.4.1" rel="7.el5_8.2"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-7" date="1268172000">- fix safe renegotiation on SSL3 protocol</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-7.1" date="1328824800">- fix multiple possible NULL dereferences and other problems
  that can potentially lead to segfault in the client</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-7.2" date="1332453600">- fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
- fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)
- fix CVE-2012-1573 - security issue in packet parsing (#805432)</changelog>
</package>
<package pkgid="ce1941599fdf6ed02073b2337749adf3c486732d" name="gnutls-utils" arch="i386">
  <version epoch="0" ver="1.4.1" rel="10.el5_9.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-9" date="1332453600">- fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
- fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)
- fix CVE-2012-1573 - security issue in packet parsing (#805432)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10" date="1339020000">- do not generate invalid certificate requests without challenge password
- store subject DN instead of issuer DN in the CA list</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10.1" date="1361484000">- fix CVE-2013-1619 - fix TLS-CBC timing attack (#908238)</changelog>
</package>
<package pkgid="28515a90ae5440be2a9a3c77585ed540f39a221e" name="gnutls-utils" arch="i386">
  <version epoch="0" ver="1.4.1" rel="10.el5_9.2"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10" date="1339020000">- do not generate invalid certificate requests without challenge password
- store subject DN instead of issuer DN in the CA list</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10.1" date="1361484000">- fix CVE-2013-1619 - fix TLS-CBC timing attack (#908238)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-10.2" date="1369692000">- fix CVE-2013-2116 - fix DoS regression in CVE-2013-1619
  upstream patch (#966754)</changelog>
</package>
<package pkgid="a38bf0f0cae73a20ac495284bceae0dfea1576f7" name="gnutls-utils" arch="i386">
  <version epoch="0" ver="1.4.1" rel="14.el5_10"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-12" date="1369699200">- fix CVE-2013-2116 - fix DoS regression in CVE-2013-1619
  upstream patch (#966754)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-13" date="1393459200">- fix issues of CVE-2014-0092 (#1069888)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-14" date="1393545600">- Renamed gnutls-1.4.1-cve-2014-0092-1.patch to cve-2014-5138.patch
- Renamed gnutls-1.4.1-cve-2014-0092-2.patch to cve-2014-0092.patch</changelog>
</package>
<package pkgid="67a434fe638c644777de2eaaa6616b68256b848e" name="gnutls-utils" arch="i386">
  <version epoch="0" ver="1.4.1" rel="16.el5_10"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-14" date="1393545600">- Renamed gnutls-1.4.1-cve-2014-0092-1.patch to cve-2014-5138.patch
- Renamed gnutls-1.4.1-cve-2014-0092-2.patch to cve-2014-0092.patch</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-15" date="1401408000">- fix session ID length check and null pointer dereference (#1102355)
- fix minitasn1 issues (#1102355)
- Renamed gnutls-1.4.1-cve-2014-5138.patch to cve-2009-5138.patch</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 1.4.1-16" date="1401494400">- added missing check for null pointer (#1102355)</changelog>
</package>
<package pkgid="7972945ed12bef0d2ce2a2c40981965e8a09af14" name="gnutls-utils" arch="i386">
  <version epoch="0" ver="1.4.1" rel="7.el5_8.2"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-7" date="1268172000">- fix safe renegotiation on SSL3 protocol</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-7.1" date="1328824800">- fix multiple possible NULL dereferences and other problems
  that can potentially lead to segfault in the client</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.1-7.2" date="1332453600">- fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
- fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)
- fix CVE-2012-1573 - security issue in packet parsing (#805432)</changelog>
</package>
<package pkgid="344123ac22bb822bb6d2c6425aa2449309909eee" name="gtk2" arch="i386">
  <version epoch="0" ver="2.10.4" rel="29.el5"/>
  <changelog author="Cosimo Cecchi &lt;cosimoc@redhat.com&gt; - 2.10.4-27" date="1344895200">- Fix integer overflow in GdkPixbuf's XBM image file format loader
  (CVE-2012-2370)
  Resolves: #846252</changelog>
  <changelog author="Cosimo Cecchi &lt;ccecchi@redhat.com&gt; - 2.10.4-28" date="1350079200">- Fix the filechooser not opening selected file when location entry
  is empty
  Resolves: #518483</changelog>
  <changelog author="Cosimo Cecchi &lt;ccecchi@redhat.com&gt; - 2.10.4-29" date="1350079201">- Improve patch to parse CUPS user lpoptions file to avoid crashes
  on s390 and ia64
  Resolves: #603809</changelog>
</package>
<package pkgid="12a37ecbbc796d8c9bcdbefe71ce31b78fa12f81" name="gtk2-devel" arch="i386">
  <version epoch="0" ver="2.10.4" rel="29.el5"/>
  <changelog author="Cosimo Cecchi &lt;cosimoc@redhat.com&gt; - 2.10.4-27" date="1344895200">- Fix integer overflow in GdkPixbuf's XBM image file format loader
  (CVE-2012-2370)
  Resolves: #846252</changelog>
  <changelog author="Cosimo Cecchi &lt;ccecchi@redhat.com&gt; - 2.10.4-28" date="1350079200">- Fix the filechooser not opening selected file when location entry
  is empty
  Resolves: #518483</changelog>
  <changelog author="Cosimo Cecchi &lt;ccecchi@redhat.com&gt; - 2.10.4-29" date="1350079201">- Improve patch to parse CUPS user lpoptions file to avoid crashes
  on s390 and ia64
  Resolves: #603809</changelog>
</package>
<package pkgid="ebbad2408fe071b761e6db297e28ac189b239336" name="hpijs3" arch="i386">
  <version epoch="1" ver="3.9.8" rel="15.el5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-13" date="1341007200">- Several parallel-install fixes (bug #501834).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-14" date="1344376800">- Create debugging files securely (CVE-2011-2722, bug #725830).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-15" date="1345240800">- Another D-Bus fix, part of bug #501834.</changelog>
</package>
<package pkgid="796a2f8a9d7a87336567b7d16a50febf55347a69" name="hplip3" arch="i386">
  <version epoch="0" ver="3.9.8" rel="15.el5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-13" date="1341007200">- Several parallel-install fixes (bug #501834).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-14" date="1344376800">- Create debugging files securely (CVE-2011-2722, bug #725830).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-15" date="1345240800">- Another D-Bus fix, part of bug #501834.</changelog>
</package>
<package pkgid="fb929fe5823439a0bef2a296d1a72aa665b65b5f" name="hplip3-common" arch="i386">
  <version epoch="0" ver="3.9.8" rel="15.el5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-13" date="1341007200">- Several parallel-install fixes (bug #501834).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-14" date="1344376800">- Create debugging files securely (CVE-2011-2722, bug #725830).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-15" date="1345240800">- Another D-Bus fix, part of bug #501834.</changelog>
</package>
<package pkgid="a7978afdbffb8fce8af62e0bc9978bcf5b33d491" name="hplip3-gui" arch="i386">
  <version epoch="0" ver="3.9.8" rel="15.el5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-13" date="1341007200">- Several parallel-install fixes (bug #501834).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-14" date="1344376800">- Create debugging files securely (CVE-2011-2722, bug #725830).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-15" date="1345240800">- Another D-Bus fix, part of bug #501834.</changelog>
</package>
<package pkgid="14b3fd0ea83f12051e91495dd207d00b1de4e848" name="hplip3-libs" arch="i386">
  <version epoch="0" ver="3.9.8" rel="15.el5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-13" date="1341007200">- Several parallel-install fixes (bug #501834).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-14" date="1344376800">- Create debugging files securely (CVE-2011-2722, bug #725830).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-15" date="1345240800">- Another D-Bus fix, part of bug #501834.</changelog>
</package>
<package pkgid="445047208384c4ae5ecc556b3cd5f9f432cb7785" name="httpd" arch="i386">
  <version epoch="0" ver="2.2.3" rel="53.sl5.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-52" date="1305151200">- mod_include: fix parsing across bucket boundaries (#698402)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53" date="1308261600">- mod_cache: add "hard" argument to CacheMaxExpire (#379811)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53.1" date="1314741600">- add security fix for CVE-2011-3192 (#733059)</changelog>
</package>
<package pkgid="cfa3bf9c4da56327c2fadc35b23bdcc4046e06ca" name="httpd" arch="i386">
  <version epoch="0" ver="2.2.3" rel="53.sl5.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53" date="1308261600">- mod_cache: add "hard" argument to CacheMaxExpire (#379811)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53.1" date="1314741600">- add security fix for CVE-2011-3192 (#733059)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53.3" date="1317938400">- add security fix for CVE-2011-3368 (#743903)
- fix regressions in byterange handling (#736593)</changelog>
</package>
<package pkgid="2b4425b931d1e1a0dd0832c471b75994c3a84edf" name="httpd" arch="i386">
  <version epoch="0" ver="2.2.3" rel="63.sl5.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-63" date="1325714400">- revert addition of LDAP nested group support (#546443)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-63.1" date="1328738400">- add security fixes for CVE-2012-0053, CVE-2012-0031, CVE-2011-3607 (#787596)	
- remove patch for CVE-2011-3638, obviated by fix for CVE-2011-3639</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt; 2.2.3-63.sl5.1" date="1330380000">This package must not feature TUVs branding
  Spec change: The index.html file is outside of the source tarball, so we need to patch it in the install step
- Added patch httpd-sl_index.html.sl5.patch
  Switches to an SL branded default index
- Added patch httpd-spec_sl_index.html.sl5.patch
- Prevented application of patch httpd-sl_index.html.sl5.patch
  This is the patch we need, just can	 be applied in the normal place
- Prevented application of patch httpd-spec_sl_index.html.sl5.patch</changelog>
</package>
<package pkgid="14ebae11271e9db82baf3f0edf9ff0c64e41d284" name="httpd" arch="i386">
  <version epoch="0" ver="2.2.3" rel="74.sl5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-73" date="1350597600">- fix %post scriptlet output (#752618, #867736)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-74" date="1351116000">- further %post scriptlet fix (#752618, #867736)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt; 2.2.3-74.sl5" date="1357682400">This package must not feature TUVs branding
  Spec change: The index.html file is outside of the source tarball, so we need to patch it in the install step
- Added patch httpd-spec_sl_index.html.sl5.patch
- Added patch httpd-sl_index.html.sl5.patch
  Switches to an SL branded default index
- Prevented application of patch httpd-sl_index.html.sl5.patch
  This is the patch we need, just can	 be applied in the normal place
- Prevented application of patch httpd-spec_sl_index.html.sl5.patch</changelog>
</package>
<package pkgid="1dda6e89a850c176c78c2c623505d6865ee81ddf" name="httpd" arch="i386">
  <version epoch="0" ver="2.2.3" rel="78.sl5"/>
  <changelog author="&lt;jorton@redhat.com&gt; - 2.2.3-77" date="1362780000">- add security fixes for CVE-2012-3499, CVE-2012-4558 (#915883, #915884)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-78" date="1367272800">- mod_rewrite: add security fix for CVE-2013-1862 (#953729)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1368568800">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: (Release: .*).el5(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script</changelog>
</package>
<package pkgid="d3d1f035d86dd63217d90fef463b98f400a3355b" name="httpd" arch="i386">
  <version epoch="0" ver="2.2.3" rel="82.sl5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-81" date="1371168000">- mod_mem_cache: thread-safety fixes (Jan Kaluza, #970994)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-82" date="1375488000">- mod_dav: add security fix for CVE-2013-1896 (#991366)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1376438400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="3686d5c7e26c7ad1d92bb7d3317650881b5ed1ef" name="httpd" arch="i386">
  <version epoch="0" ver="2.2.3" rel="85.sl5"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-84" date="1395360000">- mod_dav: add security fix for CVE-2013-6438 (#1078176)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-85" date="1395878400">- mod_log_config: add security fix for CVE-2014-0098 (#1078176)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1396656000">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="6073e6f17d81be66e6601e6d79cd0eeabe1ae9df" name="httpd" arch="i386">
  <version epoch="0" ver="2.2.3" rel="87.sl5"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-86" date="1405728000">- mod_status: add security fix for CVE-2014-0226</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-87" date="1405728001">- mod_cgid: add security fix for CVE-2014-0231
- mod_deflate: add security fix for CVE-2014-0118</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1406160000">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="f3e0a4e26c024b1b08918d7099066902b2cbf3b8" name="httpd" arch="i386">
  <version epoch="0" ver="2.2.3" rel="92.sl5"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-91" date="1405728000">- mod_cgid: add security fix for CVE-2014-0231
- mod_deflate: add security fix for CVE-2014-0118</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-92" date="1468368000">- add security fix for CVE-2016-5387</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1468886400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="1f9153fd7e52427bc799b40b97a215ebca354557" name="httpd-devel" arch="i386">
  <version epoch="0" ver="2.2.3" rel="53.sl5.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-52" date="1305151200">- mod_include: fix parsing across bucket boundaries (#698402)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53" date="1308261600">- mod_cache: add "hard" argument to CacheMaxExpire (#379811)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53.1" date="1314741600">- add security fix for CVE-2011-3192 (#733059)</changelog>
</package>
<package pkgid="34bf365fff7a2783193a8a4bd10d225596af4df5" name="httpd-devel" arch="i386">
  <version epoch="0" ver="2.2.3" rel="53.sl5.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53" date="1308261600">- mod_cache: add "hard" argument to CacheMaxExpire (#379811)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53.1" date="1314741600">- add security fix for CVE-2011-3192 (#733059)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53.3" date="1317938400">- add security fix for CVE-2011-3368 (#743903)
- fix regressions in byterange handling (#736593)</changelog>
</package>
<package pkgid="46fb739fdeda462fd6b53410706441a3e3593a0b" name="httpd-devel" arch="i386">
  <version epoch="0" ver="2.2.3" rel="63.sl5.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-63" date="1325714400">- revert addition of LDAP nested group support (#546443)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-63.1" date="1328738400">- add security fixes for CVE-2012-0053, CVE-2012-0031, CVE-2011-3607 (#787596)	
- remove patch for CVE-2011-3638, obviated by fix for CVE-2011-3639</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt; 2.2.3-63.sl5.1" date="1330380000">This package must not feature TUVs branding
  Spec change: The index.html file is outside of the source tarball, so we need to patch it in the install step
- Added patch httpd-sl_index.html.sl5.patch
  Switches to an SL branded default index
- Added patch httpd-spec_sl_index.html.sl5.patch
- Prevented application of patch httpd-sl_index.html.sl5.patch
  This is the patch we need, just can	 be applied in the normal place
- Prevented application of patch httpd-spec_sl_index.html.sl5.patch</changelog>
</package>
<package pkgid="f8f6957c847e124593d4f134096484e69eb9c2ad" name="httpd-devel" arch="i386">
  <version epoch="0" ver="2.2.3" rel="74.sl5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-73" date="1350597600">- fix %post scriptlet output (#752618, #867736)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-74" date="1351116000">- further %post scriptlet fix (#752618, #867736)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt; 2.2.3-74.sl5" date="1357682400">This package must not feature TUVs branding
  Spec change: The index.html file is outside of the source tarball, so we need to patch it in the install step
- Added patch httpd-spec_sl_index.html.sl5.patch
- Added patch httpd-sl_index.html.sl5.patch
  Switches to an SL branded default index
- Prevented application of patch httpd-sl_index.html.sl5.patch
  This is the patch we need, just can	 be applied in the normal place
- Prevented application of patch httpd-spec_sl_index.html.sl5.patch</changelog>
</package>
<package pkgid="eca6c374b7cf0b1015d670fb4de550d31df6bbe6" name="httpd-devel" arch="i386">
  <version epoch="0" ver="2.2.3" rel="78.sl5"/>
  <changelog author="&lt;jorton@redhat.com&gt; - 2.2.3-77" date="1362780000">- add security fixes for CVE-2012-3499, CVE-2012-4558 (#915883, #915884)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-78" date="1367272800">- mod_rewrite: add security fix for CVE-2013-1862 (#953729)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1368568800">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: (Release: .*).el5(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script</changelog>
</package>
<package pkgid="01d5375159a814078570453c14ea522335f7b3c1" name="httpd-devel" arch="i386">
  <version epoch="0" ver="2.2.3" rel="82.sl5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-81" date="1371168000">- mod_mem_cache: thread-safety fixes (Jan Kaluza, #970994)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-82" date="1375488000">- mod_dav: add security fix for CVE-2013-1896 (#991366)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1376438400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="44dbadf31c1ac50374ff302573e9fe1276170cd6" name="httpd-devel" arch="i386">
  <version epoch="0" ver="2.2.3" rel="85.sl5"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-84" date="1395360000">- mod_dav: add security fix for CVE-2013-6438 (#1078176)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-85" date="1395878400">- mod_log_config: add security fix for CVE-2014-0098 (#1078176)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1396656000">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="9511f0635e2e508b6ea64dc050c1e8b44e394e28" name="httpd-devel" arch="i386">
  <version epoch="0" ver="2.2.3" rel="87.sl5"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-86" date="1405728000">- mod_status: add security fix for CVE-2014-0226</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-87" date="1405728001">- mod_cgid: add security fix for CVE-2014-0231
- mod_deflate: add security fix for CVE-2014-0118</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1406160000">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="48e10a5b20fed91327641a95e501811de2f880e0" name="httpd-devel" arch="i386">
  <version epoch="0" ver="2.2.3" rel="92.sl5"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-91" date="1405728000">- mod_cgid: add security fix for CVE-2014-0231
- mod_deflate: add security fix for CVE-2014-0118</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-92" date="1468368000">- add security fix for CVE-2016-5387</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1468886400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="e3efbcade52d82a72d86244c2bdbcc3a37120a0a" name="httpd-manual" arch="i386">
  <version epoch="0" ver="2.2.3" rel="53.sl5.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-52" date="1305151200">- mod_include: fix parsing across bucket boundaries (#698402)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53" date="1308261600">- mod_cache: add "hard" argument to CacheMaxExpire (#379811)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53.1" date="1314741600">- add security fix for CVE-2011-3192 (#733059)</changelog>
</package>
<package pkgid="b9bbd67d8103d7455a29ddf8d7a02c4c26bf2341" name="httpd-manual" arch="i386">
  <version epoch="0" ver="2.2.3" rel="53.sl5.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53" date="1308261600">- mod_cache: add "hard" argument to CacheMaxExpire (#379811)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53.1" date="1314741600">- add security fix for CVE-2011-3192 (#733059)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53.3" date="1317938400">- add security fix for CVE-2011-3368 (#743903)
- fix regressions in byterange handling (#736593)</changelog>
</package>
<package pkgid="a4c3cd3ec16b8d7a15cd8eaf553007836697fc78" name="httpd-manual" arch="i386">
  <version epoch="0" ver="2.2.3" rel="63.sl5.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-63" date="1325714400">- revert addition of LDAP nested group support (#546443)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-63.1" date="1328738400">- add security fixes for CVE-2012-0053, CVE-2012-0031, CVE-2011-3607 (#787596)	
- remove patch for CVE-2011-3638, obviated by fix for CVE-2011-3639</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt; 2.2.3-63.sl5.1" date="1330380000">This package must not feature TUVs branding
  Spec change: The index.html file is outside of the source tarball, so we need to patch it in the install step
- Added patch httpd-sl_index.html.sl5.patch
  Switches to an SL branded default index
- Added patch httpd-spec_sl_index.html.sl5.patch
- Prevented application of patch httpd-sl_index.html.sl5.patch
  This is the patch we need, just can	 be applied in the normal place
- Prevented application of patch httpd-spec_sl_index.html.sl5.patch</changelog>
</package>
<package pkgid="21631cc13945764d7686c2eeaafd26c0efed64a4" name="httpd-manual" arch="i386">
  <version epoch="0" ver="2.2.3" rel="74.sl5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-73" date="1350597600">- fix %post scriptlet output (#752618, #867736)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-74" date="1351116000">- further %post scriptlet fix (#752618, #867736)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt; 2.2.3-74.sl5" date="1357682400">This package must not feature TUVs branding
  Spec change: The index.html file is outside of the source tarball, so we need to patch it in the install step
- Added patch httpd-spec_sl_index.html.sl5.patch
- Added patch httpd-sl_index.html.sl5.patch
  Switches to an SL branded default index
- Prevented application of patch httpd-sl_index.html.sl5.patch
  This is the patch we need, just can	 be applied in the normal place
- Prevented application of patch httpd-spec_sl_index.html.sl5.patch</changelog>
</package>
<package pkgid="eb17aec82a76b26a6834a51ff1b17e5027e8584c" name="httpd-manual" arch="i386">
  <version epoch="0" ver="2.2.3" rel="78.sl5"/>
  <changelog author="&lt;jorton@redhat.com&gt; - 2.2.3-77" date="1362780000">- add security fixes for CVE-2012-3499, CVE-2012-4558 (#915883, #915884)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-78" date="1367272800">- mod_rewrite: add security fix for CVE-2013-1862 (#953729)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1368568800">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: (Release: .*).el5(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script</changelog>
</package>
<package pkgid="179badc8e37a87a04f797219b52bb30338a8a32e" name="httpd-manual" arch="i386">
  <version epoch="0" ver="2.2.3" rel="82.sl5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-81" date="1371168000">- mod_mem_cache: thread-safety fixes (Jan Kaluza, #970994)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-82" date="1375488000">- mod_dav: add security fix for CVE-2013-1896 (#991366)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1376438400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="c64c61ef2ccaea7fae8d5d04550caffc9d211eec" name="httpd-manual" arch="i386">
  <version epoch="0" ver="2.2.3" rel="85.sl5"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-84" date="1395360000">- mod_dav: add security fix for CVE-2013-6438 (#1078176)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-85" date="1395878400">- mod_log_config: add security fix for CVE-2014-0098 (#1078176)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1396656000">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="f3424b6d1ce9ff219f5a7904c7e0b9bba89547d0" name="httpd-manual" arch="i386">
  <version epoch="0" ver="2.2.3" rel="87.sl5"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-86" date="1405728000">- mod_status: add security fix for CVE-2014-0226</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-87" date="1405728001">- mod_cgid: add security fix for CVE-2014-0231
- mod_deflate: add security fix for CVE-2014-0118</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1406160000">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="f6047da3e351b9e172f76ccaaa29c1bdbdb57b97" name="httpd-manual" arch="i386">
  <version epoch="0" ver="2.2.3" rel="92.sl5"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-91" date="1405728000">- mod_cgid: add security fix for CVE-2014-0231
- mod_deflate: add security fix for CVE-2014-0118</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-92" date="1468368000">- add security fix for CVE-2016-5387</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1468886400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="81eac6c82afa619bd9710c6ab56ede6c12baf079" name="hypervkvpd" arch="i686">
  <version epoch="0" ver="0" rel="0.7.el5_9.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 0-0.7.1" date="1366322400">- Fix for file descriptor leak (rhbz#953502)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 0-0.7.2" date="1366408800">- Validate Netlink source address (CVE-2012-5532) (rhbz#953560)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 0-0.7.3" date="1366754400">- Fix for one more file descriptor leak (rhbz#953502)</changelog>
</package>
<package pkgid="aad21a70e78be4f4a52918ed0c7db3f2befeb3bb" name="ibutils" arch="i386">
  <version epoch="0" ver="1.2" rel="11.2.el5"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 1.2-11.el5" date="1261519200">- Update to latest compatible upstream version
- Related: bz518218</changelog>
  <changelog author="Jay Fenlason &lt;fenlason@redhat.com&gt; 1.2-11.1.el5" date="1319839200">- Add ibutils-1.2-invalid-delete.patch to close
  Resolves: bz711779</changelog>
  <changelog author="Jay Fenlason &lt;fenlason@redhat.com&gt; 1.2-11.2.el5" date="1324418400">- Added Requires lines for ibutils-libs to make rpmdiff happier.
- Add patch for CVE-2008-3277
  Resolves: bz768400</changelog>
</package>
<package pkgid="286575a806a119f9876ff96c483e249ce98eac53" name="ibutils-devel" arch="i386">
  <version epoch="0" ver="1.2" rel="11.2.el5"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 1.2-11.el5" date="1261519200">- Update to latest compatible upstream version
- Related: bz518218</changelog>
  <changelog author="Jay Fenlason &lt;fenlason@redhat.com&gt; 1.2-11.1.el5" date="1319839200">- Add ibutils-1.2-invalid-delete.patch to close
  Resolves: bz711779</changelog>
  <changelog author="Jay Fenlason &lt;fenlason@redhat.com&gt; 1.2-11.2.el5" date="1324418400">- Added Requires lines for ibutils-libs to make rpmdiff happier.
- Add patch for CVE-2008-3277
  Resolves: bz768400</changelog>
</package>
<package pkgid="dfc74c3bd9943de19773019be1a1a187902af34b" name="ibutils-libs" arch="i386">
  <version epoch="0" ver="1.2" rel="11.2.el5"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 1.2-11.el5" date="1261519200">- Update to latest compatible upstream version
- Related: bz518218</changelog>
  <changelog author="Jay Fenlason &lt;fenlason@redhat.com&gt; 1.2-11.1.el5" date="1319839200">- Add ibutils-1.2-invalid-delete.patch to close
  Resolves: bz711779</changelog>
  <changelog author="Jay Fenlason &lt;fenlason@redhat.com&gt; 1.2-11.2.el5" date="1324418400">- Added Requires lines for ibutils-libs to make rpmdiff happier.
- Add patch for CVE-2008-3277
  Resolves: bz768400</changelog>
</package>
<package pkgid="952ccb284dbadb089c3dc3a6df818b02a93a6156" name="icu" arch="i386">
  <version epoch="0" ver="3.6" rel="5.16.1"/>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.6-5.15" date="1244844000">- Resolves: rhbz#505160 CVE-2009-0153, guarantee abi</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.6-5.16" date="1290463200">- Resolves: rhbz#654590 AVC fail on ppc64
- Resolves: rhbz#457656 Kartika.ttf crashes icu</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.6-5.16.1" date="1323727200">- Resolves: rhbz#766537 CVE-2011-4599 localeID overflow</changelog>
</package>
<package pkgid="3b86a01560b5092f083094f44a33ebcdab5af172" name="initscripts" arch="i386">
  <version epoch="0" ver="8.45.42" rel="1.el5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; 8.45.40-1" date="1321999200">- exit arping on first response (#744734)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; 8.45.41-1" date="1322863200">- fix check for dhcp6c pid (#568896)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; 8.45.42-1" date="1324332000">- changed exchange_mode to "main, aggressive" (#435274)</changelog>
</package>
<package pkgid="8fc935b2e535b364f26342a336e0226c2b5a54d9" name="initscripts" arch="i386">
  <version epoch="0" ver="8.45.42" rel="2.el5_9.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; 8.45.42-1" date="1324339200">- changed exchange_mode to "main, aggressive" (#435274)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 8.45.42-2" date="1343952000">- added missing "-p p" for kpartx in netfs (#844671)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 8.45.42-2.1" date="1376697600">- create /tmp/.X11-unix in rc.sysinit (#997622, CVE-2013-4169)</changelog>
</package>
<package pkgid="a033b930ed1c0e5dc39599d7e526f6182f568e81" name="ipa-client" arch="i386">
  <version epoch="0" ver="2.1.3" rel="5.el5_9.2"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.3-5" date="1357596000">- Use secure method to retrieve IPA CA during client enrollment.
  CVE-2012-5484 (#878217)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.3-5.1" date="1358287200">- Fix python syntax backport issue in CVE patch. (#878217)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.3-5.2" date="1358373600">- Add missing man page option --ca-cert-file. (#878217)</changelog>
</package>
<package pkgid="973d8478a33c6e26101b44e90092ff9fac5bcfa0" name="jakarta-commons-collections" arch="i386">
  <version epoch="0" ver="3.2" rel="2jpp.4"/>
  <changelog author="Devrim GUNDUZ &lt;devrim@commandprompt.com&gt; - 0:3.2-2jpp.2" date="1204502400">- Add missing sources, per #434059</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:3.2-2jpp.3" date="1207094400">- Upgrade to 3.2. Resolves: rhbz435001</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:3.2-2jpp.4" date="1448496000">- Fix Java object de-serialization vulnerability
- Resolves: CVE-2015-7501</changelog>
</package>
<package pkgid="ea435fc90518a9bdb7ea7f3272f7fc85ec2ff3bf" name="jakarta-commons-collections-javadoc" arch="i386">
  <version epoch="0" ver="3.2" rel="2jpp.4"/>
  <changelog author="Devrim GUNDUZ &lt;devrim@commandprompt.com&gt; - 0:3.2-2jpp.2" date="1204502400">- Add missing sources, per #434059</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:3.2-2jpp.3" date="1207094400">- Upgrade to 3.2. Resolves: rhbz435001</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:3.2-2jpp.4" date="1448496000">- Fix Java object de-serialization vulnerability
- Resolves: CVE-2015-7501</changelog>
</package>
<package pkgid="353ae63df3dba2800349265c8a810762ba74900d" name="jakarta-commons-collections-testframework" arch="i386">
  <version epoch="0" ver="3.2" rel="2jpp.4"/>
  <changelog author="Devrim GUNDUZ &lt;devrim@commandprompt.com&gt; - 0:3.2-2jpp.2" date="1204502400">- Add missing sources, per #434059</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:3.2-2jpp.3" date="1207094400">- Upgrade to 3.2. Resolves: rhbz435001</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:3.2-2jpp.4" date="1448496000">- Fix Java object de-serialization vulnerability
- Resolves: CVE-2015-7501</changelog>
</package>
<package pkgid="e9e588e131df685d5486fa8dbebaed578f1dde13" name="jakarta-commons-collections-testframework-javadoc" arch="i386">
  <version epoch="0" ver="3.2" rel="2jpp.4"/>
  <changelog author="Devrim GUNDUZ &lt;devrim@commandprompt.com&gt; - 0:3.2-2jpp.2" date="1204502400">- Add missing sources, per #434059</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:3.2-2jpp.3" date="1207094400">- Upgrade to 3.2. Resolves: rhbz435001</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:3.2-2jpp.4" date="1448496000">- Fix Java object de-serialization vulnerability
- Resolves: CVE-2015-7501</changelog>
</package>
<package pkgid="c15360932879412e9b5236a43f7d00a9f792e214" name="jakarta-commons-collections-tomcat5" arch="i386">
  <version epoch="0" ver="3.2" rel="2jpp.4"/>
  <changelog author="Devrim GUNDUZ &lt;devrim@commandprompt.com&gt; - 0:3.2-2jpp.2" date="1204502400">- Add missing sources, per #434059</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 0:3.2-2jpp.3" date="1207094400">- Upgrade to 3.2. Resolves: rhbz435001</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:3.2-2jpp.4" date="1448496000">- Fix Java object de-serialization vulnerability
- Resolves: CVE-2015-7501</changelog>
</package>
<package pkgid="05a8872119ef0f48c5bac710ccf06df8b1e36c2e" name="jakarta-commons-httpclient" arch="i386">
  <version epoch="1" ver="3.0" rel="7jpp.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; - 1:3.0-6jpp_2fc" date="1153605600">- Rebuilt</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:3.0-7jpp.1" date="1155247200">- Added missing requirements.
- Added missing postun section for javadoc.</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.2" date="1358287200">- Resolves: BZ 887662</changelog>
</package>
<package pkgid="1d88d163411084d825c46acfa71ae873c8e47524" name="jakarta-commons-httpclient" arch="i386">
  <version epoch="1" ver="3.0" rel="7jpp.4.el5_10"/>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.2" date="1358294400">- Resolves: BZ 887663</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.3" date="1409702400">- Resolves: CVE-2014-3577</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.4" date="1409875200">- Resolves: CVE-2014-3577</changelog>
</package>
<package pkgid="21de4353e81f3322f063aebaec004d1619fc233f" name="jakarta-commons-httpclient-demo" arch="i386">
  <version epoch="1" ver="3.0" rel="7jpp.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; - 1:3.0-6jpp_2fc" date="1153605600">- Rebuilt</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:3.0-7jpp.1" date="1155247200">- Added missing requirements.
- Added missing postun section for javadoc.</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.2" date="1358287200">- Resolves: BZ 887662</changelog>
</package>
<package pkgid="90881de27aa892a124c45f6a1ef6f6a06224760a" name="jakarta-commons-httpclient-demo" arch="i386">
  <version epoch="1" ver="3.0" rel="7jpp.4.el5_10"/>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.2" date="1358294400">- Resolves: BZ 887663</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.3" date="1409702400">- Resolves: CVE-2014-3577</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.4" date="1409875200">- Resolves: CVE-2014-3577</changelog>
</package>
<package pkgid="cd846400baa1637ff3911d0e7a56f8a7d8b33d5f" name="jakarta-commons-httpclient-javadoc" arch="i386">
  <version epoch="1" ver="3.0" rel="7jpp.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; - 1:3.0-6jpp_2fc" date="1153605600">- Rebuilt</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:3.0-7jpp.1" date="1155247200">- Added missing requirements.
- Added missing postun section for javadoc.</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.2" date="1358287200">- Resolves: BZ 887662</changelog>
</package>
<package pkgid="3d0cb9efacbc27b9277da736b62afc91c6f1b769" name="jakarta-commons-httpclient-javadoc" arch="i386">
  <version epoch="1" ver="3.0" rel="7jpp.4.el5_10"/>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.2" date="1358294400">- Resolves: BZ 887663</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.3" date="1409702400">- Resolves: CVE-2014-3577</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.4" date="1409875200">- Resolves: CVE-2014-3577</changelog>
</package>
<package pkgid="b619a918bca793c05d217d7008896aaad0f31b7a" name="jakarta-commons-httpclient-manual" arch="i386">
  <version epoch="1" ver="3.0" rel="7jpp.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; - 1:3.0-6jpp_2fc" date="1153605600">- Rebuilt</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:3.0-7jpp.1" date="1155247200">- Added missing requirements.
- Added missing postun section for javadoc.</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.2" date="1358287200">- Resolves: BZ 887662</changelog>
</package>
<package pkgid="5c301b21c94019c296e3c0998b2815a33eb299e3" name="jakarta-commons-httpclient-manual" arch="i386">
  <version epoch="1" ver="3.0" rel="7jpp.4.el5_10"/>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.2" date="1358294400">- Resolves: BZ 887663</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.3" date="1409702400">- Resolves: CVE-2014-3577</changelog>
  <changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0-7jpp.4" date="1409875200">- Resolves: CVE-2014-3577</changelog>
</package>
<package pkgid="89a1143b55c5ff6a7422dde5f69e5b82f6752921" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.22.1.9.8.el5_6"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.21.b17.el5" date="1302127200">- Resolves bz694080
- Build with rhino support</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.7" date="1303941600">- Resolves bz690289
- Import from RHEL-5_6-Z
- Updated to IcedTea6 1.9.7
- Removed all plugin/webstart related commented lines
- Modified bz entry format in previous logs to get around cvs ack checking bug</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.8" date="1307138400">- Resolves: rhbz#668488
- Bumped to IcedTea6 1.9.8
- RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
  disabled get still selected for read ops (win)
- RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
- RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
  FileDialog.show()
- RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
  code
- RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
  bindings
- RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
- RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
- RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
  with scale close to zero
- RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
- RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
  size variables</changelog>
</package>
<package pkgid="2412a564307ca0156a8fc7e722aeff8f117aa62a" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.23.1.9.10.el5_7"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.7" date="1303948800">- Resolves bz690289
- Import from RHEL-5_6-Z
- Updated to IcedTea6 1.9.7
- Removed all plugin/webstart related commented lines
- Modified bz entry format in previous logs to get around cvs ack checking bug</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.8" date="1307145600">- Resolves: rhbz#668488
- Bumped to IcedTea6 1.9.8
- RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
  disabled get still selected for read ops (win)
- RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
- RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
  FileDialog.show()
- RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
  code
- RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
  bindings
- RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
- RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
- RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
  with scale close to zero
- RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
- RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
  size variables</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.23.1.9.10" date="1318550400">- Resolves: rhbz#744786
- Bumped to IcedTea6 1.9.8
 Security fixes
  - S7000600, CVE-2011-3547: InputStream skip() information leak
  - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
  - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
  - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
  - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
  - S7055902, CVE-2011-3521: IIOP deserialization code execution
  - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
  - S7064341, CVE-2011-3389: JSSE
  - S7070134, CVE-2011-3558: Hotspot unspecified issue
  - S7077466, CVE-2011-3556: RMI DGC server remote code execution
  - S7083012, CVE-2011-3557: RMI registry privileged code execution
  - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
 NetX
  - PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest</changelog>
</package>
<package pkgid="ef110b8c0b894cecd86157fd7d06becc0de6d1e3" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.25.1.10.6.el5_8"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.23.1.10.4" date="1324591200">- Resolves: rhbz#727598 
- Updated to IcedTea6 1.10.4
- Imported HugePages patches</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.6.0.0-1.24.1.10.4" date="1326232800">- Added patch to resolve rmi regression</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.25.1.10.6" date="1328997600">- Updated to IcedTea6 1.10.6
- Resolves: rhbz#787142
- Security fixes
  - S7082299: Fix in AtomicReferenceArray
  - S7088367: Fix issues in java sound
  - S7110683: Issues with some KeyboardFocusManager method
  - S7110687: Issues with TimeZone class
  - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
  - S7110704: Issues with some method in corba
  - S7112642: Incorrect checking for graphics rendering object
  - S7118283: Better input parameter checking in zip file processing
  - S7126960: Add property to limit number of request headers to the HTTP Server
- Bug fixes
  - RH580478: Desktop files should not use hardcoded path
- Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
- Removed and deleted upstreamed Hugepages patches:
  - Source100: 7034464-hugepage.patch
  - Source101: 7037939-hugepage.patch
  - Source102: 7043564-hugepage.patch</changelog>
</package>
<package pkgid="eb160d0656ada3856f3214e1ea8f51222d8e32fe" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.27.1.10.8.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.25.1.10.6" date="1328997600">- Updated to IcedTea6 1.10.6
- Resolves: rhbz#787142
- Security fixes
  - S7082299: Fix in AtomicReferenceArray
  - S7088367: Fix issues in java sound
  - S7110683: Issues with some KeyboardFocusManager method
  - S7110687: Issues with TimeZone class
  - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
  - S7110704: Issues with some method in corba
  - S7112642: Incorrect checking for graphics rendering object
  - S7118283: Better input parameter checking in zip file processing
  - S7126960: Add property to limit number of request headers to the HTTP Server
- Bug fixes
  - RH580478: Desktop files should not use hardcoded path
- Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
- Removed and deleted upstreamed Hugepages patches:
  - Source100: 7034464-hugepage.patch
  - Source101: 7037939-hugepage.patch
  - Source102: 7043564-hugepage.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.26.1.10.8" date="1339192800">- Updated to IcedTea6 1.10.8
- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added to patch
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339279200">- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added also to package.definition
- Resolves: rhbz#828749</changelog>
</package>
<package pkgid="3f80b35faa21a0c794763546974536e75cadd122" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.28.1.10.10.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339538400">- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.9" date="1346450400">- Updated to latest IcedTea6 1.10.9
- Resolves: rhbz#846709
- Resolves: rhbz#853114</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.10" date="1350079200">- Updated to IcedTea6 1.10.10
- Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
  865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
  865519, 865531, 865541, 865568</changelog>
</package>
<package pkgid="1acb0cc158a00ee707f0b64f1112f64b3f9dd19b" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.28.1.10.9.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339279200">- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added also to package.definition
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339538400">- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.9" date="1346450400">- Updated to latest IcedTea6 1.10.9
- Resolves: rhbz#846709
- Resolves: rhbz#853114</changelog>
</package>
<package pkgid="2f88668c3dc527a09c2eaf3edbacf77c644c50da" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.33.1.11.6.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.31.1.11.6" date="1358287200">- Updated to icedtea6 1.11.6
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.32.1.11.6" date="1360188000">- added patch9 revertTwoWrongSecurityPatches2013-02-06.patch
  to remove   6664509 and 7201064 from 1.11.6 tarball
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.33.1.11.6" date="1360188001">- removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch9:   7201064.patch to be reverted
- added patch10:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906705</changelog>
</package>
<package pkgid="17cccdcbe235625aafda9bebbbb95fdf144e277b" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.35.1.11.8.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.33.1.11.6" date="1360188000">- removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch9:   7201064.patch to be reverted
- added patch10:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.34.1.11.8" date="1360965600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but valid
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#911522</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.35.1.11.8" date="1361224800">- Rebuild with updated source tarball
- Resolves: rhbz#911522</changelog>
</package>
<package pkgid="486d4bf89d52a7484b6320a40bbfa624451dfa92" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.36.1.11.9.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.34.1.11.8" date="1360965600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but valid
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#911522</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.35.1.11.8" date="1361224800">- Rebuild with updated source tarball
- Resolves: rhbz#911522</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; 1:1.6.0.0-1.36.1.11.9" date="1362434400">- Updated to icedtea6 1.11.9
- Resolves: rhbz#917176</changelog>
</package>
<package pkgid="c1167da7f641bb8fb28c25c4bd176706fc84c16d" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.40.1.11.11.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.59.1.11.11" date="1366408800">- Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
- removed patch 9 -  removingOfAarch64.patch.patch - fixed upstream
- removed patch10  patchToFixMalformed8007667.patch - upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.39.1.11.11" date="1366581600">- added and applied (temporally) one more patch to xalan/xerces privileges
 - patch9 jaxp-backport-factoryfinder.patch
- will be upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.61.1.11.11" date="1366754400">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950383</changelog>
</package>
<package pkgid="9a2bffdf769e0528f0b86170b6749b589a841467" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.41.1.11.11.90.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.39.1.11.11" date="1366581600">- added and applied (temporally) one more patch to xalan/xerces privileges
 - patch9 jaxp-backport-factoryfinder.patch
- will be upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.40.1.11.11" date="1366754400">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372370400">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973126</changelog>
</package>
<package pkgid="810b84f5063dd3323f197c71f1067e50e109a69a" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.42.1.11.14.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.61.1.11.11" date="1366761600">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950384</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372377600">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973128</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.42.1.11.14" date="1383264000">- updated to icedtea6-1.11.14.tar.gz
- added and applied 1.11.14-fixes.patch, patch10 to fix build issues
- Resolves: rhbz#1017615</changelog>
</package>
<package pkgid="6fbb9fa1e0a7c353eb159a5eadce1784478354e2" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="3.1.13.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372377600">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973128</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.42.1.11.14" date="1383264000">- updated to icedtea6-1.11.14.tar.gz
- added and applied 1.11.14-fixes.patch, patch10 to fix build issues
- Resolves: rhbz#1017615</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-3.1.13.0" date="1390521600">- updated to icedtea 1.13.1
 - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
- updated to jdk6, b30,  21_jan_2014
 - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
- adapted patch7 1.13_fixes.patch
- pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
- added --disable-system-lcms to configure options to pass build
- adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#1050187</changelog>
</package>
<package pkgid="ad7f6dfea13ad1c11957f25f280ce540acf0ad94" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="5.1.13.3.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-3.1.13.0" date="1390521600">- updated to icedtea 1.13.1
 - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
- updated to jdk6, b30,  21_jan_2014
 - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
- adapted patch7 1.13_fixes.patch
- pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
- added --disable-system-lcms to configure options to pass build
- adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#1050187</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-4.1.13.0" date="1391040000">- rebuild to pick up new certificate
- Resolves: rhbz#1059178</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- Resolves: rhbz#1085007</changelog>
</package>
<package pkgid="c4562abad84f1175a2e95102a2aa0a25010ae6e9" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="6.1.13.4.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-4.1.13.0" date="1391040000">- rebuild to pick up new certificate
- Resolves: rhbz#1059178</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- Resolves: rhbz#1085007</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-6.1.13.4" date="1405382400">- moved to  icedteaver 1.13.4
- moved to openjdkver b32 and openjdkdate 15_jul_2014
- Resolves: rhbz#1115865</changelog>
</package>
<package pkgid="56ef097b2b77ab0212d0acadd4423634e216d636" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.33" rel="1.13.5.0.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- renmoved upstreamed patch9, 1051245.patch
- Resolves: rhbz#1085008</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-6.1.13.4" date="1405382400">- moved to  icedteaver 1.13.4
- moved to openjdkver b32 and openjdkdate 15_jul_2014
- Resolves: rhbz#1115866</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.33-1.13.5.0" date="1412899200">- Update to IcedTea 1.13.5
- Change versioning to match java-1.7.0-openjdk so revisions work.
- No need to explicitly disable system LCMS any more (bug fixed upstream).
- Add icedteasnapshot to setup lines so they work with pre-release tarballs.
- Resolves: rhbz#1148898</changelog>
</package>
<package pkgid="f2e948950344f2c802d1da4739ca532e45d115dd" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.34" rel="1.13.6.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.0" date="1421798400">- Update to IcedTea 1.13.6
- Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
- Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
- Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
- Add US_export_policy.jar and local_policy.jar to packages.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.0" date="1421798401">- Apply pr2180.patch to work around issue with older autotools.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.1" date="1421884800">- Update to latest 1.13.6 release candidate tarball
- Fixes a number of issues found with b34:
- * OJ51, PR2187: Sync patch for 4873188 with 7 version
- * OJ52, PR2185: Application of 6786276 introduces compatibility issue
- * OJ53, PR2181: strict-aliasing warnings issued on PPC32
- * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
- * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
- * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
- Also includes PR2180, so patch dropped from RPM.
- Resolves: rhbz#1180289</changelog>
</package>
<package pkgid="59704070986ef52d1f36d9d3f473c63a184d0258" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.35" rel="1.13.7.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.1" date="1421884800">- Update to latest 1.13.6 release candidate tarball
- Fixes a number of issues found with b34:
- * OJ51, PR2187: Sync patch for 4873188 with 7 version
- * OJ52, PR2185: Application of 6786276 introduces compatibility issue
- * OJ53, PR2181: strict-aliasing warnings issued on PPC32
- * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
- * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
- * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
- Also includes PR2180, so patch dropped from RPM.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.0" date="1428624000">- Update to IcedTea 1.13.7
- Resolves: rhbz#1209064</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.1" date="1428710400">- Repackaged source files
- Resolves: rhbz#1209064</changelog>
</package>
<package pkgid="da5e22d4a2dad4f42780cadd6b87d79e0e09ffd4" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.36" rel="1.13.8.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.1" date="1428710400">- Repackaged source files
- Resolves: rhbz#1209064</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.0" date="1437609600">- Update to IcedTea 1.13.8
- Update no_pr2125.patch to work against new version.
- Resolves: rhbz#1235149</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.1" date="1438128000">- Update to new tarball, containing fix for TCK regression (PR2565)
- Resolves: rhbz#1235149</changelog>
</package>
<package pkgid="e8aba57da33201e8fe9ae083247717413868e66c" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.37" rel="1.13.9.4.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.2" date="1446681600">- Update with new IcedTea &amp; b37 tarballs, including Kerberos fixes for TCK regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447200000">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447286400">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271926</changelog>
</package>
<package pkgid="a9dc616a167ea08cec829d30aa0b5e116c26902d" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.38" rel="1.13.10.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447286400">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420800">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295772</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420801">- Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
- Resolves: rhbz#1295772</changelog>
</package>
<package pkgid="5f2fd01deffc0d86d877f60d50ca0725d08a0729" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.39" rel="1.13.11.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420800">- Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
- Resolves: rhbz#1295772</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462406400">- Update to IcedTea 1.13.11 &amp; OpenJDK 6 b39.
- Resolves: rhbz#1325429</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462406401">- Explictly required libXcomposite-devel for PR2868 as nothing else pulls it in
- Resolves: rhbz#1325429</changelog>
</package>
<package pkgid="ce4740e8349873a8aa7dba9f04df619cfe8f36ca" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.40" rel="1.13.12.4.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.2" date="1471651200">- Escape macros in bootstrap comments
- Resolves: rhbz#1350043</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.3" date="1471910400">- Bump source tarballs to missing -DNDEBUG on JDK native code.
- Resolves: rhbz#1350043</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.4" date="1471910401">- Bump source tarballs to try and really fix TCK failures this time.
- Resolves: rhbz#1350043</changelog>
</package>
<package pkgid="1b38c0aa270754be3d3fc30f1841b36d657453a3" name="java-1.6.0-openjdk" arch="i386">
  <version epoch="1" ver="1.6.0.41" rel="1.13.13.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483574400">- Remove --docdir option which is not supported by older autotools.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483574401">- Remove --htmldir option which is not supported by older autotools.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.1" date="1483574402">- Update to new 1.13.13 and b41 tarballs to correct TCK failure.
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="54ecb097e3bce3829a683efd74dfa3930b0eaebe" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.22.1.9.8.el5_6"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.21.b17.el5" date="1302127200">- Resolves bz694080
- Build with rhino support</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.7" date="1303941600">- Resolves bz690289
- Import from RHEL-5_6-Z
- Updated to IcedTea6 1.9.7
- Removed all plugin/webstart related commented lines
- Modified bz entry format in previous logs to get around cvs ack checking bug</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.8" date="1307138400">- Resolves: rhbz#668488
- Bumped to IcedTea6 1.9.8
- RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
  disabled get still selected for read ops (win)
- RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
- RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
  FileDialog.show()
- RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
  code
- RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
  bindings
- RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
- RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
- RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
  with scale close to zero
- RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
- RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
  size variables</changelog>
</package>
<package pkgid="7523a8b419de4eee52df07c7f00359da15f31ace" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.23.1.9.10.el5_7"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.7" date="1303948800">- Resolves bz690289
- Import from RHEL-5_6-Z
- Updated to IcedTea6 1.9.7
- Removed all plugin/webstart related commented lines
- Modified bz entry format in previous logs to get around cvs ack checking bug</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.8" date="1307145600">- Resolves: rhbz#668488
- Bumped to IcedTea6 1.9.8
- RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
  disabled get still selected for read ops (win)
- RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
- RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
  FileDialog.show()
- RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
  code
- RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
  bindings
- RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
- RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
- RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
  with scale close to zero
- RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
- RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
  size variables</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.23.1.9.10" date="1318550400">- Resolves: rhbz#744786
- Bumped to IcedTea6 1.9.8
 Security fixes
  - S7000600, CVE-2011-3547: InputStream skip() information leak
  - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
  - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
  - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
  - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
  - S7055902, CVE-2011-3521: IIOP deserialization code execution
  - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
  - S7064341, CVE-2011-3389: JSSE
  - S7070134, CVE-2011-3558: Hotspot unspecified issue
  - S7077466, CVE-2011-3556: RMI DGC server remote code execution
  - S7083012, CVE-2011-3557: RMI registry privileged code execution
  - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
 NetX
  - PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest</changelog>
</package>
<package pkgid="159878651fbdf471dde701a5188d7b72bb559095" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.25.1.10.6.el5_8"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.23.1.10.4" date="1324591200">- Resolves: rhbz#727598 
- Updated to IcedTea6 1.10.4
- Imported HugePages patches</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.6.0.0-1.24.1.10.4" date="1326232800">- Added patch to resolve rmi regression</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.25.1.10.6" date="1328997600">- Updated to IcedTea6 1.10.6
- Resolves: rhbz#787142
- Security fixes
  - S7082299: Fix in AtomicReferenceArray
  - S7088367: Fix issues in java sound
  - S7110683: Issues with some KeyboardFocusManager method
  - S7110687: Issues with TimeZone class
  - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
  - S7110704: Issues with some method in corba
  - S7112642: Incorrect checking for graphics rendering object
  - S7118283: Better input parameter checking in zip file processing
  - S7126960: Add property to limit number of request headers to the HTTP Server
- Bug fixes
  - RH580478: Desktop files should not use hardcoded path
- Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
- Removed and deleted upstreamed Hugepages patches:
  - Source100: 7034464-hugepage.patch
  - Source101: 7037939-hugepage.patch
  - Source102: 7043564-hugepage.patch</changelog>
</package>
<package pkgid="4a2661881b9e8fcca2259a632f9ae5590e24a970" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.27.1.10.8.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.25.1.10.6" date="1328997600">- Updated to IcedTea6 1.10.6
- Resolves: rhbz#787142
- Security fixes
  - S7082299: Fix in AtomicReferenceArray
  - S7088367: Fix issues in java sound
  - S7110683: Issues with some KeyboardFocusManager method
  - S7110687: Issues with TimeZone class
  - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
  - S7110704: Issues with some method in corba
  - S7112642: Incorrect checking for graphics rendering object
  - S7118283: Better input parameter checking in zip file processing
  - S7126960: Add property to limit number of request headers to the HTTP Server
- Bug fixes
  - RH580478: Desktop files should not use hardcoded path
- Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
- Removed and deleted upstreamed Hugepages patches:
  - Source100: 7034464-hugepage.patch
  - Source101: 7037939-hugepage.patch
  - Source102: 7043564-hugepage.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.26.1.10.8" date="1339192800">- Updated to IcedTea6 1.10.8
- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added to patch
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339279200">- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added also to package.definition
- Resolves: rhbz#828749</changelog>
</package>
<package pkgid="929cb4acfc1a12cc04021ddc4338f35332e1d006" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.28.1.10.10.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339538400">- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.9" date="1346450400">- Updated to latest IcedTea6 1.10.9
- Resolves: rhbz#846709
- Resolves: rhbz#853114</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.10" date="1350079200">- Updated to IcedTea6 1.10.10
- Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
  865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
  865519, 865531, 865541, 865568</changelog>
</package>
<package pkgid="403edf18b772d730562035ba2719f76c961ecdaa" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.28.1.10.9.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339279200">- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added also to package.definition
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339538400">- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.9" date="1346450400">- Updated to latest IcedTea6 1.10.9
- Resolves: rhbz#846709
- Resolves: rhbz#853114</changelog>
</package>
<package pkgid="8b6798532c5cf52aab0757b0614bb989f941eaa7" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.33.1.11.6.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.31.1.11.6" date="1358287200">- Updated to icedtea6 1.11.6
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.32.1.11.6" date="1360188000">- added patch9 revertTwoWrongSecurityPatches2013-02-06.patch
  to remove   6664509 and 7201064 from 1.11.6 tarball
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.33.1.11.6" date="1360188001">- removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch9:   7201064.patch to be reverted
- added patch10:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906705</changelog>
</package>
<package pkgid="c6489b32a8e9fd357bc420a54d84b4e4eeed7dc9" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.35.1.11.8.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.33.1.11.6" date="1360188000">- removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch9:   7201064.patch to be reverted
- added patch10:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.34.1.11.8" date="1360965600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but valid
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#911522</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.35.1.11.8" date="1361224800">- Rebuild with updated source tarball
- Resolves: rhbz#911522</changelog>
</package>
<package pkgid="8befc358c1057e0e0a4045a73e2b7978dc92a20e" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.36.1.11.9.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.34.1.11.8" date="1360965600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but valid
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#911522</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.35.1.11.8" date="1361224800">- Rebuild with updated source tarball
- Resolves: rhbz#911522</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; 1:1.6.0.0-1.36.1.11.9" date="1362434400">- Updated to icedtea6 1.11.9
- Resolves: rhbz#917176</changelog>
</package>
<package pkgid="1e0872e5baeade0c4dd748b830002b7817e31b4c" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.40.1.11.11.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.59.1.11.11" date="1366408800">- Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
- removed patch 9 -  removingOfAarch64.patch.patch - fixed upstream
- removed patch10  patchToFixMalformed8007667.patch - upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.39.1.11.11" date="1366581600">- added and applied (temporally) one more patch to xalan/xerces privileges
 - patch9 jaxp-backport-factoryfinder.patch
- will be upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.61.1.11.11" date="1366754400">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950383</changelog>
</package>
<package pkgid="1807c407a2aae1ff2da1ce27659aa5c81743e757" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.41.1.11.11.90.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.39.1.11.11" date="1366581600">- added and applied (temporally) one more patch to xalan/xerces privileges
 - patch9 jaxp-backport-factoryfinder.patch
- will be upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.40.1.11.11" date="1366754400">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372370400">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973126</changelog>
</package>
<package pkgid="13fcb4858332ab014e9b22c5c0e2217b8da6a9a5" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.42.1.11.14.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.61.1.11.11" date="1366761600">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950384</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372377600">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973128</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.42.1.11.14" date="1383264000">- updated to icedtea6-1.11.14.tar.gz
- added and applied 1.11.14-fixes.patch, patch10 to fix build issues
- Resolves: rhbz#1017615</changelog>
</package>
<package pkgid="f5fb1f01e6b659c04782ac349f114960f3793560" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="3.1.13.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372377600">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973128</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.42.1.11.14" date="1383264000">- updated to icedtea6-1.11.14.tar.gz
- added and applied 1.11.14-fixes.patch, patch10 to fix build issues
- Resolves: rhbz#1017615</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-3.1.13.0" date="1390521600">- updated to icedtea 1.13.1
 - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
- updated to jdk6, b30,  21_jan_2014
 - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
- adapted patch7 1.13_fixes.patch
- pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
- added --disable-system-lcms to configure options to pass build
- adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#1050187</changelog>
</package>
<package pkgid="3cf440704b8b6f28e1a8390dd6045a14781d7308" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="5.1.13.3.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-3.1.13.0" date="1390521600">- updated to icedtea 1.13.1
 - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
- updated to jdk6, b30,  21_jan_2014
 - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
- adapted patch7 1.13_fixes.patch
- pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
- added --disable-system-lcms to configure options to pass build
- adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#1050187</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-4.1.13.0" date="1391040000">- rebuild to pick up new certificate
- Resolves: rhbz#1059178</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- Resolves: rhbz#1085007</changelog>
</package>
<package pkgid="ff3bad8b9175d75ef897078498635479325ff1cf" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="6.1.13.4.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-4.1.13.0" date="1391040000">- rebuild to pick up new certificate
- Resolves: rhbz#1059178</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- Resolves: rhbz#1085007</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-6.1.13.4" date="1405382400">- moved to  icedteaver 1.13.4
- moved to openjdkver b32 and openjdkdate 15_jul_2014
- Resolves: rhbz#1115865</changelog>
</package>
<package pkgid="7c7fc2fd4df9b2b55f8c82c8118b9541332a161d" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.33" rel="1.13.5.0.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- renmoved upstreamed patch9, 1051245.patch
- Resolves: rhbz#1085008</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-6.1.13.4" date="1405382400">- moved to  icedteaver 1.13.4
- moved to openjdkver b32 and openjdkdate 15_jul_2014
- Resolves: rhbz#1115866</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.33-1.13.5.0" date="1412899200">- Update to IcedTea 1.13.5
- Change versioning to match java-1.7.0-openjdk so revisions work.
- No need to explicitly disable system LCMS any more (bug fixed upstream).
- Add icedteasnapshot to setup lines so they work with pre-release tarballs.
- Resolves: rhbz#1148898</changelog>
</package>
<package pkgid="5cb0f91ff98a63b109fb9c988d0673679643f3a5" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.34" rel="1.13.6.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.0" date="1421798400">- Update to IcedTea 1.13.6
- Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
- Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
- Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
- Add US_export_policy.jar and local_policy.jar to packages.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.0" date="1421798401">- Apply pr2180.patch to work around issue with older autotools.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.1" date="1421884800">- Update to latest 1.13.6 release candidate tarball
- Fixes a number of issues found with b34:
- * OJ51, PR2187: Sync patch for 4873188 with 7 version
- * OJ52, PR2185: Application of 6786276 introduces compatibility issue
- * OJ53, PR2181: strict-aliasing warnings issued on PPC32
- * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
- * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
- * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
- Also includes PR2180, so patch dropped from RPM.
- Resolves: rhbz#1180289</changelog>
</package>
<package pkgid="50b079fb19a3a1f956f6710039b3e02aa0d8ba9e" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.35" rel="1.13.7.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.1" date="1421884800">- Update to latest 1.13.6 release candidate tarball
- Fixes a number of issues found with b34:
- * OJ51, PR2187: Sync patch for 4873188 with 7 version
- * OJ52, PR2185: Application of 6786276 introduces compatibility issue
- * OJ53, PR2181: strict-aliasing warnings issued on PPC32
- * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
- * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
- * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
- Also includes PR2180, so patch dropped from RPM.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.0" date="1428624000">- Update to IcedTea 1.13.7
- Resolves: rhbz#1209064</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.1" date="1428710400">- Repackaged source files
- Resolves: rhbz#1209064</changelog>
</package>
<package pkgid="06b8a2c5ba5ba22c16125eca7f2edf049d98ea9d" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.36" rel="1.13.8.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.1" date="1428710400">- Repackaged source files
- Resolves: rhbz#1209064</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.0" date="1437609600">- Update to IcedTea 1.13.8
- Update no_pr2125.patch to work against new version.
- Resolves: rhbz#1235149</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.1" date="1438128000">- Update to new tarball, containing fix for TCK regression (PR2565)
- Resolves: rhbz#1235149</changelog>
</package>
<package pkgid="d088735655c5f61c586408ed612084d4ea6fe505" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.37" rel="1.13.9.4.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.2" date="1446681600">- Update with new IcedTea &amp; b37 tarballs, including Kerberos fixes for TCK regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447200000">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447286400">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271926</changelog>
</package>
<package pkgid="3c3e553e5911c80defd335f84722c429bc55b290" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.38" rel="1.13.10.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447286400">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420800">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295772</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420801">- Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
- Resolves: rhbz#1295772</changelog>
</package>
<package pkgid="622709c99f34df46d47b238c6053cf5085884972" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.39" rel="1.13.11.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420800">- Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
- Resolves: rhbz#1295772</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462406400">- Update to IcedTea 1.13.11 &amp; OpenJDK 6 b39.
- Resolves: rhbz#1325429</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462406401">- Explictly required libXcomposite-devel for PR2868 as nothing else pulls it in
- Resolves: rhbz#1325429</changelog>
</package>
<package pkgid="07f5e2eca98704da7cabbe917a8ad1662e5f9131" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.40" rel="1.13.12.4.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.2" date="1471651200">- Escape macros in bootstrap comments
- Resolves: rhbz#1350043</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.3" date="1471910400">- Bump source tarballs to missing -DNDEBUG on JDK native code.
- Resolves: rhbz#1350043</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.4" date="1471910401">- Bump source tarballs to try and really fix TCK failures this time.
- Resolves: rhbz#1350043</changelog>
</package>
<package pkgid="810d8e878aa3aba501b98d9df74db565cfc3050b" name="java-1.6.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.6.0.41" rel="1.13.13.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483574400">- Remove --docdir option which is not supported by older autotools.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483574401">- Remove --htmldir option which is not supported by older autotools.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.1" date="1483574402">- Update to new 1.13.13 and b41 tarballs to correct TCK failure.
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="11bc67d1226dcfe91aa23b63a81a0744106f4371" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.22.1.9.8.el5_6"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.21.b17.el5" date="1302127200">- Resolves bz694080
- Build with rhino support</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.7" date="1303941600">- Resolves bz690289
- Import from RHEL-5_6-Z
- Updated to IcedTea6 1.9.7
- Removed all plugin/webstart related commented lines
- Modified bz entry format in previous logs to get around cvs ack checking bug</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.8" date="1307138400">- Resolves: rhbz#668488
- Bumped to IcedTea6 1.9.8
- RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
  disabled get still selected for read ops (win)
- RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
- RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
  FileDialog.show()
- RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
  code
- RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
  bindings
- RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
- RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
- RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
  with scale close to zero
- RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
- RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
  size variables</changelog>
</package>
<package pkgid="9db2b3cbbf7bebd7a9a3492d8d232f3f993c9815" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.23.1.9.10.el5_7"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.7" date="1303948800">- Resolves bz690289
- Import from RHEL-5_6-Z
- Updated to IcedTea6 1.9.7
- Removed all plugin/webstart related commented lines
- Modified bz entry format in previous logs to get around cvs ack checking bug</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.8" date="1307145600">- Resolves: rhbz#668488
- Bumped to IcedTea6 1.9.8
- RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
  disabled get still selected for read ops (win)
- RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
- RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
  FileDialog.show()
- RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
  code
- RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
  bindings
- RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
- RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
- RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
  with scale close to zero
- RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
- RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
  size variables</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.23.1.9.10" date="1318550400">- Resolves: rhbz#744786
- Bumped to IcedTea6 1.9.8
 Security fixes
  - S7000600, CVE-2011-3547: InputStream skip() information leak
  - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
  - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
  - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
  - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
  - S7055902, CVE-2011-3521: IIOP deserialization code execution
  - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
  - S7064341, CVE-2011-3389: JSSE
  - S7070134, CVE-2011-3558: Hotspot unspecified issue
  - S7077466, CVE-2011-3556: RMI DGC server remote code execution
  - S7083012, CVE-2011-3557: RMI registry privileged code execution
  - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
 NetX
  - PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest</changelog>
</package>
<package pkgid="f093f3c8ad9a352fe5bc83fece920749c99702f9" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.25.1.10.6.el5_8"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.23.1.10.4" date="1324591200">- Resolves: rhbz#727598 
- Updated to IcedTea6 1.10.4
- Imported HugePages patches</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.6.0.0-1.24.1.10.4" date="1326232800">- Added patch to resolve rmi regression</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.25.1.10.6" date="1328997600">- Updated to IcedTea6 1.10.6
- Resolves: rhbz#787142
- Security fixes
  - S7082299: Fix in AtomicReferenceArray
  - S7088367: Fix issues in java sound
  - S7110683: Issues with some KeyboardFocusManager method
  - S7110687: Issues with TimeZone class
  - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
  - S7110704: Issues with some method in corba
  - S7112642: Incorrect checking for graphics rendering object
  - S7118283: Better input parameter checking in zip file processing
  - S7126960: Add property to limit number of request headers to the HTTP Server
- Bug fixes
  - RH580478: Desktop files should not use hardcoded path
- Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
- Removed and deleted upstreamed Hugepages patches:
  - Source100: 7034464-hugepage.patch
  - Source101: 7037939-hugepage.patch
  - Source102: 7043564-hugepage.patch</changelog>
</package>
<package pkgid="a91b671f8bc1d9922b8d794bea115a974fc54bd5" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.27.1.10.8.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.25.1.10.6" date="1328997600">- Updated to IcedTea6 1.10.6
- Resolves: rhbz#787142
- Security fixes
  - S7082299: Fix in AtomicReferenceArray
  - S7088367: Fix issues in java sound
  - S7110683: Issues with some KeyboardFocusManager method
  - S7110687: Issues with TimeZone class
  - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
  - S7110704: Issues with some method in corba
  - S7112642: Incorrect checking for graphics rendering object
  - S7118283: Better input parameter checking in zip file processing
  - S7126960: Add property to limit number of request headers to the HTTP Server
- Bug fixes
  - RH580478: Desktop files should not use hardcoded path
- Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
- Removed and deleted upstreamed Hugepages patches:
  - Source100: 7034464-hugepage.patch
  - Source101: 7037939-hugepage.patch
  - Source102: 7043564-hugepage.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.26.1.10.8" date="1339192800">- Updated to IcedTea6 1.10.8
- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added to patch
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339279200">- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added also to package.definition
- Resolves: rhbz#828749</changelog>
</package>
<package pkgid="d5b525d523e615cfd3289e05a9dec9a594446ac8" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.28.1.10.10.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339538400">- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.9" date="1346450400">- Updated to latest IcedTea6 1.10.9
- Resolves: rhbz#846709
- Resolves: rhbz#853114</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.10" date="1350079200">- Updated to IcedTea6 1.10.10
- Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
  865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
  865519, 865531, 865541, 865568</changelog>
</package>
<package pkgid="9ef7dc3a86f93b24017030b71ee414809e3f14e9" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.28.1.10.9.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339279200">- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added also to package.definition
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339538400">- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.9" date="1346450400">- Updated to latest IcedTea6 1.10.9
- Resolves: rhbz#846709
- Resolves: rhbz#853114</changelog>
</package>
<package pkgid="f92a9d94265cc5ebc0664851e03c93f30db2a7f2" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.33.1.11.6.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.31.1.11.6" date="1358287200">- Updated to icedtea6 1.11.6
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.32.1.11.6" date="1360188000">- added patch9 revertTwoWrongSecurityPatches2013-02-06.patch
  to remove   6664509 and 7201064 from 1.11.6 tarball
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.33.1.11.6" date="1360188001">- removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch9:   7201064.patch to be reverted
- added patch10:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906705</changelog>
</package>
<package pkgid="c6311a9a76fea7676a1af9398e8ee0af2c94ec7c" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.35.1.11.8.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.33.1.11.6" date="1360188000">- removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch9:   7201064.patch to be reverted
- added patch10:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.34.1.11.8" date="1360965600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but valid
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#911522</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.35.1.11.8" date="1361224800">- Rebuild with updated source tarball
- Resolves: rhbz#911522</changelog>
</package>
<package pkgid="4ea5b0fd4ac0f8f37410e7a666177b3f0962095a" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.36.1.11.9.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.34.1.11.8" date="1360965600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but valid
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#911522</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.35.1.11.8" date="1361224800">- Rebuild with updated source tarball
- Resolves: rhbz#911522</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; 1:1.6.0.0-1.36.1.11.9" date="1362434400">- Updated to icedtea6 1.11.9
- Resolves: rhbz#917176</changelog>
</package>
<package pkgid="e07256a8fda912987ecf3306b53206420c34f8f0" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.40.1.11.11.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.59.1.11.11" date="1366408800">- Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
- removed patch 9 -  removingOfAarch64.patch.patch - fixed upstream
- removed patch10  patchToFixMalformed8007667.patch - upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.39.1.11.11" date="1366581600">- added and applied (temporally) one more patch to xalan/xerces privileges
 - patch9 jaxp-backport-factoryfinder.patch
- will be upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.61.1.11.11" date="1366754400">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950383</changelog>
</package>
<package pkgid="708f389727a56942e69fda92a27cf2d323b46c31" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.41.1.11.11.90.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.39.1.11.11" date="1366581600">- added and applied (temporally) one more patch to xalan/xerces privileges
 - patch9 jaxp-backport-factoryfinder.patch
- will be upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.40.1.11.11" date="1366754400">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372370400">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973126</changelog>
</package>
<package pkgid="6643f60819eb0f82170663a53780e77a84926563" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.42.1.11.14.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.61.1.11.11" date="1366761600">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950384</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372377600">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973128</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.42.1.11.14" date="1383264000">- updated to icedtea6-1.11.14.tar.gz
- added and applied 1.11.14-fixes.patch, patch10 to fix build issues
- Resolves: rhbz#1017615</changelog>
</package>
<package pkgid="af285e221ce9a4525b24e76fac30d5dbd8d9f797" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="3.1.13.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372377600">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973128</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.42.1.11.14" date="1383264000">- updated to icedtea6-1.11.14.tar.gz
- added and applied 1.11.14-fixes.patch, patch10 to fix build issues
- Resolves: rhbz#1017615</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-3.1.13.0" date="1390521600">- updated to icedtea 1.13.1
 - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
- updated to jdk6, b30,  21_jan_2014
 - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
- adapted patch7 1.13_fixes.patch
- pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
- added --disable-system-lcms to configure options to pass build
- adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#1050187</changelog>
</package>
<package pkgid="831793577723bf7f80c4545d863939c878542ea9" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="5.1.13.3.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-3.1.13.0" date="1390521600">- updated to icedtea 1.13.1
 - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
- updated to jdk6, b30,  21_jan_2014
 - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
- adapted patch7 1.13_fixes.patch
- pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
- added --disable-system-lcms to configure options to pass build
- adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#1050187</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-4.1.13.0" date="1391040000">- rebuild to pick up new certificate
- Resolves: rhbz#1059178</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- Resolves: rhbz#1085007</changelog>
</package>
<package pkgid="2563d5a1fac5a0080f8f00edd3575d97cd2a8e86" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="6.1.13.4.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-4.1.13.0" date="1391040000">- rebuild to pick up new certificate
- Resolves: rhbz#1059178</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- Resolves: rhbz#1085007</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-6.1.13.4" date="1405382400">- moved to  icedteaver 1.13.4
- moved to openjdkver b32 and openjdkdate 15_jul_2014
- Resolves: rhbz#1115865</changelog>
</package>
<package pkgid="dd44c562bf9611beb1f4b3025cdaebe1b7f5e5f3" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.33" rel="1.13.5.0.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- renmoved upstreamed patch9, 1051245.patch
- Resolves: rhbz#1085008</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-6.1.13.4" date="1405382400">- moved to  icedteaver 1.13.4
- moved to openjdkver b32 and openjdkdate 15_jul_2014
- Resolves: rhbz#1115866</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.33-1.13.5.0" date="1412899200">- Update to IcedTea 1.13.5
- Change versioning to match java-1.7.0-openjdk so revisions work.
- No need to explicitly disable system LCMS any more (bug fixed upstream).
- Add icedteasnapshot to setup lines so they work with pre-release tarballs.
- Resolves: rhbz#1148898</changelog>
</package>
<package pkgid="0141560c81c5462434cbd3fad39d0755bc124c5b" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.34" rel="1.13.6.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.0" date="1421798400">- Update to IcedTea 1.13.6
- Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
- Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
- Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
- Add US_export_policy.jar and local_policy.jar to packages.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.0" date="1421798401">- Apply pr2180.patch to work around issue with older autotools.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.1" date="1421884800">- Update to latest 1.13.6 release candidate tarball
- Fixes a number of issues found with b34:
- * OJ51, PR2187: Sync patch for 4873188 with 7 version
- * OJ52, PR2185: Application of 6786276 introduces compatibility issue
- * OJ53, PR2181: strict-aliasing warnings issued on PPC32
- * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
- * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
- * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
- Also includes PR2180, so patch dropped from RPM.
- Resolves: rhbz#1180289</changelog>
</package>
<package pkgid="9c904e35b9c2159264887d562ab933ec6b47828d" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.35" rel="1.13.7.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.1" date="1421884800">- Update to latest 1.13.6 release candidate tarball
- Fixes a number of issues found with b34:
- * OJ51, PR2187: Sync patch for 4873188 with 7 version
- * OJ52, PR2185: Application of 6786276 introduces compatibility issue
- * OJ53, PR2181: strict-aliasing warnings issued on PPC32
- * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
- * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
- * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
- Also includes PR2180, so patch dropped from RPM.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.0" date="1428624000">- Update to IcedTea 1.13.7
- Resolves: rhbz#1209064</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.1" date="1428710400">- Repackaged source files
- Resolves: rhbz#1209064</changelog>
</package>
<package pkgid="4e01de94ede6b1af6f91d11c04ec85330055090e" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.36" rel="1.13.8.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.1" date="1428710400">- Repackaged source files
- Resolves: rhbz#1209064</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.0" date="1437609600">- Update to IcedTea 1.13.8
- Update no_pr2125.patch to work against new version.
- Resolves: rhbz#1235149</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.1" date="1438128000">- Update to new tarball, containing fix for TCK regression (PR2565)
- Resolves: rhbz#1235149</changelog>
</package>
<package pkgid="d1d576363524d5c8a397d214cff7959b4315f505" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.37" rel="1.13.9.4.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.2" date="1446681600">- Update with new IcedTea &amp; b37 tarballs, including Kerberos fixes for TCK regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447200000">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447286400">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271926</changelog>
</package>
<package pkgid="a7c244443c0dfefd37126fb6c5356ea9b0a4cfc3" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.38" rel="1.13.10.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447286400">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420800">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295772</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420801">- Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
- Resolves: rhbz#1295772</changelog>
</package>
<package pkgid="965061f3136c4e542708b1b6c82ce260b85b8486" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.39" rel="1.13.11.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420800">- Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
- Resolves: rhbz#1295772</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462406400">- Update to IcedTea 1.13.11 &amp; OpenJDK 6 b39.
- Resolves: rhbz#1325429</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462406401">- Explictly required libXcomposite-devel for PR2868 as nothing else pulls it in
- Resolves: rhbz#1325429</changelog>
</package>
<package pkgid="e5be1a166d0f797e430b56cbeb4016ad5e12179d" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.40" rel="1.13.12.4.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.2" date="1471651200">- Escape macros in bootstrap comments
- Resolves: rhbz#1350043</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.3" date="1471910400">- Bump source tarballs to missing -DNDEBUG on JDK native code.
- Resolves: rhbz#1350043</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.4" date="1471910401">- Bump source tarballs to try and really fix TCK failures this time.
- Resolves: rhbz#1350043</changelog>
</package>
<package pkgid="db07b6776ea106122fa8222a4ae62f3981fa2ff8" name="java-1.6.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.6.0.41" rel="1.13.13.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483574400">- Remove --docdir option which is not supported by older autotools.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483574401">- Remove --htmldir option which is not supported by older autotools.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.1" date="1483574402">- Update to new 1.13.13 and b41 tarballs to correct TCK failure.
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="ba86e33f865881e3cdc13c1d9360a89523c25d53" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.22.1.9.8.el5_6"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.21.b17.el5" date="1302127200">- Resolves bz694080
- Build with rhino support</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.7" date="1303941600">- Resolves bz690289
- Import from RHEL-5_6-Z
- Updated to IcedTea6 1.9.7
- Removed all plugin/webstart related commented lines
- Modified bz entry format in previous logs to get around cvs ack checking bug</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.8" date="1307138400">- Resolves: rhbz#668488
- Bumped to IcedTea6 1.9.8
- RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
  disabled get still selected for read ops (win)
- RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
- RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
  FileDialog.show()
- RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
  code
- RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
  bindings
- RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
- RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
- RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
  with scale close to zero
- RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
- RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
  size variables</changelog>
</package>
<package pkgid="e14973b9413f29f6e08ec9386f3bd0e8c0ecfd68" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.23.1.9.10.el5_7"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.7" date="1303948800">- Resolves bz690289
- Import from RHEL-5_6-Z
- Updated to IcedTea6 1.9.7
- Removed all plugin/webstart related commented lines
- Modified bz entry format in previous logs to get around cvs ack checking bug</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.8" date="1307145600">- Resolves: rhbz#668488
- Bumped to IcedTea6 1.9.8
- RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
  disabled get still selected for read ops (win)
- RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
- RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
  FileDialog.show()
- RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
  code
- RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
  bindings
- RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
- RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
- RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
  with scale close to zero
- RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
- RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
  size variables</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.23.1.9.10" date="1318550400">- Resolves: rhbz#744786
- Bumped to IcedTea6 1.9.8
 Security fixes
  - S7000600, CVE-2011-3547: InputStream skip() information leak
  - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
  - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
  - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
  - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
  - S7055902, CVE-2011-3521: IIOP deserialization code execution
  - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
  - S7064341, CVE-2011-3389: JSSE
  - S7070134, CVE-2011-3558: Hotspot unspecified issue
  - S7077466, CVE-2011-3556: RMI DGC server remote code execution
  - S7083012, CVE-2011-3557: RMI registry privileged code execution
  - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
 NetX
  - PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest</changelog>
</package>
<package pkgid="2951b8970d9fef9bac6f1f41cb34c733ef9b10f4" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.25.1.10.6.el5_8"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.23.1.10.4" date="1324591200">- Resolves: rhbz#727598 
- Updated to IcedTea6 1.10.4
- Imported HugePages patches</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.6.0.0-1.24.1.10.4" date="1326232800">- Added patch to resolve rmi regression</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.25.1.10.6" date="1328997600">- Updated to IcedTea6 1.10.6
- Resolves: rhbz#787142
- Security fixes
  - S7082299: Fix in AtomicReferenceArray
  - S7088367: Fix issues in java sound
  - S7110683: Issues with some KeyboardFocusManager method
  - S7110687: Issues with TimeZone class
  - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
  - S7110704: Issues with some method in corba
  - S7112642: Incorrect checking for graphics rendering object
  - S7118283: Better input parameter checking in zip file processing
  - S7126960: Add property to limit number of request headers to the HTTP Server
- Bug fixes
  - RH580478: Desktop files should not use hardcoded path
- Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
- Removed and deleted upstreamed Hugepages patches:
  - Source100: 7034464-hugepage.patch
  - Source101: 7037939-hugepage.patch
  - Source102: 7043564-hugepage.patch</changelog>
</package>
<package pkgid="576b812adc85fa3a7d34742ce6ae9d9b2ae4c4e4" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.27.1.10.8.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.25.1.10.6" date="1328997600">- Updated to IcedTea6 1.10.6
- Resolves: rhbz#787142
- Security fixes
  - S7082299: Fix in AtomicReferenceArray
  - S7088367: Fix issues in java sound
  - S7110683: Issues with some KeyboardFocusManager method
  - S7110687: Issues with TimeZone class
  - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
  - S7110704: Issues with some method in corba
  - S7112642: Incorrect checking for graphics rendering object
  - S7118283: Better input parameter checking in zip file processing
  - S7126960: Add property to limit number of request headers to the HTTP Server
- Bug fixes
  - RH580478: Desktop files should not use hardcoded path
- Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
- Removed and deleted upstreamed Hugepages patches:
  - Source100: 7034464-hugepage.patch
  - Source101: 7037939-hugepage.patch
  - Source102: 7043564-hugepage.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.26.1.10.8" date="1339192800">- Updated to IcedTea6 1.10.8
- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added to patch
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339279200">- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added also to package.definition
- Resolves: rhbz#828749</changelog>
</package>
<package pkgid="bec8b658f49d18933f33a865c3e5d3fb9dbc5ebd" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.28.1.10.10.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339538400">- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.9" date="1346450400">- Updated to latest IcedTea6 1.10.9
- Resolves: rhbz#846709
- Resolves: rhbz#853114</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.10" date="1350079200">- Updated to IcedTea6 1.10.10
- Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
  865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
  865519, 865531, 865541, 865568</changelog>
</package>
<package pkgid="6036d3b26e0fbf58240d9c8fbf7246bd5918a8af" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.28.1.10.9.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339279200">- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added also to package.definition
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339538400">- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.9" date="1346450400">- Updated to latest IcedTea6 1.10.9
- Resolves: rhbz#846709
- Resolves: rhbz#853114</changelog>
</package>
<package pkgid="0fdc9679ce4f2018f270202d49e9abeb245408dd" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.33.1.11.6.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.31.1.11.6" date="1358287200">- Updated to icedtea6 1.11.6
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.32.1.11.6" date="1360188000">- added patch9 revertTwoWrongSecurityPatches2013-02-06.patch
  to remove   6664509 and 7201064 from 1.11.6 tarball
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.33.1.11.6" date="1360188001">- removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch9:   7201064.patch to be reverted
- added patch10:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906705</changelog>
</package>
<package pkgid="353dd286b010fc746563a6a2f207c16516c39786" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.35.1.11.8.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.33.1.11.6" date="1360188000">- removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch9:   7201064.patch to be reverted
- added patch10:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.34.1.11.8" date="1360965600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but valid
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#911522</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.35.1.11.8" date="1361224800">- Rebuild with updated source tarball
- Resolves: rhbz#911522</changelog>
</package>
<package pkgid="7d5fa612361c0ef90e8ba41e6dcb9969da497058" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.36.1.11.9.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.34.1.11.8" date="1360965600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but valid
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#911522</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.35.1.11.8" date="1361224800">- Rebuild with updated source tarball
- Resolves: rhbz#911522</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; 1:1.6.0.0-1.36.1.11.9" date="1362434400">- Updated to icedtea6 1.11.9
- Resolves: rhbz#917176</changelog>
</package>
<package pkgid="fb30d3d60f1a10e374d26d1a0058ed1e66b98739" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.40.1.11.11.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.59.1.11.11" date="1366408800">- Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
- removed patch 9 -  removingOfAarch64.patch.patch - fixed upstream
- removed patch10  patchToFixMalformed8007667.patch - upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.39.1.11.11" date="1366581600">- added and applied (temporally) one more patch to xalan/xerces privileges
 - patch9 jaxp-backport-factoryfinder.patch
- will be upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.61.1.11.11" date="1366754400">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950383</changelog>
</package>
<package pkgid="b88c62259420f9bc08369f79800dd2b630d0da97" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.41.1.11.11.90.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.39.1.11.11" date="1366581600">- added and applied (temporally) one more patch to xalan/xerces privileges
 - patch9 jaxp-backport-factoryfinder.patch
- will be upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.40.1.11.11" date="1366754400">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372370400">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973126</changelog>
</package>
<package pkgid="6bb53f70b761874fb0f903dfb905893cd098ae71" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.42.1.11.14.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.61.1.11.11" date="1366761600">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950384</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372377600">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973128</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.42.1.11.14" date="1383264000">- updated to icedtea6-1.11.14.tar.gz
- added and applied 1.11.14-fixes.patch, patch10 to fix build issues
- Resolves: rhbz#1017615</changelog>
</package>
<package pkgid="1856770cb1ebf4e4653612f79a566ed802cef145" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="3.1.13.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372377600">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973128</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.42.1.11.14" date="1383264000">- updated to icedtea6-1.11.14.tar.gz
- added and applied 1.11.14-fixes.patch, patch10 to fix build issues
- Resolves: rhbz#1017615</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-3.1.13.0" date="1390521600">- updated to icedtea 1.13.1
 - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
- updated to jdk6, b30,  21_jan_2014
 - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
- adapted patch7 1.13_fixes.patch
- pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
- added --disable-system-lcms to configure options to pass build
- adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#1050187</changelog>
</package>
<package pkgid="e0aa703ed8c021b6c136212cbdd7599ad587f80f" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="5.1.13.3.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-3.1.13.0" date="1390521600">- updated to icedtea 1.13.1
 - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
- updated to jdk6, b30,  21_jan_2014
 - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
- adapted patch7 1.13_fixes.patch
- pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
- added --disable-system-lcms to configure options to pass build
- adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#1050187</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-4.1.13.0" date="1391040000">- rebuild to pick up new certificate
- Resolves: rhbz#1059178</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- Resolves: rhbz#1085007</changelog>
</package>
<package pkgid="5cf584416a0531d8335f9773372d77c247e0efb9" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="6.1.13.4.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-4.1.13.0" date="1391040000">- rebuild to pick up new certificate
- Resolves: rhbz#1059178</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- Resolves: rhbz#1085007</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-6.1.13.4" date="1405382400">- moved to  icedteaver 1.13.4
- moved to openjdkver b32 and openjdkdate 15_jul_2014
- Resolves: rhbz#1115865</changelog>
</package>
<package pkgid="c83d4ff685649f5fe7ae8707fc541536f29c721f" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.33" rel="1.13.5.0.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- renmoved upstreamed patch9, 1051245.patch
- Resolves: rhbz#1085008</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-6.1.13.4" date="1405382400">- moved to  icedteaver 1.13.4
- moved to openjdkver b32 and openjdkdate 15_jul_2014
- Resolves: rhbz#1115866</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.33-1.13.5.0" date="1412899200">- Update to IcedTea 1.13.5
- Change versioning to match java-1.7.0-openjdk so revisions work.
- No need to explicitly disable system LCMS any more (bug fixed upstream).
- Add icedteasnapshot to setup lines so they work with pre-release tarballs.
- Resolves: rhbz#1148898</changelog>
</package>
<package pkgid="2673cf6e5ad93d3e702cd9e472de17cf462da0be" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.34" rel="1.13.6.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.0" date="1421798400">- Update to IcedTea 1.13.6
- Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
- Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
- Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
- Add US_export_policy.jar and local_policy.jar to packages.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.0" date="1421798401">- Apply pr2180.patch to work around issue with older autotools.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.1" date="1421884800">- Update to latest 1.13.6 release candidate tarball
- Fixes a number of issues found with b34:
- * OJ51, PR2187: Sync patch for 4873188 with 7 version
- * OJ52, PR2185: Application of 6786276 introduces compatibility issue
- * OJ53, PR2181: strict-aliasing warnings issued on PPC32
- * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
- * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
- * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
- Also includes PR2180, so patch dropped from RPM.
- Resolves: rhbz#1180289</changelog>
</package>
<package pkgid="fa93385c95d9e3b6b5121f7ebdeb3132f5f089a7" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.35" rel="1.13.7.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.1" date="1421884800">- Update to latest 1.13.6 release candidate tarball
- Fixes a number of issues found with b34:
- * OJ51, PR2187: Sync patch for 4873188 with 7 version
- * OJ52, PR2185: Application of 6786276 introduces compatibility issue
- * OJ53, PR2181: strict-aliasing warnings issued on PPC32
- * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
- * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
- * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
- Also includes PR2180, so patch dropped from RPM.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.0" date="1428624000">- Update to IcedTea 1.13.7
- Resolves: rhbz#1209064</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.1" date="1428710400">- Repackaged source files
- Resolves: rhbz#1209064</changelog>
</package>
<package pkgid="7ac3699db3d7dd9ec82acec683d909bc5289a442" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.36" rel="1.13.8.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.1" date="1428710400">- Repackaged source files
- Resolves: rhbz#1209064</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.0" date="1437609600">- Update to IcedTea 1.13.8
- Update no_pr2125.patch to work against new version.
- Resolves: rhbz#1235149</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.1" date="1438128000">- Update to new tarball, containing fix for TCK regression (PR2565)
- Resolves: rhbz#1235149</changelog>
</package>
<package pkgid="ac4d799e494106366a313c28b1edd9f0be90ac10" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.37" rel="1.13.9.4.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.2" date="1446681600">- Update with new IcedTea &amp; b37 tarballs, including Kerberos fixes for TCK regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447200000">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447286400">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271926</changelog>
</package>
<package pkgid="27c06ac6765c79058b67a297537a031df79d09a8" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.38" rel="1.13.10.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447286400">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420800">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295772</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420801">- Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
- Resolves: rhbz#1295772</changelog>
</package>
<package pkgid="8519a3fb5dc7b11f36305416e053d80c182192d6" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.39" rel="1.13.11.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420800">- Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
- Resolves: rhbz#1295772</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462406400">- Update to IcedTea 1.13.11 &amp; OpenJDK 6 b39.
- Resolves: rhbz#1325429</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462406401">- Explictly required libXcomposite-devel for PR2868 as nothing else pulls it in
- Resolves: rhbz#1325429</changelog>
</package>
<package pkgid="56e0ce5492dd47b2d1a4336cbf78e9f301c209cb" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.40" rel="1.13.12.4.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.2" date="1471651200">- Escape macros in bootstrap comments
- Resolves: rhbz#1350043</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.3" date="1471910400">- Bump source tarballs to missing -DNDEBUG on JDK native code.
- Resolves: rhbz#1350043</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.4" date="1471910401">- Bump source tarballs to try and really fix TCK failures this time.
- Resolves: rhbz#1350043</changelog>
</package>
<package pkgid="f8422487db96f967f1c721b633e260bee5f95994" name="java-1.6.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.6.0.41" rel="1.13.13.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483574400">- Remove --docdir option which is not supported by older autotools.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483574401">- Remove --htmldir option which is not supported by older autotools.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.1" date="1483574402">- Update to new 1.13.13 and b41 tarballs to correct TCK failure.
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="c34e1688431d9b3c460d8c2b7e362f36cc038c61" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.22.1.9.8.el5_6"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.21.b17.el5" date="1302127200">- Resolves bz694080
- Build with rhino support</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.7" date="1303941600">- Resolves bz690289
- Import from RHEL-5_6-Z
- Updated to IcedTea6 1.9.7
- Removed all plugin/webstart related commented lines
- Modified bz entry format in previous logs to get around cvs ack checking bug</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.8" date="1307138400">- Resolves: rhbz#668488
- Bumped to IcedTea6 1.9.8
- RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
  disabled get still selected for read ops (win)
- RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
- RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
  FileDialog.show()
- RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
  code
- RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
  bindings
- RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
- RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
- RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
  with scale close to zero
- RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
- RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
  size variables</changelog>
</package>
<package pkgid="40aa0a4ee9d2ea93d69da935bd8d20d8556ed723" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.23.1.9.10.el5_7"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.7" date="1303948800">- Resolves bz690289
- Import from RHEL-5_6-Z
- Updated to IcedTea6 1.9.7
- Removed all plugin/webstart related commented lines
- Modified bz entry format in previous logs to get around cvs ack checking bug</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.22.1.9.8" date="1307145600">- Resolves: rhbz#668488
- Bumped to IcedTea6 1.9.8
- RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
  disabled get still selected for read ops (win)
- RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
- RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
  FileDialog.show()
- RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
  code
- RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
  bindings
- RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
- RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
- RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
  with scale close to zero
- RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
- RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
  size variables</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.23.1.9.10" date="1318550400">- Resolves: rhbz#744786
- Bumped to IcedTea6 1.9.8
 Security fixes
  - S7000600, CVE-2011-3547: InputStream skip() information leak
  - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
  - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
  - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
  - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
  - S7055902, CVE-2011-3521: IIOP deserialization code execution
  - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
  - S7064341, CVE-2011-3389: JSSE
  - S7070134, CVE-2011-3558: Hotspot unspecified issue
  - S7077466, CVE-2011-3556: RMI DGC server remote code execution
  - S7083012, CVE-2011-3557: RMI registry privileged code execution
  - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
 NetX
  - PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest</changelog>
</package>
<package pkgid="ad1bbe8546996b823f58cbb608ec0df3f9c9e301" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.25.1.10.6.el5_8"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.23.1.10.4" date="1324591200">- Resolves: rhbz#727598 
- Updated to IcedTea6 1.10.4
- Imported HugePages patches</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.6.0.0-1.24.1.10.4" date="1326232800">- Added patch to resolve rmi regression</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.25.1.10.6" date="1328997600">- Updated to IcedTea6 1.10.6
- Resolves: rhbz#787142
- Security fixes
  - S7082299: Fix in AtomicReferenceArray
  - S7088367: Fix issues in java sound
  - S7110683: Issues with some KeyboardFocusManager method
  - S7110687: Issues with TimeZone class
  - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
  - S7110704: Issues with some method in corba
  - S7112642: Incorrect checking for graphics rendering object
  - S7118283: Better input parameter checking in zip file processing
  - S7126960: Add property to limit number of request headers to the HTTP Server
- Bug fixes
  - RH580478: Desktop files should not use hardcoded path
- Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
- Removed and deleted upstreamed Hugepages patches:
  - Source100: 7034464-hugepage.patch
  - Source101: 7037939-hugepage.patch
  - Source102: 7043564-hugepage.patch</changelog>
</package>
<package pkgid="cb120ab9b33c9cb31d23840238c4b4e7451c1685" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.27.1.10.8.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.25.1.10.6" date="1328997600">- Updated to IcedTea6 1.10.6
- Resolves: rhbz#787142
- Security fixes
  - S7082299: Fix in AtomicReferenceArray
  - S7088367: Fix issues in java sound
  - S7110683: Issues with some KeyboardFocusManager method
  - S7110687: Issues with TimeZone class
  - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
  - S7110704: Issues with some method in corba
  - S7112642: Incorrect checking for graphics rendering object
  - S7118283: Better input parameter checking in zip file processing
  - S7126960: Add property to limit number of request headers to the HTTP Server
- Bug fixes
  - RH580478: Desktop files should not use hardcoded path
- Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
- Removed and deleted upstreamed Hugepages patches:
  - Source100: 7034464-hugepage.patch
  - Source101: 7037939-hugepage.patch
  - Source102: 7043564-hugepage.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.26.1.10.8" date="1339192800">- Updated to IcedTea6 1.10.8
- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added to patch
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339279200">- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added also to package.definition
- Resolves: rhbz#828749</changelog>
</package>
<package pkgid="030ab6e0713163c803dd3a4b4f3b781a771546c2" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.28.1.10.10.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339538400">- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.9" date="1346450400">- Updated to latest IcedTea6 1.10.9
- Resolves: rhbz#846709
- Resolves: rhbz#853114</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.10" date="1350079200">- Updated to IcedTea6 1.10.10
- Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
  865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
  865519, 865531, 865541, 865568</changelog>
</package>
<package pkgid="b13b5a624c0ff3520ac9936f5ef5eedb5f0480f6" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.28.1.10.9.el5_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339279200">- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added also to package.definition
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.27.1.10.8" date="1339538400">- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#828749</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.28.1.10.9" date="1346450400">- Updated to latest IcedTea6 1.10.9
- Resolves: rhbz#846709
- Resolves: rhbz#853114</changelog>
</package>
<package pkgid="924340d78d04d62f78aba5b798adbc9984bb99f0" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.33.1.11.6.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.31.1.11.6" date="1358287200">- Updated to icedtea6 1.11.6
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.32.1.11.6" date="1360188000">- added patch9 revertTwoWrongSecurityPatches2013-02-06.patch
  to remove   6664509 and 7201064 from 1.11.6 tarball
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.33.1.11.6" date="1360188001">- removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch9:   7201064.patch to be reverted
- added patch10:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906705</changelog>
</package>
<package pkgid="074ca9177f98b5acc1fb0afb121a92185a23a4f6" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.35.1.11.8.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.33.1.11.6" date="1360188000">- removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch9:   7201064.patch to be reverted
- added patch10:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906705</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.34.1.11.8" date="1360965600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but valid
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#911522</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.35.1.11.8" date="1361224800">- Rebuild with updated source tarball
- Resolves: rhbz#911522</changelog>
</package>
<package pkgid="a50057f62d365530d45d98360f1f313a8eee2a5f" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.36.1.11.9.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.34.1.11.8" date="1360965600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but valid
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#911522</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.35.1.11.8" date="1361224800">- Rebuild with updated source tarball
- Resolves: rhbz#911522</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; 1:1.6.0.0-1.36.1.11.9" date="1362434400">- Updated to icedtea6 1.11.9
- Resolves: rhbz#917176</changelog>
</package>
<package pkgid="bc45e2b78494c82a1ea49b6a142d00e9d47708ea" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.40.1.11.11.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.59.1.11.11" date="1366408800">- Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
- removed patch 9 -  removingOfAarch64.patch.patch - fixed upstream
- removed patch10  patchToFixMalformed8007667.patch - upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.39.1.11.11" date="1366581600">- added and applied (temporally) one more patch to xalan/xerces privileges
 - patch9 jaxp-backport-factoryfinder.patch
- will be upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.61.1.11.11" date="1366754400">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950383</changelog>
</package>
<package pkgid="561d97f634db326ab20aac789ea1363182ae693b" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.41.1.11.11.90.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.39.1.11.11" date="1366581600">- added and applied (temporally) one more patch to xalan/xerces privileges
 - patch9 jaxp-backport-factoryfinder.patch
- will be upstreamed
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.40.1.11.11" date="1366754400">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950383</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372370400">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973126</changelog>
</package>
<package pkgid="08a527df72c650ad4cfcd368804a911e9335723e" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="1.42.1.11.14.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.61.1.11.11" date="1366761600">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950384</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372377600">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973128</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.42.1.11.14" date="1383264000">- updated to icedtea6-1.11.14.tar.gz
- added and applied 1.11.14-fixes.patch, patch10 to fix build issues
- Resolves: rhbz#1017615</changelog>
</package>
<package pkgid="b61509fd7b0025a2faf661c0fc8f1eb9a687f4c3" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="3.1.13.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.41.1.11.11.90" date="1372377600">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973128</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.42.1.11.14" date="1383264000">- updated to icedtea6-1.11.14.tar.gz
- added and applied 1.11.14-fixes.patch, patch10 to fix build issues
- Resolves: rhbz#1017615</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-3.1.13.0" date="1390521600">- updated to icedtea 1.13.1
 - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
- updated to jdk6, b30,  21_jan_2014
 - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
- adapted patch7 1.13_fixes.patch
- pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
- added --disable-system-lcms to configure options to pass build
- adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#1050187</changelog>
</package>
<package pkgid="d6c0bc7fcc749c5202e1fc755249f0c195cdf685" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="5.1.13.3.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-3.1.13.0" date="1390521600">- updated to icedtea 1.13.1
 - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
- updated to jdk6, b30,  21_jan_2014
 - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
- adapted patch7 1.13_fixes.patch
- pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
- added --disable-system-lcms to configure options to pass build
- adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#1050187</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-4.1.13.0" date="1391040000">- rebuild to pick up new certificate
- Resolves: rhbz#1059178</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- Resolves: rhbz#1085007</changelog>
</package>
<package pkgid="7486aa9c7c416439331dd00ae11d959ec8d27615" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.0" rel="6.1.13.4.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-4.1.13.0" date="1391040000">- rebuild to pick up new certificate
- Resolves: rhbz#1059178</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- Resolves: rhbz#1085007</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-6.1.13.4" date="1405382400">- moved to  icedteaver 1.13.4
- moved to openjdkver b32 and openjdkdate 15_jul_2014
- Resolves: rhbz#1115865</changelog>
</package>
<package pkgid="dcda0f728ef7cb9f60157a075b7db87eab0fea41" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.33" rel="1.13.5.0.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-5.1.13.3" date="1397260800">- updated to icedtea 1.13.3
- updated to openjdk-6-src-b31-15_apr_2014
- renmoved upstreamed patch7, 1.13_fixes.patch
- renmoved upstreamed patch9, 1051245.patch
- Resolves: rhbz#1085008</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.1-6.1.13.4" date="1405382400">- moved to  icedteaver 1.13.4
- moved to openjdkver b32 and openjdkdate 15_jul_2014
- Resolves: rhbz#1115866</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.33-1.13.5.0" date="1412899200">- Update to IcedTea 1.13.5
- Change versioning to match java-1.7.0-openjdk so revisions work.
- No need to explicitly disable system LCMS any more (bug fixed upstream).
- Add icedteasnapshot to setup lines so they work with pre-release tarballs.
- Resolves: rhbz#1148898</changelog>
</package>
<package pkgid="ce9c2b227c28e008ab294ae9ef7bb6bebbfa8ac6" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.34" rel="1.13.6.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.0" date="1421798400">- Update to IcedTea 1.13.6
- Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
- Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
- Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
- Add US_export_policy.jar and local_policy.jar to packages.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.0" date="1421798401">- Apply pr2180.patch to work around issue with older autotools.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.1" date="1421884800">- Update to latest 1.13.6 release candidate tarball
- Fixes a number of issues found with b34:
- * OJ51, PR2187: Sync patch for 4873188 with 7 version
- * OJ52, PR2185: Application of 6786276 introduces compatibility issue
- * OJ53, PR2181: strict-aliasing warnings issued on PPC32
- * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
- * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
- * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
- Also includes PR2180, so patch dropped from RPM.
- Resolves: rhbz#1180289</changelog>
</package>
<package pkgid="3136a9652cb3178be6a0791945f74b4c1ed651da" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.35" rel="1.13.7.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.34-1.13.6.1" date="1421884800">- Update to latest 1.13.6 release candidate tarball
- Fixes a number of issues found with b34:
- * OJ51, PR2187: Sync patch for 4873188 with 7 version
- * OJ52, PR2185: Application of 6786276 introduces compatibility issue
- * OJ53, PR2181: strict-aliasing warnings issued on PPC32
- * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
- * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
- * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
- Also includes PR2180, so patch dropped from RPM.
- Resolves: rhbz#1180289</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.0" date="1428624000">- Update to IcedTea 1.13.7
- Resolves: rhbz#1209064</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.1" date="1428710400">- Repackaged source files
- Resolves: rhbz#1209064</changelog>
</package>
<package pkgid="c98d8ce4b40f0fcfa220fcb46e91f3231ccc800f" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.36" rel="1.13.8.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.1" date="1428710400">- Repackaged source files
- Resolves: rhbz#1209064</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.0" date="1437609600">- Update to IcedTea 1.13.8
- Update no_pr2125.patch to work against new version.
- Resolves: rhbz#1235149</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.1" date="1438128000">- Update to new tarball, containing fix for TCK regression (PR2565)
- Resolves: rhbz#1235149</changelog>
</package>
<package pkgid="22507b2ee97e12b360e2eb82573a59c6a0b44d28" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.37" rel="1.13.9.4.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.2" date="1446681600">- Update with new IcedTea &amp; b37 tarballs, including Kerberos fixes for TCK regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447200000">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447286400">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271926</changelog>
</package>
<package pkgid="820f0d46d986dc30d439b95d7ccc2bbd5e2af5cc" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.38" rel="1.13.10.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447286400">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420800">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295772</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420801">- Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
- Resolves: rhbz#1295772</changelog>
</package>
<package pkgid="f8ee7182eb4628e171d008775e4af9d1e1974c53" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.39" rel="1.13.11.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453420800">- Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
- Resolves: rhbz#1295772</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462406400">- Update to IcedTea 1.13.11 &amp; OpenJDK 6 b39.
- Resolves: rhbz#1325429</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462406401">- Explictly required libXcomposite-devel for PR2868 as nothing else pulls it in
- Resolves: rhbz#1325429</changelog>
</package>
<package pkgid="a575589044cbdd5ef9ad1746edba3e9a41737048" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.40" rel="1.13.12.4.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.2" date="1471651200">- Escape macros in bootstrap comments
- Resolves: rhbz#1350043</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.3" date="1471910400">- Bump source tarballs to missing -DNDEBUG on JDK native code.
- Resolves: rhbz#1350043</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.4" date="1471910401">- Bump source tarballs to try and really fix TCK failures this time.
- Resolves: rhbz#1350043</changelog>
</package>
<package pkgid="3fa1f2068d9702253ecbc1d7d26eb3ef864e6c55" name="java-1.6.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.6.0.41" rel="1.13.13.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483574400">- Remove --docdir option which is not supported by older autotools.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483574401">- Remove --htmldir option which is not supported by older autotools.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.1" date="1483574402">- Update to new 1.13.13 and b41 tarballs to correct TCK failure.
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="4ee61f3ac82fe7541443ee91abf18d8752f72766" name="java-1.6.0-sun-compat" arch="i586">
  <version epoch="0" ver="1.6.0.26" rel="3.sl5.jpp"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-1.sl5.jpp" date="1270598400">- Updated to jdk version 1.6.0-20</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-2.sl5.jpp" date="1277769600">- Changed i386 java plugin to be libnpjp2.so</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-3.sl5.jpp" date="1277856000">- Changed i386, it now has both old and new plugins.
  This change was provided by Oleg Sadov</changelog>
</package>
<package pkgid="1dc463851d5e276b7fe507961ea1a56f81c9cbcb" name="java-1.6.0-sun-compat" arch="i586">
  <version epoch="0" ver="1.6.0.29" rel="3.sl5.jpp"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-1.sl5.jpp" date="1270598400">- Updated to jdk version 1.6.0-20</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-2.sl5.jpp" date="1277769600">- Changed i386 java plugin to be libnpjp2.so</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-3.sl5.jpp" date="1277856000">- Changed i386, it now has both old and new plugins.
  This change was provided by Oleg Sadov</changelog>
</package>
<package pkgid="d29f944da97273c220cc4aa391e00175407acb7f" name="java-1.6.0-sun-compat" arch="i586">
  <version epoch="0" ver="1.6.0.31" rel="3.sl5.jpp"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-1.sl5.jpp" date="1270598400">- Updated to jdk version 1.6.0-20</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-2.sl5.jpp" date="1277769600">- Changed i386 java plugin to be libnpjp2.so</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-3.sl5.jpp" date="1277856000">- Changed i386, it now has both old and new plugins.
  This change was provided by Oleg Sadov</changelog>
</package>
<package pkgid="d57ec1da59db0933650f4146a31760cf71c2cfec" name="java-1.6.0-sun-compat" arch="i586">
  <version epoch="0" ver="1.6.0.33" rel="3.sl5.jpp"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-1.sl5.jpp" date="1270598400">- Updated to jdk version 1.6.0-20</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-2.sl5.jpp" date="1277769600">- Changed i386 java plugin to be libnpjp2.so</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-3.sl5.jpp" date="1277856000">- Changed i386, it now has both old and new plugins.
  This change was provided by Oleg Sadov</changelog>
</package>
<package pkgid="a0b7c233cfb42a30c8d36584fdf362b921edb023" name="java-1.6.0-sun-compat" arch="i586">
  <version epoch="0" ver="1.6.0.35" rel="3.sl5.jpp"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-1.sl5.jpp" date="1270598400">- Updated to jdk version 1.6.0-20</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-2.sl5.jpp" date="1277769600">- Changed i386 java plugin to be libnpjp2.so</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-3.sl5.jpp" date="1277856000">- Changed i386, it now has both old and new plugins.
  This change was provided by Oleg Sadov</changelog>
</package>
<package pkgid="c0c14f17f80a2a76425914cb9d2056d5316a2103" name="java-1.6.0-sun-compat" arch="i586">
  <version epoch="0" ver="1.6.0.37" rel="3.sl5.jpp"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-1.sl5.jpp" date="1270598400">- Updated to jdk version 1.6.0-20</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-2.sl5.jpp" date="1277769600">- Changed i386 java plugin to be libnpjp2.so</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-3.sl5.jpp" date="1277856000">- Changed i386, it now has both old and new plugins.
  This change was provided by Oleg Sadov</changelog>
</package>
<package pkgid="62bface949f3da55e5a23accf562348e5d326b4c" name="java-1.6.0-sun-compat" arch="i586">
  <version epoch="0" ver="1.6.0.39" rel="3.sl5.jpp"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-1.sl5.jpp" date="1270598400">- Updated to jdk version 1.6.0-20</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-2.sl5.jpp" date="1277769600">- Changed i386 java plugin to be libnpjp2.so</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-3.sl5.jpp" date="1277856000">- Changed i386, it now has both old and new plugins.
  This change was provided by Oleg Sadov</changelog>
</package>
<package pkgid="ef7bb9343ab87205acfc09c93cedad3ccb7cc14f" name="java-1.6.0-sun-compat" arch="i586">
  <version epoch="0" ver="1.6.0.41" rel="3.sl5.jpp"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-1.sl5.jpp" date="1270598400">- Updated to jdk version 1.6.0-20</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-2.sl5.jpp" date="1277769600">- Changed i386 java plugin to be libnpjp2.so</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 0:1.6.0.20-3.sl5.jpp" date="1277856000">- Changed i386, it now has both old and new plugins.
  This change was provided by Oleg Sadov</changelog>
</package>
<package pkgid="2ec8c84d26dc8a70ebefe23b8a609ccdeaf1c3e7" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.101" rel="2.6.6.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864000">- Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
- Resolves: rhbz#1320655</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1461024000">- Bump to 2.6.6 and u101b00.
- Drop a leading zero from the priority as the update version is now three digits
- Resolves: rhbz#1325424</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461110400">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325424</changelog>
</package>
<package pkgid="64ec510c3111ed355626b81bdca9fe9fb49898ba" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.111" rel="2.6.7.1.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461110400">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325424</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.0" date="1469059200">- Bump to 2.6.7 and u111b00.
- Update SystemTap bundle with fix for PR3091/RH1204159
- Drop patches (S8161262 (8147466_wrapv) and PR2939 (fontpath)) applied upstream.
- Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
- Resolves: rhbz#1350038</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.1" date="1469232000">- Bump to jdk7u111 b01 to fix TCK regressions (7081817 &amp; 8162344)
- Resolves: rhbz#1350038</changelog>
</package>
<package pkgid="42cbfb65d5d42b41ad8c37c9ae38905874941cc0" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.121" rel="2.6.8.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.0" date="1477699200">- Bump to 2.6.8 and u121b00.
- Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044800">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044801">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="d84512a76a4a8ed7b02e25d12c9ec01b2a4d227d" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.131" rel="2.6.9.0.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044800">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486512000">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate RH1022017 against 2.6.9.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486512001">- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="84ba14f265c369b08e3f0def69af82bf5335c3b2" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.19" rel="2.3.9.1.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.9-2.3.8.1.el5" date="1365631200">- Added some of the latest Fedora spec bugfixes
- Bumped release
- zlib in BuildReq restricted for  1.2.3-7 or higher
 - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
- Removed a -icedtea tag from the version
  - package have less and less connections to icedtea7
- Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
- Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
  - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
- logging.properties marked as config(noreplace)
  - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
- nss.cfg was marked as config(noreplace)
- slaves sync with el6
- Resolves: rhbz#950376</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.9.0.el5" date="1365717600">- updated to IcedTea  2.3.9 with latest security patches
- buildver sync to b19
- rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#950376</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.9.1.el5" date="1366149600">- updated to updated IcedTea  2.3.9 with fix to one of security fixes
  -  fixed font glyph offset
- Resolves: rhbz#950376</changelog>
</package>
<package pkgid="0d0bb052dc5e0f7f3f2a0ef967f2c0085a139967" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.25" rel="2.3.10.4.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.2.el5" date="1371160800">- added patch1000 MBeanFix.patch to fix regressions caused by security patches
- Resolves: rhbz#973117</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.3.el5" date="1371247200">- reverted fix for license files owning
- Resolves: rhbz#973117</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.4.el5" date="1371592800">- updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
- removed upstreamed patch1000 MBeanFix.patch
- Resolves: rhbz#973117</changelog>
</package>
<package pkgid="f3d0b9296c7221d7ac52f5136983974c29e81935" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.45" rel="2.4.3.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.4.1.4.el5" date="1372896000">- updated to icedtea 2.4.1
- improoved handling of patch111 - nss-config-2.patch
- backported uniquesuffix from 6.5
- Resolves: rhbz#978421</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.0.el5" date="1378857600">- fixed and updated tapset
- removed bootstrap
- source 11 redeclared to 1111
- added source12: TestCryptoLevel.java
- removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
- removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
- added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
- fixed nss 
- cleaned sources
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.1.el5" date="1381968000">- Updated to icedtea 2.4.3
- Resolves: rhbz#1017623</changelog>
</package>
<package pkgid="6c97c0f293c636a8a32ab6d17ee6d9501e6e7b3a" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.51" rel="2.4.4.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.0.el5" date="1378857600">- fixed and updated tapset
- removed bootstrap
- source 11 redeclared to 1111
- added source12: TestCryptoLevel.java
- removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
- removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
- added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
- fixed nss 
- cleaned sources
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.1.el5" date="1381968000">- Updated to icedtea 2.4.3
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.51-2.4.4.1.el5" date="1389398400">- updated to security icedtea 2.4.4
 - icedtea_version set to 2.4.4
 - updatever bumped to       51
 - release reset to 1
- build requires: java-devel &gt;= 1:1.6.0 changed java7-devel 
- Resolves: rhbz#1050192</changelog>
</package>
<package pkgid="cb7815623e01a4a67a19a29cc9305820e1430563" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.55" rel="2.4.7.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.51-2.4.4.2.el5" date="1391040000">- Resolves: rhbz#1059179
- Rebuild to use new cacert bundle</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.55-2.4.7.0.el5" date="1396915200">- bumped to future icedtea-forest 2.4.7
- updatever set to 55, buildver se to 13, release reset to 0
- removed BuildRequires on pulseaudio &gt;= 0.9.1, devel is enough
- removed Requires: rhino, BuildRequires is enough
- updated patch400, java-1.7.0-openjdk-remove-gstabs.patch
- added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
- ppc64 repalced by power64 macro
- patch111 applied as dry-run (6.5 forward port)
- Resolves: rhbz#1085000</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.55-2.4.7.1.el5" date="1396915201">- regenerated sources to fix TCK failure
- Resolves: rhbz#1085000</changelog>
</package>
<package pkgid="a7bc79200233cee099f55a0ad5daee8dd22ce454" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.65" rel="2.5.1.2.el5_10"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.60-2.5.0.1.el5" date="1404345600">- update to icedtea7-forest 2.5.0 (rh1114937)
- Resolves: rhbz#1115872</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.1.el5" date="1404777600">- updated to security patched icedtea7-forest 2.5.1
- Resolves: rhbz#1115872</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115872</changelog>
</package>
<package pkgid="85bb1aede7217d9642b8a0226425b5b3c772e032" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.71" rel="2.5.3.1.el5_11"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.1.el5" date="1404777600">- updated to security patched icedtea7-forest 2.5.1
- Resolves: rhbz#1115873</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.71-2.5.3.1" date="1412380800">- Bump to 2.5.3 with security updates.
- Remove obsolete patches which are now included upstream.
- Disable LCMS via environment variables rather than maintaining a patch.
- Resolves: rhbz#1148890</changelog>
</package>
<package pkgid="af78df3c1536f3bf6111e2a72cf832a2e93b36e1" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.75" rel="2.5.4.0.el5_11"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.71-2.5.3.1" date="1412380800">- Bump to 2.5.3 with security updates.
- Remove obsolete patches which are now included upstream.
- Disable LCMS via environment variables rather than maintaining a patch.
- Resolves: rhbz#1148890</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.75-2.5.4.0" date="1420761600">- Bump to 2.5.4 using OpenJDK 7u75 b13.
- Fix elliptic curve list as part of fsg.sh
- Resolves: rhbz#1180294</changelog>
</package>
<package pkgid="1f615b996db727a83de4625f18a5c2059bb4f7c5" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.79" rel="2.5.5.2.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.75-2.5.4.0" date="1420761600">- Bump to 2.5.4 using OpenJDK 7u75 b13.
- Fix elliptic curve list as part of fsg.sh
- Resolves: rhbz#1180294</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.79-2.5.5.0" date="1428451200">- Bump to 2.5.5 using OpenJDK 7u79 b14.
- Resolves: rhbz#1209069</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1:1.7.0.75-2.5.5.1" date="1428710400">- Repacked sources
- Resolves: rhbz#1209069</changelog>
</package>
<package pkgid="7354c5aa64d463ce1877757627bb58a847d9d68e" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.85" rel="2.6.1.3.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.1" date="1436659200">- Bump upstream tarball to u25b01 to fix issue with 8075374 backport.
- Resolves: rhbz#1235155</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.2" date="1436745600">- Turn off system GConf as library seems buggy on RHEL 5.11
- Resolves: rhbz#1235155</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.3" date="1436832000">- Check return value of gio_init in gsettings_init and return false if necessary.
- Re-enable the use of system GConf.
- Only ifdef g_type_init&amp;g_free if USE_SYSTEM_GIO and USE_SYSTEM_GCONF are undefined.
- Resolves: rhbz#1242587</changelog>
</package>
<package pkgid="4370e175da07c0e6c31b2187af0b9841624565bf" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.4.el5_9.1"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.3.el5.1" date="1350338400">- Changed permissions of sa-jdi.jar to correct 644
- Correctly removed noarch tag form javadoc, rhel5 donot support noarch subpackages
- Resolves: rhbz#803732</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.11-2.4.0.el6.1" date="1358200800">- Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
- Added jxmd and idlj to alternatives
- make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
- Unapplied patch302 and deleted systemtap.patch
- buildver increased to 11
- icedtea_version set to 2.4.0
- Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
- Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
- Resolves: rhbz#895031</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.4.el6.1" date="1358287200">- Rewerted to IcedTea 2.3
  - Rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Removed jcmd and idlj to alternatives
  - make NOT executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Reapplied patch302 and deleted systemtap.patch
  - buildver set to 9
  - icedtea_version set to 2.3.4
  - Unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from 
    java.security-linux back to java.security
- Resolves: rhbz#895031</changelog>
</package>
<package pkgid="bb70d21304edb6aa3bcb0e90706c6efa253c3b8b" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.5.3.el5_9"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.9-2.3.5.el5_9.1" date="1360188000">- Backed out 6664509 and 7201064.patch which cause regressions</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.9-2.3.5.1.el5_9" date="1360274400">- Removed 6664509 backout and added 8005615 to fix the issue</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.5.3.el5_9" date="1360274401">- Sync logging fixes with upstream (icedtea7-forest and jdk7u)</changelog>
</package>
<package pkgid="01f19d6c1cf7e8f2769302a3fdcd8625135dec26" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.7.1.el5_9"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.5.3.el5_9" date="1360274400">- Sync logging fixes with upstream (icedtea7-forest and jdk7u)</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.0.el5_9" date="1361052000">- Removed patch1000 sec-2013-02-01-8005615.patch
- Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
- Removed patch1010 sec-2013-02-01-7201064.patch
- Removed testing
 - mauve was outdated and
 - jtreg was icedtea relict
- Updated  to icedtea 2.3.7
- Resolves: rhbz#911527</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.1.el5_9" date="1361224800">- Updated main source tarball
- Removed wrong relinking of cacerts (see rhbz 904165)
- Resolves: rhbz#911527</changelog>
</package>
<package pkgid="2598fea54f78855ca2bb996e38a67c8800cc817b" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.8.0.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.0.el5_9" date="1361052000">- Removed patch1000 sec-2013-02-01-8005615.patch
- Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
- Removed patch1010 sec-2013-02-01-7201064.patch
- Removed testing
 - mauve was outdated and
 - jtreg was icedtea relict
- Updated  to icedtea 2.3.7
- Resolves: rhbz#911527</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.1.el5_9" date="1361224800">- Updated main source tarball
- Removed wrong relinking of cacerts (see rhbz 904165)
- Resolves: rhbz#911527</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.8.0.el5_9" date="1362434400">- Updated to icedtea7-forest-2.3
- Resolves: rhbz#917181</changelog>
</package>
<package pkgid="750fd2f14ff93fb6c35d91e715905aaa7add82f2" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.91" rel="2.6.2.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.0" date="1445299200">- Bump to 2.6.2 and u91b00.
- Resolves: rhbz#1271918</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.0" date="1445299201">- Drop patch for PR2521/RH1242587 now resolved upstream. 
- Resolves: rhbz#1271918</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.1" date="1445385600">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271918</changelog>
</package>
<package pkgid="90f88d31a8371863e03955eebaf7824784f5c631" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.95" rel="2.6.4.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453248000">- Remove unneeded build dependencies on jakarta-commons-logging and prelink/execstack
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248001">- Add additional -fno-strict-aliasing cases revealed by rpmdiff
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248002">- Bump release as previous version did build :-(
- Resolves: rhbz#1295764</changelog>
</package>
<package pkgid="57eb3c5cc59a04cde87a6eeded85a18bcdfbfd2a" name="java-1.7.0-openjdk" arch="i386">
  <version epoch="1" ver="1.7.0.99" rel="2.6.5.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248000">- Bump release as previous version did build :-(
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864000">- Bump to 2.6.5 and u99b00.
- Correct check for fsg.sh in tarball creation script
- Resolves: rhbz#1320655</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864001">- Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
- Resolves: rhbz#1320655</changelog>
</package>
<package pkgid="81fe5377ca19662440829864223e07e35db8f0ae" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.101" rel="2.6.6.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864000">- Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
- Resolves: rhbz#1320655</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1461024000">- Bump to 2.6.6 and u101b00.
- Drop a leading zero from the priority as the update version is now three digits
- Resolves: rhbz#1325424</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461110400">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325424</changelog>
</package>
<package pkgid="162be998f5fb4b41b9aaa423a3e164497619a15e" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.111" rel="2.6.7.1.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461110400">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325424</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.0" date="1469059200">- Bump to 2.6.7 and u111b00.
- Update SystemTap bundle with fix for PR3091/RH1204159
- Drop patches (S8161262 (8147466_wrapv) and PR2939 (fontpath)) applied upstream.
- Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
- Resolves: rhbz#1350038</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.1" date="1469232000">- Bump to jdk7u111 b01 to fix TCK regressions (7081817 &amp; 8162344)
- Resolves: rhbz#1350038</changelog>
</package>
<package pkgid="f10b36b622888d3fc6881a0a6f622e0a3d6f94e9" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.121" rel="2.6.8.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.0" date="1477699200">- Bump to 2.6.8 and u121b00.
- Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044800">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044801">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="45c86a2f5e829c636de22ce50b3662521ad48ee0" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.131" rel="2.6.9.0.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044800">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486512000">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate RH1022017 against 2.6.9.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486512001">- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="a521685852e36989641e6086eca66a6af20247c8" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.19" rel="2.3.9.1.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.9-2.3.8.1.el5" date="1365631200">- Added some of the latest Fedora spec bugfixes
- Bumped release
- zlib in BuildReq restricted for  1.2.3-7 or higher
 - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
- Removed a -icedtea tag from the version
  - package have less and less connections to icedtea7
- Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
- Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
  - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
- logging.properties marked as config(noreplace)
  - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
- nss.cfg was marked as config(noreplace)
- slaves sync with el6
- Resolves: rhbz#950376</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.9.0.el5" date="1365717600">- updated to IcedTea  2.3.9 with latest security patches
- buildver sync to b19
- rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#950376</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.9.1.el5" date="1366149600">- updated to updated IcedTea  2.3.9 with fix to one of security fixes
  -  fixed font glyph offset
- Resolves: rhbz#950376</changelog>
</package>
<package pkgid="d66f0013e2628a88ad3ce5deb2a7f589c6d20c09" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.25" rel="2.3.10.4.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.2.el5" date="1371160800">- added patch1000 MBeanFix.patch to fix regressions caused by security patches
- Resolves: rhbz#973117</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.3.el5" date="1371247200">- reverted fix for license files owning
- Resolves: rhbz#973117</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.4.el5" date="1371592800">- updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
- removed upstreamed patch1000 MBeanFix.patch
- Resolves: rhbz#973117</changelog>
</package>
<package pkgid="ead4785e09c3e1eb57325625b0e0c449ed57435c" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.45" rel="2.4.3.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.4.1.4.el5" date="1372896000">- updated to icedtea 2.4.1
- improoved handling of patch111 - nss-config-2.patch
- backported uniquesuffix from 6.5
- Resolves: rhbz#978421</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.0.el5" date="1378857600">- fixed and updated tapset
- removed bootstrap
- source 11 redeclared to 1111
- added source12: TestCryptoLevel.java
- removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
- removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
- added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
- fixed nss 
- cleaned sources
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.1.el5" date="1381968000">- Updated to icedtea 2.4.3
- Resolves: rhbz#1017623</changelog>
</package>
<package pkgid="290ad204ca836d20a6599e6288d569e856b4844c" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.51" rel="2.4.4.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.0.el5" date="1378857600">- fixed and updated tapset
- removed bootstrap
- source 11 redeclared to 1111
- added source12: TestCryptoLevel.java
- removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
- removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
- added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
- fixed nss 
- cleaned sources
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.1.el5" date="1381968000">- Updated to icedtea 2.4.3
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.51-2.4.4.1.el5" date="1389398400">- updated to security icedtea 2.4.4
 - icedtea_version set to 2.4.4
 - updatever bumped to       51
 - release reset to 1
- build requires: java-devel &gt;= 1:1.6.0 changed java7-devel 
- Resolves: rhbz#1050192</changelog>
</package>
<package pkgid="33ef6776de19e92704b69c9c119c1210b00aa658" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.55" rel="2.4.7.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.51-2.4.4.2.el5" date="1391040000">- Resolves: rhbz#1059179
- Rebuild to use new cacert bundle</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.55-2.4.7.0.el5" date="1396915200">- bumped to future icedtea-forest 2.4.7
- updatever set to 55, buildver se to 13, release reset to 0
- removed BuildRequires on pulseaudio &gt;= 0.9.1, devel is enough
- removed Requires: rhino, BuildRequires is enough
- updated patch400, java-1.7.0-openjdk-remove-gstabs.patch
- added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
- ppc64 repalced by power64 macro
- patch111 applied as dry-run (6.5 forward port)
- Resolves: rhbz#1085000</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.55-2.4.7.1.el5" date="1396915201">- regenerated sources to fix TCK failure
- Resolves: rhbz#1085000</changelog>
</package>
<package pkgid="ab37751837b8639795cc3e2d9d66c62606dcbe16" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.65" rel="2.5.1.2.el5_10"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.60-2.5.0.1.el5" date="1404345600">- update to icedtea7-forest 2.5.0 (rh1114937)
- Resolves: rhbz#1115872</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.1.el5" date="1404777600">- updated to security patched icedtea7-forest 2.5.1
- Resolves: rhbz#1115872</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115872</changelog>
</package>
<package pkgid="893e0a50b6e61a606d1ad61d8f72bdd330dfb4b4" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.71" rel="2.5.3.1.el5_11"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.1.el5" date="1404777600">- updated to security patched icedtea7-forest 2.5.1
- Resolves: rhbz#1115873</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.71-2.5.3.1" date="1412380800">- Bump to 2.5.3 with security updates.
- Remove obsolete patches which are now included upstream.
- Disable LCMS via environment variables rather than maintaining a patch.
- Resolves: rhbz#1148890</changelog>
</package>
<package pkgid="79d8db16ef916c21e62218731fc3d20b60f3a167" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.75" rel="2.5.4.0.el5_11"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.71-2.5.3.1" date="1412380800">- Bump to 2.5.3 with security updates.
- Remove obsolete patches which are now included upstream.
- Disable LCMS via environment variables rather than maintaining a patch.
- Resolves: rhbz#1148890</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.75-2.5.4.0" date="1420761600">- Bump to 2.5.4 using OpenJDK 7u75 b13.
- Fix elliptic curve list as part of fsg.sh
- Resolves: rhbz#1180294</changelog>
</package>
<package pkgid="32577134ee9d1c6ecb1ce2de3bc007dbe37cba89" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.79" rel="2.5.5.2.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.75-2.5.4.0" date="1420761600">- Bump to 2.5.4 using OpenJDK 7u75 b13.
- Fix elliptic curve list as part of fsg.sh
- Resolves: rhbz#1180294</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.79-2.5.5.0" date="1428451200">- Bump to 2.5.5 using OpenJDK 7u79 b14.
- Resolves: rhbz#1209069</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1:1.7.0.75-2.5.5.1" date="1428710400">- Repacked sources
- Resolves: rhbz#1209069</changelog>
</package>
<package pkgid="02505417f7d601f290faca787f59b45340326629" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.85" rel="2.6.1.3.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.1" date="1436659200">- Bump upstream tarball to u25b01 to fix issue with 8075374 backport.
- Resolves: rhbz#1235155</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.2" date="1436745600">- Turn off system GConf as library seems buggy on RHEL 5.11
- Resolves: rhbz#1235155</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.3" date="1436832000">- Check return value of gio_init in gsettings_init and return false if necessary.
- Re-enable the use of system GConf.
- Only ifdef g_type_init&amp;g_free if USE_SYSTEM_GIO and USE_SYSTEM_GCONF are undefined.
- Resolves: rhbz#1242587</changelog>
</package>
<package pkgid="776d073ca7c12ff7a8602059f61ccb64640cc8f8" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.4.el5_9.1"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.3.el5.1" date="1350338400">- Changed permissions of sa-jdi.jar to correct 644
- Correctly removed noarch tag form javadoc, rhel5 donot support noarch subpackages
- Resolves: rhbz#803732</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.11-2.4.0.el6.1" date="1358200800">- Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
- Added jxmd and idlj to alternatives
- make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
- Unapplied patch302 and deleted systemtap.patch
- buildver increased to 11
- icedtea_version set to 2.4.0
- Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
- Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
- Resolves: rhbz#895031</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.4.el6.1" date="1358287200">- Rewerted to IcedTea 2.3
  - Rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Removed jcmd and idlj to alternatives
  - make NOT executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Reapplied patch302 and deleted systemtap.patch
  - buildver set to 9
  - icedtea_version set to 2.3.4
  - Unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from 
    java.security-linux back to java.security
- Resolves: rhbz#895031</changelog>
</package>
<package pkgid="c8b36694b28456e54f0567c6386f98885c9ac3fc" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.5.3.el5_9"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.9-2.3.5.el5_9.1" date="1360188000">- Backed out 6664509 and 7201064.patch which cause regressions</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.9-2.3.5.1.el5_9" date="1360274400">- Removed 6664509 backout and added 8005615 to fix the issue</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.5.3.el5_9" date="1360274401">- Sync logging fixes with upstream (icedtea7-forest and jdk7u)</changelog>
</package>
<package pkgid="0c760d8b38cf4b70d1468220bf04dd73bd6386b3" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.7.1.el5_9"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.5.3.el5_9" date="1360274400">- Sync logging fixes with upstream (icedtea7-forest and jdk7u)</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.0.el5_9" date="1361052000">- Removed patch1000 sec-2013-02-01-8005615.patch
- Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
- Removed patch1010 sec-2013-02-01-7201064.patch
- Removed testing
 - mauve was outdated and
 - jtreg was icedtea relict
- Updated  to icedtea 2.3.7
- Resolves: rhbz#911527</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.1.el5_9" date="1361224800">- Updated main source tarball
- Removed wrong relinking of cacerts (see rhbz 904165)
- Resolves: rhbz#911527</changelog>
</package>
<package pkgid="e48ba1b94849c5ed1377697ea369b7206444223b" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.8.0.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.0.el5_9" date="1361052000">- Removed patch1000 sec-2013-02-01-8005615.patch
- Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
- Removed patch1010 sec-2013-02-01-7201064.patch
- Removed testing
 - mauve was outdated and
 - jtreg was icedtea relict
- Updated  to icedtea 2.3.7
- Resolves: rhbz#911527</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.1.el5_9" date="1361224800">- Updated main source tarball
- Removed wrong relinking of cacerts (see rhbz 904165)
- Resolves: rhbz#911527</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.8.0.el5_9" date="1362434400">- Updated to icedtea7-forest-2.3
- Resolves: rhbz#917181</changelog>
</package>
<package pkgid="f7464109a4d89b0fe9c11e9f1c9658b5e45c6d04" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.91" rel="2.6.2.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.0" date="1445299200">- Bump to 2.6.2 and u91b00.
- Resolves: rhbz#1271918</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.0" date="1445299201">- Drop patch for PR2521/RH1242587 now resolved upstream. 
- Resolves: rhbz#1271918</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.1" date="1445385600">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271918</changelog>
</package>
<package pkgid="addc971e13f71804da33540e2303f65f54738fb9" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.95" rel="2.6.4.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453248000">- Remove unneeded build dependencies on jakarta-commons-logging and prelink/execstack
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248001">- Add additional -fno-strict-aliasing cases revealed by rpmdiff
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248002">- Bump release as previous version did build :-(
- Resolves: rhbz#1295764</changelog>
</package>
<package pkgid="f1b53c7a075c2458c60bc65cdd323ddc7c74cd3d" name="java-1.7.0-openjdk-demo" arch="i386">
  <version epoch="1" ver="1.7.0.99" rel="2.6.5.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248000">- Bump release as previous version did build :-(
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864000">- Bump to 2.6.5 and u99b00.
- Correct check for fsg.sh in tarball creation script
- Resolves: rhbz#1320655</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864001">- Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
- Resolves: rhbz#1320655</changelog>
</package>
<package pkgid="9fedccd336ca28782f1c33bb6d07104a679f9ebe" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.101" rel="2.6.6.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864000">- Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
- Resolves: rhbz#1320655</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1461024000">- Bump to 2.6.6 and u101b00.
- Drop a leading zero from the priority as the update version is now three digits
- Resolves: rhbz#1325424</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461110400">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325424</changelog>
</package>
<package pkgid="19b4f64396e71eeb5be2ec99440e32d01a1bb64a" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.111" rel="2.6.7.1.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461110400">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325424</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.0" date="1469059200">- Bump to 2.6.7 and u111b00.
- Update SystemTap bundle with fix for PR3091/RH1204159
- Drop patches (S8161262 (8147466_wrapv) and PR2939 (fontpath)) applied upstream.
- Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
- Resolves: rhbz#1350038</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.1" date="1469232000">- Bump to jdk7u111 b01 to fix TCK regressions (7081817 &amp; 8162344)
- Resolves: rhbz#1350038</changelog>
</package>
<package pkgid="d82a22bd22f486e16d2f70d83c9ff49f656f3a52" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.121" rel="2.6.8.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.0" date="1477699200">- Bump to 2.6.8 and u121b00.
- Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044800">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044801">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="86895893245768aa539ce32384ba7cb5558b12d0" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.131" rel="2.6.9.0.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044800">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486512000">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate RH1022017 against 2.6.9.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486512001">- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="5a0d84e0237c9fb899542095c3064a846fb3061e" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.19" rel="2.3.9.1.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.9-2.3.8.1.el5" date="1365631200">- Added some of the latest Fedora spec bugfixes
- Bumped release
- zlib in BuildReq restricted for  1.2.3-7 or higher
 - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
- Removed a -icedtea tag from the version
  - package have less and less connections to icedtea7
- Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
- Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
  - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
- logging.properties marked as config(noreplace)
  - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
- nss.cfg was marked as config(noreplace)
- slaves sync with el6
- Resolves: rhbz#950376</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.9.0.el5" date="1365717600">- updated to IcedTea  2.3.9 with latest security patches
- buildver sync to b19
- rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#950376</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.9.1.el5" date="1366149600">- updated to updated IcedTea  2.3.9 with fix to one of security fixes
  -  fixed font glyph offset
- Resolves: rhbz#950376</changelog>
</package>
<package pkgid="3e8c4e4dc597f34503aba785ab3f99e5f7b6f135" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.25" rel="2.3.10.4.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.2.el5" date="1371160800">- added patch1000 MBeanFix.patch to fix regressions caused by security patches
- Resolves: rhbz#973117</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.3.el5" date="1371247200">- reverted fix for license files owning
- Resolves: rhbz#973117</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.4.el5" date="1371592800">- updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
- removed upstreamed patch1000 MBeanFix.patch
- Resolves: rhbz#973117</changelog>
</package>
<package pkgid="a7b6f0824f1012f0d2cc831345580cebf27dfd46" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.45" rel="2.4.3.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.4.1.4.el5" date="1372896000">- updated to icedtea 2.4.1
- improoved handling of patch111 - nss-config-2.patch
- backported uniquesuffix from 6.5
- Resolves: rhbz#978421</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.0.el5" date="1378857600">- fixed and updated tapset
- removed bootstrap
- source 11 redeclared to 1111
- added source12: TestCryptoLevel.java
- removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
- removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
- added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
- fixed nss 
- cleaned sources
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.1.el5" date="1381968000">- Updated to icedtea 2.4.3
- Resolves: rhbz#1017623</changelog>
</package>
<package pkgid="2ee0a8f1f766dc8e2838a132bdadfa09f707d330" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.51" rel="2.4.4.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.0.el5" date="1378857600">- fixed and updated tapset
- removed bootstrap
- source 11 redeclared to 1111
- added source12: TestCryptoLevel.java
- removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
- removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
- added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
- fixed nss 
- cleaned sources
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.1.el5" date="1381968000">- Updated to icedtea 2.4.3
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.51-2.4.4.1.el5" date="1389398400">- updated to security icedtea 2.4.4
 - icedtea_version set to 2.4.4
 - updatever bumped to       51
 - release reset to 1
- build requires: java-devel &gt;= 1:1.6.0 changed java7-devel 
- Resolves: rhbz#1050192</changelog>
</package>
<package pkgid="8b00b9c3a0d742850d970b891e824dae12709868" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.55" rel="2.4.7.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.51-2.4.4.2.el5" date="1391040000">- Resolves: rhbz#1059179
- Rebuild to use new cacert bundle</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.55-2.4.7.0.el5" date="1396915200">- bumped to future icedtea-forest 2.4.7
- updatever set to 55, buildver se to 13, release reset to 0
- removed BuildRequires on pulseaudio &gt;= 0.9.1, devel is enough
- removed Requires: rhino, BuildRequires is enough
- updated patch400, java-1.7.0-openjdk-remove-gstabs.patch
- added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
- ppc64 repalced by power64 macro
- patch111 applied as dry-run (6.5 forward port)
- Resolves: rhbz#1085000</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.55-2.4.7.1.el5" date="1396915201">- regenerated sources to fix TCK failure
- Resolves: rhbz#1085000</changelog>
</package>
<package pkgid="1683127784eeba2b5f9b8ae1da59ec533d7ca17b" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.65" rel="2.5.1.2.el5_10"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.60-2.5.0.1.el5" date="1404345600">- update to icedtea7-forest 2.5.0 (rh1114937)
- Resolves: rhbz#1115872</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.1.el5" date="1404777600">- updated to security patched icedtea7-forest 2.5.1
- Resolves: rhbz#1115872</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115872</changelog>
</package>
<package pkgid="7da9e492221d4cd24e552b7c0b836bcb171ae108" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.71" rel="2.5.3.1.el5_11"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.1.el5" date="1404777600">- updated to security patched icedtea7-forest 2.5.1
- Resolves: rhbz#1115873</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.71-2.5.3.1" date="1412380800">- Bump to 2.5.3 with security updates.
- Remove obsolete patches which are now included upstream.
- Disable LCMS via environment variables rather than maintaining a patch.
- Resolves: rhbz#1148890</changelog>
</package>
<package pkgid="88e7c29468021e6b8d7d97cc69c7769af0e68eb9" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.75" rel="2.5.4.0.el5_11"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.71-2.5.3.1" date="1412380800">- Bump to 2.5.3 with security updates.
- Remove obsolete patches which are now included upstream.
- Disable LCMS via environment variables rather than maintaining a patch.
- Resolves: rhbz#1148890</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.75-2.5.4.0" date="1420761600">- Bump to 2.5.4 using OpenJDK 7u75 b13.
- Fix elliptic curve list as part of fsg.sh
- Resolves: rhbz#1180294</changelog>
</package>
<package pkgid="a0442bbb2a35c78bc806951a4c6a002f9ad71f85" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.79" rel="2.5.5.2.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.75-2.5.4.0" date="1420761600">- Bump to 2.5.4 using OpenJDK 7u75 b13.
- Fix elliptic curve list as part of fsg.sh
- Resolves: rhbz#1180294</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.79-2.5.5.0" date="1428451200">- Bump to 2.5.5 using OpenJDK 7u79 b14.
- Resolves: rhbz#1209069</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1:1.7.0.75-2.5.5.1" date="1428710400">- Repacked sources
- Resolves: rhbz#1209069</changelog>
</package>
<package pkgid="330fc1523eab325163269ee528c6d45366c8f8a0" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.85" rel="2.6.1.3.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.1" date="1436659200">- Bump upstream tarball to u25b01 to fix issue with 8075374 backport.
- Resolves: rhbz#1235155</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.2" date="1436745600">- Turn off system GConf as library seems buggy on RHEL 5.11
- Resolves: rhbz#1235155</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.3" date="1436832000">- Check return value of gio_init in gsettings_init and return false if necessary.
- Re-enable the use of system GConf.
- Only ifdef g_type_init&amp;g_free if USE_SYSTEM_GIO and USE_SYSTEM_GCONF are undefined.
- Resolves: rhbz#1242587</changelog>
</package>
<package pkgid="75759b0694f6cbe7d6b4d92ca75fb87401bdd680" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.4.el5_9.1"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.3.el5.1" date="1350338400">- Changed permissions of sa-jdi.jar to correct 644
- Correctly removed noarch tag form javadoc, rhel5 donot support noarch subpackages
- Resolves: rhbz#803732</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.11-2.4.0.el6.1" date="1358200800">- Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
- Added jxmd and idlj to alternatives
- make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
- Unapplied patch302 and deleted systemtap.patch
- buildver increased to 11
- icedtea_version set to 2.4.0
- Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
- Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
- Resolves: rhbz#895031</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.4.el6.1" date="1358287200">- Rewerted to IcedTea 2.3
  - Rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Removed jcmd and idlj to alternatives
  - make NOT executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Reapplied patch302 and deleted systemtap.patch
  - buildver set to 9
  - icedtea_version set to 2.3.4
  - Unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from 
    java.security-linux back to java.security
- Resolves: rhbz#895031</changelog>
</package>
<package pkgid="d1e444c039ba349b8819ea2b2cb7c3268bf7898a" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.5.3.el5_9"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.9-2.3.5.el5_9.1" date="1360188000">- Backed out 6664509 and 7201064.patch which cause regressions</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.9-2.3.5.1.el5_9" date="1360274400">- Removed 6664509 backout and added 8005615 to fix the issue</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.5.3.el5_9" date="1360274401">- Sync logging fixes with upstream (icedtea7-forest and jdk7u)</changelog>
</package>
<package pkgid="de3b4ce140b43f10f9924a5d8fbc4e01cc450699" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.7.1.el5_9"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.5.3.el5_9" date="1360274400">- Sync logging fixes with upstream (icedtea7-forest and jdk7u)</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.0.el5_9" date="1361052000">- Removed patch1000 sec-2013-02-01-8005615.patch
- Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
- Removed patch1010 sec-2013-02-01-7201064.patch
- Removed testing
 - mauve was outdated and
 - jtreg was icedtea relict
- Updated  to icedtea 2.3.7
- Resolves: rhbz#911527</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.1.el5_9" date="1361224800">- Updated main source tarball
- Removed wrong relinking of cacerts (see rhbz 904165)
- Resolves: rhbz#911527</changelog>
</package>
<package pkgid="f430a96d777ed48a6d418bd0865901f027f361a7" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.8.0.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.0.el5_9" date="1361052000">- Removed patch1000 sec-2013-02-01-8005615.patch
- Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
- Removed patch1010 sec-2013-02-01-7201064.patch
- Removed testing
 - mauve was outdated and
 - jtreg was icedtea relict
- Updated  to icedtea 2.3.7
- Resolves: rhbz#911527</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.1.el5_9" date="1361224800">- Updated main source tarball
- Removed wrong relinking of cacerts (see rhbz 904165)
- Resolves: rhbz#911527</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.8.0.el5_9" date="1362434400">- Updated to icedtea7-forest-2.3
- Resolves: rhbz#917181</changelog>
</package>
<package pkgid="9b34a1bbc97eb7ac89451e5a6392d0c99a98b405" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.91" rel="2.6.2.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.0" date="1445299200">- Bump to 2.6.2 and u91b00.
- Resolves: rhbz#1271918</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.0" date="1445299201">- Drop patch for PR2521/RH1242587 now resolved upstream. 
- Resolves: rhbz#1271918</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.1" date="1445385600">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271918</changelog>
</package>
<package pkgid="d83d35e63f9a1d8e3c400fdbda8ab86260eae206" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.95" rel="2.6.4.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453248000">- Remove unneeded build dependencies on jakarta-commons-logging and prelink/execstack
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248001">- Add additional -fno-strict-aliasing cases revealed by rpmdiff
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248002">- Bump release as previous version did build :-(
- Resolves: rhbz#1295764</changelog>
</package>
<package pkgid="861754815521d0833b5b33ff9ddeec197abee810" name="java-1.7.0-openjdk-devel" arch="i386">
  <version epoch="1" ver="1.7.0.99" rel="2.6.5.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248000">- Bump release as previous version did build :-(
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864000">- Bump to 2.6.5 and u99b00.
- Correct check for fsg.sh in tarball creation script
- Resolves: rhbz#1320655</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864001">- Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
- Resolves: rhbz#1320655</changelog>
</package>
<package pkgid="5cb6f32f944c1e6afdf4784687636493470eea2c" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.101" rel="2.6.6.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864000">- Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
- Resolves: rhbz#1320655</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1461024000">- Bump to 2.6.6 and u101b00.
- Drop a leading zero from the priority as the update version is now three digits
- Resolves: rhbz#1325424</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461110400">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325424</changelog>
</package>
<package pkgid="d4daf2f663b8f6dbfa365366f3365f3dd592c173" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.111" rel="2.6.7.1.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461110400">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325424</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.0" date="1469059200">- Bump to 2.6.7 and u111b00.
- Update SystemTap bundle with fix for PR3091/RH1204159
- Drop patches (S8161262 (8147466_wrapv) and PR2939 (fontpath)) applied upstream.
- Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
- Resolves: rhbz#1350038</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.1" date="1469232000">- Bump to jdk7u111 b01 to fix TCK regressions (7081817 &amp; 8162344)
- Resolves: rhbz#1350038</changelog>
</package>
<package pkgid="5aeddf4c82dea0748b79b99fee3871ce1b6e8f2b" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.121" rel="2.6.8.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.0" date="1477699200">- Bump to 2.6.8 and u121b00.
- Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044800">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044801">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="3071f13708d62ebd39c1e8ff0447fd25e1a11a58" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.131" rel="2.6.9.0.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044800">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486512000">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate RH1022017 against 2.6.9.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486512001">- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="b64a829571fcc38ed14cc3565a1b5b6caa0da546" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.19" rel="2.3.9.1.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.9-2.3.8.1.el5" date="1365631200">- Added some of the latest Fedora spec bugfixes
- Bumped release
- zlib in BuildReq restricted for  1.2.3-7 or higher
 - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
- Removed a -icedtea tag from the version
  - package have less and less connections to icedtea7
- Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
- Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
  - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
- logging.properties marked as config(noreplace)
  - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
- nss.cfg was marked as config(noreplace)
- slaves sync with el6
- Resolves: rhbz#950376</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.9.0.el5" date="1365717600">- updated to IcedTea  2.3.9 with latest security patches
- buildver sync to b19
- rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#950376</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.9.1.el5" date="1366149600">- updated to updated IcedTea  2.3.9 with fix to one of security fixes
  -  fixed font glyph offset
- Resolves: rhbz#950376</changelog>
</package>
<package pkgid="a1cd59507b484e14b4c6bef321a684a4de3035cf" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.25" rel="2.3.10.4.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.2.el5" date="1371160800">- added patch1000 MBeanFix.patch to fix regressions caused by security patches
- Resolves: rhbz#973117</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.3.el5" date="1371247200">- reverted fix for license files owning
- Resolves: rhbz#973117</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.4.el5" date="1371592800">- updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
- removed upstreamed patch1000 MBeanFix.patch
- Resolves: rhbz#973117</changelog>
</package>
<package pkgid="b97e40abfd8b094e6379f1f9c9e6f2563ececbda" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.45" rel="2.4.3.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.4.1.4.el5" date="1372896000">- updated to icedtea 2.4.1
- improoved handling of patch111 - nss-config-2.patch
- backported uniquesuffix from 6.5
- Resolves: rhbz#978421</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.0.el5" date="1378857600">- fixed and updated tapset
- removed bootstrap
- source 11 redeclared to 1111
- added source12: TestCryptoLevel.java
- removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
- removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
- added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
- fixed nss 
- cleaned sources
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.1.el5" date="1381968000">- Updated to icedtea 2.4.3
- Resolves: rhbz#1017623</changelog>
</package>
<package pkgid="ca12079bb55f17aa37d0587476dca64b9eb65caa" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.51" rel="2.4.4.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.0.el5" date="1378857600">- fixed and updated tapset
- removed bootstrap
- source 11 redeclared to 1111
- added source12: TestCryptoLevel.java
- removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
- removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
- added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
- fixed nss 
- cleaned sources
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.1.el5" date="1381968000">- Updated to icedtea 2.4.3
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.51-2.4.4.1.el5" date="1389398400">- updated to security icedtea 2.4.4
 - icedtea_version set to 2.4.4
 - updatever bumped to       51
 - release reset to 1
- build requires: java-devel &gt;= 1:1.6.0 changed java7-devel 
- Resolves: rhbz#1050192</changelog>
</package>
<package pkgid="574e63029eb1e3481acc24ad2b7eb06bd185fcc8" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.55" rel="2.4.7.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.51-2.4.4.2.el5" date="1391040000">- Resolves: rhbz#1059179
- Rebuild to use new cacert bundle</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.55-2.4.7.0.el5" date="1396915200">- bumped to future icedtea-forest 2.4.7
- updatever set to 55, buildver se to 13, release reset to 0
- removed BuildRequires on pulseaudio &gt;= 0.9.1, devel is enough
- removed Requires: rhino, BuildRequires is enough
- updated patch400, java-1.7.0-openjdk-remove-gstabs.patch
- added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
- ppc64 repalced by power64 macro
- patch111 applied as dry-run (6.5 forward port)
- Resolves: rhbz#1085000</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.55-2.4.7.1.el5" date="1396915201">- regenerated sources to fix TCK failure
- Resolves: rhbz#1085000</changelog>
</package>
<package pkgid="196b2978e89417bc1f77462c4063d63d943cd13e" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.65" rel="2.5.1.2.el5_10"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.60-2.5.0.1.el5" date="1404345600">- update to icedtea7-forest 2.5.0 (rh1114937)
- Resolves: rhbz#1115872</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.1.el5" date="1404777600">- updated to security patched icedtea7-forest 2.5.1
- Resolves: rhbz#1115872</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115872</changelog>
</package>
<package pkgid="9e8dd253a2af0fd6f96e230d63fa1eab363cd6d3" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.71" rel="2.5.3.1.el5_11"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.1.el5" date="1404777600">- updated to security patched icedtea7-forest 2.5.1
- Resolves: rhbz#1115873</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.71-2.5.3.1" date="1412380800">- Bump to 2.5.3 with security updates.
- Remove obsolete patches which are now included upstream.
- Disable LCMS via environment variables rather than maintaining a patch.
- Resolves: rhbz#1148890</changelog>
</package>
<package pkgid="04223cf4a50950d9ef58f27dfc7a6a2ef03fa1e3" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.75" rel="2.5.4.0.el5_11"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.71-2.5.3.1" date="1412380800">- Bump to 2.5.3 with security updates.
- Remove obsolete patches which are now included upstream.
- Disable LCMS via environment variables rather than maintaining a patch.
- Resolves: rhbz#1148890</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.75-2.5.4.0" date="1420761600">- Bump to 2.5.4 using OpenJDK 7u75 b13.
- Fix elliptic curve list as part of fsg.sh
- Resolves: rhbz#1180294</changelog>
</package>
<package pkgid="c0d5ee220370891e9d723021164021f4eadb85d1" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.79" rel="2.5.5.2.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.75-2.5.4.0" date="1420761600">- Bump to 2.5.4 using OpenJDK 7u75 b13.
- Fix elliptic curve list as part of fsg.sh
- Resolves: rhbz#1180294</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.79-2.5.5.0" date="1428451200">- Bump to 2.5.5 using OpenJDK 7u79 b14.
- Resolves: rhbz#1209069</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1:1.7.0.75-2.5.5.1" date="1428710400">- Repacked sources
- Resolves: rhbz#1209069</changelog>
</package>
<package pkgid="728c4bb4e72f2be14bc1d9c08f36a777e6dd515d" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.85" rel="2.6.1.3.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.1" date="1436659200">- Bump upstream tarball to u25b01 to fix issue with 8075374 backport.
- Resolves: rhbz#1235155</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.2" date="1436745600">- Turn off system GConf as library seems buggy on RHEL 5.11
- Resolves: rhbz#1235155</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.3" date="1436832000">- Check return value of gio_init in gsettings_init and return false if necessary.
- Re-enable the use of system GConf.
- Only ifdef g_type_init&amp;g_free if USE_SYSTEM_GIO and USE_SYSTEM_GCONF are undefined.
- Resolves: rhbz#1242587</changelog>
</package>
<package pkgid="d13febe96b1b9b60581199c21fd0fd0c5b64b9a7" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.4.el5_9.1"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.3.el5.1" date="1350338400">- Changed permissions of sa-jdi.jar to correct 644
- Correctly removed noarch tag form javadoc, rhel5 donot support noarch subpackages
- Resolves: rhbz#803732</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.11-2.4.0.el6.1" date="1358200800">- Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
- Added jxmd and idlj to alternatives
- make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
- Unapplied patch302 and deleted systemtap.patch
- buildver increased to 11
- icedtea_version set to 2.4.0
- Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
- Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
- Resolves: rhbz#895031</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.4.el6.1" date="1358287200">- Rewerted to IcedTea 2.3
  - Rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Removed jcmd and idlj to alternatives
  - make NOT executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Reapplied patch302 and deleted systemtap.patch
  - buildver set to 9
  - icedtea_version set to 2.3.4
  - Unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from 
    java.security-linux back to java.security
- Resolves: rhbz#895031</changelog>
</package>
<package pkgid="386c199b83a64e5953af93f9277d66e54708adf2" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.5.3.el5_9"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.9-2.3.5.el5_9.1" date="1360188000">- Backed out 6664509 and 7201064.patch which cause regressions</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.9-2.3.5.1.el5_9" date="1360274400">- Removed 6664509 backout and added 8005615 to fix the issue</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.5.3.el5_9" date="1360274401">- Sync logging fixes with upstream (icedtea7-forest and jdk7u)</changelog>
</package>
<package pkgid="401b43ca3a7a2290421d6653c4da560fbb7afa33" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.7.1.el5_9"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.5.3.el5_9" date="1360274400">- Sync logging fixes with upstream (icedtea7-forest and jdk7u)</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.0.el5_9" date="1361052000">- Removed patch1000 sec-2013-02-01-8005615.patch
- Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
- Removed patch1010 sec-2013-02-01-7201064.patch
- Removed testing
 - mauve was outdated and
 - jtreg was icedtea relict
- Updated  to icedtea 2.3.7
- Resolves: rhbz#911527</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.1.el5_9" date="1361224800">- Updated main source tarball
- Removed wrong relinking of cacerts (see rhbz 904165)
- Resolves: rhbz#911527</changelog>
</package>
<package pkgid="238619cb3607702c8b19c371963a9eb7796fc030" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.8.0.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.0.el5_9" date="1361052000">- Removed patch1000 sec-2013-02-01-8005615.patch
- Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
- Removed patch1010 sec-2013-02-01-7201064.patch
- Removed testing
 - mauve was outdated and
 - jtreg was icedtea relict
- Updated  to icedtea 2.3.7
- Resolves: rhbz#911527</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.1.el5_9" date="1361224800">- Updated main source tarball
- Removed wrong relinking of cacerts (see rhbz 904165)
- Resolves: rhbz#911527</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.8.0.el5_9" date="1362434400">- Updated to icedtea7-forest-2.3
- Resolves: rhbz#917181</changelog>
</package>
<package pkgid="48f8f8e6e295fb746493e834f0a167d9085b97ed" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.91" rel="2.6.2.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.0" date="1445299200">- Bump to 2.6.2 and u91b00.
- Resolves: rhbz#1271918</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.0" date="1445299201">- Drop patch for PR2521/RH1242587 now resolved upstream. 
- Resolves: rhbz#1271918</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.1" date="1445385600">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271918</changelog>
</package>
<package pkgid="d8a1cd1f2b4ccab01f3439989619a74fe08b61f4" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.95" rel="2.6.4.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453248000">- Remove unneeded build dependencies on jakarta-commons-logging and prelink/execstack
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248001">- Add additional -fno-strict-aliasing cases revealed by rpmdiff
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248002">- Bump release as previous version did build :-(
- Resolves: rhbz#1295764</changelog>
</package>
<package pkgid="04a4cd14d07f1755143f27c188570a3d77464776" name="java-1.7.0-openjdk-javadoc" arch="i386">
  <version epoch="1" ver="1.7.0.99" rel="2.6.5.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248000">- Bump release as previous version did build :-(
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864000">- Bump to 2.6.5 and u99b00.
- Correct check for fsg.sh in tarball creation script
- Resolves: rhbz#1320655</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864001">- Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
- Resolves: rhbz#1320655</changelog>
</package>
<package pkgid="f4aad8a21099202a4f6619bd77e0149ec9cd6048" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.101" rel="2.6.6.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864000">- Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
- Resolves: rhbz#1320655</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1461024000">- Bump to 2.6.6 and u101b00.
- Drop a leading zero from the priority as the update version is now three digits
- Resolves: rhbz#1325424</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461110400">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325424</changelog>
</package>
<package pkgid="86683c994fe2f21ff3bef2302a90c8a9a913cb6f" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.111" rel="2.6.7.1.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461110400">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325424</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.0" date="1469059200">- Bump to 2.6.7 and u111b00.
- Update SystemTap bundle with fix for PR3091/RH1204159
- Drop patches (S8161262 (8147466_wrapv) and PR2939 (fontpath)) applied upstream.
- Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
- Resolves: rhbz#1350038</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.1" date="1469232000">- Bump to jdk7u111 b01 to fix TCK regressions (7081817 &amp; 8162344)
- Resolves: rhbz#1350038</changelog>
</package>
<package pkgid="2b3ddffc3f15682b5f1792f2c770bb2d4257eec8" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.121" rel="2.6.8.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.0" date="1477699200">- Bump to 2.6.8 and u121b00.
- Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044800">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044801">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="b63c6b6a8fbc0e6c20fe759fbc112b874e9f8d59" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.131" rel="2.6.9.0.el5_11"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478044800">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486512000">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate RH1022017 against 2.6.9.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486512001">- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="5809da1f9acdb34b7a43ed56d87e8eed38fc3a34" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.19" rel="2.3.9.1.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.9-2.3.8.1.el5" date="1365631200">- Added some of the latest Fedora spec bugfixes
- Bumped release
- zlib in BuildReq restricted for  1.2.3-7 or higher
 - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
- Removed a -icedtea tag from the version
  - package have less and less connections to icedtea7
- Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
- Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
  - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
- logging.properties marked as config(noreplace)
  - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
- nss.cfg was marked as config(noreplace)
- slaves sync with el6
- Resolves: rhbz#950376</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.9.0.el5" date="1365717600">- updated to IcedTea  2.3.9 with latest security patches
- buildver sync to b19
- rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#950376</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.9.1.el5" date="1366149600">- updated to updated IcedTea  2.3.9 with fix to one of security fixes
  -  fixed font glyph offset
- Resolves: rhbz#950376</changelog>
</package>
<package pkgid="e184a05d68924df03e8d0f10a2fc6b0172e8da5e" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.25" rel="2.3.10.4.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.2.el5" date="1371160800">- added patch1000 MBeanFix.patch to fix regressions caused by security patches
- Resolves: rhbz#973117</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.3.el5" date="1371247200">- reverted fix for license files owning
- Resolves: rhbz#973117</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.4.el5" date="1371592800">- updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
- removed upstreamed patch1000 MBeanFix.patch
- Resolves: rhbz#973117</changelog>
</package>
<package pkgid="a8240a2f78c51775ae1caf4957c739a50cca36ad" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.45" rel="2.4.3.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.4.1.4.el5" date="1372896000">- updated to icedtea 2.4.1
- improoved handling of patch111 - nss-config-2.patch
- backported uniquesuffix from 6.5
- Resolves: rhbz#978421</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.0.el5" date="1378857600">- fixed and updated tapset
- removed bootstrap
- source 11 redeclared to 1111
- added source12: TestCryptoLevel.java
- removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
- removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
- added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
- fixed nss 
- cleaned sources
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.1.el5" date="1381968000">- Updated to icedtea 2.4.3
- Resolves: rhbz#1017623</changelog>
</package>
<package pkgid="e36cb79dcb14222104e98e667fcff8740dcd00ef" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.51" rel="2.4.4.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.0.el5" date="1378857600">- fixed and updated tapset
- removed bootstrap
- source 11 redeclared to 1111
- added source12: TestCryptoLevel.java
- removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
- removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
- added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
- fixed nss 
- cleaned sources
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.45-2.4.3.1.el5" date="1381968000">- Updated to icedtea 2.4.3
- Resolves: rhbz#1017623</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.51-2.4.4.1.el5" date="1389398400">- updated to security icedtea 2.4.4
 - icedtea_version set to 2.4.4
 - updatever bumped to       51
 - release reset to 1
- build requires: java-devel &gt;= 1:1.6.0 changed java7-devel 
- Resolves: rhbz#1050192</changelog>
</package>
<package pkgid="e2e5be86e752c8e810c8190fc2584c9bf7122456" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.55" rel="2.4.7.1.el5_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.51-2.4.4.2.el5" date="1391040000">- Resolves: rhbz#1059179
- Rebuild to use new cacert bundle</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.55-2.4.7.0.el5" date="1396915200">- bumped to future icedtea-forest 2.4.7
- updatever set to 55, buildver se to 13, release reset to 0
- removed BuildRequires on pulseaudio &gt;= 0.9.1, devel is enough
- removed Requires: rhino, BuildRequires is enough
- updated patch400, java-1.7.0-openjdk-remove-gstabs.patch
- added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
- ppc64 repalced by power64 macro
- patch111 applied as dry-run (6.5 forward port)
- Resolves: rhbz#1085000</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.55-2.4.7.1.el5" date="1396915201">- regenerated sources to fix TCK failure
- Resolves: rhbz#1085000</changelog>
</package>
<package pkgid="d35e1e4f515d0d8d6000d42f61e19071ee568190" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.65" rel="2.5.1.2.el5_10"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.60-2.5.0.1.el5" date="1404345600">- update to icedtea7-forest 2.5.0 (rh1114937)
- Resolves: rhbz#1115872</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.1.el5" date="1404777600">- updated to security patched icedtea7-forest 2.5.1
- Resolves: rhbz#1115872</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115872</changelog>
</package>
<package pkgid="85036c7c12e59c6bf00691c40872991a1a75c82b" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.71" rel="2.5.3.1.el5_11"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.1.el5" date="1404777600">- updated to security patched icedtea7-forest 2.5.1
- Resolves: rhbz#1115873</changelog>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.71-2.5.3.1" date="1412380800">- Bump to 2.5.3 with security updates.
- Remove obsolete patches which are now included upstream.
- Disable LCMS via environment variables rather than maintaining a patch.
- Resolves: rhbz#1148890</changelog>
</package>
<package pkgid="1f37848116204ca6a237d1eb13ffd8947e7b4d16" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.75" rel="2.5.4.0.el5_11"/>
  <changelog author="Jiri Vanek  &lt;jvanek@redhat.com&gt; - 1.7.0.65-2.5.1.2" date="1405382400">- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.71-2.5.3.1" date="1412380800">- Bump to 2.5.3 with security updates.
- Remove obsolete patches which are now included upstream.
- Disable LCMS via environment variables rather than maintaining a patch.
- Resolves: rhbz#1148890</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.75-2.5.4.0" date="1420761600">- Bump to 2.5.4 using OpenJDK 7u75 b13.
- Fix elliptic curve list as part of fsg.sh
- Resolves: rhbz#1180294</changelog>
</package>
<package pkgid="1320bc829f9409b587438e5adc063d2f7e49e114" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.79" rel="2.5.5.2.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.75-2.5.4.0" date="1420761600">- Bump to 2.5.4 using OpenJDK 7u75 b13.
- Fix elliptic curve list as part of fsg.sh
- Resolves: rhbz#1180294</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.79-2.5.5.0" date="1428451200">- Bump to 2.5.5 using OpenJDK 7u79 b14.
- Resolves: rhbz#1209069</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1:1.7.0.75-2.5.5.1" date="1428710400">- Repacked sources
- Resolves: rhbz#1209069</changelog>
</package>
<package pkgid="f2f89a5f9ed30b4c10aa0f84eb6a33c744d79eef" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.85" rel="2.6.1.3.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.1" date="1436659200">- Bump upstream tarball to u25b01 to fix issue with 8075374 backport.
- Resolves: rhbz#1235155</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.2" date="1436745600">- Turn off system GConf as library seems buggy on RHEL 5.11
- Resolves: rhbz#1235155</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.3" date="1436832000">- Check return value of gio_init in gsettings_init and return false if necessary.
- Re-enable the use of system GConf.
- Only ifdef g_type_init&amp;g_free if USE_SYSTEM_GIO and USE_SYSTEM_GCONF are undefined.
- Resolves: rhbz#1242587</changelog>
</package>
<package pkgid="a8ab174eda758c32e6dbe2ee2c413d1c2b40ac2f" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.4.el5_9.1"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.3.el5.1" date="1350338400">- Changed permissions of sa-jdi.jar to correct 644
- Correctly removed noarch tag form javadoc, rhel5 donot support noarch subpackages
- Resolves: rhbz#803732</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.11-2.4.0.el6.1" date="1358200800">- Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
- Added jxmd and idlj to alternatives
- make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
- Unapplied patch302 and deleted systemtap.patch
- buildver increased to 11
- icedtea_version set to 2.4.0
- Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
- Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
- Resolves: rhbz#895031</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.4.el6.1" date="1358287200">- Rewerted to IcedTea 2.3
  - Rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Removed jcmd and idlj to alternatives
  - make NOT executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Reapplied patch302 and deleted systemtap.patch
  - buildver set to 9
  - icedtea_version set to 2.3.4
  - Unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from 
    java.security-linux back to java.security
- Resolves: rhbz#895031</changelog>
</package>
<package pkgid="39a69d78cf82a50de8aa8117626d75222cc09b22" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.5.3.el5_9"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.9-2.3.5.el5_9.1" date="1360188000">- Backed out 6664509 and 7201064.patch which cause regressions</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.9-2.3.5.1.el5_9" date="1360274400">- Removed 6664509 backout and added 8005615 to fix the issue</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.5.3.el5_9" date="1360274401">- Sync logging fixes with upstream (icedtea7-forest and jdk7u)</changelog>
</package>
<package pkgid="62a501915ff47a84066d83e338ac7c48db9c5252" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.7.1.el5_9"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.5.3.el5_9" date="1360274400">- Sync logging fixes with upstream (icedtea7-forest and jdk7u)</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.0.el5_9" date="1361052000">- Removed patch1000 sec-2013-02-01-8005615.patch
- Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
- Removed patch1010 sec-2013-02-01-7201064.patch
- Removed testing
 - mauve was outdated and
 - jtreg was icedtea relict
- Updated  to icedtea 2.3.7
- Resolves: rhbz#911527</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.1.el5_9" date="1361224800">- Updated main source tarball
- Removed wrong relinking of cacerts (see rhbz 904165)
- Resolves: rhbz#911527</changelog>
</package>
<package pkgid="87331859dae34b2ca8a03ad3f1dff46317c047ea" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.9" rel="2.3.8.0.el5_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.0.el5_9" date="1361052000">- Removed patch1000 sec-2013-02-01-8005615.patch
- Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
- Removed patch1010 sec-2013-02-01-7201064.patch
- Removed testing
 - mauve was outdated and
 - jtreg was icedtea relict
- Updated  to icedtea 2.3.7
- Resolves: rhbz#911527</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.1.el5_9" date="1361224800">- Updated main source tarball
- Removed wrong relinking of cacerts (see rhbz 904165)
- Resolves: rhbz#911527</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.8.0.el5_9" date="1362434400">- Updated to icedtea7-forest-2.3
- Resolves: rhbz#917181</changelog>
</package>
<package pkgid="a087ad78a74be2c4f2c2e8790e785d873269a171" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.91" rel="2.6.2.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.0" date="1445299200">- Bump to 2.6.2 and u91b00.
- Resolves: rhbz#1271918</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.0" date="1445299201">- Drop patch for PR2521/RH1242587 now resolved upstream. 
- Resolves: rhbz#1271918</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.1" date="1445385600">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271918</changelog>
</package>
<package pkgid="4c2312c155cf396999a89931d1e9de144238293f" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.95" rel="2.6.4.1.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453248000">- Remove unneeded build dependencies on jakarta-commons-logging and prelink/execstack
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248001">- Add additional -fno-strict-aliasing cases revealed by rpmdiff
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248002">- Bump release as previous version did build :-(
- Resolves: rhbz#1295764</changelog>
</package>
<package pkgid="3a0bc915050d54de97d4844fbb0465eead68b3d9" name="java-1.7.0-openjdk-src" arch="i386">
  <version epoch="1" ver="1.7.0.99" rel="2.6.5.0.el5_11"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.1" date="1453248000">- Bump release as previous version did build :-(
- Resolves: rhbz#1295764</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864000">- Bump to 2.6.5 and u99b00.
- Correct check for fsg.sh in tarball creation script
- Resolves: rhbz#1320655</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458864001">- Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
- Resolves: rhbz#1320655</changelog>
</package>
<package pkgid="17641a9f63b1a61ea9a33e992e2b19ab9c3e34d4" name="jdk" arch="i586">
  <version epoch="2000" ver="1.6.0_26" rel="fcs"/>
</package>
<package pkgid="aa00f3ae508ff3731c4fcfda1d10985b87803454" name="jdk" arch="i586">
  <version epoch="2000" ver="1.6.0_29" rel="fcs"/>
</package>
<package pkgid="ef4ae7e4d2ed16305cd8eaeefd9d51877cd17f2d" name="jdk" arch="i586">
  <version epoch="2000" ver="1.6.0_31" rel="fcs"/>
</package>
<package pkgid="57c735b72de3b84a7568d1d3fc5421e4cd1c6e27" name="jdk" arch="i586">
  <version epoch="2000" ver="1.6.0_33" rel="fcs"/>
</package>
<package pkgid="b4df47c8af3cc9c753981ba219d671e5c4fd2e81" name="jdk" arch="i586">
  <version epoch="2000" ver="1.6.0_35" rel="fcs"/>
</package>
<package pkgid="7e3ddcabacbf6bea5a8fdd9df7be3d7c586338a4" name="jdk" arch="i586">
  <version epoch="2000" ver="1.6.0_37" rel="fcs"/>
</package>
<package pkgid="24d6f95c2b0a7b57c1bcb75f5f4059ecb7e3e083" name="jdk" arch="i586">
  <version epoch="2000" ver="1.6.0_39" rel="fcs"/>
</package>
<package pkgid="e7a0d9786037a948ec3e3c58fdf3cfeda526dffe" name="jdk" arch="i586">
  <version epoch="2000" ver="1.6.0_41" rel="fcs"/>
</package>
<package pkgid="6d73f664cc4d2992d23d2d3e56b92ed439000972" name="kdelibs" arch="i386">
  <version epoch="6" ver="3.5.4" rel="26.el5_7.1"/>
  <changelog author="Jaroslav Reznik &lt;jreznik@redhat.com&gt; - 3.5.4-22.2" date="1258927200">- Resolves: #539716,
   CVE-2009-0689, kdelibs remote array overrun</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.5.4-25.1" date="1259013600">- bump release</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.5.4-26.1" date="1318629600">- Resolves: bz#746157, CVE-2011-3365, input validation failure in KSSL</changelog>
</package>
<package pkgid="8b4a0a9246658ce747217c435ca98bd8b236c5d0" name="kdelibs-apidocs" arch="i386">
  <version epoch="6" ver="3.5.4" rel="26.el5_7.1"/>
  <changelog author="Jaroslav Reznik &lt;jreznik@redhat.com&gt; - 3.5.4-22.2" date="1258927200">- Resolves: #539716,
   CVE-2009-0689, kdelibs remote array overrun</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.5.4-25.1" date="1259013600">- bump release</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.5.4-26.1" date="1318629600">- Resolves: bz#746157, CVE-2011-3365, input validation failure in KSSL</changelog>
</package>
<package pkgid="df7258656360434c510bbb35218906e0a4671e69" name="kdelibs-devel" arch="i386">
  <version epoch="6" ver="3.5.4" rel="26.el5_7.1"/>
  <changelog author="Jaroslav Reznik &lt;jreznik@redhat.com&gt; - 3.5.4-22.2" date="1258927200">- Resolves: #539716,
   CVE-2009-0689, kdelibs remote array overrun</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.5.4-25.1" date="1259013600">- bump release</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.5.4-26.1" date="1318629600">- Resolves: bz#746157, CVE-2011-3365, input validation failure in KSSL</changelog>
</package>
<package pkgid="9da6956fac3edd2ded6b7fc2b662f69d968da9f5" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.10.1.el5]" date="1302904800">- [fs] gfs2: creating large files suddenly slow to a crawl (Robert S Peterson) [690239 683155]
- [virt] hypervisor: Overflow fix for clocks &gt; 4GHz (Zachary Amsden) [690134 673242]
- [usb] fix usbfs isochronous data transfer regression (Don Zickus) [696136 688926]
- [fs] partitions: Fix corrupted OSF partition table parsing (Danny Feng) [688022 688023] {CVE-2011-1163}
- [misc] pm: add comment explaining is_registered kabi work-around (Don Zickus) [689699 637930]
- [media] sn9c102: fix world-wirtable sysfs files (Don Howard) [679304 679305]
- [scsi] scsi_dh_rdac: Add two new IBM devices to rdac_dev_list (Rob Evers) [692370 691460]
- [fs] block: fix submit_bh discarding barrier flag on sync write (Lukas Czerner) [690795 667673]
- [net] netfilter/ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689339 689340]
- [net] netfilter: ip6_tables: fix infoleak to userspace (Jiri Pirko) [689348 689349] {CVE-2011-1172}
- [net] netfilter/ip_tables: fix infoleak to userspace (Jiri Pirko) [689331 689332] {CVE-2011-1171}
- [net] netfilter/arp_tables: fix infoleak to userspace (Jiri Pirko) [689322 689323] {CVE-2011-1170}
- [base] Fix potential deadlock in driver core (Don Zickus) [689699 637930]
- [net] forcedeth/r8169: call netif_carrier_off at end of probe (Ivan Vecera) [689808 689805 664705 664707]
- [net] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [693751 680531]
- [net] ixgbe: limit VF access to network traffic (Andy Gospodarek) [693751 680531]
- [fs] lockd: make lockd_down wait for lockd to come down (Jeff Layton) [688156 653286]
- [fs] proc: protect mm start_/end_code in /proc/pid/stat (Eugene Teo) [684570 684571] {CVE-2011-0726}
- [net] dccp: fix oops in dccp_rcv_state_process (Eugene Teo) [682955 682956] {CVE-2011-1093}
- [net] bluetooth: fix bnep buffer overflow (Don Howard) [681318 681319] {CVE-2011-1079}
- [fs] nfs: break nfsd v4 lease on unlink, link, and rename (J. Bruce Fields) [693755 610093]
- [fs] nfs: break lease on nfsd v4 setattr (J. Bruce Fields) [693755 610093]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.11.1.el5]" date="1303941600">- [s390] dasd: fix race between open and offline (Hendrik Brueckner) [699808 695357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.12.1.el5]" date="1304805600">- [x86_64] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [i386] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [xen] fix MAX_EVTCHNS definition (Laszlo Ersek) [701242 701240]
- [net] ixgbe: fix for link failure on SFP+ DA cables (Don Howard) [696181 653236]
- [net] netxen: limit skb frags for non tso packet (Phillip Lougher) [699609 672368]
- [block] cciss: fix lost command problem (Phillip Lougher) [696503 696153]
- [fs] gfs2: fix filesystem hang caused by incorrect lock order (Robert S Peterson) [688855 656032]
- [fs] gfs2: restructure reclaim of unlinked dinodes (Phillip Lougher) [688855 656032]
- [fs] gfs2: unlock on gfs2_trans_begin error (Robert S Peterson) [688855 656032]
- [scsi] mpt2sas: prevent heap overflows and unchecked access (Tomas Henzl) [694526 694527] {CVE-2011-1495 CVE-2011-1494}
- [net] bridge/netfilter: fix ebtables information leak (Don Howard) [681325 681326] {CVE-2011-1080}
- [net] bluetooth: fix sco information leak to userspace (Don Howard) [681310 681311] {CVE-2011-1078}
- [fs] fix corrupted GUID partition table kernel oops (Jerome Marchand) [695979 695980] {CVE-2011-1577}
- [xen] x86/domain: fix error checks in arch_set_info_guest (Laszlo Ersek) [688581 688582] {CVE-2011-1166}
- [net] bridge: fix initial packet flood if !STP (Jiri Pirko) [701222 695369]
- [fs] nfsd: fix auth_domain reference leak on nlm operations (J. Bruce Fields) [697448 589512]
- [scsi] qla2xxx: no reset/fw-dump on CT/ELS pt req timeout (Chad Dupuis) [689700 660386]
- [mm] set barrier and send tlb flush to all affected cpus (Prarit Bhargava) [696908 675793]</changelog>
</package>
<package pkgid="8709cefb43a7dd00f5cb21c42205bdca496e6da6" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.19.1.el5"/>
  <changelog author="Jiri Pirko &lt;jpirko@redhat.com&gt; [2.6.18-238.17.1.el5]" date="1308952800">- [net] bluetooth: l2cap and rfcomm: fix info leak to userspace (Thomas Graf) [703020 703021] {CVE-2011-2492}
- [net] inet_diag: fix inet_diag_bc_audit data validation (Thomas Graf) [714538 714539] {CVE-2011-2213}
- [misc] signal: fix kill signal spoofing issue (Oleg Nesterov) [690030 690031] {CVE-2011-1182}
- [fs] proc: fix signedness issue in next_pidmap (Oleg Nesterov) [697826 697827] {CVE-2011-1593}
- [char] agp: fix OOM and buffer overflow (Jerome Marchand) [699009 699010] {CVE-2011-1746}
- [char] agp: fix arbitrary kernel memory writes (Jerome Marchand) [699005 699006] {CVE-2011-2022 CVE-2011-1745}
- [infiniband] core: Handle large number of entries in poll CQ (Jay Fenlason) [668370 668371] {CVE-2011-1044 CVE-2010-4649}
- [infiniband] core: fix panic in ib_cm:cm_work_handler (Jay Fenlason) [679995 679996] {CVE-2011-0695}
- [fs] validate size of EFI GUID partition entries (Anton Arapov) [703027 703028] {CVE-2011-1776}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.18.1.el5]" date="1310076000">- [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]
- [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.19.1.el5]" date="1310335200">- Revert: [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]
- Revert: [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- Revert: [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- Revert: [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]</changelog>
</package>
<package pkgid="c7ca1d407b9c04479c17b7aaf10ed931d9796c5f" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.10.1.el5]" date="1320357600">- [net] be2net: enable NETIF_F_LLTX and add own locking of Tx path (Ivan Vecera) [750912 731806]
- [net] be2net: fix multicast filter programming (Ivan Vecera) [750912 731806]
- [net] be2net: fix cmd-rx-filter not notifying MCC (Ivan Vecera) [750912 731806]
- [net] be2net: use RX_FILTER cmd to program multicast addresses (Ivan Vecera) [750912 731806]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.11.1.el5]" date="1320616800">- [fs] gfs2: speed up large file delete/unlink (Robert S Peterson) [743806 738440]
- [fs] cifs: fix wrong buffer length returned by SendReceive (Sachin Prabhu) [750842 720363]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [virt] xen/netback: disable features not supported by netfront (Paolo Bonzini) [746600 746225]
- [fs] nfs: don't redirty inodes with no outstanding commits (Jeff Layton) [750477 739665]
- [net] tg3: call netif_carrier_off to initialize operstate value (John Feeney) [744700 635982]
- [xen] make test_assign_device domctl dependent on intremap hw (Laszlo Ersek) [745726 740203]
- [xen] Propagate target dom within XEN_DOMCTL_test_assign_device (Laszlo Ersek) [745726 740203]
- [net] sctp: encode PROTOCOL VIOLATION error cause correctly (Thomas Graf) [750457 636828]
- [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [char] tpm: Zero buffer after copying to userspace (Jiri Benc) [732630 732631] {CVE-2011-1162}
- [fs] hfs: fix hfs_find_init() sb-&gt;ext_tree NULL ptr oops (Phillip Lougher) [712775 712776] {CVE-2011-2203}
- [net] sctp: Set correct error cause value for missing parameters (Thomas Graf) [750451 629938]
- [misc] kernel: plug taskstats io infoleak (Jerome Marchand) [716845 716846] {CVE-2011-2494}
- [usb] Make device reset stop retrying after disconnect (Don Zickus) [750841 709699]
- [net] ipv6: properly use ICMP6MSGOUT_INC_STATS in ndisc_send_skb (Jiri Pirko) [743611 698728]
- [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [741273 694625]
- [mm] s390: fix first time swap use results in heavy swapping (Hendrik Brueckner) [747876 722482]
- [virt] xen: fix GFP mask handling in dma_alloc_coherent (Laszlo Ersek) [742282 730247]
- [s390] kernel: fix system hang if hangcheck timer expires (Hendrik Brueckner) [747872 730313]
- [usb] fix interface sysfs file-creation bug (Don Zickus) [750848 637930]
- [usb] don't touch sysfs stuff when altsetting is unchanged (Don Zickus) [750848 637930]
- [base] Fix potential deadlock in driver core (Don Zickus) [750848 637930]
- [security] keys: Fix NULL deref in user-defined key type (David Howells) [751300 751301]
- [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.12.1.el5]" date="1320789600">- Revert: [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]</changelog>
</package>
<package pkgid="bcb1116db1469729e33c8133ba4218cbc244f142" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.17.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.15.1.el5]" date="1324159200">- [net] e1000e: Avoid wrong check on TX hang (Dean Nelson) [766485 746272]
- [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749159 749160] {CVE-2011-4077}
- [pci] intel-iommu: Default to non-coherent for unattached domains (Don Dutile) [766803 753924]
- [fs] nfs: remove BUG() from encode_share_access() (Jeff Layton) [755442 754901] {CVE-2011-4324}
- [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [759387 756412]
- [fs] hfs: add sanity check for file name length (Eric Sandeen) [755432 755433] {CVE-2011-4330}
- [fs] proc: Fix select on /proc files without -&gt;poll (David Howells) [755483 751214]
- [fs] nfs: Ensure we mark inode as dirty if early exit from commit (Jeff Layton) [755482 714020]
- [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [750460 742079]
- [virt] kvm: fix regression w/ 32 bit KVM clock (Rik van Riel) [747875 753789 751742 731599]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [fs] jbd/jbd2: validate sb-&gt;s_first in journal_get_superblock (Eryu Guan) [753343 706810] {CVE-2011-4132}
- [net] igb: enable link power down (Stefan Assmann) [752735 742514]
- [fs] proc: fix oops on invalid /proc/&lt;pid&gt;/maps access (Johannes Weiner) [747851 747699] {CVE-2011-3637}
- [block] cciss: bump driver version (Tomas Henzl) [758024 714129]
- [block] cciss: need to delay after a PCI Power Management reset (Tomas Henzl) [758024 714129]
- [block] cciss: auto engage scsi susbsystem (Tomas Henzl) [758024 714129]
- [block] cciss: store pdev in hba struct (Tomas Henzl) [758024 714129]
- [block] cciss: use consistent variable names (Tomas Henzl) [758024 714129]
- [block] cciss: add a commandline switch for simple mode (Tomas Henzl) [758024 714129]
- [fs] proc: close race with exec in mem_read() (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] implement access_remote_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] factor out main logic of access_process_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] use mm_struct to resolve gate vma's in __get_user_pages (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make in_gate_area take mm_struct instead of a task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make get_gate_vma take mm_struct instead of task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [x86_64] mark assoc mm when running task in 32 bit compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [misc] sched: add ctx tag to mm running task in ia32 compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: require the target to be tracable (or yourself) (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: close race in /proc/*/environ (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: report errors in /proc/*/*map* sanely (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: shift down_read(mmap_sem) to the caller (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] detect exec transition phase with new mm but old creds (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [net] igb: fix i350 SR-IOV failture (Stefan Assmann) [741877 714313]
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [755457 754620] {CVE-2011-4325}
- [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [757146 714870] {CVE-2011-4348}
- [scsi] isci: fix 32-bit operation when CONFIG_HIGHMEM64G=n (Phillip Lougher) [750458 713904]
- [net] tg3: Only allow phy ioctls while netif_running (Phillip Lougher) [746343 683393]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
</package>
<package pkgid="01d50b28d05a82568711b65f51058edbb84119a8" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.18.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.18.1.el5]" date="1327096800">- [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [771774 750283] {CVE-2012-0028}
- [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [773322 771592]
- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747943 747946] {CVE-2011-3638}
- [scsi] don't fail scans when host is in recovery (Rob Evers) [772162 657345]
- [fs] jbd2: clear BH_Delay &amp; BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783477 783284] {CVE-2011-4086}
- [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772868 772869] {CVE-2012-0207}</changelog>
</package>
<package pkgid="8a7d2770c95b7d38fdbb3bca234f9811d08c71ce" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.3.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.1.1.el5]" date="1312581600">- [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [714869 714867]
- [x86_64] Revert ACPI APIC mode test (Prarit Bhargava) [728163 721361]
- [net] sctp: reset packet information after packet transmit (Thomas Graf) [727592 725573]
- [fs] block: initialise bd_super in bdget (Lachlan McIlroy) [726628 707425]
- [fs] nfs: Remove bogus call to nfs4_drop_state_owner (Jeff Layton) [726625 724923]
- [net] be2net: clear interrupt bit in be_probe (Ivan Vecera) [723552 713703]
- [net] be2net: remove certain cmd failure logging (Ivan Vecera) [726619 716821]
- [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [718154 718155] {CVE-2011-2517}
- [fs] xfs: handle NULL mount struct in error reports (Eric Sandeen) [727835 720551]
- [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716827 716828] {CVE-2011-2495}
- [fs] lockd: don't use file's credentials on RPCSEC_GSS mounts (Max Matveev) [722855 701574]
- [fs] xfs: add a missing mutex_unlock to a dio error path (Jeff Moyer) [727590 718232]
- [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [709546 709547] {CVE-2011-2491}
- [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [718883 718884]
- [xen] Fix x86_emulate handling of imul with immediate operands (Igor Mammedov) [712885 700565]
- [fs] Fix wrongly vfree'ing a kmalloc'ed area (Larry Woodman) [721300 719495]
- [fs] dlm: bump default hash table and maximum allocatable sizes (Bryn M. Reeves) [719930 715603]
- [net] tipc: Overhaul of socket locking logic (Max Matveev) [719746 704192]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.18-274.2.1.el5]" date="1313186400">- Fix up some fallout from RHEL5.7 kernel package structure changes</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.3.1.el5]" date="1314396000">- [xen] fix off-by-one shift in x86_64 __addr_ok (Laszlo Ersek) [728043 719850] {CVE-2011-2901}</changelog>
</package>
<package pkgid="1f24c98052ccc1ef79bce20896533a9a3b5113f3" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.7.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.5.1.el5]" date="1316210400">- [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [732775 675781]
- [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [732775 675781]
- [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [fs] nfs: Fix client not honoring nosharecache mount option (David Jeffery) [734772 730097]
- [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716543 716544] {CVE-2011-2496}
- [mm] Fix incorrect off-by-one centisec dirty values (Larry Woodman) [733665 691087]
- [net] bnx2x: fix bringup of BCM57710 (Michal Schmidt) [737475 680411]
- [virt] xen/netfront: no disable s/g when renegotiating features (Paolo Bonzini) [738392 733416]
- [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734157 727504]
- [virt] xen: Allow arbitrary mtu size until frontend connected (Paolo Bonzini) [738389 697021]
- [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730689 692966]
- [net] cnic, bnx2: Check iSCSI support early in bnx2_init_one (Neil Horman) [734761 710272]
- [net] igb: fix WOL on 2nd port on i350 (Stefan Assmann) [730682 718988]
- [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [728521 720212]</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.6.1.el5]" date="1316815200">- [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [730949 703045] {CVE-2011-2942}
- [misc] remove	div_long_long_rem (Prarit Bhargava) [732879 732614] {CVE-2011-3209}
- [net] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: Use NTWK_RX_FILTER command for promiscous mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: non-member vlan pkts not received in promisc mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: remove bogus unlikely on vlan check (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [x86] nmi: make NMI_NONE default watchdog in x86_64 hvm guests (Laszlo Ersek) [739823 707966]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.7.1.el5]" date="1318888800">- Revert: [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
</package>
<package pkgid="7ba251d632137a82c2e3d3acb8035f9f1b73408a" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.11.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.9.1.el5]" date="1339020000">- [fs] jbd: clear b_modified before moving the jh to a different transaction (Josef Bacik) [827205 563247]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.10.1.el5]" date="1339711200">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970] {CVE-2012-2934}
- [scsi] qla2xxx: Use ha-&gt;pdev-&gt;revision in 4Gbps MSI-X check. (Chad Dupuis) [816373 800653]
- [fs] sunrpc: do array overrun check in svc_recv before page alloc (J. Bruce Fields) [820358 814626]
- [fs] knfsd: fix an NFSD bug with full size non-page-aligned reads (J. Bruce Fields) [820358 814626]
- [fs] sunrpc: fix oops due to overrunning server's page array (J. Bruce Fields) [820358 814626]
- [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [829670 817131]
- [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [824654 818787]
- [net] sunrpc: Don't use list_for_each_entry_safe in rpc_wake_up (Steve Dickson) [817571 809937]
- [s390] qeth: add missing wake_up call (Hendrik Brueckner) [829059 790900]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
</package>
<package pkgid="308145c519d84f581d617c09a9d6c028b9f9143b" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.13.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.12.1.el5]" date="1342216800">- [fs] nfs: Don't allow multiple mounts on same mntpnt with -o noac (Sachin Prabhu) [839806 839753]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.13.1.el5]" date="1343340000">- [net] e1000e: Cleanup logic in e1000_check_for_serdes_link_82571 (Dean Nelson) [841370 771366]
- [net] e1000e: Correct link check logic for 82571 serdes (Dean Nelson) [841370 771366]
- [mm] NULL pointer dereference in __vm_enough_memory (Jerome Marchand) [840077 836244]
- [fs] dlm: fix slow rsb search in dir recovery (David Teigland) [838140 753244]
- [fs] autofs: propogate LOOKUP_DIRECTORY flag only for last comp (Ian Kent) [830264 814418]
- [fs] ext4: properly dirty split extent nodes (Eric Sandeen) [840946 839770]
- [scsi] don't offline devices with a reservation conflict (David Jeffery) [839196 835660]
- [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate (Lukas Czerner) [837226 830351]
- [net] dl2k: Clean up rio_ioctl (Weiping Pan) [818822 818823] {CVE-2012-2313}
- [x86] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835450 834562]
- [net] tg3: Fix TSO handling (John Feeney) [833182 795672]
- [input] evdev: use after free from open/disconnect race (David Jeffery) [832448 822166]</changelog>
</package>
<package pkgid="cd1e7762e612d68871e03bdd0a54a0b52ae80b05" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.14.1.el5]" date="1346277600">- [net] e1000e: drop check of RXCW.CW to eliminate link up and down (Dean Nelson) [852448 840642]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.15.1.el5]" date="1346882400">- [net] sfc: Fix max no of TSO segments and min TX queue size (Michal Schmidt) [845554 845555] {CVE-2012-3412}
- [kernel] xacct_add_tsk: fix pure theoretical -&gt;mm use-after-free (Nikola Pajkovsky) [849723 849725] {CVE-2012-3510}
- [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820255 820256] {CVE-2012-2319}
- [net] netfilter: add dscp netfilter match (Thomas Graf) [847327 842029]
- [net] rds: set correct msg_namelen (Weiping Pan) [822727 822728] {CVE-2012-3430}
- [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [847359 693822]
- [fs] quota: manage reserved space when quota is not active (Eric Sandeen) [847326 818087]
- [fs] quota: Fix warning if delayed write before quota is enabled (Eric Sandeen) [847326 818087]
- [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]
- [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- [xen] x86: whitelist Enhanced SpeedStep for dom0 (Laszlo Ersek) [846125 809103]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.16.1.el5]" date="1348005600">- Revert: [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- Revert: [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- Revert: [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]</changelog>
</package>
<package pkgid="b0823b416f4c0870600c628058fb0c5204eae2d9" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.20.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.18.1.el5]" date="1350079200">- [fs] autofs4: Merge the remaining dentry ops tables (Ian Kent) [857558 850977]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.19.1.el5]" date="1350597600">- [net] be2net: Remove code that stops further access to BE NIC based on UE bits (Alexander Gordeev) [867896 862811]
- [net] netpoll: fix an incorrect check for NULL pointer (Alexander Gordeev) [856079 848098]
- [net] mlx4: Add support for EEH error recovery (Alexander Gordeev) [847404 798048]
- [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] fix crash if block {device|size} read &amp; changed at sametime (Mikulas Patocka) [864823 756506]
- [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}
- [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [861387 819830]
- [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [858774 857448]
- [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [859946 858724]
- [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [857966 854067]
- [scsi] isci: fixup linkspeed definitions (David Milburn) [854986 833000]
- [fs] nfs: nfs_d_automount update caller path after do_add_mount (Carlos Maiolino) [857552 834379]
- [fs] vfs: Fix vfsmount overput on simultaneous automount (Carlos Maiolino) [857552 834379]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.20.1.el5]" date="1352239200">- Revert: [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}</changelog>
</package>
<package pkgid="b8fedc25db5c056dec3b8334c957aee6785ae882" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.24.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.22.1.el5]" date="1353362400">- [net] bonding: fix link down handling in 802.3ad mode (Andy Gospodarek) [877943 782866]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.23.1.el5]" date="1353535200">- [net] bnx2x: Add remote-fault link detection (Alexander Gordeev) [870120 796905]
- [net] bnx2x: Cosmetic changes (Alexander Gordeev) [870120 796905]
- [net] rds-ping cause kernel panic (Alexander Gordeev) [822755 822756] {CVE-2012-2372}
- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878033 878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870148 870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870150 870151] {CVE-2012-4535}
- [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.24.1.el5]" date="1353535201">- Revert: [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
</package>
<package pkgid="ebb2031574ee9f86dbb5987c9532d99ebd058202" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.2.1.el5]" date="1329861600">- [fs] nfs: nfs_fhget should wait on I_NEW instead of I_LOCK (Sachin Prabhu) [795664 785062]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.3.1.el5]" date="1332453600">- [net] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [805462 773735]
- [net] be2net: add vlan/rx-mode/flow-control config to be_setup (Ivan Vecera) [805462 773735]
- [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [805460 799170]
- [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry (Ian Kent) [801726 798809]
- [fs] vfs: fix d_instantiate_unique (Ian Kent) [801726 798809]
- [fs] nfs: allow high priority COMMITs to bypass inode commit lock (Jeff Layton) [799941 773777]
- [fs] nfs: don't skip COMMITs if system under is mem pressure (Jeff Layton) [799941 773777]
- [scsi] qla2xxx: Read the HCCR register to flush any PCIe writes (Chad Dupuis) [798748 772192]
- [scsi] qla2xxx: Complete mbox cmd timeout before next reset cycle (Chad Dupuis) [798748 772192]
- [s390] qdio: wrong buffers-used counter for ERROR buffers (Hendrik Brueckner) [801724 790840]
- [net] bridge: Reset IPCB when entering IP stack (Herbert Xu) [804721 749813]
- [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770649 770650]
- [fs] procfs: parse mount options (Jerome Marchand) [770649 770650]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.4.1.el5]" date="1332972000">- [net] ipv6: fix skb double free in xfrm6_tunnel (Jiri Benc) [752305 743375] {CVE-2012-1583}</changelog>
</package>
<package pkgid="6c234c992cddcf5c37f87e964b5a856e070dcfee" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.6.1.el5]" date="1335564000">- [scsi] fc class: fix scanning when devs are offline (Mike Christie) [816684 799530]
- [md] dm-multipath: delay retry of bypassed pg (Mike Christie) [816684 799530]
- [net] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [811927 800575]
- [net] bonding: remove {master,vlan}_ip and query devices instead (Andy Gospodarek) [810321 772216]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
</package>
<package pkgid="ce588354c70fe1f12df4acde3901e623a325a7fe" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.2.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.2.el5]" date="1338328800">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970]</changelog>
</package>
<package pkgid="da720debfb0fa721a37aa1776db61ff354993f37" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.1.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-347.el5]" date="1353448800">- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870151] {CVE-2012-4535}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
</package>
<package pkgid="32565cd1b98dffcc8d96095e74577576a3f6264d" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.12.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.10.1.el5]" date="1370642400">- [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955600 955601] {CVE-2013-3224}
- [net] Bluetooth: HCI &amp; L2CAP information leaks (Jacob Tanenbaum) [922415 922416] {CVE-2012-6544}
- [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [971872 872531]
- [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [971872 872531]
- [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [958021 864648]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.11.1.el5]" date="1371852000">- Revert: [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
- Revert: [x86-64] non lazy sleazy fpu implementation (Prarit Bhargava) [948187 731531]
- Revert: [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- Revert: [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- Revert: [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.12.1.el5]" date="1372716000">- Revert: [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]</changelog>
</package>
<package pkgid="4ddc7cad30cf0ecaaee53088e860fd4d39ea125f" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.14.1.el5]" date="1374019200">- [net] Fix panic for vlan over gre via tun (Thomas Graf) [983452 981337]
- [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [983628 865095]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.15.1.el5]" date="1374537600">- [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [976441 853145]
- [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [976441 853145]
- [fs] nfs: define function to update nfsi-&gt;cache_change_attribute (Scott Mayhew) [976441 853145]
- [net] af_key: fix info leaks in notify messages (Jiri Benc) [980999 981000] {CVE-2013-2234}
- [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981222 981224] {CVE-2013-2237}
- [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981556 981557] {CVE-2013-2232}
- [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980141 980142] {CVE-2013-2224}
- [x86_64] Early segment setup for VT (Paolo Bonzini) [979920 978305]
- [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971245 971246] {CVE-2013-2147}
- [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973103 973104] {CVE-2013-2164}
- [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [972583 965359]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="f63bd0fceb0b11ba011019bf2de02a39b239d6da" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.18.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.17.1.el5]" date="1377216000">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [999819 995961]
- [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [983864 956322]
- [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [983864 956322]
- [net] be2net: disable TX in be_close() (Ivan Vecera) [983864 956322]
- [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [983864 956322]
- [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [983864 956322]
- [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [983864 956322]
- [net] be2net: Fixed memory leak (Ivan Vecera) [983864 956322]
- [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [983864 956322]
- [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [983864 956322]
- [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [983864 956322]
- [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [983864 956322]
- [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [983864 956322]
- [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [983864 956322]
- [net] be2net: Fix Endian (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [983864 956322]
- [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [983864 956322]
- [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [983864 956322]
- [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [983864 956322]
- [net] be2net: cleanup be_vid_config() (Ivan Vecera) [983864 956322]
- [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [983864 956322]
- [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [983864 956322]
- [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [983864 956322]
- [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [983864 956322]
- [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [983864 956322]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.18.1.el5]" date="1378512000">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [1005239 987539]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970874 970875] {CVE-2013-2141}
- [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987647 987648] {CVE-2013-4162}
- [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849735 849736] {CVE-2012-3511}
- [fs] autofs: remove autofs dentry mount check (Ian Kent) [1001488 928098]</changelog>
</package>
<package pkgid="6ec6d40bd36a68f2e69e700e29c8175ccacc0202" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.2.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
</package>
<package pkgid="a2f36fe734d69768b43a121ba3d3cf3d79badbe0" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.3.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
</package>
<package pkgid="924ab44456176762388ac8274553ee547337151b" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
</package>
<package pkgid="450f20a4934e1de22435845db682e6516883241b" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.6.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.5.1.el5]" date="1365804000">- [fs] nfs: handle getattr failure during nfsv4 open (David Jeffery) [947736 906909]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.6.1.el5]" date="1367013600">- [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [953435 947732]
- [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [953435 947732]
- [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [954296 948317]
- [fs] nfs: Fix bugs on short read (Sachin Prabhu) [952098 924011]
- [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] introduce xzalloc() &amp; Co (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="6ba4f149a29c009be4a2800001f5e11ca35c20d3" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.1.2.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.2.el5]" date="1381190400">- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
</package>
<package pkgid="462e0fd8d08a22b166e49563e290fbe36b53931c" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.11.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
</package>
<package pkgid="533694997c547c4e06d931d96db1cf5b75ae23df" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.12.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.12.1.el5]" date="1407456000">- [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102702 1102703] {CVE-2014-3917}
- [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1125246 1080194]
- [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [1121017 924590]
- [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1116027 1081785]
- [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1117665 1102768]</changelog>
</package>
<package pkgid="d572a997e9fd429ca61c9c8bed7ac4b9b9c8d052" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.3.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
</package>
<package pkgid="0cfbd467a06d61d0cb0905d3b1b89d999f4e7233" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.4.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
</package>
<package pkgid="755dbf73bf2a9ae6afbc39b07fa3aafd47a30c09" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.6.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.5.1.el5]" date="1390348800">- [fs] cifs: stop trying to use virtual circuits (Sachin Prabhu) [1044328 1013469]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
</package>
<package pkgid="86d12e52a06dac43701d26283d96652626dc8e0c" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.8.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
</package>
<package pkgid="5c77a281dc7cc6bcb248efca4d3424eac21c5811" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.9.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
</package>
<package pkgid="5eb29f44fdb82f70268025d9e7f9a270bedfa2a7" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-369.el5]" date="1376092800">- [fs] nlm: Ensure we resend pending blocking locks after a reclaim (Steve Dickson) [918592]
- [kernel] kmod: kthread_run causes oom killer deadlock (Frantisek Hrbata) [983506]
- [fs] nfs4: ratelimit some messages, add name to bad seq-id mess (Dave Wysochanski) [953121]
- [fs] nfsd: fix EXDEV checking in rename (J. Bruce Fields) [515599]
- [misc] tty: Fix abusers of current-sighand-&gt;tty (Aaron Tomlin) [858981]
- [net] ipv6: don't call addrconf_dst_alloc again when enable lo (Jiri Benc) [981417]
- [redhat] kabi: Adding symbol fc_fabric_login (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_reset (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_els_send (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_fabric_logoff (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_set_mfs (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_elsct_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_up (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv_flogi (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_depth (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_down (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_type (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_free (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_alloc (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_config (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_disc_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol strict_strtoul (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_rport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_get_host_port_state (Jiri Olsa) [864256]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-370.el5]" date="1376956800">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [995961]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970875] {CVE-2013-2141}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
</package>
<package pkgid="1ca2e3be7165fa0cbdcb738c6a6798471f58b0c3" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.1.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.1.1.el5]" date="1418601600">- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="6b7eb21bb629c6e6c1e8812b9e3235390b8a4b3c" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-398.el5]" date="1407888000">- [net] security_socket_post_accept before fd_install in sys_accept (Denys Vlasenko) [1059078]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
</package>
<package pkgid="762317688963826a4443209d09fbd8b043b53c4f" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="402.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-401.el5]" date="1418256000">- [net] rds: fix possible double free on sock tear down (Herton R. Krzesinski) [1116880]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="a5e0ce3acd972122ed6daa085f3696fa73db464c" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="404.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-403.el5]" date="1425600000">- [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
- [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
- [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
</package>
<package pkgid="29e1e98f89150e5d194200ca538239626f1c18a4" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="406.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-405.el5]" date="1430438400">- [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
- [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
- [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
- [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
- [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
- [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
- [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
- [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
- [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
- [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
</package>
<package pkgid="57bebb344a5a9b236f42124000589fd78c33daaa" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="408.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
</package>
<package pkgid="c301a182c1487e314a37cbce8c1a1037ce0231aa" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="409.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-409.el5]" date="1455321600">- [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
- [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [sched] prevent division by zero x-&gt;cpu_power (Denys Vlasenko) [1209728]
- [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}</changelog>
</package>
<package pkgid="9f14648e63cd9731c3e64bba1e5fba662637c919" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="416.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-414.el5]" date="1474934400">- [redhat] Fix missed -413 kernel version (Alexander Gordeev)</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
</package>
<package pkgid="c310196222200116558610885636ef9881094e88" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="417.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
</package>
<package pkgid="1e6c3035b8d8960bbf71b1d0859c121d8e276a54" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="419.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-418.el5]" date="1484352000">- [sched] prevent NULL deref in find_busiest_group (Denys Vlasenko) [1376523]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-419.el5]" date="1487808000">- [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
- [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]</changelog>
</package>
<package pkgid="4a3c870d8bc9eb22025f8ee84d19961a780961ef" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.10.1.el5]" date="1302904800">- [fs] gfs2: creating large files suddenly slow to a crawl (Robert S Peterson) [690239 683155]
- [virt] hypervisor: Overflow fix for clocks &gt; 4GHz (Zachary Amsden) [690134 673242]
- [usb] fix usbfs isochronous data transfer regression (Don Zickus) [696136 688926]
- [fs] partitions: Fix corrupted OSF partition table parsing (Danny Feng) [688022 688023] {CVE-2011-1163}
- [misc] pm: add comment explaining is_registered kabi work-around (Don Zickus) [689699 637930]
- [media] sn9c102: fix world-wirtable sysfs files (Don Howard) [679304 679305]
- [scsi] scsi_dh_rdac: Add two new IBM devices to rdac_dev_list (Rob Evers) [692370 691460]
- [fs] block: fix submit_bh discarding barrier flag on sync write (Lukas Czerner) [690795 667673]
- [net] netfilter/ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689339 689340]
- [net] netfilter: ip6_tables: fix infoleak to userspace (Jiri Pirko) [689348 689349] {CVE-2011-1172}
- [net] netfilter/ip_tables: fix infoleak to userspace (Jiri Pirko) [689331 689332] {CVE-2011-1171}
- [net] netfilter/arp_tables: fix infoleak to userspace (Jiri Pirko) [689322 689323] {CVE-2011-1170}
- [base] Fix potential deadlock in driver core (Don Zickus) [689699 637930]
- [net] forcedeth/r8169: call netif_carrier_off at end of probe (Ivan Vecera) [689808 689805 664705 664707]
- [net] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [693751 680531]
- [net] ixgbe: limit VF access to network traffic (Andy Gospodarek) [693751 680531]
- [fs] lockd: make lockd_down wait for lockd to come down (Jeff Layton) [688156 653286]
- [fs] proc: protect mm start_/end_code in /proc/pid/stat (Eugene Teo) [684570 684571] {CVE-2011-0726}
- [net] dccp: fix oops in dccp_rcv_state_process (Eugene Teo) [682955 682956] {CVE-2011-1093}
- [net] bluetooth: fix bnep buffer overflow (Don Howard) [681318 681319] {CVE-2011-1079}
- [fs] nfs: break nfsd v4 lease on unlink, link, and rename (J. Bruce Fields) [693755 610093]
- [fs] nfs: break lease on nfsd v4 setattr (J. Bruce Fields) [693755 610093]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.11.1.el5]" date="1303941600">- [s390] dasd: fix race between open and offline (Hendrik Brueckner) [699808 695357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.12.1.el5]" date="1304805600">- [x86_64] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [i386] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [xen] fix MAX_EVTCHNS definition (Laszlo Ersek) [701242 701240]
- [net] ixgbe: fix for link failure on SFP+ DA cables (Don Howard) [696181 653236]
- [net] netxen: limit skb frags for non tso packet (Phillip Lougher) [699609 672368]
- [block] cciss: fix lost command problem (Phillip Lougher) [696503 696153]
- [fs] gfs2: fix filesystem hang caused by incorrect lock order (Robert S Peterson) [688855 656032]
- [fs] gfs2: restructure reclaim of unlinked dinodes (Phillip Lougher) [688855 656032]
- [fs] gfs2: unlock on gfs2_trans_begin error (Robert S Peterson) [688855 656032]
- [scsi] mpt2sas: prevent heap overflows and unchecked access (Tomas Henzl) [694526 694527] {CVE-2011-1495 CVE-2011-1494}
- [net] bridge/netfilter: fix ebtables information leak (Don Howard) [681325 681326] {CVE-2011-1080}
- [net] bluetooth: fix sco information leak to userspace (Don Howard) [681310 681311] {CVE-2011-1078}
- [fs] fix corrupted GUID partition table kernel oops (Jerome Marchand) [695979 695980] {CVE-2011-1577}
- [xen] x86/domain: fix error checks in arch_set_info_guest (Laszlo Ersek) [688581 688582] {CVE-2011-1166}
- [net] bridge: fix initial packet flood if !STP (Jiri Pirko) [701222 695369]
- [fs] nfsd: fix auth_domain reference leak on nlm operations (J. Bruce Fields) [697448 589512]
- [scsi] qla2xxx: no reset/fw-dump on CT/ELS pt req timeout (Chad Dupuis) [689700 660386]
- [mm] set barrier and send tlb flush to all affected cpus (Prarit Bhargava) [696908 675793]</changelog>
</package>
<package pkgid="c2679eb0cf3b477dc4aa2a11914e198b198d0f66" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.19.1.el5"/>
  <changelog author="Jiri Pirko &lt;jpirko@redhat.com&gt; [2.6.18-238.17.1.el5]" date="1308952800">- [net] bluetooth: l2cap and rfcomm: fix info leak to userspace (Thomas Graf) [703020 703021] {CVE-2011-2492}
- [net] inet_diag: fix inet_diag_bc_audit data validation (Thomas Graf) [714538 714539] {CVE-2011-2213}
- [misc] signal: fix kill signal spoofing issue (Oleg Nesterov) [690030 690031] {CVE-2011-1182}
- [fs] proc: fix signedness issue in next_pidmap (Oleg Nesterov) [697826 697827] {CVE-2011-1593}
- [char] agp: fix OOM and buffer overflow (Jerome Marchand) [699009 699010] {CVE-2011-1746}
- [char] agp: fix arbitrary kernel memory writes (Jerome Marchand) [699005 699006] {CVE-2011-2022 CVE-2011-1745}
- [infiniband] core: Handle large number of entries in poll CQ (Jay Fenlason) [668370 668371] {CVE-2011-1044 CVE-2010-4649}
- [infiniband] core: fix panic in ib_cm:cm_work_handler (Jay Fenlason) [679995 679996] {CVE-2011-0695}
- [fs] validate size of EFI GUID partition entries (Anton Arapov) [703027 703028] {CVE-2011-1776}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.18.1.el5]" date="1310076000">- [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]
- [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.19.1.el5]" date="1310335200">- Revert: [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]
- Revert: [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- Revert: [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- Revert: [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]</changelog>
</package>
<package pkgid="e7da8d2035ff5716d920337dc606353fb11348b2" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.10.1.el5]" date="1320357600">- [net] be2net: enable NETIF_F_LLTX and add own locking of Tx path (Ivan Vecera) [750912 731806]
- [net] be2net: fix multicast filter programming (Ivan Vecera) [750912 731806]
- [net] be2net: fix cmd-rx-filter not notifying MCC (Ivan Vecera) [750912 731806]
- [net] be2net: use RX_FILTER cmd to program multicast addresses (Ivan Vecera) [750912 731806]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.11.1.el5]" date="1320616800">- [fs] gfs2: speed up large file delete/unlink (Robert S Peterson) [743806 738440]
- [fs] cifs: fix wrong buffer length returned by SendReceive (Sachin Prabhu) [750842 720363]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [virt] xen/netback: disable features not supported by netfront (Paolo Bonzini) [746600 746225]
- [fs] nfs: don't redirty inodes with no outstanding commits (Jeff Layton) [750477 739665]
- [net] tg3: call netif_carrier_off to initialize operstate value (John Feeney) [744700 635982]
- [xen] make test_assign_device domctl dependent on intremap hw (Laszlo Ersek) [745726 740203]
- [xen] Propagate target dom within XEN_DOMCTL_test_assign_device (Laszlo Ersek) [745726 740203]
- [net] sctp: encode PROTOCOL VIOLATION error cause correctly (Thomas Graf) [750457 636828]
- [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [char] tpm: Zero buffer after copying to userspace (Jiri Benc) [732630 732631] {CVE-2011-1162}
- [fs] hfs: fix hfs_find_init() sb-&gt;ext_tree NULL ptr oops (Phillip Lougher) [712775 712776] {CVE-2011-2203}
- [net] sctp: Set correct error cause value for missing parameters (Thomas Graf) [750451 629938]
- [misc] kernel: plug taskstats io infoleak (Jerome Marchand) [716845 716846] {CVE-2011-2494}
- [usb] Make device reset stop retrying after disconnect (Don Zickus) [750841 709699]
- [net] ipv6: properly use ICMP6MSGOUT_INC_STATS in ndisc_send_skb (Jiri Pirko) [743611 698728]
- [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [741273 694625]
- [mm] s390: fix first time swap use results in heavy swapping (Hendrik Brueckner) [747876 722482]
- [virt] xen: fix GFP mask handling in dma_alloc_coherent (Laszlo Ersek) [742282 730247]
- [s390] kernel: fix system hang if hangcheck timer expires (Hendrik Brueckner) [747872 730313]
- [usb] fix interface sysfs file-creation bug (Don Zickus) [750848 637930]
- [usb] don't touch sysfs stuff when altsetting is unchanged (Don Zickus) [750848 637930]
- [base] Fix potential deadlock in driver core (Don Zickus) [750848 637930]
- [security] keys: Fix NULL deref in user-defined key type (David Howells) [751300 751301]
- [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.12.1.el5]" date="1320789600">- Revert: [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]</changelog>
</package>
<package pkgid="69aeebaae0831bc83b155e9010e6ce615e1a5670" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.17.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.15.1.el5]" date="1324159200">- [net] e1000e: Avoid wrong check on TX hang (Dean Nelson) [766485 746272]
- [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749159 749160] {CVE-2011-4077}
- [pci] intel-iommu: Default to non-coherent for unattached domains (Don Dutile) [766803 753924]
- [fs] nfs: remove BUG() from encode_share_access() (Jeff Layton) [755442 754901] {CVE-2011-4324}
- [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [759387 756412]
- [fs] hfs: add sanity check for file name length (Eric Sandeen) [755432 755433] {CVE-2011-4330}
- [fs] proc: Fix select on /proc files without -&gt;poll (David Howells) [755483 751214]
- [fs] nfs: Ensure we mark inode as dirty if early exit from commit (Jeff Layton) [755482 714020]
- [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [750460 742079]
- [virt] kvm: fix regression w/ 32 bit KVM clock (Rik van Riel) [747875 753789 751742 731599]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [fs] jbd/jbd2: validate sb-&gt;s_first in journal_get_superblock (Eryu Guan) [753343 706810] {CVE-2011-4132}
- [net] igb: enable link power down (Stefan Assmann) [752735 742514]
- [fs] proc: fix oops on invalid /proc/&lt;pid&gt;/maps access (Johannes Weiner) [747851 747699] {CVE-2011-3637}
- [block] cciss: bump driver version (Tomas Henzl) [758024 714129]
- [block] cciss: need to delay after a PCI Power Management reset (Tomas Henzl) [758024 714129]
- [block] cciss: auto engage scsi susbsystem (Tomas Henzl) [758024 714129]
- [block] cciss: store pdev in hba struct (Tomas Henzl) [758024 714129]
- [block] cciss: use consistent variable names (Tomas Henzl) [758024 714129]
- [block] cciss: add a commandline switch for simple mode (Tomas Henzl) [758024 714129]
- [fs] proc: close race with exec in mem_read() (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] implement access_remote_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] factor out main logic of access_process_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] use mm_struct to resolve gate vma's in __get_user_pages (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make in_gate_area take mm_struct instead of a task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make get_gate_vma take mm_struct instead of task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [x86_64] mark assoc mm when running task in 32 bit compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [misc] sched: add ctx tag to mm running task in ia32 compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: require the target to be tracable (or yourself) (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: close race in /proc/*/environ (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: report errors in /proc/*/*map* sanely (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: shift down_read(mmap_sem) to the caller (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] detect exec transition phase with new mm but old creds (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [net] igb: fix i350 SR-IOV failture (Stefan Assmann) [741877 714313]
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [755457 754620] {CVE-2011-4325}
- [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [757146 714870] {CVE-2011-4348}
- [scsi] isci: fix 32-bit operation when CONFIG_HIGHMEM64G=n (Phillip Lougher) [750458 713904]
- [net] tg3: Only allow phy ioctls while netif_running (Phillip Lougher) [746343 683393]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
</package>
<package pkgid="fd099b6edce8da3a1571c8ecc22c2639e9310eb1" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.18.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.18.1.el5]" date="1327096800">- [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [771774 750283] {CVE-2012-0028}
- [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [773322 771592]
- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747943 747946] {CVE-2011-3638}
- [scsi] don't fail scans when host is in recovery (Rob Evers) [772162 657345]
- [fs] jbd2: clear BH_Delay &amp; BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783477 783284] {CVE-2011-4086}
- [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772868 772869] {CVE-2012-0207}</changelog>
</package>
<package pkgid="b7ba38f03fe797cd22856992147ceb683798e0d7" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.3.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.1.1.el5]" date="1312581600">- [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [714869 714867]
- [x86_64] Revert ACPI APIC mode test (Prarit Bhargava) [728163 721361]
- [net] sctp: reset packet information after packet transmit (Thomas Graf) [727592 725573]
- [fs] block: initialise bd_super in bdget (Lachlan McIlroy) [726628 707425]
- [fs] nfs: Remove bogus call to nfs4_drop_state_owner (Jeff Layton) [726625 724923]
- [net] be2net: clear interrupt bit in be_probe (Ivan Vecera) [723552 713703]
- [net] be2net: remove certain cmd failure logging (Ivan Vecera) [726619 716821]
- [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [718154 718155] {CVE-2011-2517}
- [fs] xfs: handle NULL mount struct in error reports (Eric Sandeen) [727835 720551]
- [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716827 716828] {CVE-2011-2495}
- [fs] lockd: don't use file's credentials on RPCSEC_GSS mounts (Max Matveev) [722855 701574]
- [fs] xfs: add a missing mutex_unlock to a dio error path (Jeff Moyer) [727590 718232]
- [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [709546 709547] {CVE-2011-2491}
- [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [718883 718884]
- [xen] Fix x86_emulate handling of imul with immediate operands (Igor Mammedov) [712885 700565]
- [fs] Fix wrongly vfree'ing a kmalloc'ed area (Larry Woodman) [721300 719495]
- [fs] dlm: bump default hash table and maximum allocatable sizes (Bryn M. Reeves) [719930 715603]
- [net] tipc: Overhaul of socket locking logic (Max Matveev) [719746 704192]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.18-274.2.1.el5]" date="1313186400">- Fix up some fallout from RHEL5.7 kernel package structure changes</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.3.1.el5]" date="1314396000">- [xen] fix off-by-one shift in x86_64 __addr_ok (Laszlo Ersek) [728043 719850] {CVE-2011-2901}</changelog>
</package>
<package pkgid="add8bf93089f8a2a7a4e2e06cf33261db842788f" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.7.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.5.1.el5]" date="1316210400">- [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [732775 675781]
- [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [732775 675781]
- [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [fs] nfs: Fix client not honoring nosharecache mount option (David Jeffery) [734772 730097]
- [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716543 716544] {CVE-2011-2496}
- [mm] Fix incorrect off-by-one centisec dirty values (Larry Woodman) [733665 691087]
- [net] bnx2x: fix bringup of BCM57710 (Michal Schmidt) [737475 680411]
- [virt] xen/netfront: no disable s/g when renegotiating features (Paolo Bonzini) [738392 733416]
- [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734157 727504]
- [virt] xen: Allow arbitrary mtu size until frontend connected (Paolo Bonzini) [738389 697021]
- [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730689 692966]
- [net] cnic, bnx2: Check iSCSI support early in bnx2_init_one (Neil Horman) [734761 710272]
- [net] igb: fix WOL on 2nd port on i350 (Stefan Assmann) [730682 718988]
- [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [728521 720212]</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.6.1.el5]" date="1316815200">- [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [730949 703045] {CVE-2011-2942}
- [misc] remove	div_long_long_rem (Prarit Bhargava) [732879 732614] {CVE-2011-3209}
- [net] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: Use NTWK_RX_FILTER command for promiscous mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: non-member vlan pkts not received in promisc mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: remove bogus unlikely on vlan check (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [x86] nmi: make NMI_NONE default watchdog in x86_64 hvm guests (Laszlo Ersek) [739823 707966]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.7.1.el5]" date="1318888800">- Revert: [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
</package>
<package pkgid="498586e0c3341386e392544b36d626214ed2ac06" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.11.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.9.1.el5]" date="1339020000">- [fs] jbd: clear b_modified before moving the jh to a different transaction (Josef Bacik) [827205 563247]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.10.1.el5]" date="1339711200">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970] {CVE-2012-2934}
- [scsi] qla2xxx: Use ha-&gt;pdev-&gt;revision in 4Gbps MSI-X check. (Chad Dupuis) [816373 800653]
- [fs] sunrpc: do array overrun check in svc_recv before page alloc (J. Bruce Fields) [820358 814626]
- [fs] knfsd: fix an NFSD bug with full size non-page-aligned reads (J. Bruce Fields) [820358 814626]
- [fs] sunrpc: fix oops due to overrunning server's page array (J. Bruce Fields) [820358 814626]
- [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [829670 817131]
- [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [824654 818787]
- [net] sunrpc: Don't use list_for_each_entry_safe in rpc_wake_up (Steve Dickson) [817571 809937]
- [s390] qeth: add missing wake_up call (Hendrik Brueckner) [829059 790900]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
</package>
<package pkgid="bb014428f17f4059083d0f681060a78c95d63a72" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.13.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.12.1.el5]" date="1342216800">- [fs] nfs: Don't allow multiple mounts on same mntpnt with -o noac (Sachin Prabhu) [839806 839753]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.13.1.el5]" date="1343340000">- [net] e1000e: Cleanup logic in e1000_check_for_serdes_link_82571 (Dean Nelson) [841370 771366]
- [net] e1000e: Correct link check logic for 82571 serdes (Dean Nelson) [841370 771366]
- [mm] NULL pointer dereference in __vm_enough_memory (Jerome Marchand) [840077 836244]
- [fs] dlm: fix slow rsb search in dir recovery (David Teigland) [838140 753244]
- [fs] autofs: propogate LOOKUP_DIRECTORY flag only for last comp (Ian Kent) [830264 814418]
- [fs] ext4: properly dirty split extent nodes (Eric Sandeen) [840946 839770]
- [scsi] don't offline devices with a reservation conflict (David Jeffery) [839196 835660]
- [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate (Lukas Czerner) [837226 830351]
- [net] dl2k: Clean up rio_ioctl (Weiping Pan) [818822 818823] {CVE-2012-2313}
- [x86] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835450 834562]
- [net] tg3: Fix TSO handling (John Feeney) [833182 795672]
- [input] evdev: use after free from open/disconnect race (David Jeffery) [832448 822166]</changelog>
</package>
<package pkgid="cdd5f4246736fa3edd4aaf5177fd40ba8194f62d" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.14.1.el5]" date="1346277600">- [net] e1000e: drop check of RXCW.CW to eliminate link up and down (Dean Nelson) [852448 840642]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.15.1.el5]" date="1346882400">- [net] sfc: Fix max no of TSO segments and min TX queue size (Michal Schmidt) [845554 845555] {CVE-2012-3412}
- [kernel] xacct_add_tsk: fix pure theoretical -&gt;mm use-after-free (Nikola Pajkovsky) [849723 849725] {CVE-2012-3510}
- [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820255 820256] {CVE-2012-2319}
- [net] netfilter: add dscp netfilter match (Thomas Graf) [847327 842029]
- [net] rds: set correct msg_namelen (Weiping Pan) [822727 822728] {CVE-2012-3430}
- [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [847359 693822]
- [fs] quota: manage reserved space when quota is not active (Eric Sandeen) [847326 818087]
- [fs] quota: Fix warning if delayed write before quota is enabled (Eric Sandeen) [847326 818087]
- [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]
- [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- [xen] x86: whitelist Enhanced SpeedStep for dom0 (Laszlo Ersek) [846125 809103]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.16.1.el5]" date="1348005600">- Revert: [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- Revert: [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- Revert: [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]</changelog>
</package>
<package pkgid="3b932efd821c304d1d2f1c04cadbe97fef1dd9ee" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.20.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.18.1.el5]" date="1350079200">- [fs] autofs4: Merge the remaining dentry ops tables (Ian Kent) [857558 850977]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.19.1.el5]" date="1350597600">- [net] be2net: Remove code that stops further access to BE NIC based on UE bits (Alexander Gordeev) [867896 862811]
- [net] netpoll: fix an incorrect check for NULL pointer (Alexander Gordeev) [856079 848098]
- [net] mlx4: Add support for EEH error recovery (Alexander Gordeev) [847404 798048]
- [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] fix crash if block {device|size} read &amp; changed at sametime (Mikulas Patocka) [864823 756506]
- [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}
- [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [861387 819830]
- [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [858774 857448]
- [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [859946 858724]
- [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [857966 854067]
- [scsi] isci: fixup linkspeed definitions (David Milburn) [854986 833000]
- [fs] nfs: nfs_d_automount update caller path after do_add_mount (Carlos Maiolino) [857552 834379]
- [fs] vfs: Fix vfsmount overput on simultaneous automount (Carlos Maiolino) [857552 834379]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.20.1.el5]" date="1352239200">- Revert: [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}</changelog>
</package>
<package pkgid="a9d093ca3e7e0ede8e52dfa5b9b278871efe9f98" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.24.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.22.1.el5]" date="1353362400">- [net] bonding: fix link down handling in 802.3ad mode (Andy Gospodarek) [877943 782866]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.23.1.el5]" date="1353535200">- [net] bnx2x: Add remote-fault link detection (Alexander Gordeev) [870120 796905]
- [net] bnx2x: Cosmetic changes (Alexander Gordeev) [870120 796905]
- [net] rds-ping cause kernel panic (Alexander Gordeev) [822755 822756] {CVE-2012-2372}
- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878033 878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870148 870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870150 870151] {CVE-2012-4535}
- [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.24.1.el5]" date="1353535201">- Revert: [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
</package>
<package pkgid="cfbcfc56e8d0df5ac8d1a6efd5d8fd56ff20a2d2" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.2.1.el5]" date="1329861600">- [fs] nfs: nfs_fhget should wait on I_NEW instead of I_LOCK (Sachin Prabhu) [795664 785062]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.3.1.el5]" date="1332453600">- [net] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [805462 773735]
- [net] be2net: add vlan/rx-mode/flow-control config to be_setup (Ivan Vecera) [805462 773735]
- [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [805460 799170]
- [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry (Ian Kent) [801726 798809]
- [fs] vfs: fix d_instantiate_unique (Ian Kent) [801726 798809]
- [fs] nfs: allow high priority COMMITs to bypass inode commit lock (Jeff Layton) [799941 773777]
- [fs] nfs: don't skip COMMITs if system under is mem pressure (Jeff Layton) [799941 773777]
- [scsi] qla2xxx: Read the HCCR register to flush any PCIe writes (Chad Dupuis) [798748 772192]
- [scsi] qla2xxx: Complete mbox cmd timeout before next reset cycle (Chad Dupuis) [798748 772192]
- [s390] qdio: wrong buffers-used counter for ERROR buffers (Hendrik Brueckner) [801724 790840]
- [net] bridge: Reset IPCB when entering IP stack (Herbert Xu) [804721 749813]
- [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770649 770650]
- [fs] procfs: parse mount options (Jerome Marchand) [770649 770650]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.4.1.el5]" date="1332972000">- [net] ipv6: fix skb double free in xfrm6_tunnel (Jiri Benc) [752305 743375] {CVE-2012-1583}</changelog>
</package>
<package pkgid="b5e77e0fa1c53193a990bed8739fc623755c5ae5" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.6.1.el5]" date="1335564000">- [scsi] fc class: fix scanning when devs are offline (Mike Christie) [816684 799530]
- [md] dm-multipath: delay retry of bypassed pg (Mike Christie) [816684 799530]
- [net] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [811927 800575]
- [net] bonding: remove {master,vlan}_ip and query devices instead (Andy Gospodarek) [810321 772216]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
</package>
<package pkgid="7395b007331ad79864928a8f92e23dc37db949a9" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.2.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.2.el5]" date="1338328800">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970]</changelog>
</package>
<package pkgid="5e7ecefcc3801938dff32f1fcb0137513e9469bb" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.1.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-347.el5]" date="1353448800">- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870151] {CVE-2012-4535}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
</package>
<package pkgid="103f2cf04e6c44d096c23f06747f71869f864eb8" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.12.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.10.1.el5]" date="1370642400">- [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955600 955601] {CVE-2013-3224}
- [net] Bluetooth: HCI &amp; L2CAP information leaks (Jacob Tanenbaum) [922415 922416] {CVE-2012-6544}
- [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [971872 872531]
- [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [971872 872531]
- [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [958021 864648]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.11.1.el5]" date="1371852000">- Revert: [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
- Revert: [x86-64] non lazy sleazy fpu implementation (Prarit Bhargava) [948187 731531]
- Revert: [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- Revert: [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- Revert: [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.12.1.el5]" date="1372716000">- Revert: [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]</changelog>
</package>
<package pkgid="3da72377ad9788820519a1bc81426c66aace506b" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.14.1.el5]" date="1374019200">- [net] Fix panic for vlan over gre via tun (Thomas Graf) [983452 981337]
- [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [983628 865095]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.15.1.el5]" date="1374537600">- [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [976441 853145]
- [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [976441 853145]
- [fs] nfs: define function to update nfsi-&gt;cache_change_attribute (Scott Mayhew) [976441 853145]
- [net] af_key: fix info leaks in notify messages (Jiri Benc) [980999 981000] {CVE-2013-2234}
- [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981222 981224] {CVE-2013-2237}
- [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981556 981557] {CVE-2013-2232}
- [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980141 980142] {CVE-2013-2224}
- [x86_64] Early segment setup for VT (Paolo Bonzini) [979920 978305]
- [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971245 971246] {CVE-2013-2147}
- [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973103 973104] {CVE-2013-2164}
- [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [972583 965359]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="1c041c0d6a3b3950ecaca2149436bf346ec51c0b" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.18.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.17.1.el5]" date="1377216000">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [999819 995961]
- [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [983864 956322]
- [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [983864 956322]
- [net] be2net: disable TX in be_close() (Ivan Vecera) [983864 956322]
- [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [983864 956322]
- [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [983864 956322]
- [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [983864 956322]
- [net] be2net: Fixed memory leak (Ivan Vecera) [983864 956322]
- [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [983864 956322]
- [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [983864 956322]
- [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [983864 956322]
- [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [983864 956322]
- [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [983864 956322]
- [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [983864 956322]
- [net] be2net: Fix Endian (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [983864 956322]
- [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [983864 956322]
- [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [983864 956322]
- [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [983864 956322]
- [net] be2net: cleanup be_vid_config() (Ivan Vecera) [983864 956322]
- [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [983864 956322]
- [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [983864 956322]
- [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [983864 956322]
- [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [983864 956322]
- [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [983864 956322]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.18.1.el5]" date="1378512000">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [1005239 987539]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970874 970875] {CVE-2013-2141}
- [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987647 987648] {CVE-2013-4162}
- [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849735 849736] {CVE-2012-3511}
- [fs] autofs: remove autofs dentry mount check (Ian Kent) [1001488 928098]</changelog>
</package>
<package pkgid="ca99f22c8dd3949cf526b94f82bc0adde002dcc7" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.2.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
</package>
<package pkgid="816c0a9f1178f953ea1a748fc3d2769f69d98bbf" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.3.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
</package>
<package pkgid="189ce7ffa2e027d6b32d36369e5c924f21622946" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
</package>
<package pkgid="5b46970d8a5b732194e5e37c4f946f93a2f73d6d" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.6.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.5.1.el5]" date="1365804000">- [fs] nfs: handle getattr failure during nfsv4 open (David Jeffery) [947736 906909]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.6.1.el5]" date="1367013600">- [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [953435 947732]
- [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [953435 947732]
- [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [954296 948317]
- [fs] nfs: Fix bugs on short read (Sachin Prabhu) [952098 924011]
- [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] introduce xzalloc() &amp; Co (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="9da72cd93f45473b3c92cf7638abf686e32ad2bc" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.1.2.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.2.el5]" date="1381190400">- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
</package>
<package pkgid="56310229f01a065952fb56fe8a48f7a76bbe92a1" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.11.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
</package>
<package pkgid="7fd1ee0770dd96e212efb55463c3a3ba8f672aa8" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.12.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.12.1.el5]" date="1407456000">- [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102702 1102703] {CVE-2014-3917}
- [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1125246 1080194]
- [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [1121017 924590]
- [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1116027 1081785]
- [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1117665 1102768]</changelog>
</package>
<package pkgid="4565405a43e8353febbd5efeea61417b13283bf0" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.3.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
</package>
<package pkgid="e7c31b067a5ae7478d87b84d25e067f06442682e" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.4.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
</package>
<package pkgid="e26132e7195fda95ad90a1655c7303eb993e56ac" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.6.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.5.1.el5]" date="1390348800">- [fs] cifs: stop trying to use virtual circuits (Sachin Prabhu) [1044328 1013469]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
</package>
<package pkgid="0b2c9e1006c9db58437e8a1a272ed047ae518249" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.8.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
</package>
<package pkgid="c481bdb16e4a3ff9a71581f2f9cdacb212f4ebe5" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.9.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
</package>
<package pkgid="410603c71a7b8325c2390e5ec15b782ea476fb55" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-369.el5]" date="1376092800">- [fs] nlm: Ensure we resend pending blocking locks after a reclaim (Steve Dickson) [918592]
- [kernel] kmod: kthread_run causes oom killer deadlock (Frantisek Hrbata) [983506]
- [fs] nfs4: ratelimit some messages, add name to bad seq-id mess (Dave Wysochanski) [953121]
- [fs] nfsd: fix EXDEV checking in rename (J. Bruce Fields) [515599]
- [misc] tty: Fix abusers of current-sighand-&gt;tty (Aaron Tomlin) [858981]
- [net] ipv6: don't call addrconf_dst_alloc again when enable lo (Jiri Benc) [981417]
- [redhat] kabi: Adding symbol fc_fabric_login (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_reset (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_els_send (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_fabric_logoff (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_set_mfs (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_elsct_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_up (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv_flogi (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_depth (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_down (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_type (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_free (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_alloc (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_config (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_disc_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol strict_strtoul (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_rport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_get_host_port_state (Jiri Olsa) [864256]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-370.el5]" date="1376956800">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [995961]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970875] {CVE-2013-2141}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
</package>
<package pkgid="6751863bde3d5fbc26804f95c24f7f4e910ef09d" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.1.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.1.1.el5]" date="1418601600">- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="873cd0e0f37f749deb1a30e6e5401488e8a1c6de" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-398.el5]" date="1407888000">- [net] security_socket_post_accept before fd_install in sys_accept (Denys Vlasenko) [1059078]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
</package>
<package pkgid="9b2850a46e3552ba4d65f757e8c304776691e554" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="402.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-401.el5]" date="1418256000">- [net] rds: fix possible double free on sock tear down (Herton R. Krzesinski) [1116880]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="59e486253b762b9ddef28a3d6a704acd2491b50e" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="404.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-403.el5]" date="1425600000">- [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
- [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
- [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
</package>
<package pkgid="1ee84da62ccdbb17b0972d64fc0b877502709d53" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="406.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-405.el5]" date="1430438400">- [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
- [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
- [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
- [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
- [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
- [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
- [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
- [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
- [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
- [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
</package>
<package pkgid="2a0ee53358388ead556d4b55f09af02418b58636" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="408.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
</package>
<package pkgid="c8bc510333aa5dacf2dd079bc8f2a11303e0ce76" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="409.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-409.el5]" date="1455321600">- [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
- [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [sched] prevent division by zero x-&gt;cpu_power (Denys Vlasenko) [1209728]
- [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}</changelog>
</package>
<package pkgid="b3a13ab8aa87f95ff914f85800895c443c9f6621" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="416.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-414.el5]" date="1474934400">- [redhat] Fix missed -413 kernel version (Alexander Gordeev)</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
</package>
<package pkgid="e4ad0c45745af1f84f17e84b75fa3a9d2e088d8d" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="417.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
</package>
<package pkgid="f29c119499b3c6a2aba593e34c1ac77a86dce635" name="kernel-PAE" arch="i686">
  <version epoch="0" ver="2.6.18" rel="419.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-418.el5]" date="1484352000">- [sched] prevent NULL deref in find_busiest_group (Denys Vlasenko) [1376523]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-419.el5]" date="1487808000">- [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
- [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]</changelog>
</package>
<package pkgid="c6b052be025d5ff889ccf4ce6ac163719343259a" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.10.1.el5]" date="1302904800">- [fs] gfs2: creating large files suddenly slow to a crawl (Robert S Peterson) [690239 683155]
- [virt] hypervisor: Overflow fix for clocks &gt; 4GHz (Zachary Amsden) [690134 673242]
- [usb] fix usbfs isochronous data transfer regression (Don Zickus) [696136 688926]
- [fs] partitions: Fix corrupted OSF partition table parsing (Danny Feng) [688022 688023] {CVE-2011-1163}
- [misc] pm: add comment explaining is_registered kabi work-around (Don Zickus) [689699 637930]
- [media] sn9c102: fix world-wirtable sysfs files (Don Howard) [679304 679305]
- [scsi] scsi_dh_rdac: Add two new IBM devices to rdac_dev_list (Rob Evers) [692370 691460]
- [fs] block: fix submit_bh discarding barrier flag on sync write (Lukas Czerner) [690795 667673]
- [net] netfilter/ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689339 689340]
- [net] netfilter: ip6_tables: fix infoleak to userspace (Jiri Pirko) [689348 689349] {CVE-2011-1172}
- [net] netfilter/ip_tables: fix infoleak to userspace (Jiri Pirko) [689331 689332] {CVE-2011-1171}
- [net] netfilter/arp_tables: fix infoleak to userspace (Jiri Pirko) [689322 689323] {CVE-2011-1170}
- [base] Fix potential deadlock in driver core (Don Zickus) [689699 637930]
- [net] forcedeth/r8169: call netif_carrier_off at end of probe (Ivan Vecera) [689808 689805 664705 664707]
- [net] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [693751 680531]
- [net] ixgbe: limit VF access to network traffic (Andy Gospodarek) [693751 680531]
- [fs] lockd: make lockd_down wait for lockd to come down (Jeff Layton) [688156 653286]
- [fs] proc: protect mm start_/end_code in /proc/pid/stat (Eugene Teo) [684570 684571] {CVE-2011-0726}
- [net] dccp: fix oops in dccp_rcv_state_process (Eugene Teo) [682955 682956] {CVE-2011-1093}
- [net] bluetooth: fix bnep buffer overflow (Don Howard) [681318 681319] {CVE-2011-1079}
- [fs] nfs: break nfsd v4 lease on unlink, link, and rename (J. Bruce Fields) [693755 610093]
- [fs] nfs: break lease on nfsd v4 setattr (J. Bruce Fields) [693755 610093]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.11.1.el5]" date="1303941600">- [s390] dasd: fix race between open and offline (Hendrik Brueckner) [699808 695357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.12.1.el5]" date="1304805600">- [x86_64] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [i386] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [xen] fix MAX_EVTCHNS definition (Laszlo Ersek) [701242 701240]
- [net] ixgbe: fix for link failure on SFP+ DA cables (Don Howard) [696181 653236]
- [net] netxen: limit skb frags for non tso packet (Phillip Lougher) [699609 672368]
- [block] cciss: fix lost command problem (Phillip Lougher) [696503 696153]
- [fs] gfs2: fix filesystem hang caused by incorrect lock order (Robert S Peterson) [688855 656032]
- [fs] gfs2: restructure reclaim of unlinked dinodes (Phillip Lougher) [688855 656032]
- [fs] gfs2: unlock on gfs2_trans_begin error (Robert S Peterson) [688855 656032]
- [scsi] mpt2sas: prevent heap overflows and unchecked access (Tomas Henzl) [694526 694527] {CVE-2011-1495 CVE-2011-1494}
- [net] bridge/netfilter: fix ebtables information leak (Don Howard) [681325 681326] {CVE-2011-1080}
- [net] bluetooth: fix sco information leak to userspace (Don Howard) [681310 681311] {CVE-2011-1078}
- [fs] fix corrupted GUID partition table kernel oops (Jerome Marchand) [695979 695980] {CVE-2011-1577}
- [xen] x86/domain: fix error checks in arch_set_info_guest (Laszlo Ersek) [688581 688582] {CVE-2011-1166}
- [net] bridge: fix initial packet flood if !STP (Jiri Pirko) [701222 695369]
- [fs] nfsd: fix auth_domain reference leak on nlm operations (J. Bruce Fields) [697448 589512]
- [scsi] qla2xxx: no reset/fw-dump on CT/ELS pt req timeout (Chad Dupuis) [689700 660386]
- [mm] set barrier and send tlb flush to all affected cpus (Prarit Bhargava) [696908 675793]</changelog>
</package>
<package pkgid="8043af8c1dca57bf05681b0e0fbff8d08222eafa" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.19.1.el5"/>
  <changelog author="Jiri Pirko &lt;jpirko@redhat.com&gt; [2.6.18-238.17.1.el5]" date="1308952800">- [net] bluetooth: l2cap and rfcomm: fix info leak to userspace (Thomas Graf) [703020 703021] {CVE-2011-2492}
- [net] inet_diag: fix inet_diag_bc_audit data validation (Thomas Graf) [714538 714539] {CVE-2011-2213}
- [misc] signal: fix kill signal spoofing issue (Oleg Nesterov) [690030 690031] {CVE-2011-1182}
- [fs] proc: fix signedness issue in next_pidmap (Oleg Nesterov) [697826 697827] {CVE-2011-1593}
- [char] agp: fix OOM and buffer overflow (Jerome Marchand) [699009 699010] {CVE-2011-1746}
- [char] agp: fix arbitrary kernel memory writes (Jerome Marchand) [699005 699006] {CVE-2011-2022 CVE-2011-1745}
- [infiniband] core: Handle large number of entries in poll CQ (Jay Fenlason) [668370 668371] {CVE-2011-1044 CVE-2010-4649}
- [infiniband] core: fix panic in ib_cm:cm_work_handler (Jay Fenlason) [679995 679996] {CVE-2011-0695}
- [fs] validate size of EFI GUID partition entries (Anton Arapov) [703027 703028] {CVE-2011-1776}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.18.1.el5]" date="1310076000">- [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]
- [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.19.1.el5]" date="1310335200">- Revert: [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]
- Revert: [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- Revert: [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- Revert: [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]</changelog>
</package>
<package pkgid="91732a8d1742ad45a27ab0d76d36116d82fcfcae" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.10.1.el5]" date="1320357600">- [net] be2net: enable NETIF_F_LLTX and add own locking of Tx path (Ivan Vecera) [750912 731806]
- [net] be2net: fix multicast filter programming (Ivan Vecera) [750912 731806]
- [net] be2net: fix cmd-rx-filter not notifying MCC (Ivan Vecera) [750912 731806]
- [net] be2net: use RX_FILTER cmd to program multicast addresses (Ivan Vecera) [750912 731806]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.11.1.el5]" date="1320616800">- [fs] gfs2: speed up large file delete/unlink (Robert S Peterson) [743806 738440]
- [fs] cifs: fix wrong buffer length returned by SendReceive (Sachin Prabhu) [750842 720363]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [virt] xen/netback: disable features not supported by netfront (Paolo Bonzini) [746600 746225]
- [fs] nfs: don't redirty inodes with no outstanding commits (Jeff Layton) [750477 739665]
- [net] tg3: call netif_carrier_off to initialize operstate value (John Feeney) [744700 635982]
- [xen] make test_assign_device domctl dependent on intremap hw (Laszlo Ersek) [745726 740203]
- [xen] Propagate target dom within XEN_DOMCTL_test_assign_device (Laszlo Ersek) [745726 740203]
- [net] sctp: encode PROTOCOL VIOLATION error cause correctly (Thomas Graf) [750457 636828]
- [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [char] tpm: Zero buffer after copying to userspace (Jiri Benc) [732630 732631] {CVE-2011-1162}
- [fs] hfs: fix hfs_find_init() sb-&gt;ext_tree NULL ptr oops (Phillip Lougher) [712775 712776] {CVE-2011-2203}
- [net] sctp: Set correct error cause value for missing parameters (Thomas Graf) [750451 629938]
- [misc] kernel: plug taskstats io infoleak (Jerome Marchand) [716845 716846] {CVE-2011-2494}
- [usb] Make device reset stop retrying after disconnect (Don Zickus) [750841 709699]
- [net] ipv6: properly use ICMP6MSGOUT_INC_STATS in ndisc_send_skb (Jiri Pirko) [743611 698728]
- [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [741273 694625]
- [mm] s390: fix first time swap use results in heavy swapping (Hendrik Brueckner) [747876 722482]
- [virt] xen: fix GFP mask handling in dma_alloc_coherent (Laszlo Ersek) [742282 730247]
- [s390] kernel: fix system hang if hangcheck timer expires (Hendrik Brueckner) [747872 730313]
- [usb] fix interface sysfs file-creation bug (Don Zickus) [750848 637930]
- [usb] don't touch sysfs stuff when altsetting is unchanged (Don Zickus) [750848 637930]
- [base] Fix potential deadlock in driver core (Don Zickus) [750848 637930]
- [security] keys: Fix NULL deref in user-defined key type (David Howells) [751300 751301]
- [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.12.1.el5]" date="1320789600">- Revert: [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]</changelog>
</package>
<package pkgid="c09a72ca88a55f3319aef143ab3ccf9be0aeae62" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.17.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.15.1.el5]" date="1324159200">- [net] e1000e: Avoid wrong check on TX hang (Dean Nelson) [766485 746272]
- [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749159 749160] {CVE-2011-4077}
- [pci] intel-iommu: Default to non-coherent for unattached domains (Don Dutile) [766803 753924]
- [fs] nfs: remove BUG() from encode_share_access() (Jeff Layton) [755442 754901] {CVE-2011-4324}
- [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [759387 756412]
- [fs] hfs: add sanity check for file name length (Eric Sandeen) [755432 755433] {CVE-2011-4330}
- [fs] proc: Fix select on /proc files without -&gt;poll (David Howells) [755483 751214]
- [fs] nfs: Ensure we mark inode as dirty if early exit from commit (Jeff Layton) [755482 714020]
- [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [750460 742079]
- [virt] kvm: fix regression w/ 32 bit KVM clock (Rik van Riel) [747875 753789 751742 731599]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [fs] jbd/jbd2: validate sb-&gt;s_first in journal_get_superblock (Eryu Guan) [753343 706810] {CVE-2011-4132}
- [net] igb: enable link power down (Stefan Assmann) [752735 742514]
- [fs] proc: fix oops on invalid /proc/&lt;pid&gt;/maps access (Johannes Weiner) [747851 747699] {CVE-2011-3637}
- [block] cciss: bump driver version (Tomas Henzl) [758024 714129]
- [block] cciss: need to delay after a PCI Power Management reset (Tomas Henzl) [758024 714129]
- [block] cciss: auto engage scsi susbsystem (Tomas Henzl) [758024 714129]
- [block] cciss: store pdev in hba struct (Tomas Henzl) [758024 714129]
- [block] cciss: use consistent variable names (Tomas Henzl) [758024 714129]
- [block] cciss: add a commandline switch for simple mode (Tomas Henzl) [758024 714129]
- [fs] proc: close race with exec in mem_read() (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] implement access_remote_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] factor out main logic of access_process_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] use mm_struct to resolve gate vma's in __get_user_pages (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make in_gate_area take mm_struct instead of a task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make get_gate_vma take mm_struct instead of task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [x86_64] mark assoc mm when running task in 32 bit compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [misc] sched: add ctx tag to mm running task in ia32 compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: require the target to be tracable (or yourself) (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: close race in /proc/*/environ (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: report errors in /proc/*/*map* sanely (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: shift down_read(mmap_sem) to the caller (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] detect exec transition phase with new mm but old creds (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [net] igb: fix i350 SR-IOV failture (Stefan Assmann) [741877 714313]
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [755457 754620] {CVE-2011-4325}
- [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [757146 714870] {CVE-2011-4348}
- [scsi] isci: fix 32-bit operation when CONFIG_HIGHMEM64G=n (Phillip Lougher) [750458 713904]
- [net] tg3: Only allow phy ioctls while netif_running (Phillip Lougher) [746343 683393]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
</package>
<package pkgid="9d7cb70e8394edb20fc880479dc2c00d31e7eda9" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.18.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.18.1.el5]" date="1327096800">- [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [771774 750283] {CVE-2012-0028}
- [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [773322 771592]
- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747943 747946] {CVE-2011-3638}
- [scsi] don't fail scans when host is in recovery (Rob Evers) [772162 657345]
- [fs] jbd2: clear BH_Delay &amp; BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783477 783284] {CVE-2011-4086}
- [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772868 772869] {CVE-2012-0207}</changelog>
</package>
<package pkgid="984191d3268aef08debf6e63fdaffbe2b075954a" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.3.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.1.1.el5]" date="1312581600">- [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [714869 714867]
- [x86_64] Revert ACPI APIC mode test (Prarit Bhargava) [728163 721361]
- [net] sctp: reset packet information after packet transmit (Thomas Graf) [727592 725573]
- [fs] block: initialise bd_super in bdget (Lachlan McIlroy) [726628 707425]
- [fs] nfs: Remove bogus call to nfs4_drop_state_owner (Jeff Layton) [726625 724923]
- [net] be2net: clear interrupt bit in be_probe (Ivan Vecera) [723552 713703]
- [net] be2net: remove certain cmd failure logging (Ivan Vecera) [726619 716821]
- [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [718154 718155] {CVE-2011-2517}
- [fs] xfs: handle NULL mount struct in error reports (Eric Sandeen) [727835 720551]
- [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716827 716828] {CVE-2011-2495}
- [fs] lockd: don't use file's credentials on RPCSEC_GSS mounts (Max Matveev) [722855 701574]
- [fs] xfs: add a missing mutex_unlock to a dio error path (Jeff Moyer) [727590 718232]
- [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [709546 709547] {CVE-2011-2491}
- [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [718883 718884]
- [xen] Fix x86_emulate handling of imul with immediate operands (Igor Mammedov) [712885 700565]
- [fs] Fix wrongly vfree'ing a kmalloc'ed area (Larry Woodman) [721300 719495]
- [fs] dlm: bump default hash table and maximum allocatable sizes (Bryn M. Reeves) [719930 715603]
- [net] tipc: Overhaul of socket locking logic (Max Matveev) [719746 704192]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.18-274.2.1.el5]" date="1313186400">- Fix up some fallout from RHEL5.7 kernel package structure changes</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.3.1.el5]" date="1314396000">- [xen] fix off-by-one shift in x86_64 __addr_ok (Laszlo Ersek) [728043 719850] {CVE-2011-2901}</changelog>
</package>
<package pkgid="3e23b489f524a9e9564769d49c4f857d4b4e58d5" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.7.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.5.1.el5]" date="1316210400">- [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [732775 675781]
- [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [732775 675781]
- [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [fs] nfs: Fix client not honoring nosharecache mount option (David Jeffery) [734772 730097]
- [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716543 716544] {CVE-2011-2496}
- [mm] Fix incorrect off-by-one centisec dirty values (Larry Woodman) [733665 691087]
- [net] bnx2x: fix bringup of BCM57710 (Michal Schmidt) [737475 680411]
- [virt] xen/netfront: no disable s/g when renegotiating features (Paolo Bonzini) [738392 733416]
- [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734157 727504]
- [virt] xen: Allow arbitrary mtu size until frontend connected (Paolo Bonzini) [738389 697021]
- [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730689 692966]
- [net] cnic, bnx2: Check iSCSI support early in bnx2_init_one (Neil Horman) [734761 710272]
- [net] igb: fix WOL on 2nd port on i350 (Stefan Assmann) [730682 718988]
- [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [728521 720212]</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.6.1.el5]" date="1316815200">- [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [730949 703045] {CVE-2011-2942}
- [misc] remove	div_long_long_rem (Prarit Bhargava) [732879 732614] {CVE-2011-3209}
- [net] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: Use NTWK_RX_FILTER command for promiscous mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: non-member vlan pkts not received in promisc mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: remove bogus unlikely on vlan check (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [x86] nmi: make NMI_NONE default watchdog in x86_64 hvm guests (Laszlo Ersek) [739823 707966]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.7.1.el5]" date="1318888800">- Revert: [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
</package>
<package pkgid="5b7361480b5b4298b1a33e7cc9bbb40a49a4c462" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.11.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.9.1.el5]" date="1339020000">- [fs] jbd: clear b_modified before moving the jh to a different transaction (Josef Bacik) [827205 563247]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.10.1.el5]" date="1339711200">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970] {CVE-2012-2934}
- [scsi] qla2xxx: Use ha-&gt;pdev-&gt;revision in 4Gbps MSI-X check. (Chad Dupuis) [816373 800653]
- [fs] sunrpc: do array overrun check in svc_recv before page alloc (J. Bruce Fields) [820358 814626]
- [fs] knfsd: fix an NFSD bug with full size non-page-aligned reads (J. Bruce Fields) [820358 814626]
- [fs] sunrpc: fix oops due to overrunning server's page array (J. Bruce Fields) [820358 814626]
- [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [829670 817131]
- [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [824654 818787]
- [net] sunrpc: Don't use list_for_each_entry_safe in rpc_wake_up (Steve Dickson) [817571 809937]
- [s390] qeth: add missing wake_up call (Hendrik Brueckner) [829059 790900]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
</package>
<package pkgid="fd508c268d1e8e3b38c98c22e0cf6cd9784700ea" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.13.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.12.1.el5]" date="1342216800">- [fs] nfs: Don't allow multiple mounts on same mntpnt with -o noac (Sachin Prabhu) [839806 839753]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.13.1.el5]" date="1343340000">- [net] e1000e: Cleanup logic in e1000_check_for_serdes_link_82571 (Dean Nelson) [841370 771366]
- [net] e1000e: Correct link check logic for 82571 serdes (Dean Nelson) [841370 771366]
- [mm] NULL pointer dereference in __vm_enough_memory (Jerome Marchand) [840077 836244]
- [fs] dlm: fix slow rsb search in dir recovery (David Teigland) [838140 753244]
- [fs] autofs: propogate LOOKUP_DIRECTORY flag only for last comp (Ian Kent) [830264 814418]
- [fs] ext4: properly dirty split extent nodes (Eric Sandeen) [840946 839770]
- [scsi] don't offline devices with a reservation conflict (David Jeffery) [839196 835660]
- [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate (Lukas Czerner) [837226 830351]
- [net] dl2k: Clean up rio_ioctl (Weiping Pan) [818822 818823] {CVE-2012-2313}
- [x86] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835450 834562]
- [net] tg3: Fix TSO handling (John Feeney) [833182 795672]
- [input] evdev: use after free from open/disconnect race (David Jeffery) [832448 822166]</changelog>
</package>
<package pkgid="4230777a013ae183f93a0d0e19e9eff773f95593" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.14.1.el5]" date="1346277600">- [net] e1000e: drop check of RXCW.CW to eliminate link up and down (Dean Nelson) [852448 840642]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.15.1.el5]" date="1346882400">- [net] sfc: Fix max no of TSO segments and min TX queue size (Michal Schmidt) [845554 845555] {CVE-2012-3412}
- [kernel] xacct_add_tsk: fix pure theoretical -&gt;mm use-after-free (Nikola Pajkovsky) [849723 849725] {CVE-2012-3510}
- [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820255 820256] {CVE-2012-2319}
- [net] netfilter: add dscp netfilter match (Thomas Graf) [847327 842029]
- [net] rds: set correct msg_namelen (Weiping Pan) [822727 822728] {CVE-2012-3430}
- [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [847359 693822]
- [fs] quota: manage reserved space when quota is not active (Eric Sandeen) [847326 818087]
- [fs] quota: Fix warning if delayed write before quota is enabled (Eric Sandeen) [847326 818087]
- [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]
- [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- [xen] x86: whitelist Enhanced SpeedStep for dom0 (Laszlo Ersek) [846125 809103]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.16.1.el5]" date="1348005600">- Revert: [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- Revert: [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- Revert: [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]</changelog>
</package>
<package pkgid="8749c030895b9b448ac1dab9ef9994936e1dbda4" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.20.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.18.1.el5]" date="1350079200">- [fs] autofs4: Merge the remaining dentry ops tables (Ian Kent) [857558 850977]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.19.1.el5]" date="1350597600">- [net] be2net: Remove code that stops further access to BE NIC based on UE bits (Alexander Gordeev) [867896 862811]
- [net] netpoll: fix an incorrect check for NULL pointer (Alexander Gordeev) [856079 848098]
- [net] mlx4: Add support for EEH error recovery (Alexander Gordeev) [847404 798048]
- [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] fix crash if block {device|size} read &amp; changed at sametime (Mikulas Patocka) [864823 756506]
- [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}
- [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [861387 819830]
- [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [858774 857448]
- [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [859946 858724]
- [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [857966 854067]
- [scsi] isci: fixup linkspeed definitions (David Milburn) [854986 833000]
- [fs] nfs: nfs_d_automount update caller path after do_add_mount (Carlos Maiolino) [857552 834379]
- [fs] vfs: Fix vfsmount overput on simultaneous automount (Carlos Maiolino) [857552 834379]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.20.1.el5]" date="1352239200">- Revert: [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}</changelog>
</package>
<package pkgid="3db051fb21840819b7e90e38990c96c6c2f5517c" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.24.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.22.1.el5]" date="1353362400">- [net] bonding: fix link down handling in 802.3ad mode (Andy Gospodarek) [877943 782866]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.23.1.el5]" date="1353535200">- [net] bnx2x: Add remote-fault link detection (Alexander Gordeev) [870120 796905]
- [net] bnx2x: Cosmetic changes (Alexander Gordeev) [870120 796905]
- [net] rds-ping cause kernel panic (Alexander Gordeev) [822755 822756] {CVE-2012-2372}
- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878033 878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870148 870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870150 870151] {CVE-2012-4535}
- [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.24.1.el5]" date="1353535201">- Revert: [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
</package>
<package pkgid="2fc2b36984e03b75583d33536f90a516b17d7b87" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.2.1.el5]" date="1329861600">- [fs] nfs: nfs_fhget should wait on I_NEW instead of I_LOCK (Sachin Prabhu) [795664 785062]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.3.1.el5]" date="1332453600">- [net] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [805462 773735]
- [net] be2net: add vlan/rx-mode/flow-control config to be_setup (Ivan Vecera) [805462 773735]
- [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [805460 799170]
- [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry (Ian Kent) [801726 798809]
- [fs] vfs: fix d_instantiate_unique (Ian Kent) [801726 798809]
- [fs] nfs: allow high priority COMMITs to bypass inode commit lock (Jeff Layton) [799941 773777]
- [fs] nfs: don't skip COMMITs if system under is mem pressure (Jeff Layton) [799941 773777]
- [scsi] qla2xxx: Read the HCCR register to flush any PCIe writes (Chad Dupuis) [798748 772192]
- [scsi] qla2xxx: Complete mbox cmd timeout before next reset cycle (Chad Dupuis) [798748 772192]
- [s390] qdio: wrong buffers-used counter for ERROR buffers (Hendrik Brueckner) [801724 790840]
- [net] bridge: Reset IPCB when entering IP stack (Herbert Xu) [804721 749813]
- [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770649 770650]
- [fs] procfs: parse mount options (Jerome Marchand) [770649 770650]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.4.1.el5]" date="1332972000">- [net] ipv6: fix skb double free in xfrm6_tunnel (Jiri Benc) [752305 743375] {CVE-2012-1583}</changelog>
</package>
<package pkgid="aa1efc94f99c418c8c2111115e0bcedbf1109875" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.6.1.el5]" date="1335564000">- [scsi] fc class: fix scanning when devs are offline (Mike Christie) [816684 799530]
- [md] dm-multipath: delay retry of bypassed pg (Mike Christie) [816684 799530]
- [net] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [811927 800575]
- [net] bonding: remove {master,vlan}_ip and query devices instead (Andy Gospodarek) [810321 772216]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
</package>
<package pkgid="b59960f6e48c61dfe938a6450875aabb7c79e716" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.2.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.2.el5]" date="1338328800">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970]</changelog>
</package>
<package pkgid="8089e92d80c60a6a74aa1233390bead08940202e" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.1.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-347.el5]" date="1353448800">- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870151] {CVE-2012-4535}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
</package>
<package pkgid="3646bb673df53314b0b38af96fcc211c87b44307" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.12.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.10.1.el5]" date="1370642400">- [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955600 955601] {CVE-2013-3224}
- [net] Bluetooth: HCI &amp; L2CAP information leaks (Jacob Tanenbaum) [922415 922416] {CVE-2012-6544}
- [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [971872 872531]
- [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [971872 872531]
- [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [958021 864648]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.11.1.el5]" date="1371852000">- Revert: [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
- Revert: [x86-64] non lazy sleazy fpu implementation (Prarit Bhargava) [948187 731531]
- Revert: [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- Revert: [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- Revert: [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.12.1.el5]" date="1372716000">- Revert: [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]</changelog>
</package>
<package pkgid="774a84cfe037a55049436f306e502a789ba3f495" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.14.1.el5]" date="1374019200">- [net] Fix panic for vlan over gre via tun (Thomas Graf) [983452 981337]
- [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [983628 865095]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.15.1.el5]" date="1374537600">- [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [976441 853145]
- [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [976441 853145]
- [fs] nfs: define function to update nfsi-&gt;cache_change_attribute (Scott Mayhew) [976441 853145]
- [net] af_key: fix info leaks in notify messages (Jiri Benc) [980999 981000] {CVE-2013-2234}
- [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981222 981224] {CVE-2013-2237}
- [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981556 981557] {CVE-2013-2232}
- [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980141 980142] {CVE-2013-2224}
- [x86_64] Early segment setup for VT (Paolo Bonzini) [979920 978305]
- [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971245 971246] {CVE-2013-2147}
- [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973103 973104] {CVE-2013-2164}
- [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [972583 965359]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="7f26a5d3ddf27eff832ecd11b5196916af612b4b" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.18.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.17.1.el5]" date="1377216000">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [999819 995961]
- [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [983864 956322]
- [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [983864 956322]
- [net] be2net: disable TX in be_close() (Ivan Vecera) [983864 956322]
- [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [983864 956322]
- [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [983864 956322]
- [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [983864 956322]
- [net] be2net: Fixed memory leak (Ivan Vecera) [983864 956322]
- [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [983864 956322]
- [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [983864 956322]
- [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [983864 956322]
- [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [983864 956322]
- [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [983864 956322]
- [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [983864 956322]
- [net] be2net: Fix Endian (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [983864 956322]
- [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [983864 956322]
- [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [983864 956322]
- [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [983864 956322]
- [net] be2net: cleanup be_vid_config() (Ivan Vecera) [983864 956322]
- [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [983864 956322]
- [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [983864 956322]
- [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [983864 956322]
- [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [983864 956322]
- [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [983864 956322]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.18.1.el5]" date="1378512000">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [1005239 987539]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970874 970875] {CVE-2013-2141}
- [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987647 987648] {CVE-2013-4162}
- [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849735 849736] {CVE-2012-3511}
- [fs] autofs: remove autofs dentry mount check (Ian Kent) [1001488 928098]</changelog>
</package>
<package pkgid="dbf8a5419cec682756cd98f6a3d02ce7474afabf" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.2.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
</package>
<package pkgid="18fc4414cbf286078885a112d3846698b2109dd7" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.3.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
</package>
<package pkgid="cc9a9d7a9d4d42b4cf5eaba32dbe959385f252b5" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
</package>
<package pkgid="4a2736ffc6c269e7fc7f2331f7bb46d877d91017" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.6.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.5.1.el5]" date="1365804000">- [fs] nfs: handle getattr failure during nfsv4 open (David Jeffery) [947736 906909]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.6.1.el5]" date="1367013600">- [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [953435 947732]
- [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [953435 947732]
- [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [954296 948317]
- [fs] nfs: Fix bugs on short read (Sachin Prabhu) [952098 924011]
- [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] introduce xzalloc() &amp; Co (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="5f5773a463d64233d39ef484f87686eee29aa0b8" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.1.2.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.2.el5]" date="1381190400">- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
</package>
<package pkgid="8ef57ac1fb54a154dd2833693f7f2d1e694899cc" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.11.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
</package>
<package pkgid="298914f74c691eeb40f77bd7e54387cc25acadc1" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.12.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.12.1.el5]" date="1407456000">- [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102702 1102703] {CVE-2014-3917}
- [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1125246 1080194]
- [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [1121017 924590]
- [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1116027 1081785]
- [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1117665 1102768]</changelog>
</package>
<package pkgid="5812b9508ea2c02ecb5931d41758e9d17005478c" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.3.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
</package>
<package pkgid="c1993607e53a10208ccbfc7c2dfa2e0a86ded1de" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.4.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
</package>
<package pkgid="879b7ab12d029efac5be60e60f35d4b8cffe3ab0" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.6.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.5.1.el5]" date="1390348800">- [fs] cifs: stop trying to use virtual circuits (Sachin Prabhu) [1044328 1013469]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
</package>
<package pkgid="680021484a0a86578fca02b7eb21930bec7de911" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.8.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
</package>
<package pkgid="be0910cdea607651b3d90dd6799dff27f6b33fe7" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.9.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
</package>
<package pkgid="255df3d9bdb2d36ca23a508e619205abe2044560" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-369.el5]" date="1376092800">- [fs] nlm: Ensure we resend pending blocking locks after a reclaim (Steve Dickson) [918592]
- [kernel] kmod: kthread_run causes oom killer deadlock (Frantisek Hrbata) [983506]
- [fs] nfs4: ratelimit some messages, add name to bad seq-id mess (Dave Wysochanski) [953121]
- [fs] nfsd: fix EXDEV checking in rename (J. Bruce Fields) [515599]
- [misc] tty: Fix abusers of current-sighand-&gt;tty (Aaron Tomlin) [858981]
- [net] ipv6: don't call addrconf_dst_alloc again when enable lo (Jiri Benc) [981417]
- [redhat] kabi: Adding symbol fc_fabric_login (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_reset (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_els_send (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_fabric_logoff (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_set_mfs (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_elsct_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_up (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv_flogi (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_depth (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_down (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_type (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_free (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_alloc (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_config (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_disc_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol strict_strtoul (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_rport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_get_host_port_state (Jiri Olsa) [864256]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-370.el5]" date="1376956800">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [995961]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970875] {CVE-2013-2141}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
</package>
<package pkgid="d024d28a04aafc99daa8af7c7885efbef444a48a" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.1.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.1.1.el5]" date="1418601600">- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="b292a59a18f3fee6c48f367fa1ee78d77e1d5312" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-398.el5]" date="1407888000">- [net] security_socket_post_accept before fd_install in sys_accept (Denys Vlasenko) [1059078]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
</package>
<package pkgid="983fe9a1892949464ae50ec6edb0bc6c99253912" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="402.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-401.el5]" date="1418256000">- [net] rds: fix possible double free on sock tear down (Herton R. Krzesinski) [1116880]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="60b8a8ec31ef4d47b875256e45238466cb262b55" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="404.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-403.el5]" date="1425600000">- [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
- [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
- [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
</package>
<package pkgid="08f13ec283e5bd80a816085a74cf74641b10fb44" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="406.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-405.el5]" date="1430438400">- [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
- [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
- [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
- [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
- [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
- [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
- [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
- [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
- [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
- [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
</package>
<package pkgid="6a8d934c8a9623886aece15d209621d47ca95b95" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="408.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
</package>
<package pkgid="721cf97176584dd5e974e505022df4ae5802c19d" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="409.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-409.el5]" date="1455321600">- [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
- [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [sched] prevent division by zero x-&gt;cpu_power (Denys Vlasenko) [1209728]
- [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}</changelog>
</package>
<package pkgid="c1c0e6386572068414f3469e7403b2bc5b5b700f" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="416.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-414.el5]" date="1474934400">- [redhat] Fix missed -413 kernel version (Alexander Gordeev)</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
</package>
<package pkgid="1de6f3531a6a446f50bf06103eaac7c40bed5eb9" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="417.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
</package>
<package pkgid="108dc5c56471e5593fbe61bca4f5e2c9e5d900bd" name="kernel-PAE-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="419.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-418.el5]" date="1484352000">- [sched] prevent NULL deref in find_busiest_group (Denys Vlasenko) [1376523]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-419.el5]" date="1487808000">- [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
- [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]</changelog>
</package>
<package pkgid="6b69a8ae9ca4786b186a108ea18543228be484e7" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.10.1.el5]" date="1302904800">- [fs] gfs2: creating large files suddenly slow to a crawl (Robert S Peterson) [690239 683155]
- [virt] hypervisor: Overflow fix for clocks &gt; 4GHz (Zachary Amsden) [690134 673242]
- [usb] fix usbfs isochronous data transfer regression (Don Zickus) [696136 688926]
- [fs] partitions: Fix corrupted OSF partition table parsing (Danny Feng) [688022 688023] {CVE-2011-1163}
- [misc] pm: add comment explaining is_registered kabi work-around (Don Zickus) [689699 637930]
- [media] sn9c102: fix world-wirtable sysfs files (Don Howard) [679304 679305]
- [scsi] scsi_dh_rdac: Add two new IBM devices to rdac_dev_list (Rob Evers) [692370 691460]
- [fs] block: fix submit_bh discarding barrier flag on sync write (Lukas Czerner) [690795 667673]
- [net] netfilter/ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689339 689340]
- [net] netfilter: ip6_tables: fix infoleak to userspace (Jiri Pirko) [689348 689349] {CVE-2011-1172}
- [net] netfilter/ip_tables: fix infoleak to userspace (Jiri Pirko) [689331 689332] {CVE-2011-1171}
- [net] netfilter/arp_tables: fix infoleak to userspace (Jiri Pirko) [689322 689323] {CVE-2011-1170}
- [base] Fix potential deadlock in driver core (Don Zickus) [689699 637930]
- [net] forcedeth/r8169: call netif_carrier_off at end of probe (Ivan Vecera) [689808 689805 664705 664707]
- [net] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [693751 680531]
- [net] ixgbe: limit VF access to network traffic (Andy Gospodarek) [693751 680531]
- [fs] lockd: make lockd_down wait for lockd to come down (Jeff Layton) [688156 653286]
- [fs] proc: protect mm start_/end_code in /proc/pid/stat (Eugene Teo) [684570 684571] {CVE-2011-0726}
- [net] dccp: fix oops in dccp_rcv_state_process (Eugene Teo) [682955 682956] {CVE-2011-1093}
- [net] bluetooth: fix bnep buffer overflow (Don Howard) [681318 681319] {CVE-2011-1079}
- [fs] nfs: break nfsd v4 lease on unlink, link, and rename (J. Bruce Fields) [693755 610093]
- [fs] nfs: break lease on nfsd v4 setattr (J. Bruce Fields) [693755 610093]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.11.1.el5]" date="1303941600">- [s390] dasd: fix race between open and offline (Hendrik Brueckner) [699808 695357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.12.1.el5]" date="1304805600">- [x86_64] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [i386] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [xen] fix MAX_EVTCHNS definition (Laszlo Ersek) [701242 701240]
- [net] ixgbe: fix for link failure on SFP+ DA cables (Don Howard) [696181 653236]
- [net] netxen: limit skb frags for non tso packet (Phillip Lougher) [699609 672368]
- [block] cciss: fix lost command problem (Phillip Lougher) [696503 696153]
- [fs] gfs2: fix filesystem hang caused by incorrect lock order (Robert S Peterson) [688855 656032]
- [fs] gfs2: restructure reclaim of unlinked dinodes (Phillip Lougher) [688855 656032]
- [fs] gfs2: unlock on gfs2_trans_begin error (Robert S Peterson) [688855 656032]
- [scsi] mpt2sas: prevent heap overflows and unchecked access (Tomas Henzl) [694526 694527] {CVE-2011-1495 CVE-2011-1494}
- [net] bridge/netfilter: fix ebtables information leak (Don Howard) [681325 681326] {CVE-2011-1080}
- [net] bluetooth: fix sco information leak to userspace (Don Howard) [681310 681311] {CVE-2011-1078}
- [fs] fix corrupted GUID partition table kernel oops (Jerome Marchand) [695979 695980] {CVE-2011-1577}
- [xen] x86/domain: fix error checks in arch_set_info_guest (Laszlo Ersek) [688581 688582] {CVE-2011-1166}
- [net] bridge: fix initial packet flood if !STP (Jiri Pirko) [701222 695369]
- [fs] nfsd: fix auth_domain reference leak on nlm operations (J. Bruce Fields) [697448 589512]
- [scsi] qla2xxx: no reset/fw-dump on CT/ELS pt req timeout (Chad Dupuis) [689700 660386]
- [mm] set barrier and send tlb flush to all affected cpus (Prarit Bhargava) [696908 675793]</changelog>
</package>
<package pkgid="4eb04207257716aa154781530db4dc7b77f8cccb" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.19.1.el5"/>
  <changelog author="Jiri Pirko &lt;jpirko@redhat.com&gt; [2.6.18-238.17.1.el5]" date="1308952800">- [net] bluetooth: l2cap and rfcomm: fix info leak to userspace (Thomas Graf) [703020 703021] {CVE-2011-2492}
- [net] inet_diag: fix inet_diag_bc_audit data validation (Thomas Graf) [714538 714539] {CVE-2011-2213}
- [misc] signal: fix kill signal spoofing issue (Oleg Nesterov) [690030 690031] {CVE-2011-1182}
- [fs] proc: fix signedness issue in next_pidmap (Oleg Nesterov) [697826 697827] {CVE-2011-1593}
- [char] agp: fix OOM and buffer overflow (Jerome Marchand) [699009 699010] {CVE-2011-1746}
- [char] agp: fix arbitrary kernel memory writes (Jerome Marchand) [699005 699006] {CVE-2011-2022 CVE-2011-1745}
- [infiniband] core: Handle large number of entries in poll CQ (Jay Fenlason) [668370 668371] {CVE-2011-1044 CVE-2010-4649}
- [infiniband] core: fix panic in ib_cm:cm_work_handler (Jay Fenlason) [679995 679996] {CVE-2011-0695}
- [fs] validate size of EFI GUID partition entries (Anton Arapov) [703027 703028] {CVE-2011-1776}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.18.1.el5]" date="1310076000">- [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]
- [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.19.1.el5]" date="1310335200">- Revert: [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]
- Revert: [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- Revert: [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- Revert: [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]</changelog>
</package>
<package pkgid="99555c2db3004c601bd8224b6e99c36b293c570f" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.10.1.el5]" date="1320357600">- [net] be2net: enable NETIF_F_LLTX and add own locking of Tx path (Ivan Vecera) [750912 731806]
- [net] be2net: fix multicast filter programming (Ivan Vecera) [750912 731806]
- [net] be2net: fix cmd-rx-filter not notifying MCC (Ivan Vecera) [750912 731806]
- [net] be2net: use RX_FILTER cmd to program multicast addresses (Ivan Vecera) [750912 731806]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.11.1.el5]" date="1320616800">- [fs] gfs2: speed up large file delete/unlink (Robert S Peterson) [743806 738440]
- [fs] cifs: fix wrong buffer length returned by SendReceive (Sachin Prabhu) [750842 720363]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [virt] xen/netback: disable features not supported by netfront (Paolo Bonzini) [746600 746225]
- [fs] nfs: don't redirty inodes with no outstanding commits (Jeff Layton) [750477 739665]
- [net] tg3: call netif_carrier_off to initialize operstate value (John Feeney) [744700 635982]
- [xen] make test_assign_device domctl dependent on intremap hw (Laszlo Ersek) [745726 740203]
- [xen] Propagate target dom within XEN_DOMCTL_test_assign_device (Laszlo Ersek) [745726 740203]
- [net] sctp: encode PROTOCOL VIOLATION error cause correctly (Thomas Graf) [750457 636828]
- [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [char] tpm: Zero buffer after copying to userspace (Jiri Benc) [732630 732631] {CVE-2011-1162}
- [fs] hfs: fix hfs_find_init() sb-&gt;ext_tree NULL ptr oops (Phillip Lougher) [712775 712776] {CVE-2011-2203}
- [net] sctp: Set correct error cause value for missing parameters (Thomas Graf) [750451 629938]
- [misc] kernel: plug taskstats io infoleak (Jerome Marchand) [716845 716846] {CVE-2011-2494}
- [usb] Make device reset stop retrying after disconnect (Don Zickus) [750841 709699]
- [net] ipv6: properly use ICMP6MSGOUT_INC_STATS in ndisc_send_skb (Jiri Pirko) [743611 698728]
- [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [741273 694625]
- [mm] s390: fix first time swap use results in heavy swapping (Hendrik Brueckner) [747876 722482]
- [virt] xen: fix GFP mask handling in dma_alloc_coherent (Laszlo Ersek) [742282 730247]
- [s390] kernel: fix system hang if hangcheck timer expires (Hendrik Brueckner) [747872 730313]
- [usb] fix interface sysfs file-creation bug (Don Zickus) [750848 637930]
- [usb] don't touch sysfs stuff when altsetting is unchanged (Don Zickus) [750848 637930]
- [base] Fix potential deadlock in driver core (Don Zickus) [750848 637930]
- [security] keys: Fix NULL deref in user-defined key type (David Howells) [751300 751301]
- [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.12.1.el5]" date="1320789600">- Revert: [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]</changelog>
</package>
<package pkgid="4cea2221748b38eaa038578760863641aee94e97" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.17.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.15.1.el5]" date="1324159200">- [net] e1000e: Avoid wrong check on TX hang (Dean Nelson) [766485 746272]
- [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749159 749160] {CVE-2011-4077}
- [pci] intel-iommu: Default to non-coherent for unattached domains (Don Dutile) [766803 753924]
- [fs] nfs: remove BUG() from encode_share_access() (Jeff Layton) [755442 754901] {CVE-2011-4324}
- [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [759387 756412]
- [fs] hfs: add sanity check for file name length (Eric Sandeen) [755432 755433] {CVE-2011-4330}
- [fs] proc: Fix select on /proc files without -&gt;poll (David Howells) [755483 751214]
- [fs] nfs: Ensure we mark inode as dirty if early exit from commit (Jeff Layton) [755482 714020]
- [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [750460 742079]
- [virt] kvm: fix regression w/ 32 bit KVM clock (Rik van Riel) [747875 753789 751742 731599]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [fs] jbd/jbd2: validate sb-&gt;s_first in journal_get_superblock (Eryu Guan) [753343 706810] {CVE-2011-4132}
- [net] igb: enable link power down (Stefan Assmann) [752735 742514]
- [fs] proc: fix oops on invalid /proc/&lt;pid&gt;/maps access (Johannes Weiner) [747851 747699] {CVE-2011-3637}
- [block] cciss: bump driver version (Tomas Henzl) [758024 714129]
- [block] cciss: need to delay after a PCI Power Management reset (Tomas Henzl) [758024 714129]
- [block] cciss: auto engage scsi susbsystem (Tomas Henzl) [758024 714129]
- [block] cciss: store pdev in hba struct (Tomas Henzl) [758024 714129]
- [block] cciss: use consistent variable names (Tomas Henzl) [758024 714129]
- [block] cciss: add a commandline switch for simple mode (Tomas Henzl) [758024 714129]
- [fs] proc: close race with exec in mem_read() (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] implement access_remote_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] factor out main logic of access_process_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] use mm_struct to resolve gate vma's in __get_user_pages (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make in_gate_area take mm_struct instead of a task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make get_gate_vma take mm_struct instead of task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [x86_64] mark assoc mm when running task in 32 bit compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [misc] sched: add ctx tag to mm running task in ia32 compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: require the target to be tracable (or yourself) (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: close race in /proc/*/environ (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: report errors in /proc/*/*map* sanely (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: shift down_read(mmap_sem) to the caller (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] detect exec transition phase with new mm but old creds (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [net] igb: fix i350 SR-IOV failture (Stefan Assmann) [741877 714313]
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [755457 754620] {CVE-2011-4325}
- [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [757146 714870] {CVE-2011-4348}
- [scsi] isci: fix 32-bit operation when CONFIG_HIGHMEM64G=n (Phillip Lougher) [750458 713904]
- [net] tg3: Only allow phy ioctls while netif_running (Phillip Lougher) [746343 683393]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
</package>
<package pkgid="061cb4042c04fd468a28bbca21a2855ab8bb3cc8" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.18.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.18.1.el5]" date="1327096800">- [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [771774 750283] {CVE-2012-0028}
- [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [773322 771592]
- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747943 747946] {CVE-2011-3638}
- [scsi] don't fail scans when host is in recovery (Rob Evers) [772162 657345]
- [fs] jbd2: clear BH_Delay &amp; BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783477 783284] {CVE-2011-4086}
- [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772868 772869] {CVE-2012-0207}</changelog>
</package>
<package pkgid="5ea86ab6791594ab2c531a06a50ba688a350ff03" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.3.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.1.1.el5]" date="1312581600">- [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [714869 714867]
- [x86_64] Revert ACPI APIC mode test (Prarit Bhargava) [728163 721361]
- [net] sctp: reset packet information after packet transmit (Thomas Graf) [727592 725573]
- [fs] block: initialise bd_super in bdget (Lachlan McIlroy) [726628 707425]
- [fs] nfs: Remove bogus call to nfs4_drop_state_owner (Jeff Layton) [726625 724923]
- [net] be2net: clear interrupt bit in be_probe (Ivan Vecera) [723552 713703]
- [net] be2net: remove certain cmd failure logging (Ivan Vecera) [726619 716821]
- [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [718154 718155] {CVE-2011-2517}
- [fs] xfs: handle NULL mount struct in error reports (Eric Sandeen) [727835 720551]
- [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716827 716828] {CVE-2011-2495}
- [fs] lockd: don't use file's credentials on RPCSEC_GSS mounts (Max Matveev) [722855 701574]
- [fs] xfs: add a missing mutex_unlock to a dio error path (Jeff Moyer) [727590 718232]
- [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [709546 709547] {CVE-2011-2491}
- [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [718883 718884]
- [xen] Fix x86_emulate handling of imul with immediate operands (Igor Mammedov) [712885 700565]
- [fs] Fix wrongly vfree'ing a kmalloc'ed area (Larry Woodman) [721300 719495]
- [fs] dlm: bump default hash table and maximum allocatable sizes (Bryn M. Reeves) [719930 715603]
- [net] tipc: Overhaul of socket locking logic (Max Matveev) [719746 704192]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.18-274.2.1.el5]" date="1313186400">- Fix up some fallout from RHEL5.7 kernel package structure changes</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.3.1.el5]" date="1314396000">- [xen] fix off-by-one shift in x86_64 __addr_ok (Laszlo Ersek) [728043 719850] {CVE-2011-2901}</changelog>
</package>
<package pkgid="23a1fe0d3a25868e8ebbade933c91ea3a1909026" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.7.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.5.1.el5]" date="1316210400">- [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [732775 675781]
- [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [732775 675781]
- [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [fs] nfs: Fix client not honoring nosharecache mount option (David Jeffery) [734772 730097]
- [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716543 716544] {CVE-2011-2496}
- [mm] Fix incorrect off-by-one centisec dirty values (Larry Woodman) [733665 691087]
- [net] bnx2x: fix bringup of BCM57710 (Michal Schmidt) [737475 680411]
- [virt] xen/netfront: no disable s/g when renegotiating features (Paolo Bonzini) [738392 733416]
- [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734157 727504]
- [virt] xen: Allow arbitrary mtu size until frontend connected (Paolo Bonzini) [738389 697021]
- [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730689 692966]
- [net] cnic, bnx2: Check iSCSI support early in bnx2_init_one (Neil Horman) [734761 710272]
- [net] igb: fix WOL on 2nd port on i350 (Stefan Assmann) [730682 718988]
- [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [728521 720212]</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.6.1.el5]" date="1316815200">- [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [730949 703045] {CVE-2011-2942}
- [misc] remove	div_long_long_rem (Prarit Bhargava) [732879 732614] {CVE-2011-3209}
- [net] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: Use NTWK_RX_FILTER command for promiscous mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: non-member vlan pkts not received in promisc mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: remove bogus unlikely on vlan check (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [x86] nmi: make NMI_NONE default watchdog in x86_64 hvm guests (Laszlo Ersek) [739823 707966]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.7.1.el5]" date="1318888800">- Revert: [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
</package>
<package pkgid="5056b4f4a30d941160fa30a0ff0b814487635bd0" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.11.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.9.1.el5]" date="1339020000">- [fs] jbd: clear b_modified before moving the jh to a different transaction (Josef Bacik) [827205 563247]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.10.1.el5]" date="1339711200">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970] {CVE-2012-2934}
- [scsi] qla2xxx: Use ha-&gt;pdev-&gt;revision in 4Gbps MSI-X check. (Chad Dupuis) [816373 800653]
- [fs] sunrpc: do array overrun check in svc_recv before page alloc (J. Bruce Fields) [820358 814626]
- [fs] knfsd: fix an NFSD bug with full size non-page-aligned reads (J. Bruce Fields) [820358 814626]
- [fs] sunrpc: fix oops due to overrunning server's page array (J. Bruce Fields) [820358 814626]
- [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [829670 817131]
- [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [824654 818787]
- [net] sunrpc: Don't use list_for_each_entry_safe in rpc_wake_up (Steve Dickson) [817571 809937]
- [s390] qeth: add missing wake_up call (Hendrik Brueckner) [829059 790900]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
</package>
<package pkgid="4066374efb0773d8a398af20bbdc49af538a5e80" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.13.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.12.1.el5]" date="1342216800">- [fs] nfs: Don't allow multiple mounts on same mntpnt with -o noac (Sachin Prabhu) [839806 839753]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.13.1.el5]" date="1343340000">- [net] e1000e: Cleanup logic in e1000_check_for_serdes_link_82571 (Dean Nelson) [841370 771366]
- [net] e1000e: Correct link check logic for 82571 serdes (Dean Nelson) [841370 771366]
- [mm] NULL pointer dereference in __vm_enough_memory (Jerome Marchand) [840077 836244]
- [fs] dlm: fix slow rsb search in dir recovery (David Teigland) [838140 753244]
- [fs] autofs: propogate LOOKUP_DIRECTORY flag only for last comp (Ian Kent) [830264 814418]
- [fs] ext4: properly dirty split extent nodes (Eric Sandeen) [840946 839770]
- [scsi] don't offline devices with a reservation conflict (David Jeffery) [839196 835660]
- [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate (Lukas Czerner) [837226 830351]
- [net] dl2k: Clean up rio_ioctl (Weiping Pan) [818822 818823] {CVE-2012-2313}
- [x86] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835450 834562]
- [net] tg3: Fix TSO handling (John Feeney) [833182 795672]
- [input] evdev: use after free from open/disconnect race (David Jeffery) [832448 822166]</changelog>
</package>
<package pkgid="64c1db3ef9d5acca732b6420fee139087539302f" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.14.1.el5]" date="1346277600">- [net] e1000e: drop check of RXCW.CW to eliminate link up and down (Dean Nelson) [852448 840642]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.15.1.el5]" date="1346882400">- [net] sfc: Fix max no of TSO segments and min TX queue size (Michal Schmidt) [845554 845555] {CVE-2012-3412}
- [kernel] xacct_add_tsk: fix pure theoretical -&gt;mm use-after-free (Nikola Pajkovsky) [849723 849725] {CVE-2012-3510}
- [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820255 820256] {CVE-2012-2319}
- [net] netfilter: add dscp netfilter match (Thomas Graf) [847327 842029]
- [net] rds: set correct msg_namelen (Weiping Pan) [822727 822728] {CVE-2012-3430}
- [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [847359 693822]
- [fs] quota: manage reserved space when quota is not active (Eric Sandeen) [847326 818087]
- [fs] quota: Fix warning if delayed write before quota is enabled (Eric Sandeen) [847326 818087]
- [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]
- [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- [xen] x86: whitelist Enhanced SpeedStep for dom0 (Laszlo Ersek) [846125 809103]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.16.1.el5]" date="1348005600">- Revert: [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- Revert: [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- Revert: [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]</changelog>
</package>
<package pkgid="36d0e599bf3283dca3266e588dc8e72d5e2bcac9" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.20.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.18.1.el5]" date="1350079200">- [fs] autofs4: Merge the remaining dentry ops tables (Ian Kent) [857558 850977]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.19.1.el5]" date="1350597600">- [net] be2net: Remove code that stops further access to BE NIC based on UE bits (Alexander Gordeev) [867896 862811]
- [net] netpoll: fix an incorrect check for NULL pointer (Alexander Gordeev) [856079 848098]
- [net] mlx4: Add support for EEH error recovery (Alexander Gordeev) [847404 798048]
- [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] fix crash if block {device|size} read &amp; changed at sametime (Mikulas Patocka) [864823 756506]
- [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}
- [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [861387 819830]
- [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [858774 857448]
- [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [859946 858724]
- [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [857966 854067]
- [scsi] isci: fixup linkspeed definitions (David Milburn) [854986 833000]
- [fs] nfs: nfs_d_automount update caller path after do_add_mount (Carlos Maiolino) [857552 834379]
- [fs] vfs: Fix vfsmount overput on simultaneous automount (Carlos Maiolino) [857552 834379]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.20.1.el5]" date="1352239200">- Revert: [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}</changelog>
</package>
<package pkgid="27c92625d3243cb3864c87a8e6b46a570e1bbb90" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.24.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.22.1.el5]" date="1353362400">- [net] bonding: fix link down handling in 802.3ad mode (Andy Gospodarek) [877943 782866]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.23.1.el5]" date="1353535200">- [net] bnx2x: Add remote-fault link detection (Alexander Gordeev) [870120 796905]
- [net] bnx2x: Cosmetic changes (Alexander Gordeev) [870120 796905]
- [net] rds-ping cause kernel panic (Alexander Gordeev) [822755 822756] {CVE-2012-2372}
- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878033 878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870148 870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870150 870151] {CVE-2012-4535}
- [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.24.1.el5]" date="1353535201">- Revert: [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
</package>
<package pkgid="75413aa12ee946bc976b8f3ea30efdf9f204bf0f" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.2.1.el5]" date="1329861600">- [fs] nfs: nfs_fhget should wait on I_NEW instead of I_LOCK (Sachin Prabhu) [795664 785062]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.3.1.el5]" date="1332453600">- [net] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [805462 773735]
- [net] be2net: add vlan/rx-mode/flow-control config to be_setup (Ivan Vecera) [805462 773735]
- [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [805460 799170]
- [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry (Ian Kent) [801726 798809]
- [fs] vfs: fix d_instantiate_unique (Ian Kent) [801726 798809]
- [fs] nfs: allow high priority COMMITs to bypass inode commit lock (Jeff Layton) [799941 773777]
- [fs] nfs: don't skip COMMITs if system under is mem pressure (Jeff Layton) [799941 773777]
- [scsi] qla2xxx: Read the HCCR register to flush any PCIe writes (Chad Dupuis) [798748 772192]
- [scsi] qla2xxx: Complete mbox cmd timeout before next reset cycle (Chad Dupuis) [798748 772192]
- [s390] qdio: wrong buffers-used counter for ERROR buffers (Hendrik Brueckner) [801724 790840]
- [net] bridge: Reset IPCB when entering IP stack (Herbert Xu) [804721 749813]
- [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770649 770650]
- [fs] procfs: parse mount options (Jerome Marchand) [770649 770650]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.4.1.el5]" date="1332972000">- [net] ipv6: fix skb double free in xfrm6_tunnel (Jiri Benc) [752305 743375] {CVE-2012-1583}</changelog>
</package>
<package pkgid="4eba6a31df319cee36d27a6d77382690b14d8dc8" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.6.1.el5]" date="1335564000">- [scsi] fc class: fix scanning when devs are offline (Mike Christie) [816684 799530]
- [md] dm-multipath: delay retry of bypassed pg (Mike Christie) [816684 799530]
- [net] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [811927 800575]
- [net] bonding: remove {master,vlan}_ip and query devices instead (Andy Gospodarek) [810321 772216]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
</package>
<package pkgid="d22bb6ef08f6bbaf18eeb7e36ddb287c4213eb82" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.2.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.2.el5]" date="1338328800">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970]</changelog>
</package>
<package pkgid="2bd6d245e784c9b2ae826bf3c008d76c0cb5dab2" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.1.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-347.el5]" date="1353448800">- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870151] {CVE-2012-4535}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
</package>
<package pkgid="dcc61d157f79afa527f5adfede62a4fd74095b63" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.12.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.10.1.el5]" date="1370642400">- [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955600 955601] {CVE-2013-3224}
- [net] Bluetooth: HCI &amp; L2CAP information leaks (Jacob Tanenbaum) [922415 922416] {CVE-2012-6544}
- [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [971872 872531]
- [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [971872 872531]
- [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [958021 864648]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.11.1.el5]" date="1371852000">- Revert: [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
- Revert: [x86-64] non lazy sleazy fpu implementation (Prarit Bhargava) [948187 731531]
- Revert: [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- Revert: [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- Revert: [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.12.1.el5]" date="1372716000">- Revert: [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]</changelog>
</package>
<package pkgid="3774870efd9f65e9062e11872a83ead956cf72d7" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.14.1.el5]" date="1374019200">- [net] Fix panic for vlan over gre via tun (Thomas Graf) [983452 981337]
- [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [983628 865095]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.15.1.el5]" date="1374537600">- [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [976441 853145]
- [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [976441 853145]
- [fs] nfs: define function to update nfsi-&gt;cache_change_attribute (Scott Mayhew) [976441 853145]
- [net] af_key: fix info leaks in notify messages (Jiri Benc) [980999 981000] {CVE-2013-2234}
- [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981222 981224] {CVE-2013-2237}
- [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981556 981557] {CVE-2013-2232}
- [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980141 980142] {CVE-2013-2224}
- [x86_64] Early segment setup for VT (Paolo Bonzini) [979920 978305]
- [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971245 971246] {CVE-2013-2147}
- [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973103 973104] {CVE-2013-2164}
- [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [972583 965359]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="4f0afeaab833087f6e0ab8a7ef9676fa23c9825b" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.18.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.17.1.el5]" date="1377216000">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [999819 995961]
- [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [983864 956322]
- [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [983864 956322]
- [net] be2net: disable TX in be_close() (Ivan Vecera) [983864 956322]
- [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [983864 956322]
- [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [983864 956322]
- [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [983864 956322]
- [net] be2net: Fixed memory leak (Ivan Vecera) [983864 956322]
- [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [983864 956322]
- [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [983864 956322]
- [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [983864 956322]
- [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [983864 956322]
- [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [983864 956322]
- [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [983864 956322]
- [net] be2net: Fix Endian (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [983864 956322]
- [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [983864 956322]
- [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [983864 956322]
- [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [983864 956322]
- [net] be2net: cleanup be_vid_config() (Ivan Vecera) [983864 956322]
- [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [983864 956322]
- [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [983864 956322]
- [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [983864 956322]
- [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [983864 956322]
- [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [983864 956322]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.18.1.el5]" date="1378512000">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [1005239 987539]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970874 970875] {CVE-2013-2141}
- [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987647 987648] {CVE-2013-4162}
- [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849735 849736] {CVE-2012-3511}
- [fs] autofs: remove autofs dentry mount check (Ian Kent) [1001488 928098]</changelog>
</package>
<package pkgid="139392faef85a93af109c7597b6e9270a050f520" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.2.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
</package>
<package pkgid="31a7b27c8c17e7d5bfe93d5de1e45b9600168f0a" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.3.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
</package>
<package pkgid="0adcce7d5371538333be0a905b4ceabbc90673ba" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
</package>
<package pkgid="ebcf3cd4349a66837b22cda4b6910801c93f1b58" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.6.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.5.1.el5]" date="1365804000">- [fs] nfs: handle getattr failure during nfsv4 open (David Jeffery) [947736 906909]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.6.1.el5]" date="1367013600">- [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [953435 947732]
- [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [953435 947732]
- [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [954296 948317]
- [fs] nfs: Fix bugs on short read (Sachin Prabhu) [952098 924011]
- [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] introduce xzalloc() &amp; Co (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="c3427bcbbc15a8f27bec9926f279b5aafbad70d8" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.1.2.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.2.el5]" date="1381190400">- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
</package>
<package pkgid="13f6daeaddf2a51fa9cc2e3e6f462e67894c3808" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.11.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
</package>
<package pkgid="da106b27c872201be0b1a7d213f4794b7fe831d6" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.12.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.12.1.el5]" date="1407456000">- [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102702 1102703] {CVE-2014-3917}
- [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1125246 1080194]
- [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [1121017 924590]
- [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1116027 1081785]
- [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1117665 1102768]</changelog>
</package>
<package pkgid="31b00ddff943359dca624bd8e474137cb5f00a10" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.3.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
</package>
<package pkgid="5903796ce40501c3ef0b2f5a03e991ec6cf9ace1" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.4.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
</package>
<package pkgid="dba19aabc998d524384968e288036800e1059696" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.6.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.5.1.el5]" date="1390348800">- [fs] cifs: stop trying to use virtual circuits (Sachin Prabhu) [1044328 1013469]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
</package>
<package pkgid="ef41bb816c3e39e60d30c334b6cc6273b5300c7b" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.8.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
</package>
<package pkgid="ff0ebe32784febc2e6ebad012694fa60f2af99ec" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.9.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
</package>
<package pkgid="7397487c4c5e053bb76a4f0e4b3197076e261b8b" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-369.el5]" date="1376092800">- [fs] nlm: Ensure we resend pending blocking locks after a reclaim (Steve Dickson) [918592]
- [kernel] kmod: kthread_run causes oom killer deadlock (Frantisek Hrbata) [983506]
- [fs] nfs4: ratelimit some messages, add name to bad seq-id mess (Dave Wysochanski) [953121]
- [fs] nfsd: fix EXDEV checking in rename (J. Bruce Fields) [515599]
- [misc] tty: Fix abusers of current-sighand-&gt;tty (Aaron Tomlin) [858981]
- [net] ipv6: don't call addrconf_dst_alloc again when enable lo (Jiri Benc) [981417]
- [redhat] kabi: Adding symbol fc_fabric_login (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_reset (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_els_send (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_fabric_logoff (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_set_mfs (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_elsct_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_up (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv_flogi (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_depth (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_down (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_type (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_free (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_alloc (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_config (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_disc_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol strict_strtoul (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_rport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_get_host_port_state (Jiri Olsa) [864256]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-370.el5]" date="1376956800">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [995961]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970875] {CVE-2013-2141}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
</package>
<package pkgid="fa4596fcaae8234697b63dd435117566a39f1940" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.1.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.1.1.el5]" date="1418601600">- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="eaecbea1f7f0a508ab2c65112a7cf414d2393a57" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-398.el5]" date="1407888000">- [net] security_socket_post_accept before fd_install in sys_accept (Denys Vlasenko) [1059078]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
</package>
<package pkgid="bff5b7cd8a8506bfe4cb8bf92c05aac21b9702e1" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="402.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-401.el5]" date="1418256000">- [net] rds: fix possible double free on sock tear down (Herton R. Krzesinski) [1116880]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="f571b76b0f62aad14953640dc017fff0b3b825ac" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="404.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-403.el5]" date="1425600000">- [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
- [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
- [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
</package>
<package pkgid="c4e11c5cd32d850547081a06d084c0fcca7d023e" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="406.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-405.el5]" date="1430438400">- [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
- [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
- [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
- [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
- [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
- [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
- [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
- [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
- [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
- [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
</package>
<package pkgid="50d090b48289ba77cc6fad366d236086fc18b50c" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="408.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
</package>
<package pkgid="c149af114bb5bf9bee115f68cb915fe85f3fa22e" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="409.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-409.el5]" date="1455321600">- [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
- [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [sched] prevent division by zero x-&gt;cpu_power (Denys Vlasenko) [1209728]
- [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}</changelog>
</package>
<package pkgid="90f815a18b9056d848ad6fa770cf941365a4076b" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="416.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-414.el5]" date="1474934400">- [redhat] Fix missed -413 kernel version (Alexander Gordeev)</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
</package>
<package pkgid="74482b27c658f0e324b365b4e5abd8ea592a918b" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="417.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
</package>
<package pkgid="d651731e0dee165249599e1543aecb4c2390741b" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.18" rel="419.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-418.el5]" date="1484352000">- [sched] prevent NULL deref in find_busiest_group (Denys Vlasenko) [1376523]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-419.el5]" date="1487808000">- [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
- [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]</changelog>
</package>
<package pkgid="4cb2f04e4eeb0282dd3629d3d5219187a11781b6" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.10.1.el5]" date="1302904800">- [fs] gfs2: creating large files suddenly slow to a crawl (Robert S Peterson) [690239 683155]
- [virt] hypervisor: Overflow fix for clocks &gt; 4GHz (Zachary Amsden) [690134 673242]
- [usb] fix usbfs isochronous data transfer regression (Don Zickus) [696136 688926]
- [fs] partitions: Fix corrupted OSF partition table parsing (Danny Feng) [688022 688023] {CVE-2011-1163}
- [misc] pm: add comment explaining is_registered kabi work-around (Don Zickus) [689699 637930]
- [media] sn9c102: fix world-wirtable sysfs files (Don Howard) [679304 679305]
- [scsi] scsi_dh_rdac: Add two new IBM devices to rdac_dev_list (Rob Evers) [692370 691460]
- [fs] block: fix submit_bh discarding barrier flag on sync write (Lukas Czerner) [690795 667673]
- [net] netfilter/ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689339 689340]
- [net] netfilter: ip6_tables: fix infoleak to userspace (Jiri Pirko) [689348 689349] {CVE-2011-1172}
- [net] netfilter/ip_tables: fix infoleak to userspace (Jiri Pirko) [689331 689332] {CVE-2011-1171}
- [net] netfilter/arp_tables: fix infoleak to userspace (Jiri Pirko) [689322 689323] {CVE-2011-1170}
- [base] Fix potential deadlock in driver core (Don Zickus) [689699 637930]
- [net] forcedeth/r8169: call netif_carrier_off at end of probe (Ivan Vecera) [689808 689805 664705 664707]
- [net] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [693751 680531]
- [net] ixgbe: limit VF access to network traffic (Andy Gospodarek) [693751 680531]
- [fs] lockd: make lockd_down wait for lockd to come down (Jeff Layton) [688156 653286]
- [fs] proc: protect mm start_/end_code in /proc/pid/stat (Eugene Teo) [684570 684571] {CVE-2011-0726}
- [net] dccp: fix oops in dccp_rcv_state_process (Eugene Teo) [682955 682956] {CVE-2011-1093}
- [net] bluetooth: fix bnep buffer overflow (Don Howard) [681318 681319] {CVE-2011-1079}
- [fs] nfs: break nfsd v4 lease on unlink, link, and rename (J. Bruce Fields) [693755 610093]
- [fs] nfs: break lease on nfsd v4 setattr (J. Bruce Fields) [693755 610093]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.11.1.el5]" date="1303941600">- [s390] dasd: fix race between open and offline (Hendrik Brueckner) [699808 695357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.12.1.el5]" date="1304805600">- [x86_64] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [i386] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [xen] fix MAX_EVTCHNS definition (Laszlo Ersek) [701242 701240]
- [net] ixgbe: fix for link failure on SFP+ DA cables (Don Howard) [696181 653236]
- [net] netxen: limit skb frags for non tso packet (Phillip Lougher) [699609 672368]
- [block] cciss: fix lost command problem (Phillip Lougher) [696503 696153]
- [fs] gfs2: fix filesystem hang caused by incorrect lock order (Robert S Peterson) [688855 656032]
- [fs] gfs2: restructure reclaim of unlinked dinodes (Phillip Lougher) [688855 656032]
- [fs] gfs2: unlock on gfs2_trans_begin error (Robert S Peterson) [688855 656032]
- [scsi] mpt2sas: prevent heap overflows and unchecked access (Tomas Henzl) [694526 694527] {CVE-2011-1495 CVE-2011-1494}
- [net] bridge/netfilter: fix ebtables information leak (Don Howard) [681325 681326] {CVE-2011-1080}
- [net] bluetooth: fix sco information leak to userspace (Don Howard) [681310 681311] {CVE-2011-1078}
- [fs] fix corrupted GUID partition table kernel oops (Jerome Marchand) [695979 695980] {CVE-2011-1577}
- [xen] x86/domain: fix error checks in arch_set_info_guest (Laszlo Ersek) [688581 688582] {CVE-2011-1166}
- [net] bridge: fix initial packet flood if !STP (Jiri Pirko) [701222 695369]
- [fs] nfsd: fix auth_domain reference leak on nlm operations (J. Bruce Fields) [697448 589512]
- [scsi] qla2xxx: no reset/fw-dump on CT/ELS pt req timeout (Chad Dupuis) [689700 660386]
- [mm] set barrier and send tlb flush to all affected cpus (Prarit Bhargava) [696908 675793]</changelog>
</package>
<package pkgid="716c347211b3cab64f0c18e5d2e477c292c0ab80" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.19.1.el5"/>
  <changelog author="Jiri Pirko &lt;jpirko@redhat.com&gt; [2.6.18-238.17.1.el5]" date="1308952800">- [net] bluetooth: l2cap and rfcomm: fix info leak to userspace (Thomas Graf) [703020 703021] {CVE-2011-2492}
- [net] inet_diag: fix inet_diag_bc_audit data validation (Thomas Graf) [714538 714539] {CVE-2011-2213}
- [misc] signal: fix kill signal spoofing issue (Oleg Nesterov) [690030 690031] {CVE-2011-1182}
- [fs] proc: fix signedness issue in next_pidmap (Oleg Nesterov) [697826 697827] {CVE-2011-1593}
- [char] agp: fix OOM and buffer overflow (Jerome Marchand) [699009 699010] {CVE-2011-1746}
- [char] agp: fix arbitrary kernel memory writes (Jerome Marchand) [699005 699006] {CVE-2011-2022 CVE-2011-1745}
- [infiniband] core: Handle large number of entries in poll CQ (Jay Fenlason) [668370 668371] {CVE-2011-1044 CVE-2010-4649}
- [infiniband] core: fix panic in ib_cm:cm_work_handler (Jay Fenlason) [679995 679996] {CVE-2011-0695}
- [fs] validate size of EFI GUID partition entries (Anton Arapov) [703027 703028] {CVE-2011-1776}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.18.1.el5]" date="1310076000">- [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]
- [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.19.1.el5]" date="1310335200">- Revert: [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]
- Revert: [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- Revert: [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- Revert: [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]</changelog>
</package>
<package pkgid="8b5cd2394c5a28daaaf3d6a687da6a1adc891c8b" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.10.1.el5]" date="1320357600">- [net] be2net: enable NETIF_F_LLTX and add own locking of Tx path (Ivan Vecera) [750912 731806]
- [net] be2net: fix multicast filter programming (Ivan Vecera) [750912 731806]
- [net] be2net: fix cmd-rx-filter not notifying MCC (Ivan Vecera) [750912 731806]
- [net] be2net: use RX_FILTER cmd to program multicast addresses (Ivan Vecera) [750912 731806]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.11.1.el5]" date="1320616800">- [fs] gfs2: speed up large file delete/unlink (Robert S Peterson) [743806 738440]
- [fs] cifs: fix wrong buffer length returned by SendReceive (Sachin Prabhu) [750842 720363]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [virt] xen/netback: disable features not supported by netfront (Paolo Bonzini) [746600 746225]
- [fs] nfs: don't redirty inodes with no outstanding commits (Jeff Layton) [750477 739665]
- [net] tg3: call netif_carrier_off to initialize operstate value (John Feeney) [744700 635982]
- [xen] make test_assign_device domctl dependent on intremap hw (Laszlo Ersek) [745726 740203]
- [xen] Propagate target dom within XEN_DOMCTL_test_assign_device (Laszlo Ersek) [745726 740203]
- [net] sctp: encode PROTOCOL VIOLATION error cause correctly (Thomas Graf) [750457 636828]
- [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [char] tpm: Zero buffer after copying to userspace (Jiri Benc) [732630 732631] {CVE-2011-1162}
- [fs] hfs: fix hfs_find_init() sb-&gt;ext_tree NULL ptr oops (Phillip Lougher) [712775 712776] {CVE-2011-2203}
- [net] sctp: Set correct error cause value for missing parameters (Thomas Graf) [750451 629938]
- [misc] kernel: plug taskstats io infoleak (Jerome Marchand) [716845 716846] {CVE-2011-2494}
- [usb] Make device reset stop retrying after disconnect (Don Zickus) [750841 709699]
- [net] ipv6: properly use ICMP6MSGOUT_INC_STATS in ndisc_send_skb (Jiri Pirko) [743611 698728]
- [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [741273 694625]
- [mm] s390: fix first time swap use results in heavy swapping (Hendrik Brueckner) [747876 722482]
- [virt] xen: fix GFP mask handling in dma_alloc_coherent (Laszlo Ersek) [742282 730247]
- [s390] kernel: fix system hang if hangcheck timer expires (Hendrik Brueckner) [747872 730313]
- [usb] fix interface sysfs file-creation bug (Don Zickus) [750848 637930]
- [usb] don't touch sysfs stuff when altsetting is unchanged (Don Zickus) [750848 637930]
- [base] Fix potential deadlock in driver core (Don Zickus) [750848 637930]
- [security] keys: Fix NULL deref in user-defined key type (David Howells) [751300 751301]
- [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.12.1.el5]" date="1320789600">- Revert: [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]</changelog>
</package>
<package pkgid="8182557c84bd515fe2777bdd5a3c9f1ffb3c5443" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.17.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.15.1.el5]" date="1324159200">- [net] e1000e: Avoid wrong check on TX hang (Dean Nelson) [766485 746272]
- [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749159 749160] {CVE-2011-4077}
- [pci] intel-iommu: Default to non-coherent for unattached domains (Don Dutile) [766803 753924]
- [fs] nfs: remove BUG() from encode_share_access() (Jeff Layton) [755442 754901] {CVE-2011-4324}
- [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [759387 756412]
- [fs] hfs: add sanity check for file name length (Eric Sandeen) [755432 755433] {CVE-2011-4330}
- [fs] proc: Fix select on /proc files without -&gt;poll (David Howells) [755483 751214]
- [fs] nfs: Ensure we mark inode as dirty if early exit from commit (Jeff Layton) [755482 714020]
- [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [750460 742079]
- [virt] kvm: fix regression w/ 32 bit KVM clock (Rik van Riel) [747875 753789 751742 731599]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [fs] jbd/jbd2: validate sb-&gt;s_first in journal_get_superblock (Eryu Guan) [753343 706810] {CVE-2011-4132}
- [net] igb: enable link power down (Stefan Assmann) [752735 742514]
- [fs] proc: fix oops on invalid /proc/&lt;pid&gt;/maps access (Johannes Weiner) [747851 747699] {CVE-2011-3637}
- [block] cciss: bump driver version (Tomas Henzl) [758024 714129]
- [block] cciss: need to delay after a PCI Power Management reset (Tomas Henzl) [758024 714129]
- [block] cciss: auto engage scsi susbsystem (Tomas Henzl) [758024 714129]
- [block] cciss: store pdev in hba struct (Tomas Henzl) [758024 714129]
- [block] cciss: use consistent variable names (Tomas Henzl) [758024 714129]
- [block] cciss: add a commandline switch for simple mode (Tomas Henzl) [758024 714129]
- [fs] proc: close race with exec in mem_read() (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] implement access_remote_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] factor out main logic of access_process_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] use mm_struct to resolve gate vma's in __get_user_pages (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make in_gate_area take mm_struct instead of a task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make get_gate_vma take mm_struct instead of task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [x86_64] mark assoc mm when running task in 32 bit compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [misc] sched: add ctx tag to mm running task in ia32 compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: require the target to be tracable (or yourself) (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: close race in /proc/*/environ (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: report errors in /proc/*/*map* sanely (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: shift down_read(mmap_sem) to the caller (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] detect exec transition phase with new mm but old creds (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [net] igb: fix i350 SR-IOV failture (Stefan Assmann) [741877 714313]
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [755457 754620] {CVE-2011-4325}
- [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [757146 714870] {CVE-2011-4348}
- [scsi] isci: fix 32-bit operation when CONFIG_HIGHMEM64G=n (Phillip Lougher) [750458 713904]
- [net] tg3: Only allow phy ioctls while netif_running (Phillip Lougher) [746343 683393]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
</package>
<package pkgid="c9a202c7d8c45dbddfa56f730b6de337ed728606" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.18.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.18.1.el5]" date="1327096800">- [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [771774 750283] {CVE-2012-0028}
- [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [773322 771592]
- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747943 747946] {CVE-2011-3638}
- [scsi] don't fail scans when host is in recovery (Rob Evers) [772162 657345]
- [fs] jbd2: clear BH_Delay &amp; BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783477 783284] {CVE-2011-4086}
- [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772868 772869] {CVE-2012-0207}</changelog>
</package>
<package pkgid="621c76013352ab435f8ae67e256ed823d7b706ae" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.3.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.1.1.el5]" date="1312581600">- [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [714869 714867]
- [x86_64] Revert ACPI APIC mode test (Prarit Bhargava) [728163 721361]
- [net] sctp: reset packet information after packet transmit (Thomas Graf) [727592 725573]
- [fs] block: initialise bd_super in bdget (Lachlan McIlroy) [726628 707425]
- [fs] nfs: Remove bogus call to nfs4_drop_state_owner (Jeff Layton) [726625 724923]
- [net] be2net: clear interrupt bit in be_probe (Ivan Vecera) [723552 713703]
- [net] be2net: remove certain cmd failure logging (Ivan Vecera) [726619 716821]
- [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [718154 718155] {CVE-2011-2517}
- [fs] xfs: handle NULL mount struct in error reports (Eric Sandeen) [727835 720551]
- [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716827 716828] {CVE-2011-2495}
- [fs] lockd: don't use file's credentials on RPCSEC_GSS mounts (Max Matveev) [722855 701574]
- [fs] xfs: add a missing mutex_unlock to a dio error path (Jeff Moyer) [727590 718232]
- [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [709546 709547] {CVE-2011-2491}
- [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [718883 718884]
- [xen] Fix x86_emulate handling of imul with immediate operands (Igor Mammedov) [712885 700565]
- [fs] Fix wrongly vfree'ing a kmalloc'ed area (Larry Woodman) [721300 719495]
- [fs] dlm: bump default hash table and maximum allocatable sizes (Bryn M. Reeves) [719930 715603]
- [net] tipc: Overhaul of socket locking logic (Max Matveev) [719746 704192]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.18-274.2.1.el5]" date="1313186400">- Fix up some fallout from RHEL5.7 kernel package structure changes</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.3.1.el5]" date="1314396000">- [xen] fix off-by-one shift in x86_64 __addr_ok (Laszlo Ersek) [728043 719850] {CVE-2011-2901}</changelog>
</package>
<package pkgid="967050e738406daf15d41ea762e97a08de4822c4" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.7.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.5.1.el5]" date="1316210400">- [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [732775 675781]
- [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [732775 675781]
- [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [fs] nfs: Fix client not honoring nosharecache mount option (David Jeffery) [734772 730097]
- [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716543 716544] {CVE-2011-2496}
- [mm] Fix incorrect off-by-one centisec dirty values (Larry Woodman) [733665 691087]
- [net] bnx2x: fix bringup of BCM57710 (Michal Schmidt) [737475 680411]
- [virt] xen/netfront: no disable s/g when renegotiating features (Paolo Bonzini) [738392 733416]
- [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734157 727504]
- [virt] xen: Allow arbitrary mtu size until frontend connected (Paolo Bonzini) [738389 697021]
- [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730689 692966]
- [net] cnic, bnx2: Check iSCSI support early in bnx2_init_one (Neil Horman) [734761 710272]
- [net] igb: fix WOL on 2nd port on i350 (Stefan Assmann) [730682 718988]
- [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [728521 720212]</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.6.1.el5]" date="1316815200">- [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [730949 703045] {CVE-2011-2942}
- [misc] remove	div_long_long_rem (Prarit Bhargava) [732879 732614] {CVE-2011-3209}
- [net] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: Use NTWK_RX_FILTER command for promiscous mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: non-member vlan pkts not received in promisc mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: remove bogus unlikely on vlan check (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [x86] nmi: make NMI_NONE default watchdog in x86_64 hvm guests (Laszlo Ersek) [739823 707966]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.7.1.el5]" date="1318888800">- Revert: [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
</package>
<package pkgid="6f84bebe811373aa98734a84311194cc43a7d652" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.11.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.9.1.el5]" date="1339020000">- [fs] jbd: clear b_modified before moving the jh to a different transaction (Josef Bacik) [827205 563247]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.10.1.el5]" date="1339711200">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970] {CVE-2012-2934}
- [scsi] qla2xxx: Use ha-&gt;pdev-&gt;revision in 4Gbps MSI-X check. (Chad Dupuis) [816373 800653]
- [fs] sunrpc: do array overrun check in svc_recv before page alloc (J. Bruce Fields) [820358 814626]
- [fs] knfsd: fix an NFSD bug with full size non-page-aligned reads (J. Bruce Fields) [820358 814626]
- [fs] sunrpc: fix oops due to overrunning server's page array (J. Bruce Fields) [820358 814626]
- [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [829670 817131]
- [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [824654 818787]
- [net] sunrpc: Don't use list_for_each_entry_safe in rpc_wake_up (Steve Dickson) [817571 809937]
- [s390] qeth: add missing wake_up call (Hendrik Brueckner) [829059 790900]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
</package>
<package pkgid="ecc71b976fb6aaacd1fad94e1d7e046221bb68c0" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.13.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.12.1.el5]" date="1342216800">- [fs] nfs: Don't allow multiple mounts on same mntpnt with -o noac (Sachin Prabhu) [839806 839753]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.13.1.el5]" date="1343340000">- [net] e1000e: Cleanup logic in e1000_check_for_serdes_link_82571 (Dean Nelson) [841370 771366]
- [net] e1000e: Correct link check logic for 82571 serdes (Dean Nelson) [841370 771366]
- [mm] NULL pointer dereference in __vm_enough_memory (Jerome Marchand) [840077 836244]
- [fs] dlm: fix slow rsb search in dir recovery (David Teigland) [838140 753244]
- [fs] autofs: propogate LOOKUP_DIRECTORY flag only for last comp (Ian Kent) [830264 814418]
- [fs] ext4: properly dirty split extent nodes (Eric Sandeen) [840946 839770]
- [scsi] don't offline devices with a reservation conflict (David Jeffery) [839196 835660]
- [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate (Lukas Czerner) [837226 830351]
- [net] dl2k: Clean up rio_ioctl (Weiping Pan) [818822 818823] {CVE-2012-2313}
- [x86] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835450 834562]
- [net] tg3: Fix TSO handling (John Feeney) [833182 795672]
- [input] evdev: use after free from open/disconnect race (David Jeffery) [832448 822166]</changelog>
</package>
<package pkgid="9f5ed322eeed51f5cb02d3b3dbf4f9dd5117b252" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.14.1.el5]" date="1346277600">- [net] e1000e: drop check of RXCW.CW to eliminate link up and down (Dean Nelson) [852448 840642]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.15.1.el5]" date="1346882400">- [net] sfc: Fix max no of TSO segments and min TX queue size (Michal Schmidt) [845554 845555] {CVE-2012-3412}
- [kernel] xacct_add_tsk: fix pure theoretical -&gt;mm use-after-free (Nikola Pajkovsky) [849723 849725] {CVE-2012-3510}
- [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820255 820256] {CVE-2012-2319}
- [net] netfilter: add dscp netfilter match (Thomas Graf) [847327 842029]
- [net] rds: set correct msg_namelen (Weiping Pan) [822727 822728] {CVE-2012-3430}
- [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [847359 693822]
- [fs] quota: manage reserved space when quota is not active (Eric Sandeen) [847326 818087]
- [fs] quota: Fix warning if delayed write before quota is enabled (Eric Sandeen) [847326 818087]
- [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]
- [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- [xen] x86: whitelist Enhanced SpeedStep for dom0 (Laszlo Ersek) [846125 809103]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.16.1.el5]" date="1348005600">- Revert: [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- Revert: [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- Revert: [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]</changelog>
</package>
<package pkgid="1dd49a00c2bae6f81120d6ec3a72f6d4fae114b9" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.20.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.18.1.el5]" date="1350079200">- [fs] autofs4: Merge the remaining dentry ops tables (Ian Kent) [857558 850977]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.19.1.el5]" date="1350597600">- [net] be2net: Remove code that stops further access to BE NIC based on UE bits (Alexander Gordeev) [867896 862811]
- [net] netpoll: fix an incorrect check for NULL pointer (Alexander Gordeev) [856079 848098]
- [net] mlx4: Add support for EEH error recovery (Alexander Gordeev) [847404 798048]
- [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] fix crash if block {device|size} read &amp; changed at sametime (Mikulas Patocka) [864823 756506]
- [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}
- [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [861387 819830]
- [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [858774 857448]
- [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [859946 858724]
- [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [857966 854067]
- [scsi] isci: fixup linkspeed definitions (David Milburn) [854986 833000]
- [fs] nfs: nfs_d_automount update caller path after do_add_mount (Carlos Maiolino) [857552 834379]
- [fs] vfs: Fix vfsmount overput on simultaneous automount (Carlos Maiolino) [857552 834379]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.20.1.el5]" date="1352239200">- Revert: [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}</changelog>
</package>
<package pkgid="5b59efa90694d936d47e80e2a304b76568c28972" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.24.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.22.1.el5]" date="1353362400">- [net] bonding: fix link down handling in 802.3ad mode (Andy Gospodarek) [877943 782866]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.23.1.el5]" date="1353535200">- [net] bnx2x: Add remote-fault link detection (Alexander Gordeev) [870120 796905]
- [net] bnx2x: Cosmetic changes (Alexander Gordeev) [870120 796905]
- [net] rds-ping cause kernel panic (Alexander Gordeev) [822755 822756] {CVE-2012-2372}
- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878033 878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870148 870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870150 870151] {CVE-2012-4535}
- [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.24.1.el5]" date="1353535201">- Revert: [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
</package>
<package pkgid="c3b8437a58aec19011826ed7283951921ab88b12" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.2.1.el5]" date="1329861600">- [fs] nfs: nfs_fhget should wait on I_NEW instead of I_LOCK (Sachin Prabhu) [795664 785062]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.3.1.el5]" date="1332453600">- [net] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [805462 773735]
- [net] be2net: add vlan/rx-mode/flow-control config to be_setup (Ivan Vecera) [805462 773735]
- [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [805460 799170]
- [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry (Ian Kent) [801726 798809]
- [fs] vfs: fix d_instantiate_unique (Ian Kent) [801726 798809]
- [fs] nfs: allow high priority COMMITs to bypass inode commit lock (Jeff Layton) [799941 773777]
- [fs] nfs: don't skip COMMITs if system under is mem pressure (Jeff Layton) [799941 773777]
- [scsi] qla2xxx: Read the HCCR register to flush any PCIe writes (Chad Dupuis) [798748 772192]
- [scsi] qla2xxx: Complete mbox cmd timeout before next reset cycle (Chad Dupuis) [798748 772192]
- [s390] qdio: wrong buffers-used counter for ERROR buffers (Hendrik Brueckner) [801724 790840]
- [net] bridge: Reset IPCB when entering IP stack (Herbert Xu) [804721 749813]
- [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770649 770650]
- [fs] procfs: parse mount options (Jerome Marchand) [770649 770650]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.4.1.el5]" date="1332972000">- [net] ipv6: fix skb double free in xfrm6_tunnel (Jiri Benc) [752305 743375] {CVE-2012-1583}</changelog>
</package>
<package pkgid="7ef051b5066b461e4e85a8a011dc845a9877a0f5" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.6.1.el5]" date="1335564000">- [scsi] fc class: fix scanning when devs are offline (Mike Christie) [816684 799530]
- [md] dm-multipath: delay retry of bypassed pg (Mike Christie) [816684 799530]
- [net] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [811927 800575]
- [net] bonding: remove {master,vlan}_ip and query devices instead (Andy Gospodarek) [810321 772216]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
</package>
<package pkgid="c33108378301e898da9a01917f433b00c6fb4a9c" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.2.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.2.el5]" date="1338328800">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970]</changelog>
</package>
<package pkgid="bbd0773b345890170b7c379bcc58fb8cb8061921" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.1.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-347.el5]" date="1353448800">- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870151] {CVE-2012-4535}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
</package>
<package pkgid="5de2052b02d3d6dbfe853ee72bb950b94299cee4" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.12.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.10.1.el5]" date="1370642400">- [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955600 955601] {CVE-2013-3224}
- [net] Bluetooth: HCI &amp; L2CAP information leaks (Jacob Tanenbaum) [922415 922416] {CVE-2012-6544}
- [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [971872 872531]
- [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [971872 872531]
- [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [958021 864648]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.11.1.el5]" date="1371852000">- Revert: [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
- Revert: [x86-64] non lazy sleazy fpu implementation (Prarit Bhargava) [948187 731531]
- Revert: [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- Revert: [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- Revert: [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.12.1.el5]" date="1372716000">- Revert: [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]</changelog>
</package>
<package pkgid="1c8f130d00aaf26ffa0534764f20417c648a87bc" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.14.1.el5]" date="1374019200">- [net] Fix panic for vlan over gre via tun (Thomas Graf) [983452 981337]
- [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [983628 865095]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.15.1.el5]" date="1374537600">- [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [976441 853145]
- [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [976441 853145]
- [fs] nfs: define function to update nfsi-&gt;cache_change_attribute (Scott Mayhew) [976441 853145]
- [net] af_key: fix info leaks in notify messages (Jiri Benc) [980999 981000] {CVE-2013-2234}
- [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981222 981224] {CVE-2013-2237}
- [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981556 981557] {CVE-2013-2232}
- [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980141 980142] {CVE-2013-2224}
- [x86_64] Early segment setup for VT (Paolo Bonzini) [979920 978305]
- [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971245 971246] {CVE-2013-2147}
- [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973103 973104] {CVE-2013-2164}
- [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [972583 965359]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="9fa7a92a6cc50708e5d09e814e5d55137bcb4e81" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.18.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.17.1.el5]" date="1377216000">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [999819 995961]
- [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [983864 956322]
- [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [983864 956322]
- [net] be2net: disable TX in be_close() (Ivan Vecera) [983864 956322]
- [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [983864 956322]
- [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [983864 956322]
- [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [983864 956322]
- [net] be2net: Fixed memory leak (Ivan Vecera) [983864 956322]
- [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [983864 956322]
- [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [983864 956322]
- [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [983864 956322]
- [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [983864 956322]
- [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [983864 956322]
- [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [983864 956322]
- [net] be2net: Fix Endian (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [983864 956322]
- [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [983864 956322]
- [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [983864 956322]
- [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [983864 956322]
- [net] be2net: cleanup be_vid_config() (Ivan Vecera) [983864 956322]
- [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [983864 956322]
- [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [983864 956322]
- [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [983864 956322]
- [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [983864 956322]
- [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [983864 956322]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.18.1.el5]" date="1378512000">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [1005239 987539]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970874 970875] {CVE-2013-2141}
- [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987647 987648] {CVE-2013-4162}
- [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849735 849736] {CVE-2012-3511}
- [fs] autofs: remove autofs dentry mount check (Ian Kent) [1001488 928098]</changelog>
</package>
<package pkgid="18777f4096d54b1ba2b2b25df691ec6e090ee6d2" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.2.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
</package>
<package pkgid="552db8e352b49442da23bef3105687f49f3767c7" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.3.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
</package>
<package pkgid="11e8570c2d117de817e989a1ca53e0287b6c3365" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
</package>
<package pkgid="7d884e4f68bf2aad5257836861e61489befe804f" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.6.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.5.1.el5]" date="1365804000">- [fs] nfs: handle getattr failure during nfsv4 open (David Jeffery) [947736 906909]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.6.1.el5]" date="1367013600">- [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [953435 947732]
- [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [953435 947732]
- [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [954296 948317]
- [fs] nfs: Fix bugs on short read (Sachin Prabhu) [952098 924011]
- [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] introduce xzalloc() &amp; Co (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="5fad94f17a69e797eb419ed009d0e4bf7c5a5e45" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.1.2.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.2.el5]" date="1381190400">- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
</package>
<package pkgid="338996109c5360a306e18d23e773d3a6acf60382" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.11.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
</package>
<package pkgid="ee5589a8f2c1e18143d140ea579bf85fc0524c36" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.12.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.12.1.el5]" date="1407456000">- [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102702 1102703] {CVE-2014-3917}
- [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1125246 1080194]
- [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [1121017 924590]
- [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1116027 1081785]
- [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1117665 1102768]</changelog>
</package>
<package pkgid="fd718f289dc217aa01880ee465aa1ccc8275f527" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.3.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
</package>
<package pkgid="474aa835daed7f49365f9f6c875906014745191b" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.4.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
</package>
<package pkgid="3057af03f9105b3ca062dc41e061f7474adf27f1" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.6.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.5.1.el5]" date="1390348800">- [fs] cifs: stop trying to use virtual circuits (Sachin Prabhu) [1044328 1013469]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
</package>
<package pkgid="25bc74d10f37a283d915e756ee20eea8cc779a30" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.8.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
</package>
<package pkgid="42bcc9ba7d20fed5a230c44d873f8112301a63c1" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.9.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
</package>
<package pkgid="0b2f4434bd6b82e88787d9d9ff437f8d34fcef0d" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-369.el5]" date="1376092800">- [fs] nlm: Ensure we resend pending blocking locks after a reclaim (Steve Dickson) [918592]
- [kernel] kmod: kthread_run causes oom killer deadlock (Frantisek Hrbata) [983506]
- [fs] nfs4: ratelimit some messages, add name to bad seq-id mess (Dave Wysochanski) [953121]
- [fs] nfsd: fix EXDEV checking in rename (J. Bruce Fields) [515599]
- [misc] tty: Fix abusers of current-sighand-&gt;tty (Aaron Tomlin) [858981]
- [net] ipv6: don't call addrconf_dst_alloc again when enable lo (Jiri Benc) [981417]
- [redhat] kabi: Adding symbol fc_fabric_login (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_reset (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_els_send (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_fabric_logoff (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_set_mfs (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_elsct_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_up (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv_flogi (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_depth (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_down (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_type (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_free (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_alloc (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_config (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_disc_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol strict_strtoul (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_rport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_get_host_port_state (Jiri Olsa) [864256]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-370.el5]" date="1376956800">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [995961]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970875] {CVE-2013-2141}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
</package>
<package pkgid="3a7f4a14f2d083ee105c55ce350aaa53d7f95387" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.1.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.1.1.el5]" date="1418601600">- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="82268bb96efadfb0052114b59f4182090bd59775" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-398.el5]" date="1407888000">- [net] security_socket_post_accept before fd_install in sys_accept (Denys Vlasenko) [1059078]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
</package>
<package pkgid="42f34b2b48549d860113a74857916f622f587fa0" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="402.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-401.el5]" date="1418256000">- [net] rds: fix possible double free on sock tear down (Herton R. Krzesinski) [1116880]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="03f01cc3f253f598d747660854e199a2cd443f6d" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="404.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-403.el5]" date="1425600000">- [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
- [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
- [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
</package>
<package pkgid="c7875520382154da4952a121be4395b29d5fedd3" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="406.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-405.el5]" date="1430438400">- [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
- [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
- [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
- [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
- [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
- [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
- [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
- [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
- [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
- [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
</package>
<package pkgid="34590cddb4bd9c675d59cec6cc4da69adf58dca1" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="408.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
</package>
<package pkgid="9a997bc028ff99d11430121e7a3f1e5fd8256584" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="409.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-409.el5]" date="1455321600">- [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
- [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [sched] prevent division by zero x-&gt;cpu_power (Denys Vlasenko) [1209728]
- [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}</changelog>
</package>
<package pkgid="0afe2761b0f2ec81a8067a70b9e298edb631e923" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="416.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-414.el5]" date="1474934400">- [redhat] Fix missed -413 kernel version (Alexander Gordeev)</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
</package>
<package pkgid="b56c6abb08cc48dce09bdb0cdf707c3d607bb771" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="417.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
</package>
<package pkgid="95f3d2e69d8e51fd4b1620e727f2d36b9939c5df" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="419.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-418.el5]" date="1484352000">- [sched] prevent NULL deref in find_busiest_group (Denys Vlasenko) [1376523]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-419.el5]" date="1487808000">- [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
- [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]</changelog>
</package>
<package pkgid="c2ed27d7c87537910eb86ed32d4449d9d91c0f20" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.10.1.el5]" date="1302904800">- [fs] gfs2: creating large files suddenly slow to a crawl (Robert S Peterson) [690239 683155]
- [virt] hypervisor: Overflow fix for clocks &gt; 4GHz (Zachary Amsden) [690134 673242]
- [usb] fix usbfs isochronous data transfer regression (Don Zickus) [696136 688926]
- [fs] partitions: Fix corrupted OSF partition table parsing (Danny Feng) [688022 688023] {CVE-2011-1163}
- [misc] pm: add comment explaining is_registered kabi work-around (Don Zickus) [689699 637930]
- [media] sn9c102: fix world-wirtable sysfs files (Don Howard) [679304 679305]
- [scsi] scsi_dh_rdac: Add two new IBM devices to rdac_dev_list (Rob Evers) [692370 691460]
- [fs] block: fix submit_bh discarding barrier flag on sync write (Lukas Czerner) [690795 667673]
- [net] netfilter/ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689339 689340]
- [net] netfilter: ip6_tables: fix infoleak to userspace (Jiri Pirko) [689348 689349] {CVE-2011-1172}
- [net] netfilter/ip_tables: fix infoleak to userspace (Jiri Pirko) [689331 689332] {CVE-2011-1171}
- [net] netfilter/arp_tables: fix infoleak to userspace (Jiri Pirko) [689322 689323] {CVE-2011-1170}
- [base] Fix potential deadlock in driver core (Don Zickus) [689699 637930]
- [net] forcedeth/r8169: call netif_carrier_off at end of probe (Ivan Vecera) [689808 689805 664705 664707]
- [net] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [693751 680531]
- [net] ixgbe: limit VF access to network traffic (Andy Gospodarek) [693751 680531]
- [fs] lockd: make lockd_down wait for lockd to come down (Jeff Layton) [688156 653286]
- [fs] proc: protect mm start_/end_code in /proc/pid/stat (Eugene Teo) [684570 684571] {CVE-2011-0726}
- [net] dccp: fix oops in dccp_rcv_state_process (Eugene Teo) [682955 682956] {CVE-2011-1093}
- [net] bluetooth: fix bnep buffer overflow (Don Howard) [681318 681319] {CVE-2011-1079}
- [fs] nfs: break nfsd v4 lease on unlink, link, and rename (J. Bruce Fields) [693755 610093]
- [fs] nfs: break lease on nfsd v4 setattr (J. Bruce Fields) [693755 610093]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.11.1.el5]" date="1303941600">- [s390] dasd: fix race between open and offline (Hendrik Brueckner) [699808 695357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.12.1.el5]" date="1304805600">- [x86_64] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [i386] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [xen] fix MAX_EVTCHNS definition (Laszlo Ersek) [701242 701240]
- [net] ixgbe: fix for link failure on SFP+ DA cables (Don Howard) [696181 653236]
- [net] netxen: limit skb frags for non tso packet (Phillip Lougher) [699609 672368]
- [block] cciss: fix lost command problem (Phillip Lougher) [696503 696153]
- [fs] gfs2: fix filesystem hang caused by incorrect lock order (Robert S Peterson) [688855 656032]
- [fs] gfs2: restructure reclaim of unlinked dinodes (Phillip Lougher) [688855 656032]
- [fs] gfs2: unlock on gfs2_trans_begin error (Robert S Peterson) [688855 656032]
- [scsi] mpt2sas: prevent heap overflows and unchecked access (Tomas Henzl) [694526 694527] {CVE-2011-1495 CVE-2011-1494}
- [net] bridge/netfilter: fix ebtables information leak (Don Howard) [681325 681326] {CVE-2011-1080}
- [net] bluetooth: fix sco information leak to userspace (Don Howard) [681310 681311] {CVE-2011-1078}
- [fs] fix corrupted GUID partition table kernel oops (Jerome Marchand) [695979 695980] {CVE-2011-1577}
- [xen] x86/domain: fix error checks in arch_set_info_guest (Laszlo Ersek) [688581 688582] {CVE-2011-1166}
- [net] bridge: fix initial packet flood if !STP (Jiri Pirko) [701222 695369]
- [fs] nfsd: fix auth_domain reference leak on nlm operations (J. Bruce Fields) [697448 589512]
- [scsi] qla2xxx: no reset/fw-dump on CT/ELS pt req timeout (Chad Dupuis) [689700 660386]
- [mm] set barrier and send tlb flush to all affected cpus (Prarit Bhargava) [696908 675793]</changelog>
</package>
<package pkgid="372b8efc9dd8ed40b2becbf5f5c1684198a2f0f6" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.19.1.el5"/>
  <changelog author="Jiri Pirko &lt;jpirko@redhat.com&gt; [2.6.18-238.17.1.el5]" date="1308952800">- [net] bluetooth: l2cap and rfcomm: fix info leak to userspace (Thomas Graf) [703020 703021] {CVE-2011-2492}
- [net] inet_diag: fix inet_diag_bc_audit data validation (Thomas Graf) [714538 714539] {CVE-2011-2213}
- [misc] signal: fix kill signal spoofing issue (Oleg Nesterov) [690030 690031] {CVE-2011-1182}
- [fs] proc: fix signedness issue in next_pidmap (Oleg Nesterov) [697826 697827] {CVE-2011-1593}
- [char] agp: fix OOM and buffer overflow (Jerome Marchand) [699009 699010] {CVE-2011-1746}
- [char] agp: fix arbitrary kernel memory writes (Jerome Marchand) [699005 699006] {CVE-2011-2022 CVE-2011-1745}
- [infiniband] core: Handle large number of entries in poll CQ (Jay Fenlason) [668370 668371] {CVE-2011-1044 CVE-2010-4649}
- [infiniband] core: fix panic in ib_cm:cm_work_handler (Jay Fenlason) [679995 679996] {CVE-2011-0695}
- [fs] validate size of EFI GUID partition entries (Anton Arapov) [703027 703028] {CVE-2011-1776}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.18.1.el5]" date="1310076000">- [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]
- [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.19.1.el5]" date="1310335200">- Revert: [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]
- Revert: [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- Revert: [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- Revert: [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]</changelog>
</package>
<package pkgid="95035ca569d6cd2f884d22f2a2d182897d161d65" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.10.1.el5]" date="1320357600">- [net] be2net: enable NETIF_F_LLTX and add own locking of Tx path (Ivan Vecera) [750912 731806]
- [net] be2net: fix multicast filter programming (Ivan Vecera) [750912 731806]
- [net] be2net: fix cmd-rx-filter not notifying MCC (Ivan Vecera) [750912 731806]
- [net] be2net: use RX_FILTER cmd to program multicast addresses (Ivan Vecera) [750912 731806]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.11.1.el5]" date="1320616800">- [fs] gfs2: speed up large file delete/unlink (Robert S Peterson) [743806 738440]
- [fs] cifs: fix wrong buffer length returned by SendReceive (Sachin Prabhu) [750842 720363]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [virt] xen/netback: disable features not supported by netfront (Paolo Bonzini) [746600 746225]
- [fs] nfs: don't redirty inodes with no outstanding commits (Jeff Layton) [750477 739665]
- [net] tg3: call netif_carrier_off to initialize operstate value (John Feeney) [744700 635982]
- [xen] make test_assign_device domctl dependent on intremap hw (Laszlo Ersek) [745726 740203]
- [xen] Propagate target dom within XEN_DOMCTL_test_assign_device (Laszlo Ersek) [745726 740203]
- [net] sctp: encode PROTOCOL VIOLATION error cause correctly (Thomas Graf) [750457 636828]
- [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [char] tpm: Zero buffer after copying to userspace (Jiri Benc) [732630 732631] {CVE-2011-1162}
- [fs] hfs: fix hfs_find_init() sb-&gt;ext_tree NULL ptr oops (Phillip Lougher) [712775 712776] {CVE-2011-2203}
- [net] sctp: Set correct error cause value for missing parameters (Thomas Graf) [750451 629938]
- [misc] kernel: plug taskstats io infoleak (Jerome Marchand) [716845 716846] {CVE-2011-2494}
- [usb] Make device reset stop retrying after disconnect (Don Zickus) [750841 709699]
- [net] ipv6: properly use ICMP6MSGOUT_INC_STATS in ndisc_send_skb (Jiri Pirko) [743611 698728]
- [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [741273 694625]
- [mm] s390: fix first time swap use results in heavy swapping (Hendrik Brueckner) [747876 722482]
- [virt] xen: fix GFP mask handling in dma_alloc_coherent (Laszlo Ersek) [742282 730247]
- [s390] kernel: fix system hang if hangcheck timer expires (Hendrik Brueckner) [747872 730313]
- [usb] fix interface sysfs file-creation bug (Don Zickus) [750848 637930]
- [usb] don't touch sysfs stuff when altsetting is unchanged (Don Zickus) [750848 637930]
- [base] Fix potential deadlock in driver core (Don Zickus) [750848 637930]
- [security] keys: Fix NULL deref in user-defined key type (David Howells) [751300 751301]
- [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.12.1.el5]" date="1320789600">- Revert: [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]</changelog>
</package>
<package pkgid="86c771640cb35bf9ec98b4d5cd3d8c978e5e6d30" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.17.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.15.1.el5]" date="1324159200">- [net] e1000e: Avoid wrong check on TX hang (Dean Nelson) [766485 746272]
- [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749159 749160] {CVE-2011-4077}
- [pci] intel-iommu: Default to non-coherent for unattached domains (Don Dutile) [766803 753924]
- [fs] nfs: remove BUG() from encode_share_access() (Jeff Layton) [755442 754901] {CVE-2011-4324}
- [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [759387 756412]
- [fs] hfs: add sanity check for file name length (Eric Sandeen) [755432 755433] {CVE-2011-4330}
- [fs] proc: Fix select on /proc files without -&gt;poll (David Howells) [755483 751214]
- [fs] nfs: Ensure we mark inode as dirty if early exit from commit (Jeff Layton) [755482 714020]
- [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [750460 742079]
- [virt] kvm: fix regression w/ 32 bit KVM clock (Rik van Riel) [747875 753789 751742 731599]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [fs] jbd/jbd2: validate sb-&gt;s_first in journal_get_superblock (Eryu Guan) [753343 706810] {CVE-2011-4132}
- [net] igb: enable link power down (Stefan Assmann) [752735 742514]
- [fs] proc: fix oops on invalid /proc/&lt;pid&gt;/maps access (Johannes Weiner) [747851 747699] {CVE-2011-3637}
- [block] cciss: bump driver version (Tomas Henzl) [758024 714129]
- [block] cciss: need to delay after a PCI Power Management reset (Tomas Henzl) [758024 714129]
- [block] cciss: auto engage scsi susbsystem (Tomas Henzl) [758024 714129]
- [block] cciss: store pdev in hba struct (Tomas Henzl) [758024 714129]
- [block] cciss: use consistent variable names (Tomas Henzl) [758024 714129]
- [block] cciss: add a commandline switch for simple mode (Tomas Henzl) [758024 714129]
- [fs] proc: close race with exec in mem_read() (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] implement access_remote_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] factor out main logic of access_process_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] use mm_struct to resolve gate vma's in __get_user_pages (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make in_gate_area take mm_struct instead of a task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make get_gate_vma take mm_struct instead of task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [x86_64] mark assoc mm when running task in 32 bit compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [misc] sched: add ctx tag to mm running task in ia32 compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: require the target to be tracable (or yourself) (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: close race in /proc/*/environ (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: report errors in /proc/*/*map* sanely (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: shift down_read(mmap_sem) to the caller (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] detect exec transition phase with new mm but old creds (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [net] igb: fix i350 SR-IOV failture (Stefan Assmann) [741877 714313]
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [755457 754620] {CVE-2011-4325}
- [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [757146 714870] {CVE-2011-4348}
- [scsi] isci: fix 32-bit operation when CONFIG_HIGHMEM64G=n (Phillip Lougher) [750458 713904]
- [net] tg3: Only allow phy ioctls while netif_running (Phillip Lougher) [746343 683393]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
</package>
<package pkgid="619da1571bde2112056d9ce4444407ec909a21cc" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.18.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.18.1.el5]" date="1327096800">- [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [771774 750283] {CVE-2012-0028}
- [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [773322 771592]
- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747943 747946] {CVE-2011-3638}
- [scsi] don't fail scans when host is in recovery (Rob Evers) [772162 657345]
- [fs] jbd2: clear BH_Delay &amp; BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783477 783284] {CVE-2011-4086}
- [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772868 772869] {CVE-2012-0207}</changelog>
</package>
<package pkgid="8d04a51d1b70722796c50b14607a177b520bcd62" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.3.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.1.1.el5]" date="1312581600">- [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [714869 714867]
- [x86_64] Revert ACPI APIC mode test (Prarit Bhargava) [728163 721361]
- [net] sctp: reset packet information after packet transmit (Thomas Graf) [727592 725573]
- [fs] block: initialise bd_super in bdget (Lachlan McIlroy) [726628 707425]
- [fs] nfs: Remove bogus call to nfs4_drop_state_owner (Jeff Layton) [726625 724923]
- [net] be2net: clear interrupt bit in be_probe (Ivan Vecera) [723552 713703]
- [net] be2net: remove certain cmd failure logging (Ivan Vecera) [726619 716821]
- [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [718154 718155] {CVE-2011-2517}
- [fs] xfs: handle NULL mount struct in error reports (Eric Sandeen) [727835 720551]
- [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716827 716828] {CVE-2011-2495}
- [fs] lockd: don't use file's credentials on RPCSEC_GSS mounts (Max Matveev) [722855 701574]
- [fs] xfs: add a missing mutex_unlock to a dio error path (Jeff Moyer) [727590 718232]
- [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [709546 709547] {CVE-2011-2491}
- [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [718883 718884]
- [xen] Fix x86_emulate handling of imul with immediate operands (Igor Mammedov) [712885 700565]
- [fs] Fix wrongly vfree'ing a kmalloc'ed area (Larry Woodman) [721300 719495]
- [fs] dlm: bump default hash table and maximum allocatable sizes (Bryn M. Reeves) [719930 715603]
- [net] tipc: Overhaul of socket locking logic (Max Matveev) [719746 704192]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.18-274.2.1.el5]" date="1313186400">- Fix up some fallout from RHEL5.7 kernel package structure changes</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.3.1.el5]" date="1314396000">- [xen] fix off-by-one shift in x86_64 __addr_ok (Laszlo Ersek) [728043 719850] {CVE-2011-2901}</changelog>
</package>
<package pkgid="0a2317ca52f4b931dad9b1d80a388cec76656143" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.7.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.5.1.el5]" date="1316210400">- [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [732775 675781]
- [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [732775 675781]
- [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [fs] nfs: Fix client not honoring nosharecache mount option (David Jeffery) [734772 730097]
- [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716543 716544] {CVE-2011-2496}
- [mm] Fix incorrect off-by-one centisec dirty values (Larry Woodman) [733665 691087]
- [net] bnx2x: fix bringup of BCM57710 (Michal Schmidt) [737475 680411]
- [virt] xen/netfront: no disable s/g when renegotiating features (Paolo Bonzini) [738392 733416]
- [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734157 727504]
- [virt] xen: Allow arbitrary mtu size until frontend connected (Paolo Bonzini) [738389 697021]
- [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730689 692966]
- [net] cnic, bnx2: Check iSCSI support early in bnx2_init_one (Neil Horman) [734761 710272]
- [net] igb: fix WOL on 2nd port on i350 (Stefan Assmann) [730682 718988]
- [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [728521 720212]</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.6.1.el5]" date="1316815200">- [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [730949 703045] {CVE-2011-2942}
- [misc] remove	div_long_long_rem (Prarit Bhargava) [732879 732614] {CVE-2011-3209}
- [net] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: Use NTWK_RX_FILTER command for promiscous mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: non-member vlan pkts not received in promisc mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: remove bogus unlikely on vlan check (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [x86] nmi: make NMI_NONE default watchdog in x86_64 hvm guests (Laszlo Ersek) [739823 707966]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.7.1.el5]" date="1318888800">- Revert: [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
</package>
<package pkgid="a43195dc159487cfb2c04b23fbeb5ebef00d270b" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.11.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.9.1.el5]" date="1339020000">- [fs] jbd: clear b_modified before moving the jh to a different transaction (Josef Bacik) [827205 563247]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.10.1.el5]" date="1339711200">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970] {CVE-2012-2934}
- [scsi] qla2xxx: Use ha-&gt;pdev-&gt;revision in 4Gbps MSI-X check. (Chad Dupuis) [816373 800653]
- [fs] sunrpc: do array overrun check in svc_recv before page alloc (J. Bruce Fields) [820358 814626]
- [fs] knfsd: fix an NFSD bug with full size non-page-aligned reads (J. Bruce Fields) [820358 814626]
- [fs] sunrpc: fix oops due to overrunning server's page array (J. Bruce Fields) [820358 814626]
- [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [829670 817131]
- [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [824654 818787]
- [net] sunrpc: Don't use list_for_each_entry_safe in rpc_wake_up (Steve Dickson) [817571 809937]
- [s390] qeth: add missing wake_up call (Hendrik Brueckner) [829059 790900]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
</package>
<package pkgid="ba07f3ad351582f152201b50692c76036affa857" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.13.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.12.1.el5]" date="1342216800">- [fs] nfs: Don't allow multiple mounts on same mntpnt with -o noac (Sachin Prabhu) [839806 839753]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.13.1.el5]" date="1343340000">- [net] e1000e: Cleanup logic in e1000_check_for_serdes_link_82571 (Dean Nelson) [841370 771366]
- [net] e1000e: Correct link check logic for 82571 serdes (Dean Nelson) [841370 771366]
- [mm] NULL pointer dereference in __vm_enough_memory (Jerome Marchand) [840077 836244]
- [fs] dlm: fix slow rsb search in dir recovery (David Teigland) [838140 753244]
- [fs] autofs: propogate LOOKUP_DIRECTORY flag only for last comp (Ian Kent) [830264 814418]
- [fs] ext4: properly dirty split extent nodes (Eric Sandeen) [840946 839770]
- [scsi] don't offline devices with a reservation conflict (David Jeffery) [839196 835660]
- [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate (Lukas Czerner) [837226 830351]
- [net] dl2k: Clean up rio_ioctl (Weiping Pan) [818822 818823] {CVE-2012-2313}
- [x86] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835450 834562]
- [net] tg3: Fix TSO handling (John Feeney) [833182 795672]
- [input] evdev: use after free from open/disconnect race (David Jeffery) [832448 822166]</changelog>
</package>
<package pkgid="7b2b12e00fd4071640d916b9c104868e4f8028a2" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.14.1.el5]" date="1346277600">- [net] e1000e: drop check of RXCW.CW to eliminate link up and down (Dean Nelson) [852448 840642]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.15.1.el5]" date="1346882400">- [net] sfc: Fix max no of TSO segments and min TX queue size (Michal Schmidt) [845554 845555] {CVE-2012-3412}
- [kernel] xacct_add_tsk: fix pure theoretical -&gt;mm use-after-free (Nikola Pajkovsky) [849723 849725] {CVE-2012-3510}
- [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820255 820256] {CVE-2012-2319}
- [net] netfilter: add dscp netfilter match (Thomas Graf) [847327 842029]
- [net] rds: set correct msg_namelen (Weiping Pan) [822727 822728] {CVE-2012-3430}
- [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [847359 693822]
- [fs] quota: manage reserved space when quota is not active (Eric Sandeen) [847326 818087]
- [fs] quota: Fix warning if delayed write before quota is enabled (Eric Sandeen) [847326 818087]
- [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]
- [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- [xen] x86: whitelist Enhanced SpeedStep for dom0 (Laszlo Ersek) [846125 809103]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.16.1.el5]" date="1348005600">- Revert: [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- Revert: [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- Revert: [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]</changelog>
</package>
<package pkgid="6cd62b63d1cb61e0e89042a22d19f59164dc0f9c" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.20.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.18.1.el5]" date="1350079200">- [fs] autofs4: Merge the remaining dentry ops tables (Ian Kent) [857558 850977]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.19.1.el5]" date="1350597600">- [net] be2net: Remove code that stops further access to BE NIC based on UE bits (Alexander Gordeev) [867896 862811]
- [net] netpoll: fix an incorrect check for NULL pointer (Alexander Gordeev) [856079 848098]
- [net] mlx4: Add support for EEH error recovery (Alexander Gordeev) [847404 798048]
- [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] fix crash if block {device|size} read &amp; changed at sametime (Mikulas Patocka) [864823 756506]
- [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}
- [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [861387 819830]
- [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [858774 857448]
- [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [859946 858724]
- [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [857966 854067]
- [scsi] isci: fixup linkspeed definitions (David Milburn) [854986 833000]
- [fs] nfs: nfs_d_automount update caller path after do_add_mount (Carlos Maiolino) [857552 834379]
- [fs] vfs: Fix vfsmount overput on simultaneous automount (Carlos Maiolino) [857552 834379]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.20.1.el5]" date="1352239200">- Revert: [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}</changelog>
</package>
<package pkgid="98f36d6f2a8ad33f53197d2049195c2ffe7d7abe" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.24.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.22.1.el5]" date="1353362400">- [net] bonding: fix link down handling in 802.3ad mode (Andy Gospodarek) [877943 782866]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.23.1.el5]" date="1353535200">- [net] bnx2x: Add remote-fault link detection (Alexander Gordeev) [870120 796905]
- [net] bnx2x: Cosmetic changes (Alexander Gordeev) [870120 796905]
- [net] rds-ping cause kernel panic (Alexander Gordeev) [822755 822756] {CVE-2012-2372}
- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878033 878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870148 870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870150 870151] {CVE-2012-4535}
- [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.24.1.el5]" date="1353535201">- Revert: [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
</package>
<package pkgid="42ad1a6814a2974ac9fd04f25f1c85ce72cad760" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.2.1.el5]" date="1329861600">- [fs] nfs: nfs_fhget should wait on I_NEW instead of I_LOCK (Sachin Prabhu) [795664 785062]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.3.1.el5]" date="1332453600">- [net] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [805462 773735]
- [net] be2net: add vlan/rx-mode/flow-control config to be_setup (Ivan Vecera) [805462 773735]
- [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [805460 799170]
- [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry (Ian Kent) [801726 798809]
- [fs] vfs: fix d_instantiate_unique (Ian Kent) [801726 798809]
- [fs] nfs: allow high priority COMMITs to bypass inode commit lock (Jeff Layton) [799941 773777]
- [fs] nfs: don't skip COMMITs if system under is mem pressure (Jeff Layton) [799941 773777]
- [scsi] qla2xxx: Read the HCCR register to flush any PCIe writes (Chad Dupuis) [798748 772192]
- [scsi] qla2xxx: Complete mbox cmd timeout before next reset cycle (Chad Dupuis) [798748 772192]
- [s390] qdio: wrong buffers-used counter for ERROR buffers (Hendrik Brueckner) [801724 790840]
- [net] bridge: Reset IPCB when entering IP stack (Herbert Xu) [804721 749813]
- [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770649 770650]
- [fs] procfs: parse mount options (Jerome Marchand) [770649 770650]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.4.1.el5]" date="1332972000">- [net] ipv6: fix skb double free in xfrm6_tunnel (Jiri Benc) [752305 743375] {CVE-2012-1583}</changelog>
</package>
<package pkgid="2b4670b0c2b66e4be61ddb3b0ff7e3a60883b06c" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.6.1.el5]" date="1335564000">- [scsi] fc class: fix scanning when devs are offline (Mike Christie) [816684 799530]
- [md] dm-multipath: delay retry of bypassed pg (Mike Christie) [816684 799530]
- [net] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [811927 800575]
- [net] bonding: remove {master,vlan}_ip and query devices instead (Andy Gospodarek) [810321 772216]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
</package>
<package pkgid="308dbc1725f46c148a7497094535959f5ead5718" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.2.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.2.el5]" date="1338328800">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970]</changelog>
</package>
<package pkgid="b31e4cf45823603fa763caece32e487145108e5a" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.1.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-347.el5]" date="1353448800">- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870151] {CVE-2012-4535}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
</package>
<package pkgid="5da0ed8b9af60eac8fe10d4789ff7e8c81ed7c63" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.12.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.10.1.el5]" date="1370642400">- [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955600 955601] {CVE-2013-3224}
- [net] Bluetooth: HCI &amp; L2CAP information leaks (Jacob Tanenbaum) [922415 922416] {CVE-2012-6544}
- [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [971872 872531]
- [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [971872 872531]
- [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [958021 864648]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.11.1.el5]" date="1371852000">- Revert: [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
- Revert: [x86-64] non lazy sleazy fpu implementation (Prarit Bhargava) [948187 731531]
- Revert: [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- Revert: [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- Revert: [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.12.1.el5]" date="1372716000">- Revert: [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]</changelog>
</package>
<package pkgid="d740e30dbf9043e4be38239149f3cef3ab07dde7" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.14.1.el5]" date="1374019200">- [net] Fix panic for vlan over gre via tun (Thomas Graf) [983452 981337]
- [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [983628 865095]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.15.1.el5]" date="1374537600">- [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [976441 853145]
- [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [976441 853145]
- [fs] nfs: define function to update nfsi-&gt;cache_change_attribute (Scott Mayhew) [976441 853145]
- [net] af_key: fix info leaks in notify messages (Jiri Benc) [980999 981000] {CVE-2013-2234}
- [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981222 981224] {CVE-2013-2237}
- [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981556 981557] {CVE-2013-2232}
- [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980141 980142] {CVE-2013-2224}
- [x86_64] Early segment setup for VT (Paolo Bonzini) [979920 978305]
- [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971245 971246] {CVE-2013-2147}
- [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973103 973104] {CVE-2013-2164}
- [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [972583 965359]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="f6469daa92db56be89d1c9161742a33a64994d73" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.18.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.17.1.el5]" date="1377216000">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [999819 995961]
- [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [983864 956322]
- [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [983864 956322]
- [net] be2net: disable TX in be_close() (Ivan Vecera) [983864 956322]
- [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [983864 956322]
- [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [983864 956322]
- [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [983864 956322]
- [net] be2net: Fixed memory leak (Ivan Vecera) [983864 956322]
- [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [983864 956322]
- [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [983864 956322]
- [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [983864 956322]
- [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [983864 956322]
- [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [983864 956322]
- [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [983864 956322]
- [net] be2net: Fix Endian (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [983864 956322]
- [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [983864 956322]
- [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [983864 956322]
- [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [983864 956322]
- [net] be2net: cleanup be_vid_config() (Ivan Vecera) [983864 956322]
- [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [983864 956322]
- [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [983864 956322]
- [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [983864 956322]
- [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [983864 956322]
- [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [983864 956322]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.18.1.el5]" date="1378512000">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [1005239 987539]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970874 970875] {CVE-2013-2141}
- [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987647 987648] {CVE-2013-4162}
- [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849735 849736] {CVE-2012-3511}
- [fs] autofs: remove autofs dentry mount check (Ian Kent) [1001488 928098]</changelog>
</package>
<package pkgid="a80801571c4fed245fc9f4b5ed0636075df4d104" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.2.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
</package>
<package pkgid="7554e79940f968469f8ae2e7c99da507cf2b0107" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.3.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
</package>
<package pkgid="c5e018de56dc79ccc8a455cbafadc612f37e559c" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
</package>
<package pkgid="54d500ad108ca23661fd2aaf264908da9fef6478" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.6.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.5.1.el5]" date="1365804000">- [fs] nfs: handle getattr failure during nfsv4 open (David Jeffery) [947736 906909]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.6.1.el5]" date="1367013600">- [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [953435 947732]
- [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [953435 947732]
- [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [954296 948317]
- [fs] nfs: Fix bugs on short read (Sachin Prabhu) [952098 924011]
- [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] introduce xzalloc() &amp; Co (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="c6f42a82c66cd9f17fef82169799dbf60c7e29c0" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.1.2.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.2.el5]" date="1381190400">- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
</package>
<package pkgid="a47adc22750bcbacb18b3f939915db312067092c" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.11.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
</package>
<package pkgid="4cd3e95af4f3dbd187daa0733113f48740ad24dd" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.12.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.12.1.el5]" date="1407456000">- [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102702 1102703] {CVE-2014-3917}
- [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1125246 1080194]
- [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [1121017 924590]
- [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1116027 1081785]
- [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1117665 1102768]</changelog>
</package>
<package pkgid="74b48c9b1eacc6843b4df2eb2697e0f6de0f8e41" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.3.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
</package>
<package pkgid="a699aea36111c10b11f0a60801f74faf478c9975" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.4.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
</package>
<package pkgid="477f18c5d71859364dc36674e1679225b8799fe6" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.6.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.5.1.el5]" date="1390348800">- [fs] cifs: stop trying to use virtual circuits (Sachin Prabhu) [1044328 1013469]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
</package>
<package pkgid="4eb1aa5fc15f2d186187a28ab8e2614329a5bd4f" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.8.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
</package>
<package pkgid="0b2ea145677acb56a448b5cabc7e93e2a3604aa4" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.9.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
</package>
<package pkgid="f12c536b4964303ac0f15813128d433e3f0c4710" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-369.el5]" date="1376092800">- [fs] nlm: Ensure we resend pending blocking locks after a reclaim (Steve Dickson) [918592]
- [kernel] kmod: kthread_run causes oom killer deadlock (Frantisek Hrbata) [983506]
- [fs] nfs4: ratelimit some messages, add name to bad seq-id mess (Dave Wysochanski) [953121]
- [fs] nfsd: fix EXDEV checking in rename (J. Bruce Fields) [515599]
- [misc] tty: Fix abusers of current-sighand-&gt;tty (Aaron Tomlin) [858981]
- [net] ipv6: don't call addrconf_dst_alloc again when enable lo (Jiri Benc) [981417]
- [redhat] kabi: Adding symbol fc_fabric_login (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_reset (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_els_send (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_fabric_logoff (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_set_mfs (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_elsct_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_up (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv_flogi (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_depth (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_down (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_type (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_free (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_alloc (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_config (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_disc_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol strict_strtoul (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_rport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_get_host_port_state (Jiri Olsa) [864256]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-370.el5]" date="1376956800">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [995961]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970875] {CVE-2013-2141}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
</package>
<package pkgid="62fe13a363faa57a4ad1dcd42d791ec98127ad15" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.1.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.1.1.el5]" date="1418601600">- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="69fdf6ba8c168a383e77b98096bddf99833de4ed" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-398.el5]" date="1407888000">- [net] security_socket_post_accept before fd_install in sys_accept (Denys Vlasenko) [1059078]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
</package>
<package pkgid="f21d0b7043c44a22da7a905489a0a6f63a5992e5" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="402.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-401.el5]" date="1418256000">- [net] rds: fix possible double free on sock tear down (Herton R. Krzesinski) [1116880]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="084584c8707cd44879022f50c3da4e5b87a3fca9" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="404.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-403.el5]" date="1425600000">- [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
- [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
- [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
</package>
<package pkgid="11e8bce4b6b3902c1fcf2a488ab5ffde7d3557a6" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="406.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-405.el5]" date="1430438400">- [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
- [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
- [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
- [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
- [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
- [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
- [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
- [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
- [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
- [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
</package>
<package pkgid="a6fa617015e19888b3fffc0b4a781622cf1e79b3" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="408.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
</package>
<package pkgid="81aa9dbc8cff6dc27bcff750d67fd33f567a150b" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="409.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-409.el5]" date="1455321600">- [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
- [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [sched] prevent division by zero x-&gt;cpu_power (Denys Vlasenko) [1209728]
- [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}</changelog>
</package>
<package pkgid="d65fc4b5a9da4fea5fead3b4b7845adeffc12080" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="416.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-414.el5]" date="1474934400">- [redhat] Fix missed -413 kernel version (Alexander Gordeev)</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
</package>
<package pkgid="f79226f4f4cd8bcc9b853c98950d9e870e8e0de6" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="417.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
</package>
<package pkgid="3862e49150858a5f43be0336490eff891727c9ce" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="419.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-418.el5]" date="1484352000">- [sched] prevent NULL deref in find_busiest_group (Denys Vlasenko) [1376523]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-419.el5]" date="1487808000">- [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
- [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]</changelog>
</package>
<package pkgid="6dcbafdff2d4aa760e8bad653251269141274cdb" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="238.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.10.1.el5]" date="1302904800">- [fs] gfs2: creating large files suddenly slow to a crawl (Robert S Peterson) [690239 683155]
- [virt] hypervisor: Overflow fix for clocks &gt; 4GHz (Zachary Amsden) [690134 673242]
- [usb] fix usbfs isochronous data transfer regression (Don Zickus) [696136 688926]
- [fs] partitions: Fix corrupted OSF partition table parsing (Danny Feng) [688022 688023] {CVE-2011-1163}
- [misc] pm: add comment explaining is_registered kabi work-around (Don Zickus) [689699 637930]
- [media] sn9c102: fix world-wirtable sysfs files (Don Howard) [679304 679305]
- [scsi] scsi_dh_rdac: Add two new IBM devices to rdac_dev_list (Rob Evers) [692370 691460]
- [fs] block: fix submit_bh discarding barrier flag on sync write (Lukas Czerner) [690795 667673]
- [net] netfilter/ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689339 689340]
- [net] netfilter: ip6_tables: fix infoleak to userspace (Jiri Pirko) [689348 689349] {CVE-2011-1172}
- [net] netfilter/ip_tables: fix infoleak to userspace (Jiri Pirko) [689331 689332] {CVE-2011-1171}
- [net] netfilter/arp_tables: fix infoleak to userspace (Jiri Pirko) [689322 689323] {CVE-2011-1170}
- [base] Fix potential deadlock in driver core (Don Zickus) [689699 637930]
- [net] forcedeth/r8169: call netif_carrier_off at end of probe (Ivan Vecera) [689808 689805 664705 664707]
- [net] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [693751 680531]
- [net] ixgbe: limit VF access to network traffic (Andy Gospodarek) [693751 680531]
- [fs] lockd: make lockd_down wait for lockd to come down (Jeff Layton) [688156 653286]
- [fs] proc: protect mm start_/end_code in /proc/pid/stat (Eugene Teo) [684570 684571] {CVE-2011-0726}
- [net] dccp: fix oops in dccp_rcv_state_process (Eugene Teo) [682955 682956] {CVE-2011-1093}
- [net] bluetooth: fix bnep buffer overflow (Don Howard) [681318 681319] {CVE-2011-1079}
- [fs] nfs: break nfsd v4 lease on unlink, link, and rename (J. Bruce Fields) [693755 610093]
- [fs] nfs: break lease on nfsd v4 setattr (J. Bruce Fields) [693755 610093]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.11.1.el5]" date="1303941600">- [s390] dasd: fix race between open and offline (Hendrik Brueckner) [699808 695357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.12.1.el5]" date="1304805600">- [x86_64] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [i386] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [xen] fix MAX_EVTCHNS definition (Laszlo Ersek) [701242 701240]
- [net] ixgbe: fix for link failure on SFP+ DA cables (Don Howard) [696181 653236]
- [net] netxen: limit skb frags for non tso packet (Phillip Lougher) [699609 672368]
- [block] cciss: fix lost command problem (Phillip Lougher) [696503 696153]
- [fs] gfs2: fix filesystem hang caused by incorrect lock order (Robert S Peterson) [688855 656032]
- [fs] gfs2: restructure reclaim of unlinked dinodes (Phillip Lougher) [688855 656032]
- [fs] gfs2: unlock on gfs2_trans_begin error (Robert S Peterson) [688855 656032]
- [scsi] mpt2sas: prevent heap overflows and unchecked access (Tomas Henzl) [694526 694527] {CVE-2011-1495 CVE-2011-1494}
- [net] bridge/netfilter: fix ebtables information leak (Don Howard) [681325 681326] {CVE-2011-1080}
- [net] bluetooth: fix sco information leak to userspace (Don Howard) [681310 681311] {CVE-2011-1078}
- [fs] fix corrupted GUID partition table kernel oops (Jerome Marchand) [695979 695980] {CVE-2011-1577}
- [xen] x86/domain: fix error checks in arch_set_info_guest (Laszlo Ersek) [688581 688582] {CVE-2011-1166}
- [net] bridge: fix initial packet flood if !STP (Jiri Pirko) [701222 695369]
- [fs] nfsd: fix auth_domain reference leak on nlm operations (J. Bruce Fields) [697448 589512]
- [scsi] qla2xxx: no reset/fw-dump on CT/ELS pt req timeout (Chad Dupuis) [689700 660386]
- [mm] set barrier and send tlb flush to all affected cpus (Prarit Bhargava) [696908 675793]</changelog>
</package>
<package pkgid="95490357cbf94151debbe3b37f361bad3c530bd3" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="238.19.1.el5"/>
  <changelog author="Jiri Pirko &lt;jpirko@redhat.com&gt; [2.6.18-238.17.1.el5]" date="1308952800">- [net] bluetooth: l2cap and rfcomm: fix info leak to userspace (Thomas Graf) [703020 703021] {CVE-2011-2492}
- [net] inet_diag: fix inet_diag_bc_audit data validation (Thomas Graf) [714538 714539] {CVE-2011-2213}
- [misc] signal: fix kill signal spoofing issue (Oleg Nesterov) [690030 690031] {CVE-2011-1182}
- [fs] proc: fix signedness issue in next_pidmap (Oleg Nesterov) [697826 697827] {CVE-2011-1593}
- [char] agp: fix OOM and buffer overflow (Jerome Marchand) [699009 699010] {CVE-2011-1746}
- [char] agp: fix arbitrary kernel memory writes (Jerome Marchand) [699005 699006] {CVE-2011-2022 CVE-2011-1745}
- [infiniband] core: Handle large number of entries in poll CQ (Jay Fenlason) [668370 668371] {CVE-2011-1044 CVE-2010-4649}
- [infiniband] core: fix panic in ib_cm:cm_work_handler (Jay Fenlason) [679995 679996] {CVE-2011-0695}
- [fs] validate size of EFI GUID partition entries (Anton Arapov) [703027 703028] {CVE-2011-1776}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.18.1.el5]" date="1310076000">- [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]
- [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.19.1.el5]" date="1310335200">- Revert: [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]
- Revert: [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- Revert: [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- Revert: [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]</changelog>
</package>
<package pkgid="03beab59ec7fed70eac47fb04cab560df68a83ae" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="274.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.10.1.el5]" date="1320357600">- [net] be2net: enable NETIF_F_LLTX and add own locking of Tx path (Ivan Vecera) [750912 731806]
- [net] be2net: fix multicast filter programming (Ivan Vecera) [750912 731806]
- [net] be2net: fix cmd-rx-filter not notifying MCC (Ivan Vecera) [750912 731806]
- [net] be2net: use RX_FILTER cmd to program multicast addresses (Ivan Vecera) [750912 731806]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.11.1.el5]" date="1320616800">- [fs] gfs2: speed up large file delete/unlink (Robert S Peterson) [743806 738440]
- [fs] cifs: fix wrong buffer length returned by SendReceive (Sachin Prabhu) [750842 720363]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [virt] xen/netback: disable features not supported by netfront (Paolo Bonzini) [746600 746225]
- [fs] nfs: don't redirty inodes with no outstanding commits (Jeff Layton) [750477 739665]
- [net] tg3: call netif_carrier_off to initialize operstate value (John Feeney) [744700 635982]
- [xen] make test_assign_device domctl dependent on intremap hw (Laszlo Ersek) [745726 740203]
- [xen] Propagate target dom within XEN_DOMCTL_test_assign_device (Laszlo Ersek) [745726 740203]
- [net] sctp: encode PROTOCOL VIOLATION error cause correctly (Thomas Graf) [750457 636828]
- [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [char] tpm: Zero buffer after copying to userspace (Jiri Benc) [732630 732631] {CVE-2011-1162}
- [fs] hfs: fix hfs_find_init() sb-&gt;ext_tree NULL ptr oops (Phillip Lougher) [712775 712776] {CVE-2011-2203}
- [net] sctp: Set correct error cause value for missing parameters (Thomas Graf) [750451 629938]
- [misc] kernel: plug taskstats io infoleak (Jerome Marchand) [716845 716846] {CVE-2011-2494}
- [usb] Make device reset stop retrying after disconnect (Don Zickus) [750841 709699]
- [net] ipv6: properly use ICMP6MSGOUT_INC_STATS in ndisc_send_skb (Jiri Pirko) [743611 698728]
- [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [741273 694625]
- [mm] s390: fix first time swap use results in heavy swapping (Hendrik Brueckner) [747876 722482]
- [virt] xen: fix GFP mask handling in dma_alloc_coherent (Laszlo Ersek) [742282 730247]
- [s390] kernel: fix system hang if hangcheck timer expires (Hendrik Brueckner) [747872 730313]
- [usb] fix interface sysfs file-creation bug (Don Zickus) [750848 637930]
- [usb] don't touch sysfs stuff when altsetting is unchanged (Don Zickus) [750848 637930]
- [base] Fix potential deadlock in driver core (Don Zickus) [750848 637930]
- [security] keys: Fix NULL deref in user-defined key type (David Howells) [751300 751301]
- [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.12.1.el5]" date="1320789600">- Revert: [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]</changelog>
</package>
<package pkgid="b28320a32f2cfc4c14cf4abe4d67638867652e3b" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="274.17.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.15.1.el5]" date="1324159200">- [net] e1000e: Avoid wrong check on TX hang (Dean Nelson) [766485 746272]
- [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749159 749160] {CVE-2011-4077}
- [pci] intel-iommu: Default to non-coherent for unattached domains (Don Dutile) [766803 753924]
- [fs] nfs: remove BUG() from encode_share_access() (Jeff Layton) [755442 754901] {CVE-2011-4324}
- [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [759387 756412]
- [fs] hfs: add sanity check for file name length (Eric Sandeen) [755432 755433] {CVE-2011-4330}
- [fs] proc: Fix select on /proc files without -&gt;poll (David Howells) [755483 751214]
- [fs] nfs: Ensure we mark inode as dirty if early exit from commit (Jeff Layton) [755482 714020]
- [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [750460 742079]
- [virt] kvm: fix regression w/ 32 bit KVM clock (Rik van Riel) [747875 753789 751742 731599]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [fs] jbd/jbd2: validate sb-&gt;s_first in journal_get_superblock (Eryu Guan) [753343 706810] {CVE-2011-4132}
- [net] igb: enable link power down (Stefan Assmann) [752735 742514]
- [fs] proc: fix oops on invalid /proc/&lt;pid&gt;/maps access (Johannes Weiner) [747851 747699] {CVE-2011-3637}
- [block] cciss: bump driver version (Tomas Henzl) [758024 714129]
- [block] cciss: need to delay after a PCI Power Management reset (Tomas Henzl) [758024 714129]
- [block] cciss: auto engage scsi susbsystem (Tomas Henzl) [758024 714129]
- [block] cciss: store pdev in hba struct (Tomas Henzl) [758024 714129]
- [block] cciss: use consistent variable names (Tomas Henzl) [758024 714129]
- [block] cciss: add a commandline switch for simple mode (Tomas Henzl) [758024 714129]
- [fs] proc: close race with exec in mem_read() (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] implement access_remote_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] factor out main logic of access_process_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] use mm_struct to resolve gate vma's in __get_user_pages (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make in_gate_area take mm_struct instead of a task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make get_gate_vma take mm_struct instead of task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [x86_64] mark assoc mm when running task in 32 bit compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [misc] sched: add ctx tag to mm running task in ia32 compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: require the target to be tracable (or yourself) (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: close race in /proc/*/environ (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: report errors in /proc/*/*map* sanely (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: shift down_read(mmap_sem) to the caller (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] detect exec transition phase with new mm but old creds (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [net] igb: fix i350 SR-IOV failture (Stefan Assmann) [741877 714313]
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [755457 754620] {CVE-2011-4325}
- [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [757146 714870] {CVE-2011-4348}
- [scsi] isci: fix 32-bit operation when CONFIG_HIGHMEM64G=n (Phillip Lougher) [750458 713904]
- [net] tg3: Only allow phy ioctls while netif_running (Phillip Lougher) [746343 683393]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
</package>
<package pkgid="0518c83d2b49c16ca5d61bdeec6db5a56f41901c" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="274.18.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.18.1.el5]" date="1327096800">- [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [771774 750283] {CVE-2012-0028}
- [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [773322 771592]
- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747943 747946] {CVE-2011-3638}
- [scsi] don't fail scans when host is in recovery (Rob Evers) [772162 657345]
- [fs] jbd2: clear BH_Delay &amp; BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783477 783284] {CVE-2011-4086}
- [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772868 772869] {CVE-2012-0207}</changelog>
</package>
<package pkgid="db1dbaec44e8834d957eb006a91ca882eb8258bf" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="274.3.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.1.1.el5]" date="1312581600">- [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [714869 714867]
- [x86_64] Revert ACPI APIC mode test (Prarit Bhargava) [728163 721361]
- [net] sctp: reset packet information after packet transmit (Thomas Graf) [727592 725573]
- [fs] block: initialise bd_super in bdget (Lachlan McIlroy) [726628 707425]
- [fs] nfs: Remove bogus call to nfs4_drop_state_owner (Jeff Layton) [726625 724923]
- [net] be2net: clear interrupt bit in be_probe (Ivan Vecera) [723552 713703]
- [net] be2net: remove certain cmd failure logging (Ivan Vecera) [726619 716821]
- [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [718154 718155] {CVE-2011-2517}
- [fs] xfs: handle NULL mount struct in error reports (Eric Sandeen) [727835 720551]
- [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716827 716828] {CVE-2011-2495}
- [fs] lockd: don't use file's credentials on RPCSEC_GSS mounts (Max Matveev) [722855 701574]
- [fs] xfs: add a missing mutex_unlock to a dio error path (Jeff Moyer) [727590 718232]
- [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [709546 709547] {CVE-2011-2491}
- [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [718883 718884]
- [xen] Fix x86_emulate handling of imul with immediate operands (Igor Mammedov) [712885 700565]
- [fs] Fix wrongly vfree'ing a kmalloc'ed area (Larry Woodman) [721300 719495]
- [fs] dlm: bump default hash table and maximum allocatable sizes (Bryn M. Reeves) [719930 715603]
- [net] tipc: Overhaul of socket locking logic (Max Matveev) [719746 704192]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.18-274.2.1.el5]" date="1313186400">- Fix up some fallout from RHEL5.7 kernel package structure changes</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.3.1.el5]" date="1314396000">- [xen] fix off-by-one shift in x86_64 __addr_ok (Laszlo Ersek) [728043 719850] {CVE-2011-2901}</changelog>
</package>
<package pkgid="26b80774a67dea85fa90b5b709d10d5f22716a9a" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="274.7.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.5.1.el5]" date="1316210400">- [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [732775 675781]
- [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [732775 675781]
- [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [fs] nfs: Fix client not honoring nosharecache mount option (David Jeffery) [734772 730097]
- [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716543 716544] {CVE-2011-2496}
- [mm] Fix incorrect off-by-one centisec dirty values (Larry Woodman) [733665 691087]
- [net] bnx2x: fix bringup of BCM57710 (Michal Schmidt) [737475 680411]
- [virt] xen/netfront: no disable s/g when renegotiating features (Paolo Bonzini) [738392 733416]
- [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734157 727504]
- [virt] xen: Allow arbitrary mtu size until frontend connected (Paolo Bonzini) [738389 697021]
- [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730689 692966]
- [net] cnic, bnx2: Check iSCSI support early in bnx2_init_one (Neil Horman) [734761 710272]
- [net] igb: fix WOL on 2nd port on i350 (Stefan Assmann) [730682 718988]
- [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [728521 720212]</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.6.1.el5]" date="1316815200">- [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [730949 703045] {CVE-2011-2942}
- [misc] remove	div_long_long_rem (Prarit Bhargava) [732879 732614] {CVE-2011-3209}
- [net] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: Use NTWK_RX_FILTER command for promiscous mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: non-member vlan pkts not received in promisc mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: remove bogus unlikely on vlan check (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [x86] nmi: make NMI_NONE default watchdog in x86_64 hvm guests (Laszlo Ersek) [739823 707966]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.7.1.el5]" date="1318888800">- Revert: [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
</package>
<package pkgid="1f622a8f8aa1546ae8333c4fa4167a64113b90df" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="308.11.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.9.1.el5]" date="1339020000">- [fs] jbd: clear b_modified before moving the jh to a different transaction (Josef Bacik) [827205 563247]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.10.1.el5]" date="1339711200">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970] {CVE-2012-2934}
- [scsi] qla2xxx: Use ha-&gt;pdev-&gt;revision in 4Gbps MSI-X check. (Chad Dupuis) [816373 800653]
- [fs] sunrpc: do array overrun check in svc_recv before page alloc (J. Bruce Fields) [820358 814626]
- [fs] knfsd: fix an NFSD bug with full size non-page-aligned reads (J. Bruce Fields) [820358 814626]
- [fs] sunrpc: fix oops due to overrunning server's page array (J. Bruce Fields) [820358 814626]
- [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [829670 817131]
- [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [824654 818787]
- [net] sunrpc: Don't use list_for_each_entry_safe in rpc_wake_up (Steve Dickson) [817571 809937]
- [s390] qeth: add missing wake_up call (Hendrik Brueckner) [829059 790900]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
</package>
<package pkgid="14cd2e7f0e5e476882610294b1ff631185e29089" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="308.13.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.12.1.el5]" date="1342216800">- [fs] nfs: Don't allow multiple mounts on same mntpnt with -o noac (Sachin Prabhu) [839806 839753]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.13.1.el5]" date="1343340000">- [net] e1000e: Cleanup logic in e1000_check_for_serdes_link_82571 (Dean Nelson) [841370 771366]
- [net] e1000e: Correct link check logic for 82571 serdes (Dean Nelson) [841370 771366]
- [mm] NULL pointer dereference in __vm_enough_memory (Jerome Marchand) [840077 836244]
- [fs] dlm: fix slow rsb search in dir recovery (David Teigland) [838140 753244]
- [fs] autofs: propogate LOOKUP_DIRECTORY flag only for last comp (Ian Kent) [830264 814418]
- [fs] ext4: properly dirty split extent nodes (Eric Sandeen) [840946 839770]
- [scsi] don't offline devices with a reservation conflict (David Jeffery) [839196 835660]
- [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate (Lukas Czerner) [837226 830351]
- [net] dl2k: Clean up rio_ioctl (Weiping Pan) [818822 818823] {CVE-2012-2313}
- [x86] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835450 834562]
- [net] tg3: Fix TSO handling (John Feeney) [833182 795672]
- [input] evdev: use after free from open/disconnect race (David Jeffery) [832448 822166]</changelog>
</package>
<package pkgid="45815b64c0ac98aa9a62893d962a0d87d412ed22" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="308.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.14.1.el5]" date="1346277600">- [net] e1000e: drop check of RXCW.CW to eliminate link up and down (Dean Nelson) [852448 840642]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.15.1.el5]" date="1346882400">- [net] sfc: Fix max no of TSO segments and min TX queue size (Michal Schmidt) [845554 845555] {CVE-2012-3412}
- [kernel] xacct_add_tsk: fix pure theoretical -&gt;mm use-after-free (Nikola Pajkovsky) [849723 849725] {CVE-2012-3510}
- [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820255 820256] {CVE-2012-2319}
- [net] netfilter: add dscp netfilter match (Thomas Graf) [847327 842029]
- [net] rds: set correct msg_namelen (Weiping Pan) [822727 822728] {CVE-2012-3430}
- [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [847359 693822]
- [fs] quota: manage reserved space when quota is not active (Eric Sandeen) [847326 818087]
- [fs] quota: Fix warning if delayed write before quota is enabled (Eric Sandeen) [847326 818087]
- [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]
- [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- [xen] x86: whitelist Enhanced SpeedStep for dom0 (Laszlo Ersek) [846125 809103]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.16.1.el5]" date="1348005600">- Revert: [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- Revert: [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- Revert: [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]</changelog>
</package>
<package pkgid="16fdf6f80ccfb47f9a996e31b0b3178979d0874a" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="308.20.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.18.1.el5]" date="1350079200">- [fs] autofs4: Merge the remaining dentry ops tables (Ian Kent) [857558 850977]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.19.1.el5]" date="1350597600">- [net] be2net: Remove code that stops further access to BE NIC based on UE bits (Alexander Gordeev) [867896 862811]
- [net] netpoll: fix an incorrect check for NULL pointer (Alexander Gordeev) [856079 848098]
- [net] mlx4: Add support for EEH error recovery (Alexander Gordeev) [847404 798048]
- [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] fix crash if block {device|size} read &amp; changed at sametime (Mikulas Patocka) [864823 756506]
- [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}
- [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [861387 819830]
- [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [858774 857448]
- [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [859946 858724]
- [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [857966 854067]
- [scsi] isci: fixup linkspeed definitions (David Milburn) [854986 833000]
- [fs] nfs: nfs_d_automount update caller path after do_add_mount (Carlos Maiolino) [857552 834379]
- [fs] vfs: Fix vfsmount overput on simultaneous automount (Carlos Maiolino) [857552 834379]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.20.1.el5]" date="1352239200">- Revert: [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}</changelog>
</package>
<package pkgid="cc4d4dec46ce69c985fe01efa92b508359441fc4" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="308.24.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.22.1.el5]" date="1353362400">- [net] bonding: fix link down handling in 802.3ad mode (Andy Gospodarek) [877943 782866]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.23.1.el5]" date="1353535200">- [net] bnx2x: Add remote-fault link detection (Alexander Gordeev) [870120 796905]
- [net] bnx2x: Cosmetic changes (Alexander Gordeev) [870120 796905]
- [net] rds-ping cause kernel panic (Alexander Gordeev) [822755 822756] {CVE-2012-2372}
- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878033 878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870148 870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870150 870151] {CVE-2012-4535}
- [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.24.1.el5]" date="1353535201">- Revert: [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
</package>
<package pkgid="e98859adbbe12e520b3dace0ebd76efcaf22da7e" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="308.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.2.1.el5]" date="1329861600">- [fs] nfs: nfs_fhget should wait on I_NEW instead of I_LOCK (Sachin Prabhu) [795664 785062]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.3.1.el5]" date="1332453600">- [net] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [805462 773735]
- [net] be2net: add vlan/rx-mode/flow-control config to be_setup (Ivan Vecera) [805462 773735]
- [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [805460 799170]
- [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry (Ian Kent) [801726 798809]
- [fs] vfs: fix d_instantiate_unique (Ian Kent) [801726 798809]
- [fs] nfs: allow high priority COMMITs to bypass inode commit lock (Jeff Layton) [799941 773777]
- [fs] nfs: don't skip COMMITs if system under is mem pressure (Jeff Layton) [799941 773777]
- [scsi] qla2xxx: Read the HCCR register to flush any PCIe writes (Chad Dupuis) [798748 772192]
- [scsi] qla2xxx: Complete mbox cmd timeout before next reset cycle (Chad Dupuis) [798748 772192]
- [s390] qdio: wrong buffers-used counter for ERROR buffers (Hendrik Brueckner) [801724 790840]
- [net] bridge: Reset IPCB when entering IP stack (Herbert Xu) [804721 749813]
- [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770649 770650]
- [fs] procfs: parse mount options (Jerome Marchand) [770649 770650]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.4.1.el5]" date="1332972000">- [net] ipv6: fix skb double free in xfrm6_tunnel (Jiri Benc) [752305 743375] {CVE-2012-1583}</changelog>
</package>
<package pkgid="2347cacb5ac7ccecd659b77fc15b89ba24d32012" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="308.8.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.6.1.el5]" date="1335564000">- [scsi] fc class: fix scanning when devs are offline (Mike Christie) [816684 799530]
- [md] dm-multipath: delay retry of bypassed pg (Mike Christie) [816684 799530]
- [net] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [811927 800575]
- [net] bonding: remove {master,vlan}_ip and query devices instead (Andy Gospodarek) [810321 772216]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
</package>
<package pkgid="f0cfe0469a74e443dddbd073aebab24cf403c60d" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="308.8.2.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.2.el5]" date="1338328800">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970]</changelog>
</package>
<package pkgid="38e692b6112eea753b17821636dfaf92f9677a8f" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="348.1.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-347.el5]" date="1353448800">- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870151] {CVE-2012-4535}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
</package>
<package pkgid="cb4cd2cd499bbb43f3ae52d6d06282b070bc9e8e" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="348.12.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.10.1.el5]" date="1370642400">- [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955600 955601] {CVE-2013-3224}
- [net] Bluetooth: HCI &amp; L2CAP information leaks (Jacob Tanenbaum) [922415 922416] {CVE-2012-6544}
- [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [971872 872531]
- [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [971872 872531]
- [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [958021 864648]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.11.1.el5]" date="1371852000">- Revert: [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
- Revert: [x86-64] non lazy sleazy fpu implementation (Prarit Bhargava) [948187 731531]
- Revert: [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- Revert: [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- Revert: [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.12.1.el5]" date="1372716000">- Revert: [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]</changelog>
</package>
<package pkgid="d39d0245dd607badcce3ae536d7a4757bea04c6c" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="348.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.14.1.el5]" date="1374019200">- [net] Fix panic for vlan over gre via tun (Thomas Graf) [983452 981337]
- [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [983628 865095]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.15.1.el5]" date="1374537600">- [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [976441 853145]
- [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [976441 853145]
- [fs] nfs: define function to update nfsi-&gt;cache_change_attribute (Scott Mayhew) [976441 853145]
- [net] af_key: fix info leaks in notify messages (Jiri Benc) [980999 981000] {CVE-2013-2234}
- [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981222 981224] {CVE-2013-2237}
- [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981556 981557] {CVE-2013-2232}
- [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980141 980142] {CVE-2013-2224}
- [x86_64] Early segment setup for VT (Paolo Bonzini) [979920 978305]
- [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971245 971246] {CVE-2013-2147}
- [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973103 973104] {CVE-2013-2164}
- [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [972583 965359]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="897f4bd291ce84ca2563bc954b7e10f8914a1b6a" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="348.18.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.17.1.el5]" date="1377216000">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [999819 995961]
- [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [983864 956322]
- [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [983864 956322]
- [net] be2net: disable TX in be_close() (Ivan Vecera) [983864 956322]
- [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [983864 956322]
- [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [983864 956322]
- [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [983864 956322]
- [net] be2net: Fixed memory leak (Ivan Vecera) [983864 956322]
- [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [983864 956322]
- [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [983864 956322]
- [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [983864 956322]
- [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [983864 956322]
- [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [983864 956322]
- [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [983864 956322]
- [net] be2net: Fix Endian (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [983864 956322]
- [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [983864 956322]
- [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [983864 956322]
- [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [983864 956322]
- [net] be2net: cleanup be_vid_config() (Ivan Vecera) [983864 956322]
- [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [983864 956322]
- [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [983864 956322]
- [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [983864 956322]
- [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [983864 956322]
- [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [983864 956322]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.18.1.el5]" date="1378512000">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [1005239 987539]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970874 970875] {CVE-2013-2141}
- [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987647 987648] {CVE-2013-4162}
- [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849735 849736] {CVE-2012-3511}
- [fs] autofs: remove autofs dentry mount check (Ian Kent) [1001488 928098]</changelog>
</package>
<package pkgid="9c5c12fc7ee8b05126647a0a110222bea475e004" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="348.2.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
</package>
<package pkgid="04f62ab09af27ac9bc7355ea5656b0b6a48880cf" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="348.3.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
</package>
<package pkgid="d8a80cc86b0d7ffe7db19aa8e8ef59d7da6a7da3" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="348.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
</package>
<package pkgid="ba9ea210b9162adcef96eed13f8d8135f9b5613f" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="348.6.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.5.1.el5]" date="1365804000">- [fs] nfs: handle getattr failure during nfsv4 open (David Jeffery) [947736 906909]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.6.1.el5]" date="1367013600">- [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [953435 947732]
- [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [953435 947732]
- [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [954296 948317]
- [fs] nfs: Fix bugs on short read (Sachin Prabhu) [952098 924011]
- [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] introduce xzalloc() &amp; Co (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="8df18447cadb885697c236bac19e62398d1a6106" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="371.1.2.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.2.el5]" date="1381190400">- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
</package>
<package pkgid="64c823d3c99c2cddccbeac52cf834f4245755af5" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="371.11.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
</package>
<package pkgid="7797546ae4da5ee5d7f4ed2e0f57294fd1770000" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="371.12.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.12.1.el5]" date="1407456000">- [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102702 1102703] {CVE-2014-3917}
- [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1125246 1080194]
- [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [1121017 924590]
- [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1116027 1081785]
- [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1117665 1102768]</changelog>
</package>
<package pkgid="45246326cc45259ba7578684eeb2b76c3b026770" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="371.3.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
</package>
<package pkgid="5d7ffa51354cb8616b36dbc685e64be432c5b6a1" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="371.4.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
</package>
<package pkgid="2f3f1c148d3a3beb8e6aa873c08852c636bbf59b" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="371.6.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.5.1.el5]" date="1390348800">- [fs] cifs: stop trying to use virtual circuits (Sachin Prabhu) [1044328 1013469]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
</package>
<package pkgid="d2e7025105f9d9ea85229026f8c7c0dd5ebe358d" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="371.8.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
</package>
<package pkgid="393e2fedef7d5e6e79653101ad7388ef33a07035" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="371.9.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
</package>
<package pkgid="3ba28ea406ebfb432312b27bef81797752b2bac8" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="371.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-369.el5]" date="1376092800">- [fs] nlm: Ensure we resend pending blocking locks after a reclaim (Steve Dickson) [918592]
- [kernel] kmod: kthread_run causes oom killer deadlock (Frantisek Hrbata) [983506]
- [fs] nfs4: ratelimit some messages, add name to bad seq-id mess (Dave Wysochanski) [953121]
- [fs] nfsd: fix EXDEV checking in rename (J. Bruce Fields) [515599]
- [misc] tty: Fix abusers of current-sighand-&gt;tty (Aaron Tomlin) [858981]
- [net] ipv6: don't call addrconf_dst_alloc again when enable lo (Jiri Benc) [981417]
- [redhat] kabi: Adding symbol fc_fabric_login (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_reset (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_els_send (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_fabric_logoff (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_set_mfs (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_elsct_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_up (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv_flogi (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_depth (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_down (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_type (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_free (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_alloc (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_config (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_disc_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol strict_strtoul (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_rport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_get_host_port_state (Jiri Olsa) [864256]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-370.el5]" date="1376956800">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [995961]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970875] {CVE-2013-2141}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
</package>
<package pkgid="96857d888b158feb0b71d5b63469be07a2f5a1b4" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="400.1.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.1.1.el5]" date="1418601600">- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="882f70101325d60c497e2d8ad5c9135b84f73301" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="400.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-398.el5]" date="1407888000">- [net] security_socket_post_accept before fd_install in sys_accept (Denys Vlasenko) [1059078]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
</package>
<package pkgid="e3b761dc715a59e8d792fba6068498dbd9cb5ef6" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="402.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-401.el5]" date="1418256000">- [net] rds: fix possible double free on sock tear down (Herton R. Krzesinski) [1116880]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="5e2de59704b076ec9174224b7d96981b9f9b9a00" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="404.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-403.el5]" date="1425600000">- [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
- [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
- [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
</package>
<package pkgid="5751271bec42b1e7730c3171e5142cf31e4e1f8e" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="406.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-405.el5]" date="1430438400">- [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
- [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
- [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
- [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
- [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
- [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
- [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
- [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
- [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
- [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
</package>
<package pkgid="ee704d4382b96377df452de416d643131c417669" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="408.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
</package>
<package pkgid="e5d87ce281e04e8e4e4471c796992c9b47a6f398" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="409.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-409.el5]" date="1455321600">- [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
- [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [sched] prevent division by zero x-&gt;cpu_power (Denys Vlasenko) [1209728]
- [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}</changelog>
</package>
<package pkgid="4d5cb9957cd65311db8b9a89d0189282f3b2b674" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="416.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-414.el5]" date="1474934400">- [redhat] Fix missed -413 kernel version (Alexander Gordeev)</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
</package>
<package pkgid="696dbedd600e765b9b4eb3b185ad9e2741ce0763" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="417.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
</package>
<package pkgid="c7d3549148b35a7a3a15ad50608843e8e09f6188" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.18" rel="419.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-418.el5]" date="1484352000">- [sched] prevent NULL deref in find_busiest_group (Denys Vlasenko) [1376523]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-419.el5]" date="1487808000">- [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
- [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]</changelog>
</package>
<package pkgid="2c90ae00bc8742a7752eeb189fcd61d99a590c1e" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="238.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.10.1.el5]" date="1302904800">- [fs] gfs2: creating large files suddenly slow to a crawl (Robert S Peterson) [690239 683155]
- [virt] hypervisor: Overflow fix for clocks &gt; 4GHz (Zachary Amsden) [690134 673242]
- [usb] fix usbfs isochronous data transfer regression (Don Zickus) [696136 688926]
- [fs] partitions: Fix corrupted OSF partition table parsing (Danny Feng) [688022 688023] {CVE-2011-1163}
- [misc] pm: add comment explaining is_registered kabi work-around (Don Zickus) [689699 637930]
- [media] sn9c102: fix world-wirtable sysfs files (Don Howard) [679304 679305]
- [scsi] scsi_dh_rdac: Add two new IBM devices to rdac_dev_list (Rob Evers) [692370 691460]
- [fs] block: fix submit_bh discarding barrier flag on sync write (Lukas Czerner) [690795 667673]
- [net] netfilter/ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689339 689340]
- [net] netfilter: ip6_tables: fix infoleak to userspace (Jiri Pirko) [689348 689349] {CVE-2011-1172}
- [net] netfilter/ip_tables: fix infoleak to userspace (Jiri Pirko) [689331 689332] {CVE-2011-1171}
- [net] netfilter/arp_tables: fix infoleak to userspace (Jiri Pirko) [689322 689323] {CVE-2011-1170}
- [base] Fix potential deadlock in driver core (Don Zickus) [689699 637930]
- [net] forcedeth/r8169: call netif_carrier_off at end of probe (Ivan Vecera) [689808 689805 664705 664707]
- [net] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [693751 680531]
- [net] ixgbe: limit VF access to network traffic (Andy Gospodarek) [693751 680531]
- [fs] lockd: make lockd_down wait for lockd to come down (Jeff Layton) [688156 653286]
- [fs] proc: protect mm start_/end_code in /proc/pid/stat (Eugene Teo) [684570 684571] {CVE-2011-0726}
- [net] dccp: fix oops in dccp_rcv_state_process (Eugene Teo) [682955 682956] {CVE-2011-1093}
- [net] bluetooth: fix bnep buffer overflow (Don Howard) [681318 681319] {CVE-2011-1079}
- [fs] nfs: break nfsd v4 lease on unlink, link, and rename (J. Bruce Fields) [693755 610093]
- [fs] nfs: break lease on nfsd v4 setattr (J. Bruce Fields) [693755 610093]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.11.1.el5]" date="1303941600">- [s390] dasd: fix race between open and offline (Hendrik Brueckner) [699808 695357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.12.1.el5]" date="1304805600">- [x86_64] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [i386] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [xen] fix MAX_EVTCHNS definition (Laszlo Ersek) [701242 701240]
- [net] ixgbe: fix for link failure on SFP+ DA cables (Don Howard) [696181 653236]
- [net] netxen: limit skb frags for non tso packet (Phillip Lougher) [699609 672368]
- [block] cciss: fix lost command problem (Phillip Lougher) [696503 696153]
- [fs] gfs2: fix filesystem hang caused by incorrect lock order (Robert S Peterson) [688855 656032]
- [fs] gfs2: restructure reclaim of unlinked dinodes (Phillip Lougher) [688855 656032]
- [fs] gfs2: unlock on gfs2_trans_begin error (Robert S Peterson) [688855 656032]
- [scsi] mpt2sas: prevent heap overflows and unchecked access (Tomas Henzl) [694526 694527] {CVE-2011-1495 CVE-2011-1494}
- [net] bridge/netfilter: fix ebtables information leak (Don Howard) [681325 681326] {CVE-2011-1080}
- [net] bluetooth: fix sco information leak to userspace (Don Howard) [681310 681311] {CVE-2011-1078}
- [fs] fix corrupted GUID partition table kernel oops (Jerome Marchand) [695979 695980] {CVE-2011-1577}
- [xen] x86/domain: fix error checks in arch_set_info_guest (Laszlo Ersek) [688581 688582] {CVE-2011-1166}
- [net] bridge: fix initial packet flood if !STP (Jiri Pirko) [701222 695369]
- [fs] nfsd: fix auth_domain reference leak on nlm operations (J. Bruce Fields) [697448 589512]
- [scsi] qla2xxx: no reset/fw-dump on CT/ELS pt req timeout (Chad Dupuis) [689700 660386]
- [mm] set barrier and send tlb flush to all affected cpus (Prarit Bhargava) [696908 675793]</changelog>
</package>
<package pkgid="152b69fa6458f0edd0098e65a08b7d6473cc4906" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="238.19.1.el5"/>
  <changelog author="Jiri Pirko &lt;jpirko@redhat.com&gt; [2.6.18-238.17.1.el5]" date="1308952800">- [net] bluetooth: l2cap and rfcomm: fix info leak to userspace (Thomas Graf) [703020 703021] {CVE-2011-2492}
- [net] inet_diag: fix inet_diag_bc_audit data validation (Thomas Graf) [714538 714539] {CVE-2011-2213}
- [misc] signal: fix kill signal spoofing issue (Oleg Nesterov) [690030 690031] {CVE-2011-1182}
- [fs] proc: fix signedness issue in next_pidmap (Oleg Nesterov) [697826 697827] {CVE-2011-1593}
- [char] agp: fix OOM and buffer overflow (Jerome Marchand) [699009 699010] {CVE-2011-1746}
- [char] agp: fix arbitrary kernel memory writes (Jerome Marchand) [699005 699006] {CVE-2011-2022 CVE-2011-1745}
- [infiniband] core: Handle large number of entries in poll CQ (Jay Fenlason) [668370 668371] {CVE-2011-1044 CVE-2010-4649}
- [infiniband] core: fix panic in ib_cm:cm_work_handler (Jay Fenlason) [679995 679996] {CVE-2011-0695}
- [fs] validate size of EFI GUID partition entries (Anton Arapov) [703027 703028] {CVE-2011-1776}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.18.1.el5]" date="1310076000">- [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]
- [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.19.1.el5]" date="1310335200">- Revert: [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]
- Revert: [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- Revert: [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- Revert: [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]</changelog>
</package>
<package pkgid="1be09c27085d95ea3817b5d81693a83922783869" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="274.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.10.1.el5]" date="1320357600">- [net] be2net: enable NETIF_F_LLTX and add own locking of Tx path (Ivan Vecera) [750912 731806]
- [net] be2net: fix multicast filter programming (Ivan Vecera) [750912 731806]
- [net] be2net: fix cmd-rx-filter not notifying MCC (Ivan Vecera) [750912 731806]
- [net] be2net: use RX_FILTER cmd to program multicast addresses (Ivan Vecera) [750912 731806]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.11.1.el5]" date="1320616800">- [fs] gfs2: speed up large file delete/unlink (Robert S Peterson) [743806 738440]
- [fs] cifs: fix wrong buffer length returned by SendReceive (Sachin Prabhu) [750842 720363]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [virt] xen/netback: disable features not supported by netfront (Paolo Bonzini) [746600 746225]
- [fs] nfs: don't redirty inodes with no outstanding commits (Jeff Layton) [750477 739665]
- [net] tg3: call netif_carrier_off to initialize operstate value (John Feeney) [744700 635982]
- [xen] make test_assign_device domctl dependent on intremap hw (Laszlo Ersek) [745726 740203]
- [xen] Propagate target dom within XEN_DOMCTL_test_assign_device (Laszlo Ersek) [745726 740203]
- [net] sctp: encode PROTOCOL VIOLATION error cause correctly (Thomas Graf) [750457 636828]
- [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [char] tpm: Zero buffer after copying to userspace (Jiri Benc) [732630 732631] {CVE-2011-1162}
- [fs] hfs: fix hfs_find_init() sb-&gt;ext_tree NULL ptr oops (Phillip Lougher) [712775 712776] {CVE-2011-2203}
- [net] sctp: Set correct error cause value for missing parameters (Thomas Graf) [750451 629938]
- [misc] kernel: plug taskstats io infoleak (Jerome Marchand) [716845 716846] {CVE-2011-2494}
- [usb] Make device reset stop retrying after disconnect (Don Zickus) [750841 709699]
- [net] ipv6: properly use ICMP6MSGOUT_INC_STATS in ndisc_send_skb (Jiri Pirko) [743611 698728]
- [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [741273 694625]
- [mm] s390: fix first time swap use results in heavy swapping (Hendrik Brueckner) [747876 722482]
- [virt] xen: fix GFP mask handling in dma_alloc_coherent (Laszlo Ersek) [742282 730247]
- [s390] kernel: fix system hang if hangcheck timer expires (Hendrik Brueckner) [747872 730313]
- [usb] fix interface sysfs file-creation bug (Don Zickus) [750848 637930]
- [usb] don't touch sysfs stuff when altsetting is unchanged (Don Zickus) [750848 637930]
- [base] Fix potential deadlock in driver core (Don Zickus) [750848 637930]
- [security] keys: Fix NULL deref in user-defined key type (David Howells) [751300 751301]
- [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.12.1.el5]" date="1320789600">- Revert: [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]</changelog>
</package>
<package pkgid="08636d849f9602ec89bd837c150f337b5ad8f9a6" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="274.17.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.15.1.el5]" date="1324159200">- [net] e1000e: Avoid wrong check on TX hang (Dean Nelson) [766485 746272]
- [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749159 749160] {CVE-2011-4077}
- [pci] intel-iommu: Default to non-coherent for unattached domains (Don Dutile) [766803 753924]
- [fs] nfs: remove BUG() from encode_share_access() (Jeff Layton) [755442 754901] {CVE-2011-4324}
- [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [759387 756412]
- [fs] hfs: add sanity check for file name length (Eric Sandeen) [755432 755433] {CVE-2011-4330}
- [fs] proc: Fix select on /proc files without -&gt;poll (David Howells) [755483 751214]
- [fs] nfs: Ensure we mark inode as dirty if early exit from commit (Jeff Layton) [755482 714020]
- [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [750460 742079]
- [virt] kvm: fix regression w/ 32 bit KVM clock (Rik van Riel) [747875 753789 751742 731599]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [fs] jbd/jbd2: validate sb-&gt;s_first in journal_get_superblock (Eryu Guan) [753343 706810] {CVE-2011-4132}
- [net] igb: enable link power down (Stefan Assmann) [752735 742514]
- [fs] proc: fix oops on invalid /proc/&lt;pid&gt;/maps access (Johannes Weiner) [747851 747699] {CVE-2011-3637}
- [block] cciss: bump driver version (Tomas Henzl) [758024 714129]
- [block] cciss: need to delay after a PCI Power Management reset (Tomas Henzl) [758024 714129]
- [block] cciss: auto engage scsi susbsystem (Tomas Henzl) [758024 714129]
- [block] cciss: store pdev in hba struct (Tomas Henzl) [758024 714129]
- [block] cciss: use consistent variable names (Tomas Henzl) [758024 714129]
- [block] cciss: add a commandline switch for simple mode (Tomas Henzl) [758024 714129]
- [fs] proc: close race with exec in mem_read() (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] implement access_remote_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] factor out main logic of access_process_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] use mm_struct to resolve gate vma's in __get_user_pages (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make in_gate_area take mm_struct instead of a task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make get_gate_vma take mm_struct instead of task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [x86_64] mark assoc mm when running task in 32 bit compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [misc] sched: add ctx tag to mm running task in ia32 compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: require the target to be tracable (or yourself) (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: close race in /proc/*/environ (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: report errors in /proc/*/*map* sanely (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: shift down_read(mmap_sem) to the caller (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] detect exec transition phase with new mm but old creds (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [net] igb: fix i350 SR-IOV failture (Stefan Assmann) [741877 714313]
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [755457 754620] {CVE-2011-4325}
- [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [757146 714870] {CVE-2011-4348}
- [scsi] isci: fix 32-bit operation when CONFIG_HIGHMEM64G=n (Phillip Lougher) [750458 713904]
- [net] tg3: Only allow phy ioctls while netif_running (Phillip Lougher) [746343 683393]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
</package>
<package pkgid="403f30767e22a6ad6893f9d8e8a3a1b2706e2dd4" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="274.18.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.18.1.el5]" date="1327096800">- [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [771774 750283] {CVE-2012-0028}
- [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [773322 771592]
- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747943 747946] {CVE-2011-3638}
- [scsi] don't fail scans when host is in recovery (Rob Evers) [772162 657345]
- [fs] jbd2: clear BH_Delay &amp; BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783477 783284] {CVE-2011-4086}
- [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772868 772869] {CVE-2012-0207}</changelog>
</package>
<package pkgid="dd2b6019b31f30f7489a85c2d707dde706fc10a0" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="274.3.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.1.1.el5]" date="1312581600">- [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [714869 714867]
- [x86_64] Revert ACPI APIC mode test (Prarit Bhargava) [728163 721361]
- [net] sctp: reset packet information after packet transmit (Thomas Graf) [727592 725573]
- [fs] block: initialise bd_super in bdget (Lachlan McIlroy) [726628 707425]
- [fs] nfs: Remove bogus call to nfs4_drop_state_owner (Jeff Layton) [726625 724923]
- [net] be2net: clear interrupt bit in be_probe (Ivan Vecera) [723552 713703]
- [net] be2net: remove certain cmd failure logging (Ivan Vecera) [726619 716821]
- [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [718154 718155] {CVE-2011-2517}
- [fs] xfs: handle NULL mount struct in error reports (Eric Sandeen) [727835 720551]
- [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716827 716828] {CVE-2011-2495}
- [fs] lockd: don't use file's credentials on RPCSEC_GSS mounts (Max Matveev) [722855 701574]
- [fs] xfs: add a missing mutex_unlock to a dio error path (Jeff Moyer) [727590 718232]
- [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [709546 709547] {CVE-2011-2491}
- [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [718883 718884]
- [xen] Fix x86_emulate handling of imul with immediate operands (Igor Mammedov) [712885 700565]
- [fs] Fix wrongly vfree'ing a kmalloc'ed area (Larry Woodman) [721300 719495]
- [fs] dlm: bump default hash table and maximum allocatable sizes (Bryn M. Reeves) [719930 715603]
- [net] tipc: Overhaul of socket locking logic (Max Matveev) [719746 704192]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.18-274.2.1.el5]" date="1313186400">- Fix up some fallout from RHEL5.7 kernel package structure changes</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.3.1.el5]" date="1314396000">- [xen] fix off-by-one shift in x86_64 __addr_ok (Laszlo Ersek) [728043 719850] {CVE-2011-2901}</changelog>
</package>
<package pkgid="2ca375256160e9e8f2725f741645da5901392ffc" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="274.7.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.5.1.el5]" date="1316210400">- [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [732775 675781]
- [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [732775 675781]
- [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [fs] nfs: Fix client not honoring nosharecache mount option (David Jeffery) [734772 730097]
- [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716543 716544] {CVE-2011-2496}
- [mm] Fix incorrect off-by-one centisec dirty values (Larry Woodman) [733665 691087]
- [net] bnx2x: fix bringup of BCM57710 (Michal Schmidt) [737475 680411]
- [virt] xen/netfront: no disable s/g when renegotiating features (Paolo Bonzini) [738392 733416]
- [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734157 727504]
- [virt] xen: Allow arbitrary mtu size until frontend connected (Paolo Bonzini) [738389 697021]
- [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730689 692966]
- [net] cnic, bnx2: Check iSCSI support early in bnx2_init_one (Neil Horman) [734761 710272]
- [net] igb: fix WOL on 2nd port on i350 (Stefan Assmann) [730682 718988]
- [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [728521 720212]</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.6.1.el5]" date="1316815200">- [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [730949 703045] {CVE-2011-2942}
- [misc] remove	div_long_long_rem (Prarit Bhargava) [732879 732614] {CVE-2011-3209}
- [net] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: Use NTWK_RX_FILTER command for promiscous mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: non-member vlan pkts not received in promisc mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: remove bogus unlikely on vlan check (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [x86] nmi: make NMI_NONE default watchdog in x86_64 hvm guests (Laszlo Ersek) [739823 707966]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.7.1.el5]" date="1318888800">- Revert: [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
</package>
<package pkgid="a8a116b803e2cf9324c601d00f64ae9679e240c4" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="308.11.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.9.1.el5]" date="1339020000">- [fs] jbd: clear b_modified before moving the jh to a different transaction (Josef Bacik) [827205 563247]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.10.1.el5]" date="1339711200">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970] {CVE-2012-2934}
- [scsi] qla2xxx: Use ha-&gt;pdev-&gt;revision in 4Gbps MSI-X check. (Chad Dupuis) [816373 800653]
- [fs] sunrpc: do array overrun check in svc_recv before page alloc (J. Bruce Fields) [820358 814626]
- [fs] knfsd: fix an NFSD bug with full size non-page-aligned reads (J. Bruce Fields) [820358 814626]
- [fs] sunrpc: fix oops due to overrunning server's page array (J. Bruce Fields) [820358 814626]
- [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [829670 817131]
- [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [824654 818787]
- [net] sunrpc: Don't use list_for_each_entry_safe in rpc_wake_up (Steve Dickson) [817571 809937]
- [s390] qeth: add missing wake_up call (Hendrik Brueckner) [829059 790900]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
</package>
<package pkgid="6e970d4768ba117d185d09de7eaf9c68d1c20dd8" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="308.13.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.12.1.el5]" date="1342216800">- [fs] nfs: Don't allow multiple mounts on same mntpnt with -o noac (Sachin Prabhu) [839806 839753]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.13.1.el5]" date="1343340000">- [net] e1000e: Cleanup logic in e1000_check_for_serdes_link_82571 (Dean Nelson) [841370 771366]
- [net] e1000e: Correct link check logic for 82571 serdes (Dean Nelson) [841370 771366]
- [mm] NULL pointer dereference in __vm_enough_memory (Jerome Marchand) [840077 836244]
- [fs] dlm: fix slow rsb search in dir recovery (David Teigland) [838140 753244]
- [fs] autofs: propogate LOOKUP_DIRECTORY flag only for last comp (Ian Kent) [830264 814418]
- [fs] ext4: properly dirty split extent nodes (Eric Sandeen) [840946 839770]
- [scsi] don't offline devices with a reservation conflict (David Jeffery) [839196 835660]
- [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate (Lukas Czerner) [837226 830351]
- [net] dl2k: Clean up rio_ioctl (Weiping Pan) [818822 818823] {CVE-2012-2313}
- [x86] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835450 834562]
- [net] tg3: Fix TSO handling (John Feeney) [833182 795672]
- [input] evdev: use after free from open/disconnect race (David Jeffery) [832448 822166]</changelog>
</package>
<package pkgid="08309d1e733c7214262238a5a86becae9945f361" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="308.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.14.1.el5]" date="1346277600">- [net] e1000e: drop check of RXCW.CW to eliminate link up and down (Dean Nelson) [852448 840642]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.15.1.el5]" date="1346882400">- [net] sfc: Fix max no of TSO segments and min TX queue size (Michal Schmidt) [845554 845555] {CVE-2012-3412}
- [kernel] xacct_add_tsk: fix pure theoretical -&gt;mm use-after-free (Nikola Pajkovsky) [849723 849725] {CVE-2012-3510}
- [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820255 820256] {CVE-2012-2319}
- [net] netfilter: add dscp netfilter match (Thomas Graf) [847327 842029]
- [net] rds: set correct msg_namelen (Weiping Pan) [822727 822728] {CVE-2012-3430}
- [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [847359 693822]
- [fs] quota: manage reserved space when quota is not active (Eric Sandeen) [847326 818087]
- [fs] quota: Fix warning if delayed write before quota is enabled (Eric Sandeen) [847326 818087]
- [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]
- [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- [xen] x86: whitelist Enhanced SpeedStep for dom0 (Laszlo Ersek) [846125 809103]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.16.1.el5]" date="1348005600">- Revert: [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- Revert: [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- Revert: [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]</changelog>
</package>
<package pkgid="b3562de484ad7048ab74160852c638e61901c633" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="308.20.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.18.1.el5]" date="1350079200">- [fs] autofs4: Merge the remaining dentry ops tables (Ian Kent) [857558 850977]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.19.1.el5]" date="1350597600">- [net] be2net: Remove code that stops further access to BE NIC based on UE bits (Alexander Gordeev) [867896 862811]
- [net] netpoll: fix an incorrect check for NULL pointer (Alexander Gordeev) [856079 848098]
- [net] mlx4: Add support for EEH error recovery (Alexander Gordeev) [847404 798048]
- [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] fix crash if block {device|size} read &amp; changed at sametime (Mikulas Patocka) [864823 756506]
- [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}
- [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [861387 819830]
- [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [858774 857448]
- [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [859946 858724]
- [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [857966 854067]
- [scsi] isci: fixup linkspeed definitions (David Milburn) [854986 833000]
- [fs] nfs: nfs_d_automount update caller path after do_add_mount (Carlos Maiolino) [857552 834379]
- [fs] vfs: Fix vfsmount overput on simultaneous automount (Carlos Maiolino) [857552 834379]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.20.1.el5]" date="1352239200">- Revert: [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}</changelog>
</package>
<package pkgid="64b4c49a9dc1d78e7eef33bbf2e83abdbcca3c9f" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="308.24.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.22.1.el5]" date="1353362400">- [net] bonding: fix link down handling in 802.3ad mode (Andy Gospodarek) [877943 782866]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.23.1.el5]" date="1353535200">- [net] bnx2x: Add remote-fault link detection (Alexander Gordeev) [870120 796905]
- [net] bnx2x: Cosmetic changes (Alexander Gordeev) [870120 796905]
- [net] rds-ping cause kernel panic (Alexander Gordeev) [822755 822756] {CVE-2012-2372}
- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878033 878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870148 870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870150 870151] {CVE-2012-4535}
- [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.24.1.el5]" date="1353535201">- Revert: [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
</package>
<package pkgid="5cb9757edfd5a0850846d1017168ca9d4b9fdae5" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="308.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.2.1.el5]" date="1329861600">- [fs] nfs: nfs_fhget should wait on I_NEW instead of I_LOCK (Sachin Prabhu) [795664 785062]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.3.1.el5]" date="1332453600">- [net] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [805462 773735]
- [net] be2net: add vlan/rx-mode/flow-control config to be_setup (Ivan Vecera) [805462 773735]
- [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [805460 799170]
- [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry (Ian Kent) [801726 798809]
- [fs] vfs: fix d_instantiate_unique (Ian Kent) [801726 798809]
- [fs] nfs: allow high priority COMMITs to bypass inode commit lock (Jeff Layton) [799941 773777]
- [fs] nfs: don't skip COMMITs if system under is mem pressure (Jeff Layton) [799941 773777]
- [scsi] qla2xxx: Read the HCCR register to flush any PCIe writes (Chad Dupuis) [798748 772192]
- [scsi] qla2xxx: Complete mbox cmd timeout before next reset cycle (Chad Dupuis) [798748 772192]
- [s390] qdio: wrong buffers-used counter for ERROR buffers (Hendrik Brueckner) [801724 790840]
- [net] bridge: Reset IPCB when entering IP stack (Herbert Xu) [804721 749813]
- [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770649 770650]
- [fs] procfs: parse mount options (Jerome Marchand) [770649 770650]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.4.1.el5]" date="1332972000">- [net] ipv6: fix skb double free in xfrm6_tunnel (Jiri Benc) [752305 743375] {CVE-2012-1583}</changelog>
</package>
<package pkgid="eb990f846ff6038e741e0a56e2f06f7844d05647" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="308.8.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.6.1.el5]" date="1335564000">- [scsi] fc class: fix scanning when devs are offline (Mike Christie) [816684 799530]
- [md] dm-multipath: delay retry of bypassed pg (Mike Christie) [816684 799530]
- [net] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [811927 800575]
- [net] bonding: remove {master,vlan}_ip and query devices instead (Andy Gospodarek) [810321 772216]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
</package>
<package pkgid="7a0f097ccb27bcea458b957e88482bdf82a22716" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="308.8.2.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.2.el5]" date="1338328800">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970]</changelog>
</package>
<package pkgid="77f74b0e213ef226a763eb953baa763bd985aab7" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="348.1.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-347.el5]" date="1353448800">- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870151] {CVE-2012-4535}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
</package>
<package pkgid="3bdf1509a8d807746730c642dcc7628b742bb1ab" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="348.12.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.10.1.el5]" date="1370642400">- [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955600 955601] {CVE-2013-3224}
- [net] Bluetooth: HCI &amp; L2CAP information leaks (Jacob Tanenbaum) [922415 922416] {CVE-2012-6544}
- [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [971872 872531]
- [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [971872 872531]
- [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [958021 864648]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.11.1.el5]" date="1371852000">- Revert: [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
- Revert: [x86-64] non lazy sleazy fpu implementation (Prarit Bhargava) [948187 731531]
- Revert: [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- Revert: [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- Revert: [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.12.1.el5]" date="1372716000">- Revert: [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]</changelog>
</package>
<package pkgid="c179e7234ea528404380e32c90e4f2857f8dac5f" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="348.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.14.1.el5]" date="1374019200">- [net] Fix panic for vlan over gre via tun (Thomas Graf) [983452 981337]
- [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [983628 865095]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.15.1.el5]" date="1374537600">- [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [976441 853145]
- [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [976441 853145]
- [fs] nfs: define function to update nfsi-&gt;cache_change_attribute (Scott Mayhew) [976441 853145]
- [net] af_key: fix info leaks in notify messages (Jiri Benc) [980999 981000] {CVE-2013-2234}
- [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981222 981224] {CVE-2013-2237}
- [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981556 981557] {CVE-2013-2232}
- [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980141 980142] {CVE-2013-2224}
- [x86_64] Early segment setup for VT (Paolo Bonzini) [979920 978305]
- [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971245 971246] {CVE-2013-2147}
- [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973103 973104] {CVE-2013-2164}
- [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [972583 965359]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="d283fe6ef97b4d7ec1021ab23ec345f0763802ef" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="348.18.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.17.1.el5]" date="1377216000">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [999819 995961]
- [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [983864 956322]
- [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [983864 956322]
- [net] be2net: disable TX in be_close() (Ivan Vecera) [983864 956322]
- [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [983864 956322]
- [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [983864 956322]
- [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [983864 956322]
- [net] be2net: Fixed memory leak (Ivan Vecera) [983864 956322]
- [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [983864 956322]
- [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [983864 956322]
- [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [983864 956322]
- [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [983864 956322]
- [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [983864 956322]
- [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [983864 956322]
- [net] be2net: Fix Endian (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [983864 956322]
- [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [983864 956322]
- [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [983864 956322]
- [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [983864 956322]
- [net] be2net: cleanup be_vid_config() (Ivan Vecera) [983864 956322]
- [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [983864 956322]
- [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [983864 956322]
- [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [983864 956322]
- [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [983864 956322]
- [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [983864 956322]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.18.1.el5]" date="1378512000">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [1005239 987539]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970874 970875] {CVE-2013-2141}
- [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987647 987648] {CVE-2013-4162}
- [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849735 849736] {CVE-2012-3511}
- [fs] autofs: remove autofs dentry mount check (Ian Kent) [1001488 928098]</changelog>
</package>
<package pkgid="b721f1a977876f537749979341db727ff9252ec8" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="348.2.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
</package>
<package pkgid="5985ca0fb9c2f0ebccc7975aeb5e3d3f99314820" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="348.3.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
</package>
<package pkgid="f32fa7bcbfb8d502ac497f7f37296e702e0cd975" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="348.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
</package>
<package pkgid="50346e623704841bec9056da9b1a30395c860dc3" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="348.6.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.5.1.el5]" date="1365804000">- [fs] nfs: handle getattr failure during nfsv4 open (David Jeffery) [947736 906909]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.6.1.el5]" date="1367013600">- [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [953435 947732]
- [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [953435 947732]
- [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [954296 948317]
- [fs] nfs: Fix bugs on short read (Sachin Prabhu) [952098 924011]
- [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] introduce xzalloc() &amp; Co (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="630620f5feca6892e3f9a2f3270f6b47d2001ed6" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="371.1.2.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.2.el5]" date="1381190400">- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
</package>
<package pkgid="e92e72f348b2431cb599444921a2ecc0abf18449" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="371.11.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
</package>
<package pkgid="7fd6ca8ab0165563f6bec697015ad5aa739557d1" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="371.12.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.12.1.el5]" date="1407456000">- [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102702 1102703] {CVE-2014-3917}
- [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1125246 1080194]
- [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [1121017 924590]
- [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1116027 1081785]
- [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1117665 1102768]</changelog>
</package>
<package pkgid="188fcfa4e679c73c05272c43f20a9af5eb3011e3" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="371.3.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
</package>
<package pkgid="78a99762feebab9dc48f8793b26e3aaa1eacfae7" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="371.4.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
</package>
<package pkgid="5262c66c09f80662d35ad7c67858dbfd46342c7e" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="371.6.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.5.1.el5]" date="1390348800">- [fs] cifs: stop trying to use virtual circuits (Sachin Prabhu) [1044328 1013469]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
</package>
<package pkgid="fc409a647e0fc1af7e6dcde550b5fda072ed99f3" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="371.8.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
</package>
<package pkgid="7f0c07d7080e5235dd6f2262e5439182aedab096" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="371.9.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
</package>
<package pkgid="a5f1eeca5116baa857bb9dc0bb31a634e2af10f7" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="371.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-369.el5]" date="1376092800">- [fs] nlm: Ensure we resend pending blocking locks after a reclaim (Steve Dickson) [918592]
- [kernel] kmod: kthread_run causes oom killer deadlock (Frantisek Hrbata) [983506]
- [fs] nfs4: ratelimit some messages, add name to bad seq-id mess (Dave Wysochanski) [953121]
- [fs] nfsd: fix EXDEV checking in rename (J. Bruce Fields) [515599]
- [misc] tty: Fix abusers of current-sighand-&gt;tty (Aaron Tomlin) [858981]
- [net] ipv6: don't call addrconf_dst_alloc again when enable lo (Jiri Benc) [981417]
- [redhat] kabi: Adding symbol fc_fabric_login (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_reset (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_els_send (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_fabric_logoff (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_set_mfs (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_elsct_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_up (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv_flogi (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_depth (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_down (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_type (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_free (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_alloc (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_config (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_disc_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol strict_strtoul (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_rport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_get_host_port_state (Jiri Olsa) [864256]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-370.el5]" date="1376956800">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [995961]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970875] {CVE-2013-2141}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
</package>
<package pkgid="63936ba07cb1c4d7dc7f5f9b03d70c16480b830d" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="400.1.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.1.1.el5]" date="1418601600">- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="383c9b313382072fe2340392f215a7860fa2c7cc" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="400.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-398.el5]" date="1407888000">- [net] security_socket_post_accept before fd_install in sys_accept (Denys Vlasenko) [1059078]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
</package>
<package pkgid="067e2023e568009dde8da4ca17abb173197a9a35" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="402.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-401.el5]" date="1418256000">- [net] rds: fix possible double free on sock tear down (Herton R. Krzesinski) [1116880]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="3e2c63faeaec6e972e65d922f1a3e21d03717075" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="404.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-403.el5]" date="1425600000">- [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
- [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
- [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
</package>
<package pkgid="ef223ee9078cda185fbd3a4716cccee937ba4a85" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="406.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-405.el5]" date="1430438400">- [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
- [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
- [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
- [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
- [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
- [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
- [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
- [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
- [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
- [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
</package>
<package pkgid="e73814b859ae2af834261b5680ef09ad8114a2f8" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="408.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
</package>
<package pkgid="a606870b4246c3a8bac01c488557ab8d74cd2a65" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="409.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-409.el5]" date="1455321600">- [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
- [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [sched] prevent division by zero x-&gt;cpu_power (Denys Vlasenko) [1209728]
- [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}</changelog>
</package>
<package pkgid="e86b92f94a5bd5262192a9f26b5c592dd4264d13" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="416.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-414.el5]" date="1474934400">- [redhat] Fix missed -413 kernel version (Alexander Gordeev)</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
</package>
<package pkgid="b40a3bc25c50bca51409555a881b76654dfc3aaa" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="417.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
</package>
<package pkgid="f75b885bea0c08db78b9cda73f3d6cd280ae1451" name="kernel-headers" arch="i386">
  <version epoch="0" ver="2.6.18" rel="419.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-418.el5]" date="1484352000">- [sched] prevent NULL deref in find_busiest_group (Denys Vlasenko) [1376523]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-419.el5]" date="1487808000">- [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
- [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]</changelog>
</package>
<package pkgid="4f0e47ef00d1ec2f04bd9cf9784c6987315ccd67" name="kernel-module-aufs-2.6.18-238.12.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="f41a69dcab458d59b48247ad57c24578c7a4b19d" name="kernel-module-aufs-2.6.18-238.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="229aece3ba80647f0817e99afcde1cdedbaf219d" name="kernel-module-aufs-2.6.18-238.12.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="b379b6acf8866797a05757c189bf3598fbdc877c" name="kernel-module-aufs-2.6.18-238.19.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="2ce02362f431a4d2a9d55b9b641b218dba9ba1fa" name="kernel-module-aufs-2.6.18-238.19.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="26dde8582fba7e53c1de05ce730b6af760673cb3" name="kernel-module-aufs-2.6.18-238.19.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="35ae6569b8d4b2124208d42fad7a49aead6e1c45" name="kernel-module-aufs-2.6.18-274.12.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="528b82f70a882155fda691d228f082fbacc6c1a1" name="kernel-module-aufs-2.6.18-274.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="0bca0634cf1eca37ff92c624fa9ac001f986615a" name="kernel-module-aufs-2.6.18-274.12.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="6f8b1ac7ee8698e59ad2fe10ca754edf01bb3d1a" name="kernel-module-aufs-2.6.18-274.17.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="5204161dfccce91d5bfa3d930ddf6d05db2adef7" name="kernel-module-aufs-2.6.18-274.17.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="06a89f341a1b8aa6fb5cbe904f2927e2f21f9520" name="kernel-module-aufs-2.6.18-274.17.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="051c71acb97ce29e8cdb00b9abdffd1230a4ad1c" name="kernel-module-aufs-2.6.18-274.18.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="c8f7ce49999ad8462cc29129c778f395ab5da27a" name="kernel-module-aufs-2.6.18-274.18.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="62e050f47c66966f21787c87a8cd5baaae6c6d6c" name="kernel-module-aufs-2.6.18-274.18.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="05ceb1e74e590356cf920eb6b4ce9511666605f1" name="kernel-module-aufs-2.6.18-274.3.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="83a584d6dacaee36f208b5c47e2077249f5b9a11" name="kernel-module-aufs-2.6.18-274.3.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="72580e9bd5dd25f3217f61212b38f35da5e5690a" name="kernel-module-aufs-2.6.18-274.3.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="42fc525390eca87b9cb5476b72ebaab8b78b30e3" name="kernel-module-aufs-2.6.18-274.7.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="af745450c0ab4b9bbf2f9d49c7950ba36b654ae4" name="kernel-module-aufs-2.6.18-274.7.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="6526c9f3e9f9b57d45112ce8437c9b8ff52069bc" name="kernel-module-aufs-2.6.18-274.7.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="69bc6fed1cffea3c60c5c2e6fa90d963443711f1" name="kernel-module-aufs-2.6.18-308.11.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="2b5db73120f0b33bb6b62f28f23f2d044944d3ee" name="kernel-module-aufs-2.6.18-308.11.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="7e0fa25e451d4b37723760b1d6a2d5be4b71a846" name="kernel-module-aufs-2.6.18-308.11.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="a15a966f6cdc901f1d480bf084e1308f471a9953" name="kernel-module-aufs-2.6.18-308.13.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="808fc7b09e93579f3f05562c97471ce70baa59bc" name="kernel-module-aufs-2.6.18-308.13.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="db8c64076dc75a7bf84f682202cd9478369fa786" name="kernel-module-aufs-2.6.18-308.13.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="813b36775b0491ddafa87e05d77bd7ca62b224e1" name="kernel-module-aufs-2.6.18-308.16.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="929b89fe87c51eb5da0e8ba882e899ab58faacd8" name="kernel-module-aufs-2.6.18-308.16.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="15eff3415876e393dc7465c849f07a7c7224404a" name="kernel-module-aufs-2.6.18-308.16.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="ea3e01a57b3d089e60a33f3c988284d87907a0e6" name="kernel-module-aufs-2.6.18-308.20.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="1c7f823c9157b09adda66ee3b29283a3d7fff65a" name="kernel-module-aufs-2.6.18-308.20.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="9ab2d057a863bab795b20d6a4fd4cd032c39008d" name="kernel-module-aufs-2.6.18-308.20.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="fa43f8c8abe6ffe1c21516cbf1de03a316b5c6fc" name="kernel-module-aufs-2.6.18-308.24.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="5c3d68a7b51dbafa0fd2061a02e7a113cfd8dc17" name="kernel-module-aufs-2.6.18-308.24.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="e8c43db2fd2720fa42a27e81e81dfa57b80eb0c2" name="kernel-module-aufs-2.6.18-308.24.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="115625aa24445e88a8e0c2ebafb4eff2422c487e" name="kernel-module-aufs-2.6.18-308.4.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="8cfe6d64b8c5ed7939d27ab01ea2262a2344f273" name="kernel-module-aufs-2.6.18-308.4.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="fecb18a3783fd5b1202a28bdcf83c49537242a0e" name="kernel-module-aufs-2.6.18-308.4.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="e3cc366b67d985ac6a48909097130199af7baee5" name="kernel-module-aufs-2.6.18-308.8.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="b0bcc8fef45f356589b9d73d00d410366ee45dc7" name="kernel-module-aufs-2.6.18-308.8.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="b8d40e00d07514dc1c3f774493ca6b76556724f9" name="kernel-module-aufs-2.6.18-308.8.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="b9fde4d0486b1e5603ac7f0d97de80f623e25f98" name="kernel-module-aufs-2.6.18-308.8.2.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="3ef22c24e46b21b4d919c6f7f6b45d469842bcf7" name="kernel-module-aufs-2.6.18-308.8.2.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="555c038bcc49e52f59caa7879929bdd3ef6fd809" name="kernel-module-aufs-2.6.18-308.8.2.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="4603bbd2b0c01db59fcd0a54a75cd00f8667c0a4" name="kernel-module-aufs-2.6.18-348.1.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="3d4fffee3bf00d7da6a66eebce4ae30ea39a7cf0" name="kernel-module-aufs-2.6.18-348.1.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="a3f027cac8702046e225267726ab9f42b4dcc7f4" name="kernel-module-aufs-2.6.18-348.1.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="579d9cbb5171e0c97ba09c2936770b957907859d" name="kernel-module-aufs-2.6.18-348.12.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="857ead23bc33b70134b94603bc894bdcd497c2b3" name="kernel-module-aufs-2.6.18-348.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="7c225940db2d96e0908c248c0de57de3cf484dec" name="kernel-module-aufs-2.6.18-348.12.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="1dc4335999687dac6a047a919c579bda0b015077" name="kernel-module-aufs-2.6.18-348.16.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="291d7c25671e5c6195fe12acb938214318697c61" name="kernel-module-aufs-2.6.18-348.16.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="84bfefc3b57b1ff043cbeaa8f3657dc254bb78a5" name="kernel-module-aufs-2.6.18-348.16.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="5a0cf5b666035f934e60254149e734ffde6acf4a" name="kernel-module-aufs-2.6.18-348.18.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="1fd5db69c52ab76a92cf1271ce11f4b56cca1c14" name="kernel-module-aufs-2.6.18-348.18.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="3e836529bdc01891992eb7c1eb42f7fc27d5f65b" name="kernel-module-aufs-2.6.18-348.18.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="5882b8ef2d8e69716d9c5a45de7de759d9c227ba" name="kernel-module-aufs-2.6.18-348.2.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="6069c372dcbad73b48221dbbab48dfaaae8dc9f0" name="kernel-module-aufs-2.6.18-348.2.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="d1aff7995eaaa13fa2a0f3d1e3fa86982803ae2a" name="kernel-module-aufs-2.6.18-348.2.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="67a92bfdb7e43a0910206996dd292003edaccee5" name="kernel-module-aufs-2.6.18-348.3.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="7a9c6a96a3e76488b557b4aab7845e254139b54a" name="kernel-module-aufs-2.6.18-348.3.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="cedb7e43dbee65c209f954fa6c7cd20597d2d4ef" name="kernel-module-aufs-2.6.18-348.3.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="eb76a9351faf6959df82f5a141e740e89cd79143" name="kernel-module-aufs-2.6.18-348.4.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="370cc692dbc5ef3a4dc98912cdcf08279be42afb" name="kernel-module-aufs-2.6.18-348.4.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="c1f72b5a351780361a0a45e0e09517290a4a1868" name="kernel-module-aufs-2.6.18-348.4.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="78a9417eafafda0826ab4a25aefbbb4d298f7b63" name="kernel-module-aufs-2.6.18-348.6.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="72056cdb34dd8780538460ca7357bb98f97673cf" name="kernel-module-aufs-2.6.18-348.6.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="19c1af909a48c0399c2d00c671ef02f48886df10" name="kernel-module-aufs-2.6.18-348.6.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="3e6c5befcf2369f8163c484724170c1c9dd9e0eb" name="kernel-module-aufs-2.6.18-371.1.2.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="f47e773ba58084daae01a85db3a631665e97cffb" name="kernel-module-aufs-2.6.18-371.1.2.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="e49f37b8ccc9a282f4e89f4b5fcda7bd1ac5ecab" name="kernel-module-aufs-2.6.18-371.1.2.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="c432d0b4e7f4d7a653fd7f1debc11ab3088a34cd" name="kernel-module-aufs-2.6.18-371.11.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="cd6777171dda2cb625dd008ed5ea0eaf026e3f70" name="kernel-module-aufs-2.6.18-371.11.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="4f36f1584f1eee51259c0931670678e4f34f6070" name="kernel-module-aufs-2.6.18-371.11.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="508ea877ec753abc4ef646a801c0fc21969071ad" name="kernel-module-aufs-2.6.18-371.12.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="c7c8fb53eb07c47aa145beb3ec31039be7a81582" name="kernel-module-aufs-2.6.18-371.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="46a8c310ca4e1fbed73a5be0447727886b43f730" name="kernel-module-aufs-2.6.18-371.12.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="2358680787f8854b47267d2ff77604a5c1d92ea7" name="kernel-module-aufs-2.6.18-371.3.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="daabff842c57de15f4895cf546c068a0ecb6c0bd" name="kernel-module-aufs-2.6.18-371.3.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="2b103b41f977c5a9dea3e01d45b90f112984a8b0" name="kernel-module-aufs-2.6.18-371.3.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="a9e3fe2fa34747b6a97b1249a1982891f5d95f0e" name="kernel-module-aufs-2.6.18-371.4.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="aa441ad419804f42af6b126ff0f8521c1168423c" name="kernel-module-aufs-2.6.18-371.4.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="608d031ecd1dce85bf45c33bba77183e92407cb7" name="kernel-module-aufs-2.6.18-371.4.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="a68f72d095cb43277642084f35eb2795fc740aff" name="kernel-module-aufs-2.6.18-371.6.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="3d76cb126ce19a8e76431e07eb3290f3675be25b" name="kernel-module-aufs-2.6.18-371.6.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="d3d96f58b0f2495cca390eecd00fd5b5ceb51523" name="kernel-module-aufs-2.6.18-371.6.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="259a6732f43c2a9d02f14186f92484ea966b22eb" name="kernel-module-aufs-2.6.18-371.8.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="cd19c982d90279151acb89e846355f5029d31e2b" name="kernel-module-aufs-2.6.18-371.8.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="c85b5e6183436fb66594de71c993b74c23bc8810" name="kernel-module-aufs-2.6.18-371.8.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="315a0637a25285b1edb9be677fd27998d1be9ece" name="kernel-module-aufs-2.6.18-371.9.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="7cfb6b32885587b7f41b974ba65f68c11e2b5695" name="kernel-module-aufs-2.6.18-371.9.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="20ce07d496b791a086e6e950d7fe96736fdc1e33" name="kernel-module-aufs-2.6.18-371.9.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="e0578a1a7db85e1ed17837b0b0b12eb5517104f2" name="kernel-module-aufs-2.6.18-371.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="fbff64df3bd0e6366153643b806a42a825fac6c0" name="kernel-module-aufs-2.6.18-371.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="c5f7f7599e19a7c1cb4b9ba81dc5cbda33504a29" name="kernel-module-aufs-2.6.18-371.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="13798bf6342747bfe85c9bf45e82c7ed4b811633" name="kernel-module-aufs-2.6.18-400.1.1.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="e4423b405b197abdf4bee1a16284ac208580adf6" name="kernel-module-aufs-2.6.18-400.1.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="28d039aa03ecb96a5e3fd9c70a1957c8f08b4375" name="kernel-module-aufs-2.6.18-400.1.1.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="30cb4f0a4a977e896c71b9dfdb2053bb3086696d" name="kernel-module-aufs-2.6.18-400.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="4fb0a03b8a5645b5ff36bb6fad13394198f3f16d" name="kernel-module-aufs-2.6.18-400.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="26b53d0cd809ae6948c0f2fa8aeed8594d338237" name="kernel-module-aufs-2.6.18-400.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="963d6920619528592432d209a2eadb573954c57f" name="kernel-module-aufs-2.6.18-402.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="6251fae97a26c96e946ff38d12819ae9e2f2ce25" name="kernel-module-aufs-2.6.18-402.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="5c4ed85763ac28fc6710a1f5865369660c72357a" name="kernel-module-aufs-2.6.18-402.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="3c16b7934abfc79731e2f855623d39dbee1a1220" name="kernel-module-aufs-2.6.18-404.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="7c078dbf200c0ae8907d86f8b89d53b12c9b3b80" name="kernel-module-aufs-2.6.18-404.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="5bad621c7778cf009daf22a76fb849b36a378454" name="kernel-module-aufs-2.6.18-404.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="dba60f95a6a1980995a0cf9291532f66e8df44d9" name="kernel-module-aufs-2.6.18-406.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="e2097de4c9a0149f623cef21295b163e49bb0b4c" name="kernel-module-aufs-2.6.18-406.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="a49e91a2df33a27c5730ca8928c5088a2192bda4" name="kernel-module-aufs-2.6.18-406.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="f03490f1db59c0ccb992f8bd168f7d536a8f75a9" name="kernel-module-aufs-2.6.18-408.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="fb0f7e6c000fca8e4d39073527e270f103a30e0a" name="kernel-module-aufs-2.6.18-408.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="f9de1fbe65e388f765f9f6d56f1d37388f8f8967" name="kernel-module-aufs-2.6.18-408.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="2e615743633cb486178e60414c5e6fd3ea98d942" name="kernel-module-aufs-2.6.18-409.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="44ad8470a063f1032316d81df38f4309fd4bd353" name="kernel-module-aufs-2.6.18-409.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="067d247d8832cea4c429fe0326178f18b53a5453" name="kernel-module-aufs-2.6.18-409.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="07093061b01a9ed7fe55c22c22a63def8f393b0f" name="kernel-module-aufs-2.6.18-416.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="0f15e13f63cbea4c1ef30258e41c0e4507dcf841" name="kernel-module-aufs-2.6.18-416.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="bb60c2d7ba2e2dc97e36b74708b05dc69f15c343" name="kernel-module-aufs-2.6.18-416.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="ab78b98f9a2ed0498e31b07d17745aebbb820cd4" name="kernel-module-aufs-2.6.18-417.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="4cb901719ed9027b1ac8ee20e3779d6edf069707" name="kernel-module-aufs-2.6.18-417.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="eb1f2edd7c37aa7fb1589647038e19868cdaa432" name="kernel-module-aufs-2.6.18-417.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="5d32c5b5ff2ea382effbd4593246a51b68d8870a" name="kernel-module-aufs-2.6.18-419.el5" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="7cde9b3b1b406fa7ec790c6b16033fe6228f04dd" name="kernel-module-aufs-2.6.18-419.el5PAE" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="96bf4d27fca556882ab1492f980d985b38df8679" name="kernel-module-aufs-2.6.18-419.el5xen" arch="i686">
  <version epoch="0" ver="0.20090202.cvs" rel="6.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080414.cvs-5" date="1208217600">- update to CVS version 2008-04-14</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt;  0.20080605.cvs-5" date="1212710400">- update to CVS version 2008-06-05</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@env.ethz.ch&gt;  0.20090202.cvs-6" date="1233619200">- update to latest CVS version 2009-02-02
- add aufs-struct_path.patch</changelog>
</package>
<package pkgid="d896bb8279f1ac9593b66bf9aa1d8a48fcf13454" name="kernel-module-ipw3945-2.6.18-238.12.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="587cd9d4fab32ce691159be359103f1fef842a59" name="kernel-module-ipw3945-2.6.18-238.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="8d21984119a38e6cd7c91a839fdb80e9700c0454" name="kernel-module-ipw3945-2.6.18-238.12.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="9abd2af827380e2784c5c1f471425c80618891de" name="kernel-module-ipw3945-2.6.18-238.19.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="b0881e73b74d9b010745e878aa8201b3deabcde3" name="kernel-module-ipw3945-2.6.18-238.19.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="c995b0e71463e168a6e77c404768a6ec564b85dc" name="kernel-module-ipw3945-2.6.18-238.19.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="db593021d2d71bc827f038938d4cf055b01a47a9" name="kernel-module-ipw3945-2.6.18-274.12.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="bd45b5495d1a7af7e378ff5113ad117c11a05cce" name="kernel-module-ipw3945-2.6.18-274.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="ed98b14cc5c17ccdb41c1967ce9f413a4716735d" name="kernel-module-ipw3945-2.6.18-274.12.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="a8f721ea3c3682dd0cd37abaadf015a44de9964c" name="kernel-module-ipw3945-2.6.18-274.17.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="d068399d24dfd18760e34ad2431f785f718b1d43" name="kernel-module-ipw3945-2.6.18-274.17.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="6a90823d5e6dc6af23aec8c6e96ddf6160290c66" name="kernel-module-ipw3945-2.6.18-274.17.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="374fd3f9ce3c427bf00872a83902a145b0ec253d" name="kernel-module-ipw3945-2.6.18-274.18.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="bad599402b91eb1143ade5c9946281774814ea84" name="kernel-module-ipw3945-2.6.18-274.18.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="229b5aa5fc0a314dcc8d44d255a9ace2f1709aba" name="kernel-module-ipw3945-2.6.18-274.18.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="9d34afc99193b5f420ed8963392ed631c36b37f6" name="kernel-module-ipw3945-2.6.18-274.3.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="80f12f514048f2e9f5624e588eada729550710ac" name="kernel-module-ipw3945-2.6.18-274.3.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="f5b4fd6d3303572beb77ae82bc155c6aa7291ef4" name="kernel-module-ipw3945-2.6.18-274.3.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="7405b457c0b2900f2bad745495cce67a6d1f69d2" name="kernel-module-ipw3945-2.6.18-274.7.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="03eb4655377b9db377680354594db6b23b9c5df8" name="kernel-module-ipw3945-2.6.18-274.7.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="5906212545f5865362b8faee202ad0e5378f0117" name="kernel-module-ipw3945-2.6.18-274.7.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="7ab1a1026f8518c44f3387a114ddef06ae50b6a8" name="kernel-module-ipw3945-2.6.18-308.11.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="65a63803ec8b2cabc62d0ad2bfa9e4e24a2ab7a5" name="kernel-module-ipw3945-2.6.18-308.11.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="72b6879ac36e5d1ac651fbf66aa1fbf15e60cdab" name="kernel-module-ipw3945-2.6.18-308.11.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="048fe59f7a0d379930891399e8bac79619124510" name="kernel-module-ipw3945-2.6.18-308.13.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="f47306dc3762405c04c68fe47bfd96e3c68d70f6" name="kernel-module-ipw3945-2.6.18-308.13.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="b92e073f701654b782dc319bf9a4c0192a2c83c8" name="kernel-module-ipw3945-2.6.18-308.13.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="3fcd7ee2fc4c231a53738e205b5edeec4b985e35" name="kernel-module-ipw3945-2.6.18-308.16.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="886f6b3d21e47d227367ef716ffca2fb6db01347" name="kernel-module-ipw3945-2.6.18-308.16.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="d0de95768d1336bb5b22f655654d5471576b54e3" name="kernel-module-ipw3945-2.6.18-308.16.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="bea0dc8c2acdb15f522dc14a519bbaf299e305b5" name="kernel-module-ipw3945-2.6.18-308.20.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="049eb7471e97ff8b309fb0fbba0a0c796f8eb85d" name="kernel-module-ipw3945-2.6.18-308.20.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="b63e8600869747ea80f7d9ba80977790ef2d4b7f" name="kernel-module-ipw3945-2.6.18-308.20.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="dab15713fa630690445f3d46691edd77e53913bf" name="kernel-module-ipw3945-2.6.18-308.24.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="daf86982100eea82c95723023a684841b29fc7ff" name="kernel-module-ipw3945-2.6.18-308.24.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="0e7f3371c57b317d7046be0c7540829ffaef1fbc" name="kernel-module-ipw3945-2.6.18-308.24.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="2e8f3411c7a6c927ada516426bfa58b8caf804d2" name="kernel-module-ipw3945-2.6.18-308.4.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="28e70f9310852e5a962fedcb36e5d320d91f58bf" name="kernel-module-ipw3945-2.6.18-308.4.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="80ee6bfff5edbcddf6da3d7879ae376da5da4d11" name="kernel-module-ipw3945-2.6.18-308.4.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="614d13cfb2eeff76ff1eb5194aaa4a6daa9a937b" name="kernel-module-ipw3945-2.6.18-308.8.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="8f56f192bdafbcc8d4efc5ce251e7061ddf8df1c" name="kernel-module-ipw3945-2.6.18-308.8.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="602c26e46dd1b8a097f2a70c569b76b21355b36e" name="kernel-module-ipw3945-2.6.18-308.8.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="3bf806d7f391d6bdb8a376349c970a302f83fc14" name="kernel-module-ipw3945-2.6.18-308.8.2.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="fb49f6335f6dc1e15e97eb4a3871f07fa3953181" name="kernel-module-ipw3945-2.6.18-308.8.2.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="ffd1175c376e994e3ce283ccb5fd7d23d4522af1" name="kernel-module-ipw3945-2.6.18-308.8.2.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="a844eb0c090ed579f6cadd49ecee2f539db75d77" name="kernel-module-ipw3945-2.6.18-348.1.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="1963eaa704ccd9a1015723cc593c65fe1f23412d" name="kernel-module-ipw3945-2.6.18-348.1.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="09fd10271b2ea2a14b42fb1a12f8a5b838503771" name="kernel-module-ipw3945-2.6.18-348.1.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="d64093b4c8323c84f6166db10041b12c51419cc9" name="kernel-module-ipw3945-2.6.18-348.12.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="160abd1cc232c3750cedc303c9d5bcbb658645b1" name="kernel-module-ipw3945-2.6.18-348.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="85a660051fadc1ee786711051baa1a00a39ae403" name="kernel-module-ipw3945-2.6.18-348.12.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="863d18334f837905d7129d412af22602753310f5" name="kernel-module-ipw3945-2.6.18-348.16.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="57449748ec64683b7503a6079fcb25d54b25f86f" name="kernel-module-ipw3945-2.6.18-348.16.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="bb49698177a15dea571a1771885fdf611579f24d" name="kernel-module-ipw3945-2.6.18-348.16.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="7a5553ec99e5d9acafa2b2c2b15e705febd2b2e5" name="kernel-module-ipw3945-2.6.18-348.18.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="a78f1c22e59f7b097e7f3f53ba173b8d5d87a5b6" name="kernel-module-ipw3945-2.6.18-348.18.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="4bc559e6e2ca4a95363ed0d1b120b950d45175dd" name="kernel-module-ipw3945-2.6.18-348.18.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="7a405f7ddfe71a0c526c9bc56d0253bcb1e3345b" name="kernel-module-ipw3945-2.6.18-348.2.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="2080274c727a10f3196280468419c3379cd9d3d9" name="kernel-module-ipw3945-2.6.18-348.2.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="c60eceb63e5d9a90fb9fdd006fc93a73dc52d5e0" name="kernel-module-ipw3945-2.6.18-348.2.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="692711804b3efc327b14986e246f747c2784c121" name="kernel-module-ipw3945-2.6.18-348.3.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="4c7e9b7acaebd962dee6ae82ff155019848f77f8" name="kernel-module-ipw3945-2.6.18-348.3.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="e3c176e9870e6e6c45c1677c4d618e80d5769e6f" name="kernel-module-ipw3945-2.6.18-348.3.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="0e8fe6637ed86d1f884d857dcd136bc01186d820" name="kernel-module-ipw3945-2.6.18-348.4.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="156fa46da9aeb6b3077739e1cfae3308c6befba9" name="kernel-module-ipw3945-2.6.18-348.4.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="b06a2b8bb549f7b87a8b06369e7ff35a56574333" name="kernel-module-ipw3945-2.6.18-348.4.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="f2f2c675172dfaad116fffe1099740c77952f4be" name="kernel-module-ipw3945-2.6.18-348.6.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="a1ea9678aa0df27d6600e87c47ad8ae149165c36" name="kernel-module-ipw3945-2.6.18-348.6.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="f7c7d479301707fd53284374fb6f9a0471cf88fa" name="kernel-module-ipw3945-2.6.18-348.6.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="f98281a86f0b991a0a76ca2b589110d60686b3b9" name="kernel-module-ipw3945-2.6.18-371.1.2.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="3e2f442817f714bc917e0c0f843020cb53cbae36" name="kernel-module-ipw3945-2.6.18-371.1.2.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="9a3a08c2001d9858bbe8f3fe0f8c7322761d1e7a" name="kernel-module-ipw3945-2.6.18-371.1.2.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="2ab1834da86a4fb73e575623f993507ac0d70169" name="kernel-module-ipw3945-2.6.18-371.11.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="3a03d6e46e734c65edf8f1d15fb32f4aba830353" name="kernel-module-ipw3945-2.6.18-371.11.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="d6eede0d3796d76de6743fa17d13b544b51710cc" name="kernel-module-ipw3945-2.6.18-371.11.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="a6f897b8fc6d471fe546ac8d4c298175ef7518c7" name="kernel-module-ipw3945-2.6.18-371.12.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="fddb7098a30d709974feca887aeb725eccf2c0dc" name="kernel-module-ipw3945-2.6.18-371.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="6e184b5046a6929c1285b5534def49671f55287d" name="kernel-module-ipw3945-2.6.18-371.12.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="fdd24ff657551191f0ea59e1b01693cdcbe9a133" name="kernel-module-ipw3945-2.6.18-371.3.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="a1e73b1d0ad22cf9c08734d9822506e453ff8df5" name="kernel-module-ipw3945-2.6.18-371.3.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="2624638adab9a9ae840aa919b8ff7fe173489ade" name="kernel-module-ipw3945-2.6.18-371.3.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="d4b3c223a37a5fdc3abea48462404dea57ff7dac" name="kernel-module-ipw3945-2.6.18-371.4.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="97866ddd8f1e3e8c3aa52972587afabcd1e461b6" name="kernel-module-ipw3945-2.6.18-371.4.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="e130f458350f9557980e8c94321c19aaa49454c1" name="kernel-module-ipw3945-2.6.18-371.4.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="0e505d4d0204ddbb7aa5053f5980a91cee614d4f" name="kernel-module-ipw3945-2.6.18-371.6.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="da01b2e913e8bd2ce71d440afb13cd73f746d5b6" name="kernel-module-ipw3945-2.6.18-371.6.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="d98632df7d91275c804aa5f9c10815a90b3a20e2" name="kernel-module-ipw3945-2.6.18-371.6.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="25ae9de7eee92781e2aeb7e93322738006e7fbed" name="kernel-module-ipw3945-2.6.18-371.8.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="47de52099e22245fe06c26e03afbf20a30b3a563" name="kernel-module-ipw3945-2.6.18-371.8.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="7e46b30426c3b1910924cfcb01cc21ecababbfe2" name="kernel-module-ipw3945-2.6.18-371.8.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="acf5a2ecc1865568fd31fc948c104801d7a7fa0e" name="kernel-module-ipw3945-2.6.18-371.9.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="6ce728518587fdef8a7892f0fa0bff54964777a5" name="kernel-module-ipw3945-2.6.18-371.9.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="f603e269319bcbcd19fcef9a35cafbdfa094db41" name="kernel-module-ipw3945-2.6.18-371.9.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="3b890205c31a462bd0e477a02f503abf378d18fa" name="kernel-module-ipw3945-2.6.18-371.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="5d06fd621f975fc9fc79f0e8c97b88d3856d453b" name="kernel-module-ipw3945-2.6.18-371.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="eab65979e25c9f0dfed58aae0930401a6b08741c" name="kernel-module-ipw3945-2.6.18-371.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="652dd6048a9fcdabd93269d25e11e971f2a3067c" name="kernel-module-ipw3945-2.6.18-400.1.1.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="84859d8ae5a7a5e26c42cb92b12ca2656f25d1eb" name="kernel-module-ipw3945-2.6.18-400.1.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="7747c2dfdf82dc3d002739d74c475f1fcec90b8d" name="kernel-module-ipw3945-2.6.18-400.1.1.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="63c363ac9ea280a53ea3733f84a079dc13f5652d" name="kernel-module-ipw3945-2.6.18-400.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="24d21a9c0f4e6454f7b311eff32f3344e72134bd" name="kernel-module-ipw3945-2.6.18-400.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="35bd5ec6bb5256ba97d9d40b75875c5043fb852e" name="kernel-module-ipw3945-2.6.18-400.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="92ddffa5d75f0be604881e1ddd120af8ebf9e5b4" name="kernel-module-ipw3945-2.6.18-402.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="694c404d5f2d3f3a2587ff2dbeb44d222a5fac8b" name="kernel-module-ipw3945-2.6.18-402.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="833f009f4163de0e6c4f7799a9e9d30c2064e86e" name="kernel-module-ipw3945-2.6.18-402.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="c33814dc5eec7f28033a8485387248fb7e3d965b" name="kernel-module-ipw3945-2.6.18-404.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="1fbad2acd06a0b44b3d6c920c0f5588f153b1a3f" name="kernel-module-ipw3945-2.6.18-404.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="e471234213ab71989557c8566f3b864704156dc0" name="kernel-module-ipw3945-2.6.18-404.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="aab9af0edbca6bfcb1d708ef8350865a5e8dec58" name="kernel-module-ipw3945-2.6.18-406.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="d368d6a144b69f304610f238e3a85a9137232a57" name="kernel-module-ipw3945-2.6.18-406.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="1a94c26e39332f18eecee4574fbad13c3ce42d6e" name="kernel-module-ipw3945-2.6.18-406.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="e8e7a410d20acfe607f9a3cb57ac6cf7a6847dcf" name="kernel-module-ipw3945-2.6.18-408.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="4d15d8c95eff75099d40daf6097affa6c3cabfef" name="kernel-module-ipw3945-2.6.18-408.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="3c51b384bf202e705a4ff3b518f4764f188d53fb" name="kernel-module-ipw3945-2.6.18-408.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="7304876d48e63229fd47bc89fa001fb0e4a35219" name="kernel-module-ipw3945-2.6.18-409.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="ed7f36576b29235524a11620e766ceabfdd2d8a3" name="kernel-module-ipw3945-2.6.18-409.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="aa72c3274ea631041211f01a9ce828e79d40dbd0" name="kernel-module-ipw3945-2.6.18-409.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="97d0df34b6def9b896a4595bcc2149b7c5d2f317" name="kernel-module-ipw3945-2.6.18-416.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="bf24923cebc06b96ed695ca8c5f52a29f8057214" name="kernel-module-ipw3945-2.6.18-416.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="7868d559ad054f79185d5f4c8d7f00b353f29986" name="kernel-module-ipw3945-2.6.18-416.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="02b02e777716a1ea412833f1da5e8e617db1fe85" name="kernel-module-ipw3945-2.6.18-417.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="acc9b7c9414f489390b5de286eec98212ae715a3" name="kernel-module-ipw3945-2.6.18-417.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="fd355df80004a6d1d2b9b7994b443324e32b6e25" name="kernel-module-ipw3945-2.6.18-417.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="3704c74bb2e6d6f3b2488ae3e4bb11c043621da7" name="kernel-module-ipw3945-2.6.18-419.el5" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="4e6ee11701538708fbbf757a9602aabe61836fd1" name="kernel-module-ipw3945-2.6.18-419.el5PAE" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="8b4055f3432c42dc4c78779d8889223f14121ccd" name="kernel-module-ipw3945-2.6.18-419.el5xen" arch="i686">
  <version epoch="0" ver="1.2.0" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-1.sl5.psi" date="1174003200">- intial build for SL5</changelog>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 1.2.0-2" date="1195257600">- fix kernel_moduledir
- mode 755 for ipw3945.ko</changelog>
</package>
<package pkgid="d11b3d776c6c02b5f39931b8dcda52bbdb3182f4" name="kernel-module-ndiswrapper-2.6.18-238.12.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="737bb186fb6ae4bdc8c07cada3bf04e3108d705d" name="kernel-module-ndiswrapper-2.6.18-238.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="9efc91ffad8337ca64f785843b3ec5c11e736edc" name="kernel-module-ndiswrapper-2.6.18-238.12.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="e9e4266ff5429cc776f15a635e1d12253534b11c" name="kernel-module-ndiswrapper-2.6.18-238.19.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="c063ba9620cd382f52a19f205ff752cd1ab4efe4" name="kernel-module-ndiswrapper-2.6.18-238.19.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="b77b46e96804a536560cbc07a3e631d4aa2e3cd8" name="kernel-module-ndiswrapper-2.6.18-238.19.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="dbc448ace4d2d44e85d657e5b697839bfcb1b03a" name="kernel-module-ndiswrapper-2.6.18-274.12.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="d86e12344696f19d297ef2e3d3387fce6488db98" name="kernel-module-ndiswrapper-2.6.18-274.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="5fd01840659b62fe44f7fa717670e633e770a12b" name="kernel-module-ndiswrapper-2.6.18-274.12.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="2091b091f79d70bf73a62f819643b745d1913918" name="kernel-module-ndiswrapper-2.6.18-274.17.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="0c385298024b907212570146c663827bd9fe97db" name="kernel-module-ndiswrapper-2.6.18-274.17.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="f882dc9a62e8ca54b895bcec0962569022d45202" name="kernel-module-ndiswrapper-2.6.18-274.17.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="653b91617f2716649c4ffcb01194837109187c41" name="kernel-module-ndiswrapper-2.6.18-274.18.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="261e1c1f75a58fd1b1dbfb4f99a090eed358133e" name="kernel-module-ndiswrapper-2.6.18-274.18.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="729bb927da99a190f34384aee2a2bb18c39c3e70" name="kernel-module-ndiswrapper-2.6.18-274.18.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="947a216e102c2b3294e35bdfd8a95d3658dedab0" name="kernel-module-ndiswrapper-2.6.18-274.3.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="e5fdb920d0dda052870101ea002d8e904e968148" name="kernel-module-ndiswrapper-2.6.18-274.3.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="05275cb2422c7d60fdd2f57da0e2e45de1316003" name="kernel-module-ndiswrapper-2.6.18-274.3.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="0184aeae1c9c08cdf035a56d3f412017c118d409" name="kernel-module-ndiswrapper-2.6.18-274.7.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="ac735e09930adef3d2c9c672f4b560c089943933" name="kernel-module-ndiswrapper-2.6.18-274.7.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="941246b0353cee2cf93a3be13867245b859ecb57" name="kernel-module-ndiswrapper-2.6.18-274.7.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="aa31ae8968f2bec1ce2b59ac8f731880fd889c99" name="kernel-module-ndiswrapper-2.6.18-308.11.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="447627a6196be06a403d822bdbb248ef6aedaa06" name="kernel-module-ndiswrapper-2.6.18-308.11.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="9675bd1bb5c63910c92d5c20c4bf17f5c38f52cd" name="kernel-module-ndiswrapper-2.6.18-308.11.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="35a2701bd74d82e7798816d9f90d22982dd030f9" name="kernel-module-ndiswrapper-2.6.18-308.13.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="bdbe20456e0352a79899950f0f3316adaaa3836c" name="kernel-module-ndiswrapper-2.6.18-308.13.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="f017f90b3af883a213c27b5e5ea2e09939ff0ced" name="kernel-module-ndiswrapper-2.6.18-308.13.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="340fecad7aa3e519fef3d821a0d76eea58636ea7" name="kernel-module-ndiswrapper-2.6.18-308.16.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="22911aa760922542dcbc1256b025cd10f83ff0ea" name="kernel-module-ndiswrapper-2.6.18-308.16.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="abe920427fd06e78a9e70aff40c43dafcf6a4817" name="kernel-module-ndiswrapper-2.6.18-308.16.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="6f21f067c9ee5395bad36f3daa5104ef72694648" name="kernel-module-ndiswrapper-2.6.18-308.20.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="ddbac2829c7b69d4f66b5b3185641b77b798b63f" name="kernel-module-ndiswrapper-2.6.18-308.20.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="69250aa947e77a863816bebbb4af33caed671593" name="kernel-module-ndiswrapper-2.6.18-308.20.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="3427f7ddb3872befa975744f72b28990a41d2af4" name="kernel-module-ndiswrapper-2.6.18-308.24.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="4a26a8970cee40816fd7825d55634b341e72e597" name="kernel-module-ndiswrapper-2.6.18-308.24.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="7907ef3e7128bb51c5ffa9ca13d6dd26574d5db1" name="kernel-module-ndiswrapper-2.6.18-308.24.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="a8a309174e22defefbb5304dbd74d73c6bb24b29" name="kernel-module-ndiswrapper-2.6.18-308.4.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="40fd72ca803393318911120f9100ca98df30701f" name="kernel-module-ndiswrapper-2.6.18-308.4.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="a31eb05de9ec44d5c825f5fc6662185189ec7f06" name="kernel-module-ndiswrapper-2.6.18-308.4.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="3d978b80fb7097153415313cb7e0a9eaebb3b12b" name="kernel-module-ndiswrapper-2.6.18-308.8.1.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="8405da3594eea5dca4745186b9d3f8995b1e154e" name="kernel-module-ndiswrapper-2.6.18-308.8.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="48fd829ba5946020e5b04b701c6341f62789aba9" name="kernel-module-ndiswrapper-2.6.18-308.8.1.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="40dde7c3b7f0fadc307aadb2dac71b3091a1fe91" name="kernel-module-ndiswrapper-2.6.18-308.8.2.el5" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="be9e01accf5c2abf3099cce97441ced6e00f744d" name="kernel-module-ndiswrapper-2.6.18-308.8.2.el5PAE" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="81783e5fc0bf8fb5a8d97450670f2abda845379b" name="kernel-module-ndiswrapper-2.6.18-308.8.2.el5xen" arch="i686">
  <version epoch="0" ver="1.55" rel="1.SL"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.41-1.SL" date="1160179200">- Updated to version 1.41</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.49-1.SL" date="1160179201">- Updated to version 1.49</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1:1.55-1.SL" date="1160179202">- Updated to version 1.55</changelog>
</package>
<package pkgid="b7176589ef6106aca2eddac0fc393cf93891723d" name="kernel-module-openafs-2.6.18-238.12.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="16a47dbbfca46b6e0abd536ded206a484e83f530" name="kernel-module-openafs-2.6.18-238.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="2b8ea696389d983ed15ed98bfe92234729cb5041" name="kernel-module-openafs-2.6.18-238.12.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="697dab907233ab7c3b7cad52e729838eff2a46e9" name="kernel-module-openafs-2.6.18-238.19.1.el5" arch="i686">
  <version epoch="0" ver="1.4.12" rel="79.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre3.SLx" date="1266624000">- prerelease 3
- removed patches from prerelase branch which are already in (1070..1072)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
</package>
<package pkgid="8f1df60ca392fbea276ab5e1c34623947d977570" name="kernel-module-openafs-2.6.18-238.19.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="bff50f631ae084e2fbeb3d0f0d8631eb5055882d" name="kernel-module-openafs-2.6.18-238.19.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.12" rel="79.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre3.SLx" date="1266624000">- prerelease 3
- removed patches from prerelase branch which are already in (1070..1072)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
</package>
<package pkgid="64d109bd3561170749fb4e274320ee2427d41e8b" name="kernel-module-openafs-2.6.18-238.19.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="52cf220a0e59e7a04e89715987de3b2ae0b7db93" name="kernel-module-openafs-2.6.18-238.19.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.12" rel="79.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre3.SLx" date="1266624000">- prerelease 3
- removed patches from prerelase branch which are already in (1070..1072)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
</package>
<package pkgid="28b32a9829e874b4d7836746fa18a89905fc0242" name="kernel-module-openafs-2.6.18-238.19.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="27159afd600b79b15dee95b42f9ee902c7acdc26" name="kernel-module-openafs-2.6.18-274.12.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="ec6c751d1f1ce8cfccd03a1d0f500ea97b8ba0c4" name="kernel-module-openafs-2.6.18-274.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="1d9501d8b99ada0b6fbe3751376af559112ba9c3" name="kernel-module-openafs-2.6.18-274.12.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="29b59a1ce8b78f473bcfd2773c463adadc3415dd" name="kernel-module-openafs-2.6.18-274.17.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="1dc4e05dd1f892cf4c1fb476fb954ee05f4b408e" name="kernel-module-openafs-2.6.18-274.17.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="9b1258ecd47011e309598d3719a5798165e0b3eb" name="kernel-module-openafs-2.6.18-274.17.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="fbf91308e71438c05100b0f3a5b144af3923d787" name="kernel-module-openafs-2.6.18-274.18.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="ff2ce0d622592f82010780ca677cebc4a7c871fb" name="kernel-module-openafs-2.6.18-274.18.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="88e21ed18a6449632cbcd7467fc18e195e8b3327" name="kernel-module-openafs-2.6.18-274.18.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="5d97b6939b529168384c73d101b35f1db97c8222" name="kernel-module-openafs-2.6.18-274.3.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="46548649aa856c5a43bac5faf987fa27dced7ec4" name="kernel-module-openafs-2.6.18-274.3.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="71c3cecd3499f863ff5d5fc849ae1ec84faa5f5c" name="kernel-module-openafs-2.6.18-274.3.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="61eeb409ce9dca190949b48cebe1f77a51ce0fc5" name="kernel-module-openafs-2.6.18-274.7.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="357a0b428bb9b3f59c43d80ff81fbce2fb9decd9" name="kernel-module-openafs-2.6.18-274.7.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="f20920dfb04ca7184dd708ba1c87544fc05952b3" name="kernel-module-openafs-2.6.18-274.7.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-78.pre4.SLx" date="1267488000">- prerelease 4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
</package>
<package pkgid="33ab2e15d9b906bbf413fa46960c8d928579288c" name="kernel-module-openafs-2.6.18-308.11.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="a3762e4c70a14322f81c76d268e02e120854d052" name="kernel-module-openafs-2.6.18-308.11.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="d8f311368e65c35ac30fdef4013c063124d7fd06" name="kernel-module-openafs-2.6.18-308.11.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="45212116976b82a08c234547cb04d9cc508a76a0" name="kernel-module-openafs-2.6.18-308.13.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="ce3f7a41597924a51bba1612724feb954b99e149" name="kernel-module-openafs-2.6.18-308.13.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="280837a67e5d2130c3e045eda2be32ba2150c57d" name="kernel-module-openafs-2.6.18-308.13.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="98fb4d71eb1b3946579158be7648ae348f2bd53d" name="kernel-module-openafs-2.6.18-308.16.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="05250363583bd10edf8d9a2f0454b8d68b65cb73" name="kernel-module-openafs-2.6.18-308.16.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="da847c55458f713f3783af50d55ea6463550d5c7" name="kernel-module-openafs-2.6.18-308.16.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="c20bde29ed9122afb426bd79145740f9b233d7cf" name="kernel-module-openafs-2.6.18-308.20.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="b1d73df89ef651fb1d623e3ca8fb785c74600ffb" name="kernel-module-openafs-2.6.18-308.20.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="9ee131100b232219e79663b1c71d205a4594cc06" name="kernel-module-openafs-2.6.18-308.20.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="fcb35fc7f3a2b2dd408519edd28982eed8997b0c" name="kernel-module-openafs-2.6.18-308.20.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="7fa03a2f0d2775da48f359c778e6224ab7e90943" name="kernel-module-openafs-2.6.18-308.20.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="ce6ebc6c3b610081ce34e66c22364a70e5021392" name="kernel-module-openafs-2.6.18-308.20.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="4d387ecd05ab2c018a0a9bb3c1b3555fe76bc2c2" name="kernel-module-openafs-2.6.18-308.20.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="a42e9d8848c6bdec6217fe9d0ce033082a6ee560" name="kernel-module-openafs-2.6.18-308.20.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="f6c37ffa7d56e65ed2cc25f18863cf5f49221407" name="kernel-module-openafs-2.6.18-308.20.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="da3bfb608c1153c962bd1065250bb7a26f50dc90" name="kernel-module-openafs-2.6.18-308.24.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="8c1d53f20403214ea5282907e3f34eedc43e02cd" name="kernel-module-openafs-2.6.18-308.24.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="baf49026e022376fd27e672877f6041da68b6b2f" name="kernel-module-openafs-2.6.18-308.24.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="1658b288a4644919925e1053bc70bc0a0814e2fa" name="kernel-module-openafs-2.6.18-308.24.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="e49a24445840ca4a8f797390b0592fd166344da1" name="kernel-module-openafs-2.6.18-308.24.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="6e281b7327b9766b87152ccd9e0dc51911619343" name="kernel-module-openafs-2.6.18-308.24.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="d076c738c610471df161ee3f33e4bf06060d30c3" name="kernel-module-openafs-2.6.18-308.4.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="203cf1ac194b9ffcc47c52a7a27bf797d3db38f1" name="kernel-module-openafs-2.6.18-308.4.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="bf4cf96ad0c4fecdab73ed6f717f4d9e45c961ce" name="kernel-module-openafs-2.6.18-308.4.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="877f2dd8d13f477eb3c4e6ef1c8fc82e2af08bd2" name="kernel-module-openafs-2.6.18-308.8.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="f45f6da31e3efb581560498d9a4f19bc72f2d84e" name="kernel-module-openafs-2.6.18-308.8.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="39cdf63789dabe25949932ae6c5a0ad595800072" name="kernel-module-openafs-2.6.18-308.8.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="5102728597f98738871376806d2c9a5ae4a6b8be" name="kernel-module-openafs-2.6.18-308.8.2.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="58ca6a55dcc86fa1a72db4a0c8261aa398576b68" name="kernel-module-openafs-2.6.18-308.8.2.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="03f8d7216e9e92b5bc23206acf907f1eb2fbb536" name="kernel-module-openafs-2.6.18-308.8.2.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="5f26f20811e59b82ced2c08c18bdf076b940c215" name="kernel-module-openafs-2.6.18-348.1.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="7c9c0d94c4553dbbb715c445be0af1f712bc331a" name="kernel-module-openafs-2.6.18-348.1.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="367b169ba832d8e3990fd175bea181d664969d60" name="kernel-module-openafs-2.6.18-348.1.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="adee1a7b0368d01d708f4b1ce1d758715efa2885" name="kernel-module-openafs-2.6.18-348.1.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="c4187d1b02db9faa1aaf184afc16113e7a2bb9ca" name="kernel-module-openafs-2.6.18-348.1.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="80.1.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.12-79.SLx" date="1268697600">- 1.4.12 release, no additional patches
- updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.SLx" date="1295654400">- 1.4.14 release, no additional patches
- updated CellServDB from grand.central.org (last changed 2010-12-13)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
</package>
<package pkgid="4f52549633c75772f17fce3f598f212aa40d110b" name="kernel-module-openafs-2.6.18-348.1.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="57cbf8910b4e76ac8c2ee9d5e43a91c61a7f09d9" name="kernel-module-openafs-2.6.18-348.12.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="cf61b6b3c6489496626a64c36556722251dcf3f3" name="kernel-module-openafs-2.6.18-348.12.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="ab91eef7f7552fd3e1d26f6e24f03642e132ef66" name="kernel-module-openafs-2.6.18-348.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="fb3ad7d6c881bcc4e4589044a57a086147d04d2f" name="kernel-module-openafs-2.6.18-348.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="c9f136445b1ac4ed556de0d6ce2be98fd07a26ce" name="kernel-module-openafs-2.6.18-348.12.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="8d80fad1169a16cb5cc6867d7d50c54ee5d71866" name="kernel-module-openafs-2.6.18-348.12.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="28b95ba2055dabeddd16014752b6ab4a408af2a6" name="kernel-module-openafs-2.6.18-348.16.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="5fbbfc0a9ab11587647b6d0d6c0bea62f866b6c8" name="kernel-module-openafs-2.6.18-348.16.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="aa2c6c9bbc1d63602c2d5937303cc0954182fd70" name="kernel-module-openafs-2.6.18-348.16.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="20b14f0085b7ef66ebcc15e38e120d445cd7627c" name="kernel-module-openafs-2.6.18-348.18.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="f2839bc7cc69d98fcaacc88e6a59df13e752879b" name="kernel-module-openafs-2.6.18-348.18.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="b44f8b569af92976075f20d1b6ab818e3979d45d" name="kernel-module-openafs-2.6.18-348.18.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="91e9a943fa779383647d41231031cca11fb6352f" name="kernel-module-openafs-2.6.18-348.2.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="3ef4b183f8cabf8f21ad4a5546573b3c178ecf20" name="kernel-module-openafs-2.6.18-348.2.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="e047194789dbace87f34d0f3a82d8f1d99013bd9" name="kernel-module-openafs-2.6.18-348.2.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="f415a1cce3935720b0cde6a964719404b66102fd" name="kernel-module-openafs-2.6.18-348.21.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="75837ca4ae42f24176fd105e8fcae10653e41b00" name="kernel-module-openafs-2.6.18-348.21.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="c2334bc5078ccd21ac0f3a0985d527fc5eac8020" name="kernel-module-openafs-2.6.18-348.21.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="a4468b5a8a7dd7d7a47dc83e16e5cb2c6817f5c3" name="kernel-module-openafs-2.6.18-348.3.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="a19e6618153da9fc9f8570b2ce4f9da7d2dfd518" name="kernel-module-openafs-2.6.18-348.3.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="a9bc52956c058a33cd56b85d04807a891baf38b0" name="kernel-module-openafs-2.6.18-348.3.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="dc559ae54096af87e4a4c5e3a0b71e4a765a21fc" name="kernel-module-openafs-2.6.18-348.4.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="cba3eb1dd3b2dd5e4683d887914da1f3c1f91003" name="kernel-module-openafs-2.6.18-348.4.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="7a3aa9bbb73e40e6b8664c7e9d5ddf8d03e9b059" name="kernel-module-openafs-2.6.18-348.4.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="53c6cb1372ff9c56fa39fa7b51209f7915add4cc" name="kernel-module-openafs-2.6.18-348.6.1.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="43e2ec12a6df5c94a308264737c4cee774595097" name="kernel-module-openafs-2.6.18-348.6.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="d2b73d72645d1a1aa86e476fb62328194227bbfd" name="kernel-module-openafs-2.6.18-348.6.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="e0e1f68b648a416ed7138ae45bed5be1310ce662" name="kernel-module-openafs-2.6.18-348.6.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="b2114cd4c5004e02c883ccf22beac0cb6622ef41" name="kernel-module-openafs-2.6.18-348.6.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="b64ebcb7b0dc18d1566bbac116b84528280a2999" name="kernel-module-openafs-2.6.18-348.6.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="e15f228131b668dde18b1be59cdf15147091927e" name="kernel-module-openafs-2.6.18-348.el5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="7ce54aecae70fe75b9f19f6d495fe91008e04fd2" name="kernel-module-openafs-2.6.18-348.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="e1252fad675a76907fe25aa0829c5bc721949f49" name="kernel-module-openafs-2.6.18-348.el5xen" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="20314fa77f6a5362a1cbc1c09e694463f42ee742" name="kernel-module-openafs-2.6.18-371.1.2.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="3f3cfdf124ba541a7b1a2a0d561f040ed7d37d4d" name="kernel-module-openafs-2.6.18-371.1.2.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="b93714291a8550a88dfad80d8bad52bf1a0e9f81" name="kernel-module-openafs-2.6.18-371.1.2.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="0c777a86d68b1788c98660306d7ef6cb26df2191" name="kernel-module-openafs-2.6.18-371.11.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="fa1b5e6b6912c96deba57f1bca6d81a01a2e6ac9" name="kernel-module-openafs-2.6.18-371.11.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="dfe9e1324cb225b1c2cdebee1a8a76e036774608" name="kernel-module-openafs-2.6.18-371.11.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="f135fa6f936679785071d971d2bca6226f9ff33f" name="kernel-module-openafs-2.6.18-371.12.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="99385c8e5a0b1cc8a11f1940eb4282a891cf881c" name="kernel-module-openafs-2.6.18-371.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="1025740a16bc290a6b2d4052963f6506457a542e" name="kernel-module-openafs-2.6.18-371.12.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="0b9a7b10ea40e9d4c3155ad9600d8f9e955db365" name="kernel-module-openafs-2.6.18-371.3.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="a8dfcdfe123c69569b21cd9840c99ebb2e673d71" name="kernel-module-openafs-2.6.18-371.3.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="0c1d5c2b1a8e165a44e6d7878023f91847a4588d" name="kernel-module-openafs-2.6.18-371.3.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="c2bb6a5c09e5ac4d60b8732c3937669a223a617b" name="kernel-module-openafs-2.6.18-371.4.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="141b8c4f0ab12c50c8a85ba07a52a81d9a5fd39e" name="kernel-module-openafs-2.6.18-371.4.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="3604eba3a4afe750b60db5a8dbe901632904dad4" name="kernel-module-openafs-2.6.18-371.4.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="4cce5d2cede84e274902a3f3f491b5306cf8295e" name="kernel-module-openafs-2.6.18-371.6.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="0d9e86588e0a25fda09e9fb8854e3b848d13d27d" name="kernel-module-openafs-2.6.18-371.6.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="3de1fdb1d6522314c81df982e8ac6b79d32ed03b" name="kernel-module-openafs-2.6.18-371.6.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="06250486b57b7d7ff8c23dbf1877f062929f63fe" name="kernel-module-openafs-2.6.18-371.8.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="83ccf7edd6836e09dbeef3696c657c4b07dba689" name="kernel-module-openafs-2.6.18-371.8.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="a07e9e9a491c52618e2c0fa325a988bfc962fb1d" name="kernel-module-openafs-2.6.18-371.8.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="066f00ee51d6b27e1ea55d25b4f5dd036e8e480e" name="kernel-module-openafs-2.6.18-371.9.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="e579eeda3bca97abf3a00b3f491e5bb37a632181" name="kernel-module-openafs-2.6.18-371.9.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="102bb11aae72c343aa0a155cf24447ff478a3bad" name="kernel-module-openafs-2.6.18-371.9.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="5c31fbc03abee66fd26fdbb54c7a19256436931b" name="kernel-module-openafs-2.6.18-371.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="05a96fe8e41e32e5bb305424eb83ac08807d8185" name="kernel-module-openafs-2.6.18-371.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="69d113fc2efab9138b9b809682d024687b6aca99" name="kernel-module-openafs-2.6.18-371.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="10f1ea81668eed8f495b32a4e8033f5dc3daa821" name="kernel-module-openafs-2.6.18-400.1.1.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="99b3a99fabf01957ceb3c08a22c0f33270c3ba52" name="kernel-module-openafs-2.6.18-400.1.1.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="109aeebda63874f4b1adf105441736b58027fb55" name="kernel-module-openafs-2.6.18-400.1.1.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="86393d291822972d83031aa370dddad1a5f3f03c" name="kernel-module-openafs-2.6.18-400.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="ed7b5f69637c593b1cf798852aeb27188d99808c" name="kernel-module-openafs-2.6.18-400.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="592804e9b8b7f31d47f6387973355101466ae6b8" name="kernel-module-openafs-2.6.18-400.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="7433f28b9841068de08a91aa44a67651f1b96611" name="kernel-module-openafs-2.6.18-402.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="f9bd2a12c4e31f3cd99a7aec9d1c26f65d0a3ed2" name="kernel-module-openafs-2.6.18-402.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="50582a745b60b874182a189612c08d7cf5adeacb" name="kernel-module-openafs-2.6.18-402.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="a60993a2c6bb8372677aa0675934389ae3c5728e" name="kernel-module-openafs-2.6.18-404.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="fcacd56836ef1d0cbed3212ec76c7c3734e46e56" name="kernel-module-openafs-2.6.18-404.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="7cce126f399fc42484bd54c947984351cc01245d" name="kernel-module-openafs-2.6.18-404.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="4a417fc4bbe4c3472262856f97bc5ed081e3fef0" name="kernel-module-openafs-2.6.18-404.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="89416db64c67bcb139000e65413818ac1d508b24" name="kernel-module-openafs-2.6.18-404.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="45d63b3cd6ffc878a4b1a5c4e6824aeccfa22d88" name="kernel-module-openafs-2.6.18-404.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="0f2d95540e79d3c1d815c87ab305d141bc0ce944" name="kernel-module-openafs-2.6.18-406.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="6dc6cd0dd3d6dc9e7cbff8802789fb57f4ea2377" name="kernel-module-openafs-2.6.18-406.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="8ca9aa16e60b01d379d5b12bd9e075724c22e3b2" name="kernel-module-openafs-2.6.18-406.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="46d5071ee74db5f119cc888050ae1821a9b90113" name="kernel-module-openafs-2.6.18-406.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="80e2bcc9265728ebb1fa3430a98396e552cf027a" name="kernel-module-openafs-2.6.18-406.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="a8e5ee3051ea3f7750a59578db3b8e2bd3558b69" name="kernel-module-openafs-2.6.18-406.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="057e74fba5988afd7e1b5ea2f946d86d05fdc0eb" name="kernel-module-openafs-2.6.18-406.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="f1811513d56e986b5340afddbfb9f2c0352d2264" name="kernel-module-openafs-2.6.18-406.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="da1e953f103e93398bb1704c14d6897aeb9960d2" name="kernel-module-openafs-2.6.18-406.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="85.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
</package>
<package pkgid="445fd1231f964b72a3f0142e15005071c1ea647e" name="kernel-module-openafs-2.6.18-406.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="efdf05ad11e3bc9a9c99470e66168beaba1642cc" name="kernel-module-openafs-2.6.18-406.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="0ab4a91ebfab467baaf15e229af379643c70c92f" name="kernel-module-openafs-2.6.18-406.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="ecf27bf4ee52046015c0e4d9163d5534cc4b9d85" name="kernel-module-openafs-2.6.18-408.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="06e9f7e212bdf62b155da66405566723276e2e7b" name="kernel-module-openafs-2.6.18-408.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="67b945f74e49bfbb4a2c9a74354d4c735642ec8e" name="kernel-module-openafs-2.6.18-408.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="0a5485c8ab59e96b2aafb7b5fa2e8e5c4dd630fa" name="kernel-module-openafs-2.6.18-408.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="9557ec0e85ab044c20857e3ff137d289ca1d1961" name="kernel-module-openafs-2.6.18-408.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="047000bcf3de1f704482fc980f67924e4453bc7d" name="kernel-module-openafs-2.6.18-408.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="a84ffd5d701a53674169b8526266ecb0f41d5617" name="kernel-module-openafs-2.6.18-409.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="e3b66106062cde0385d4d13e7932f1e57d542636" name="kernel-module-openafs-2.6.18-409.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="16691adc0f723c12a34e537a65059661eb6da474" name="kernel-module-openafs-2.6.18-409.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="40749894333abc5422a41f324ffefc6174895fb5" name="kernel-module-openafs-2.6.18-409.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="f71f5e7a495d9240186eda830c3e9df934b890c5" name="kernel-module-openafs-2.6.18-409.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="19803c210114a212eba6957554a09efe6f7758f5" name="kernel-module-openafs-2.6.18-409.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="d8b3b8601b0284608b28c03d673927bdbfd1d4d9" name="kernel-module-openafs-2.6.18-416.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="ca315a1ebdda07f92e96dbe94360eb162d1d08df" name="kernel-module-openafs-2.6.18-416.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="e699cba0ed79e6fb84eceaedaf7df44e1fd2381e" name="kernel-module-openafs-2.6.18-416.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="00376a0bfbd02b4f36bc062f4f4d6bac1925d798" name="kernel-module-openafs-2.6.18-416.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="7985a6f778a9df8039cc38ede1c848ae5fe04710" name="kernel-module-openafs-2.6.18-416.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="1bcdc34e73534f931a3d62b5194f751212e45fae" name="kernel-module-openafs-2.6.18-416.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="5da3e15a6d12eea601c1059c1f3a075a8fc69906" name="kernel-module-openafs-2.6.18-417.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="fb4b5f4eb75bdbed2e84637687c002667d198614" name="kernel-module-openafs-2.6.18-417.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="ce81f87878bd94d68b5ad2821b7e22195124bc26" name="kernel-module-openafs-2.6.18-417.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="b6ccf94a93f96aa8195caca4985b355f74c92f62" name="kernel-module-openafs-2.6.18-419.el5" arch="i686">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="d3d594bbe631a4b4a60579f3b28c27e26b180935" name="kernel-module-openafs-2.6.18-419.el5PAE" arch="i686">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="bf2bea53ade8cfc979cb19ebdf1882d1e6531e27" name="kernel-module-openafs-2.6.18-419.el5xen" arch="i686">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="f1496d1c49b9a9c790af3f6e19d9cd054d4a57a4" name="kernel-module-xfs-2.6.18-238.12.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="7aea64b696f1e57e12430b507b6907e5bc5bbc4f" name="kernel-module-xfs-2.6.18-238.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="8231363eb4b601c8b4ed53f26294d254f1a256f4" name="kernel-module-xfs-2.6.18-238.12.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="d8e4b79540adb6bc6c0a22fdaafb753d12d4a431" name="kernel-module-xfs-2.6.18-238.19.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="e9c12355404e36e0ebedf5120a6013ff2928bfc4" name="kernel-module-xfs-2.6.18-238.19.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="a7ce56a9ab7765d748b76eac4f093636429d24ca" name="kernel-module-xfs-2.6.18-238.19.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="e935b29c96eab4e4498d38b58e00fa27eb4a9a52" name="kernel-module-xfs-2.6.18-274.12.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="d3da2db06f0ea0108594364a41d6279857bee76e" name="kernel-module-xfs-2.6.18-274.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="4f7b1e54576ec6dd4d79f421adec29a9621fe52e" name="kernel-module-xfs-2.6.18-274.12.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="e545a5475ead42551adc3f2a44940fbbbbb18fc4" name="kernel-module-xfs-2.6.18-274.17.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="eea4ee8c4106ba3d3e3626620f7f79f242fb9c69" name="kernel-module-xfs-2.6.18-274.17.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="892bc2df720e82c94ca16104687b8d9eb479d22d" name="kernel-module-xfs-2.6.18-274.17.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="4c39479119babcc1ea1b3e1fbda4edac210fe872" name="kernel-module-xfs-2.6.18-274.18.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="5e7d0fd12430aa4e427a57d81e8b27ea84863241" name="kernel-module-xfs-2.6.18-274.18.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="02dba9b2eab13a93aed1cde51d856a5bfddfe49a" name="kernel-module-xfs-2.6.18-274.18.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="aa2b9c0135b3117e92d056713b68c57eb1437414" name="kernel-module-xfs-2.6.18-274.3.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="4b161d34bfc69883884a8f4592ec172a8c80e250" name="kernel-module-xfs-2.6.18-274.3.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="adaadf938f23950f41f09775c9f28806d9c97df9" name="kernel-module-xfs-2.6.18-274.3.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="57e81633d79acf80caac57e00cd14ef76d54a8ae" name="kernel-module-xfs-2.6.18-274.7.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="0ee0447e51ab62586e7cc6f762c8f4d1c860b779" name="kernel-module-xfs-2.6.18-274.7.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="89dfe7f1176d66ecf550d088b20bc9df891b53ee" name="kernel-module-xfs-2.6.18-274.7.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="713931b5e62a63ca01ef267378c0af3e972480cd" name="kernel-module-xfs-2.6.18-308.11.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="ac986d20f0ec5ff8e6e93b5d1194a45731ab6db9" name="kernel-module-xfs-2.6.18-308.11.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="4785aaf326191790ea51298a384c3841ddf8ca50" name="kernel-module-xfs-2.6.18-308.11.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="90e88a16f4f2ffafd3e3c090b3dad4d1426a43c2" name="kernel-module-xfs-2.6.18-308.13.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="e99151cf0f6e27f677ad7039262f8a252360bc51" name="kernel-module-xfs-2.6.18-308.13.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="0af28da20943f63a7bcf7a3fd04634903bb4f56d" name="kernel-module-xfs-2.6.18-308.13.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="43e55512f009fd49f0815bc74dfbd2c32a6d636b" name="kernel-module-xfs-2.6.18-308.16.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="8968a3f487e9b7d880151fdadd7cb249107d2c42" name="kernel-module-xfs-2.6.18-308.16.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="c87b44e68163fd73dbc6838e162ca9c095327004" name="kernel-module-xfs-2.6.18-308.16.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="5d14a3ce2ad1cc255121c2e2b40e21eab21f8a96" name="kernel-module-xfs-2.6.18-308.20.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="0936a4eaaab482d33a2bc00b0c6bcc0c8809d22b" name="kernel-module-xfs-2.6.18-308.20.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="3b91604bbee2967db0e8f6ed3b792e7470f6676f" name="kernel-module-xfs-2.6.18-308.20.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="a61a33ca3a9a49359c8ed183f6c3d867179803a4" name="kernel-module-xfs-2.6.18-308.24.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="6aec5a8105428b876ba07344c61db00b6380161b" name="kernel-module-xfs-2.6.18-308.24.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="cb5179c50cd27c475b2bd2eefe9b6fba38461d5f" name="kernel-module-xfs-2.6.18-308.24.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="317b1589729dd37b36cc4463f462173e9ebd2901" name="kernel-module-xfs-2.6.18-308.4.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="486957f429211f21258512d680db4fe2578da6ff" name="kernel-module-xfs-2.6.18-308.4.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="439b33a6c20698418e5232c430b28048d2d04066" name="kernel-module-xfs-2.6.18-308.4.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="dc0ff75bb35a4c772e098766f83e0fa6cfbcc95d" name="kernel-module-xfs-2.6.18-308.8.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="c6d1811322cd266b5dffddb4442a7ff3ea7ecb80" name="kernel-module-xfs-2.6.18-308.8.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="1388645947cb97b04d858fb88cb792c5fe7a0b29" name="kernel-module-xfs-2.6.18-308.8.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="33413f2c150fee4a452432b40474fa445987c843" name="kernel-module-xfs-2.6.18-308.8.2.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="8ccb92d6c83bce7b2dbcf2be996756fd0316fca2" name="kernel-module-xfs-2.6.18-308.8.2.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="c74818f4e9ef15bd0dd017596bef48bf40435a3b" name="kernel-module-xfs-2.6.18-308.8.2.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="4b5097cd18c2ed803563a93fd02a555840594841" name="kernel-module-xfs-2.6.18-348.1.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="06a14663622195d285feadfac2feb664bac698a7" name="kernel-module-xfs-2.6.18-348.1.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="5b38e931150f06db8490f34cb19d3f2e8780ca68" name="kernel-module-xfs-2.6.18-348.1.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="2d57d3964eed9fa1cb4cfebe8125d1ab9986521e" name="kernel-module-xfs-2.6.18-348.12.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="9c14f63fc9279ea420a4c5bda3ffdd754b67b96d" name="kernel-module-xfs-2.6.18-348.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="e07207cc2b64597177c85e4350b8932882b43b37" name="kernel-module-xfs-2.6.18-348.12.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="ddecb6050d922a045d089c0c641432ba1714c119" name="kernel-module-xfs-2.6.18-348.16.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="7471515fb3c4d2017a5f28011170ed5bb0635540" name="kernel-module-xfs-2.6.18-348.16.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="5970edac2fc1ee59ebde0d4dba112940e21f603c" name="kernel-module-xfs-2.6.18-348.16.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="1d7102b9fb76fdad34ea7f8a3769e634b8bfb761" name="kernel-module-xfs-2.6.18-348.18.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="9a6e161b1dfbf8a0ad2c958bf6387ceae6426a7f" name="kernel-module-xfs-2.6.18-348.18.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="24bc00983ae1b27ae7d2b2ee89ba2a6811007956" name="kernel-module-xfs-2.6.18-348.18.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="0febc675ca5e8c9b7eb7b3e3dcf60726657018e9" name="kernel-module-xfs-2.6.18-348.2.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="c17d26e1a2e04548e0d09c20473904e96e714660" name="kernel-module-xfs-2.6.18-348.2.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="ba5b4319ad0decff45f4d829e5d0f2a54ba29ce6" name="kernel-module-xfs-2.6.18-348.2.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="47b30f86c403df38ea69d46112b15543a6199c52" name="kernel-module-xfs-2.6.18-348.3.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="7ab261a5d4758354975c7e5e43f3e61d0e5e0f99" name="kernel-module-xfs-2.6.18-348.3.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="65fe1d2289d1ec4b055b22861071453cf8bbc87d" name="kernel-module-xfs-2.6.18-348.3.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="11a30cc046397a92ed0abd501b5db94b29f72496" name="kernel-module-xfs-2.6.18-348.4.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="95734ea16147e7a6133f36d3073a2143a9a253e4" name="kernel-module-xfs-2.6.18-348.4.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="dce27ebc6610261eec0f04e453e21810ab018041" name="kernel-module-xfs-2.6.18-348.4.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="c87ea3f9e8c005b6929ee769b6b98f5088aa8e8f" name="kernel-module-xfs-2.6.18-348.6.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="132d6d774616eaf39a66df51ccbd5e183889a45a" name="kernel-module-xfs-2.6.18-348.6.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="974810a3bbedcae773c02dd7446176d03f1b07cf" name="kernel-module-xfs-2.6.18-348.6.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="e9e8df4e55c2357363570c92af29c0e5d9bb9b27" name="kernel-module-xfs-2.6.18-371.1.2.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="4e066a422b2abcbda516bfca117ae97e30bbdd58" name="kernel-module-xfs-2.6.18-371.1.2.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="321bf0083cbde60e2c417e476e5f26e628f98d30" name="kernel-module-xfs-2.6.18-371.1.2.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="a1215c84396d98bb9b220a09e99ae09c0bd153f5" name="kernel-module-xfs-2.6.18-371.11.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="f4b371a65a8bc3089b01a87cfd34fc6c87b0d9f2" name="kernel-module-xfs-2.6.18-371.11.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="b2335f4a0e7e41c20b17fc5f45b5c2e4e39f232e" name="kernel-module-xfs-2.6.18-371.11.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="18bf98e2d329278ad830a99806b266be71e38d66" name="kernel-module-xfs-2.6.18-371.12.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="80c56e2e687781a1a71e15b2a5f80debca46e773" name="kernel-module-xfs-2.6.18-371.12.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="13be7415bcabf6afe24950aae1bae2ab999575ef" name="kernel-module-xfs-2.6.18-371.12.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="b629570ffeb92e4d459d436ed1349f12b002a13d" name="kernel-module-xfs-2.6.18-371.3.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="60d776021e6062d2833a3f4c40b33e3688edcc80" name="kernel-module-xfs-2.6.18-371.3.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="4e756aa529ef79bbd56e7ef35b9f817e58be4f2e" name="kernel-module-xfs-2.6.18-371.3.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="e4cbcf47034479d16ab39cd243ee605763ce6349" name="kernel-module-xfs-2.6.18-371.4.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="eab4f0119e798f6611588f5a934c8d8912fc7ba3" name="kernel-module-xfs-2.6.18-371.4.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="ba2e788d1f911838b819b4645b433af9f88965e5" name="kernel-module-xfs-2.6.18-371.4.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="ca6afd8503d8cdb022503f644da171d27c3f0e72" name="kernel-module-xfs-2.6.18-371.6.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="4075ad5e263fcfaf5d55ad2515a68807c771021f" name="kernel-module-xfs-2.6.18-371.6.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="84d16f7474bbe7cd231d9a337bedae824add355d" name="kernel-module-xfs-2.6.18-371.6.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="6a71d90a066c22312c33b318ddafee404f65f901" name="kernel-module-xfs-2.6.18-371.8.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="8d3c851d500862bf49a16a05c44343dc717dfb52" name="kernel-module-xfs-2.6.18-371.8.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="d92db45bd7e448935ee95aaa6eff75795da8163b" name="kernel-module-xfs-2.6.18-371.8.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="57629c0f1feae663d18244847213a709472d5c0d" name="kernel-module-xfs-2.6.18-371.9.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="19d140a5b645ed476e6d349d6568f40a6332ce71" name="kernel-module-xfs-2.6.18-371.9.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="ab31756e309ed5321f9fda17847fb716a1cda998" name="kernel-module-xfs-2.6.18-371.9.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="25f83eb257c474efad8cb50d55df23ee386a8b36" name="kernel-module-xfs-2.6.18-371.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="0e60140523f8038f7c885c4e184629e3a8583237" name="kernel-module-xfs-2.6.18-371.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="0e2e9db9f528174f806c2ac1aae8af711fc16668" name="kernel-module-xfs-2.6.18-371.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="123914d4f7aa465c2fc8ac9e8e29b554541c1be0" name="kernel-module-xfs-2.6.18-400.1.1.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="bc41002313ef03cd4cd8fcc312cc06524cbfd269" name="kernel-module-xfs-2.6.18-400.1.1.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="89d1ee7774e5f83dcd27b552bb681b2a708d640d" name="kernel-module-xfs-2.6.18-400.1.1.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="5ff11a6ce930fc4c97fbca4bacd000b001534c8e" name="kernel-module-xfs-2.6.18-400.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="2e8a9d648dedc18ca3d838aedb798b5b19acf7b0" name="kernel-module-xfs-2.6.18-400.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="9c4cb62345807c42ac928bfef96ffeabdd40eef6" name="kernel-module-xfs-2.6.18-400.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="9f7ca2318200f5f9396a4f5e8b4ec80478326cd4" name="kernel-module-xfs-2.6.18-402.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="5350df46e6bb793422c42d1768562985c34b65b7" name="kernel-module-xfs-2.6.18-402.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="195470ef1a7281de16bcecd438c68c51dc2d7c30" name="kernel-module-xfs-2.6.18-402.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="55fce464e9025d54bfb86382cd2181e7d2a0eaab" name="kernel-module-xfs-2.6.18-404.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="c93b08fb6c02997ee416a605436ea9091ef25e19" name="kernel-module-xfs-2.6.18-404.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="3bfa87ee0bec4cab006d2295bef8a5e30ec192c6" name="kernel-module-xfs-2.6.18-404.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="ded40bc247d9dee5242092b53568e90cd3950d53" name="kernel-module-xfs-2.6.18-406.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="46920eab3d4f5cfc1f961959a92c9a9ed9dcd175" name="kernel-module-xfs-2.6.18-406.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="94bdcf873ec183cd831894855b1451583772b660" name="kernel-module-xfs-2.6.18-406.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="684b2c94efcc89b10d8256f3c6368807cdc8a247" name="kernel-module-xfs-2.6.18-408.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="0256ef57635f0c6bde2f7213d0600e2f83210572" name="kernel-module-xfs-2.6.18-408.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="33adc6e4df6da54b99088ed13858ae448c94879b" name="kernel-module-xfs-2.6.18-408.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="6486c70720512e57b33b447d1921aa61996b47b4" name="kernel-module-xfs-2.6.18-409.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="f0811cedf984c1e6c0d6001f1e1d5640b7908673" name="kernel-module-xfs-2.6.18-409.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="27d3e29104bed4a2940c131a9380fd94a7b07bf4" name="kernel-module-xfs-2.6.18-409.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="1331180d85d78420b9646df9bf77895bc51c5dd6" name="kernel-module-xfs-2.6.18-416.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="26949424d6782afff45f9a40cfc76ed40835c5cf" name="kernel-module-xfs-2.6.18-416.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="7e64306a2a827ce8cf5df26cfec82bebecacfbed" name="kernel-module-xfs-2.6.18-416.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="ef15afd8cb1336771b6b7313f5126c00284a48fb" name="kernel-module-xfs-2.6.18-417.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="3b9c488c4f31235e3861ccbf3e89cbb0aa6c23e6" name="kernel-module-xfs-2.6.18-417.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="989214247263197214844d8e134ac2f319741a3c" name="kernel-module-xfs-2.6.18-417.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="f4edc589fce749ddafadff4c5dca89406ac5ab78" name="kernel-module-xfs-2.6.18-419.el5" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="459443073b04df1f85d7de2fc2ecbb0bb78ade46" name="kernel-module-xfs-2.6.18-419.el5PAE" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="685be9dd257b5c74ca972ccab5563bf1d10ad92a" name="kernel-module-xfs-2.6.18-419.el5xen" arch="i686">
  <version epoch="0" ver="0.4" rel="2.sl5"/>
  <changelog author="Urs Beyerle &lt;urs.beyerle@psi.ch&gt; - 0.4-1" date="1194912000">- initial source taken from centos 5 extra repo
- initial build for SL5</changelog>
  <changelog author="Troy Dawson  &lt;dawson@fnal.gov&gt; 0.4-1" date="1229126400">- Changed the name to xfs-filesystem to avoid confusion with xfs</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; - 0.4-2" date="1233187200">- fix build for kernels &gt;= 2.6.18-122.el5 (SL5.3+)</changelog>
</package>
<package pkgid="3f9ea9ee60dd85a99fcfb7a241a96f0a88377049" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.10.1.el5]" date="1302904800">- [fs] gfs2: creating large files suddenly slow to a crawl (Robert S Peterson) [690239 683155]
- [virt] hypervisor: Overflow fix for clocks &gt; 4GHz (Zachary Amsden) [690134 673242]
- [usb] fix usbfs isochronous data transfer regression (Don Zickus) [696136 688926]
- [fs] partitions: Fix corrupted OSF partition table parsing (Danny Feng) [688022 688023] {CVE-2011-1163}
- [misc] pm: add comment explaining is_registered kabi work-around (Don Zickus) [689699 637930]
- [media] sn9c102: fix world-wirtable sysfs files (Don Howard) [679304 679305]
- [scsi] scsi_dh_rdac: Add two new IBM devices to rdac_dev_list (Rob Evers) [692370 691460]
- [fs] block: fix submit_bh discarding barrier flag on sync write (Lukas Czerner) [690795 667673]
- [net] netfilter/ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689339 689340]
- [net] netfilter: ip6_tables: fix infoleak to userspace (Jiri Pirko) [689348 689349] {CVE-2011-1172}
- [net] netfilter/ip_tables: fix infoleak to userspace (Jiri Pirko) [689331 689332] {CVE-2011-1171}
- [net] netfilter/arp_tables: fix infoleak to userspace (Jiri Pirko) [689322 689323] {CVE-2011-1170}
- [base] Fix potential deadlock in driver core (Don Zickus) [689699 637930]
- [net] forcedeth/r8169: call netif_carrier_off at end of probe (Ivan Vecera) [689808 689805 664705 664707]
- [net] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [693751 680531]
- [net] ixgbe: limit VF access to network traffic (Andy Gospodarek) [693751 680531]
- [fs] lockd: make lockd_down wait for lockd to come down (Jeff Layton) [688156 653286]
- [fs] proc: protect mm start_/end_code in /proc/pid/stat (Eugene Teo) [684570 684571] {CVE-2011-0726}
- [net] dccp: fix oops in dccp_rcv_state_process (Eugene Teo) [682955 682956] {CVE-2011-1093}
- [net] bluetooth: fix bnep buffer overflow (Don Howard) [681318 681319] {CVE-2011-1079}
- [fs] nfs: break nfsd v4 lease on unlink, link, and rename (J. Bruce Fields) [693755 610093]
- [fs] nfs: break lease on nfsd v4 setattr (J. Bruce Fields) [693755 610093]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.11.1.el5]" date="1303941600">- [s390] dasd: fix race between open and offline (Hendrik Brueckner) [699808 695357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.12.1.el5]" date="1304805600">- [x86_64] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [i386] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [xen] fix MAX_EVTCHNS definition (Laszlo Ersek) [701242 701240]
- [net] ixgbe: fix for link failure on SFP+ DA cables (Don Howard) [696181 653236]
- [net] netxen: limit skb frags for non tso packet (Phillip Lougher) [699609 672368]
- [block] cciss: fix lost command problem (Phillip Lougher) [696503 696153]
- [fs] gfs2: fix filesystem hang caused by incorrect lock order (Robert S Peterson) [688855 656032]
- [fs] gfs2: restructure reclaim of unlinked dinodes (Phillip Lougher) [688855 656032]
- [fs] gfs2: unlock on gfs2_trans_begin error (Robert S Peterson) [688855 656032]
- [scsi] mpt2sas: prevent heap overflows and unchecked access (Tomas Henzl) [694526 694527] {CVE-2011-1495 CVE-2011-1494}
- [net] bridge/netfilter: fix ebtables information leak (Don Howard) [681325 681326] {CVE-2011-1080}
- [net] bluetooth: fix sco information leak to userspace (Don Howard) [681310 681311] {CVE-2011-1078}
- [fs] fix corrupted GUID partition table kernel oops (Jerome Marchand) [695979 695980] {CVE-2011-1577}
- [xen] x86/domain: fix error checks in arch_set_info_guest (Laszlo Ersek) [688581 688582] {CVE-2011-1166}
- [net] bridge: fix initial packet flood if !STP (Jiri Pirko) [701222 695369]
- [fs] nfsd: fix auth_domain reference leak on nlm operations (J. Bruce Fields) [697448 589512]
- [scsi] qla2xxx: no reset/fw-dump on CT/ELS pt req timeout (Chad Dupuis) [689700 660386]
- [mm] set barrier and send tlb flush to all affected cpus (Prarit Bhargava) [696908 675793]</changelog>
</package>
<package pkgid="af60ca4732884cef6eec9aabaa0a9735d712238e" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.19.1.el5"/>
  <changelog author="Jiri Pirko &lt;jpirko@redhat.com&gt; [2.6.18-238.17.1.el5]" date="1308952800">- [net] bluetooth: l2cap and rfcomm: fix info leak to userspace (Thomas Graf) [703020 703021] {CVE-2011-2492}
- [net] inet_diag: fix inet_diag_bc_audit data validation (Thomas Graf) [714538 714539] {CVE-2011-2213}
- [misc] signal: fix kill signal spoofing issue (Oleg Nesterov) [690030 690031] {CVE-2011-1182}
- [fs] proc: fix signedness issue in next_pidmap (Oleg Nesterov) [697826 697827] {CVE-2011-1593}
- [char] agp: fix OOM and buffer overflow (Jerome Marchand) [699009 699010] {CVE-2011-1746}
- [char] agp: fix arbitrary kernel memory writes (Jerome Marchand) [699005 699006] {CVE-2011-2022 CVE-2011-1745}
- [infiniband] core: Handle large number of entries in poll CQ (Jay Fenlason) [668370 668371] {CVE-2011-1044 CVE-2010-4649}
- [infiniband] core: fix panic in ib_cm:cm_work_handler (Jay Fenlason) [679995 679996] {CVE-2011-0695}
- [fs] validate size of EFI GUID partition entries (Anton Arapov) [703027 703028] {CVE-2011-1776}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.18.1.el5]" date="1310076000">- [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]
- [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.19.1.el5]" date="1310335200">- Revert: [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]
- Revert: [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- Revert: [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- Revert: [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]</changelog>
</package>
<package pkgid="a515e0a60d6893a8338c7749fd229e3fee23bcb4" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.10.1.el5]" date="1320357600">- [net] be2net: enable NETIF_F_LLTX and add own locking of Tx path (Ivan Vecera) [750912 731806]
- [net] be2net: fix multicast filter programming (Ivan Vecera) [750912 731806]
- [net] be2net: fix cmd-rx-filter not notifying MCC (Ivan Vecera) [750912 731806]
- [net] be2net: use RX_FILTER cmd to program multicast addresses (Ivan Vecera) [750912 731806]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.11.1.el5]" date="1320616800">- [fs] gfs2: speed up large file delete/unlink (Robert S Peterson) [743806 738440]
- [fs] cifs: fix wrong buffer length returned by SendReceive (Sachin Prabhu) [750842 720363]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [virt] xen/netback: disable features not supported by netfront (Paolo Bonzini) [746600 746225]
- [fs] nfs: don't redirty inodes with no outstanding commits (Jeff Layton) [750477 739665]
- [net] tg3: call netif_carrier_off to initialize operstate value (John Feeney) [744700 635982]
- [xen] make test_assign_device domctl dependent on intremap hw (Laszlo Ersek) [745726 740203]
- [xen] Propagate target dom within XEN_DOMCTL_test_assign_device (Laszlo Ersek) [745726 740203]
- [net] sctp: encode PROTOCOL VIOLATION error cause correctly (Thomas Graf) [750457 636828]
- [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [char] tpm: Zero buffer after copying to userspace (Jiri Benc) [732630 732631] {CVE-2011-1162}
- [fs] hfs: fix hfs_find_init() sb-&gt;ext_tree NULL ptr oops (Phillip Lougher) [712775 712776] {CVE-2011-2203}
- [net] sctp: Set correct error cause value for missing parameters (Thomas Graf) [750451 629938]
- [misc] kernel: plug taskstats io infoleak (Jerome Marchand) [716845 716846] {CVE-2011-2494}
- [usb] Make device reset stop retrying after disconnect (Don Zickus) [750841 709699]
- [net] ipv6: properly use ICMP6MSGOUT_INC_STATS in ndisc_send_skb (Jiri Pirko) [743611 698728]
- [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [741273 694625]
- [mm] s390: fix first time swap use results in heavy swapping (Hendrik Brueckner) [747876 722482]
- [virt] xen: fix GFP mask handling in dma_alloc_coherent (Laszlo Ersek) [742282 730247]
- [s390] kernel: fix system hang if hangcheck timer expires (Hendrik Brueckner) [747872 730313]
- [usb] fix interface sysfs file-creation bug (Don Zickus) [750848 637930]
- [usb] don't touch sysfs stuff when altsetting is unchanged (Don Zickus) [750848 637930]
- [base] Fix potential deadlock in driver core (Don Zickus) [750848 637930]
- [security] keys: Fix NULL deref in user-defined key type (David Howells) [751300 751301]
- [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.12.1.el5]" date="1320789600">- Revert: [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]</changelog>
</package>
<package pkgid="cff85614e3c42b8e0e365d0eee1a4061db5886b0" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.17.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.15.1.el5]" date="1324159200">- [net] e1000e: Avoid wrong check on TX hang (Dean Nelson) [766485 746272]
- [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749159 749160] {CVE-2011-4077}
- [pci] intel-iommu: Default to non-coherent for unattached domains (Don Dutile) [766803 753924]
- [fs] nfs: remove BUG() from encode_share_access() (Jeff Layton) [755442 754901] {CVE-2011-4324}
- [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [759387 756412]
- [fs] hfs: add sanity check for file name length (Eric Sandeen) [755432 755433] {CVE-2011-4330}
- [fs] proc: Fix select on /proc files without -&gt;poll (David Howells) [755483 751214]
- [fs] nfs: Ensure we mark inode as dirty if early exit from commit (Jeff Layton) [755482 714020]
- [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [750460 742079]
- [virt] kvm: fix regression w/ 32 bit KVM clock (Rik van Riel) [747875 753789 751742 731599]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [fs] jbd/jbd2: validate sb-&gt;s_first in journal_get_superblock (Eryu Guan) [753343 706810] {CVE-2011-4132}
- [net] igb: enable link power down (Stefan Assmann) [752735 742514]
- [fs] proc: fix oops on invalid /proc/&lt;pid&gt;/maps access (Johannes Weiner) [747851 747699] {CVE-2011-3637}
- [block] cciss: bump driver version (Tomas Henzl) [758024 714129]
- [block] cciss: need to delay after a PCI Power Management reset (Tomas Henzl) [758024 714129]
- [block] cciss: auto engage scsi susbsystem (Tomas Henzl) [758024 714129]
- [block] cciss: store pdev in hba struct (Tomas Henzl) [758024 714129]
- [block] cciss: use consistent variable names (Tomas Henzl) [758024 714129]
- [block] cciss: add a commandline switch for simple mode (Tomas Henzl) [758024 714129]
- [fs] proc: close race with exec in mem_read() (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] implement access_remote_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] factor out main logic of access_process_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] use mm_struct to resolve gate vma's in __get_user_pages (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make in_gate_area take mm_struct instead of a task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make get_gate_vma take mm_struct instead of task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [x86_64] mark assoc mm when running task in 32 bit compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [misc] sched: add ctx tag to mm running task in ia32 compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: require the target to be tracable (or yourself) (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: close race in /proc/*/environ (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: report errors in /proc/*/*map* sanely (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: shift down_read(mmap_sem) to the caller (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] detect exec transition phase with new mm but old creds (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [net] igb: fix i350 SR-IOV failture (Stefan Assmann) [741877 714313]
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [755457 754620] {CVE-2011-4325}
- [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [757146 714870] {CVE-2011-4348}
- [scsi] isci: fix 32-bit operation when CONFIG_HIGHMEM64G=n (Phillip Lougher) [750458 713904]
- [net] tg3: Only allow phy ioctls while netif_running (Phillip Lougher) [746343 683393]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
</package>
<package pkgid="063ef48e9f9ff19f351ea801bbac7ed5716f4f81" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.18.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.18.1.el5]" date="1327096800">- [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [771774 750283] {CVE-2012-0028}
- [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [773322 771592]
- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747943 747946] {CVE-2011-3638}
- [scsi] don't fail scans when host is in recovery (Rob Evers) [772162 657345]
- [fs] jbd2: clear BH_Delay &amp; BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783477 783284] {CVE-2011-4086}
- [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772868 772869] {CVE-2012-0207}</changelog>
</package>
<package pkgid="81e711b4b6960b50fcce60a48071d7d37268d771" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.3.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.1.1.el5]" date="1312581600">- [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [714869 714867]
- [x86_64] Revert ACPI APIC mode test (Prarit Bhargava) [728163 721361]
- [net] sctp: reset packet information after packet transmit (Thomas Graf) [727592 725573]
- [fs] block: initialise bd_super in bdget (Lachlan McIlroy) [726628 707425]
- [fs] nfs: Remove bogus call to nfs4_drop_state_owner (Jeff Layton) [726625 724923]
- [net] be2net: clear interrupt bit in be_probe (Ivan Vecera) [723552 713703]
- [net] be2net: remove certain cmd failure logging (Ivan Vecera) [726619 716821]
- [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [718154 718155] {CVE-2011-2517}
- [fs] xfs: handle NULL mount struct in error reports (Eric Sandeen) [727835 720551]
- [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716827 716828] {CVE-2011-2495}
- [fs] lockd: don't use file's credentials on RPCSEC_GSS mounts (Max Matveev) [722855 701574]
- [fs] xfs: add a missing mutex_unlock to a dio error path (Jeff Moyer) [727590 718232]
- [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [709546 709547] {CVE-2011-2491}
- [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [718883 718884]
- [xen] Fix x86_emulate handling of imul with immediate operands (Igor Mammedov) [712885 700565]
- [fs] Fix wrongly vfree'ing a kmalloc'ed area (Larry Woodman) [721300 719495]
- [fs] dlm: bump default hash table and maximum allocatable sizes (Bryn M. Reeves) [719930 715603]
- [net] tipc: Overhaul of socket locking logic (Max Matveev) [719746 704192]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.18-274.2.1.el5]" date="1313186400">- Fix up some fallout from RHEL5.7 kernel package structure changes</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.3.1.el5]" date="1314396000">- [xen] fix off-by-one shift in x86_64 __addr_ok (Laszlo Ersek) [728043 719850] {CVE-2011-2901}</changelog>
</package>
<package pkgid="ba5d5d8c8dd3036051a9431e3d203ad8644846bd" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.7.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.5.1.el5]" date="1316210400">- [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [732775 675781]
- [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [732775 675781]
- [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [fs] nfs: Fix client not honoring nosharecache mount option (David Jeffery) [734772 730097]
- [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716543 716544] {CVE-2011-2496}
- [mm] Fix incorrect off-by-one centisec dirty values (Larry Woodman) [733665 691087]
- [net] bnx2x: fix bringup of BCM57710 (Michal Schmidt) [737475 680411]
- [virt] xen/netfront: no disable s/g when renegotiating features (Paolo Bonzini) [738392 733416]
- [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734157 727504]
- [virt] xen: Allow arbitrary mtu size until frontend connected (Paolo Bonzini) [738389 697021]
- [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730689 692966]
- [net] cnic, bnx2: Check iSCSI support early in bnx2_init_one (Neil Horman) [734761 710272]
- [net] igb: fix WOL on 2nd port on i350 (Stefan Assmann) [730682 718988]
- [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [728521 720212]</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.6.1.el5]" date="1316815200">- [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [730949 703045] {CVE-2011-2942}
- [misc] remove	div_long_long_rem (Prarit Bhargava) [732879 732614] {CVE-2011-3209}
- [net] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: Use NTWK_RX_FILTER command for promiscous mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: non-member vlan pkts not received in promisc mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: remove bogus unlikely on vlan check (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [x86] nmi: make NMI_NONE default watchdog in x86_64 hvm guests (Laszlo Ersek) [739823 707966]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.7.1.el5]" date="1318888800">- Revert: [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
</package>
<package pkgid="180f45a0010decd5ba66ae8da7350428956a6ad3" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.11.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.9.1.el5]" date="1339020000">- [fs] jbd: clear b_modified before moving the jh to a different transaction (Josef Bacik) [827205 563247]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.10.1.el5]" date="1339711200">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970] {CVE-2012-2934}
- [scsi] qla2xxx: Use ha-&gt;pdev-&gt;revision in 4Gbps MSI-X check. (Chad Dupuis) [816373 800653]
- [fs] sunrpc: do array overrun check in svc_recv before page alloc (J. Bruce Fields) [820358 814626]
- [fs] knfsd: fix an NFSD bug with full size non-page-aligned reads (J. Bruce Fields) [820358 814626]
- [fs] sunrpc: fix oops due to overrunning server's page array (J. Bruce Fields) [820358 814626]
- [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [829670 817131]
- [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [824654 818787]
- [net] sunrpc: Don't use list_for_each_entry_safe in rpc_wake_up (Steve Dickson) [817571 809937]
- [s390] qeth: add missing wake_up call (Hendrik Brueckner) [829059 790900]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
</package>
<package pkgid="83e052ff7f4ab318fae4ecd9308fe0bfecb7073c" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.13.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.12.1.el5]" date="1342216800">- [fs] nfs: Don't allow multiple mounts on same mntpnt with -o noac (Sachin Prabhu) [839806 839753]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.13.1.el5]" date="1343340000">- [net] e1000e: Cleanup logic in e1000_check_for_serdes_link_82571 (Dean Nelson) [841370 771366]
- [net] e1000e: Correct link check logic for 82571 serdes (Dean Nelson) [841370 771366]
- [mm] NULL pointer dereference in __vm_enough_memory (Jerome Marchand) [840077 836244]
- [fs] dlm: fix slow rsb search in dir recovery (David Teigland) [838140 753244]
- [fs] autofs: propogate LOOKUP_DIRECTORY flag only for last comp (Ian Kent) [830264 814418]
- [fs] ext4: properly dirty split extent nodes (Eric Sandeen) [840946 839770]
- [scsi] don't offline devices with a reservation conflict (David Jeffery) [839196 835660]
- [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate (Lukas Czerner) [837226 830351]
- [net] dl2k: Clean up rio_ioctl (Weiping Pan) [818822 818823] {CVE-2012-2313}
- [x86] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835450 834562]
- [net] tg3: Fix TSO handling (John Feeney) [833182 795672]
- [input] evdev: use after free from open/disconnect race (David Jeffery) [832448 822166]</changelog>
</package>
<package pkgid="e3aa27ae8bccef7bbe28bccd0a43efa0ad60a70c" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.14.1.el5]" date="1346277600">- [net] e1000e: drop check of RXCW.CW to eliminate link up and down (Dean Nelson) [852448 840642]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.15.1.el5]" date="1346882400">- [net] sfc: Fix max no of TSO segments and min TX queue size (Michal Schmidt) [845554 845555] {CVE-2012-3412}
- [kernel] xacct_add_tsk: fix pure theoretical -&gt;mm use-after-free (Nikola Pajkovsky) [849723 849725] {CVE-2012-3510}
- [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820255 820256] {CVE-2012-2319}
- [net] netfilter: add dscp netfilter match (Thomas Graf) [847327 842029]
- [net] rds: set correct msg_namelen (Weiping Pan) [822727 822728] {CVE-2012-3430}
- [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [847359 693822]
- [fs] quota: manage reserved space when quota is not active (Eric Sandeen) [847326 818087]
- [fs] quota: Fix warning if delayed write before quota is enabled (Eric Sandeen) [847326 818087]
- [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]
- [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- [xen] x86: whitelist Enhanced SpeedStep for dom0 (Laszlo Ersek) [846125 809103]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.16.1.el5]" date="1348005600">- Revert: [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- Revert: [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- Revert: [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]</changelog>
</package>
<package pkgid="6a507aa4b9abd952638170c63b7a0e10c624f323" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.20.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.18.1.el5]" date="1350079200">- [fs] autofs4: Merge the remaining dentry ops tables (Ian Kent) [857558 850977]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.19.1.el5]" date="1350597600">- [net] be2net: Remove code that stops further access to BE NIC based on UE bits (Alexander Gordeev) [867896 862811]
- [net] netpoll: fix an incorrect check for NULL pointer (Alexander Gordeev) [856079 848098]
- [net] mlx4: Add support for EEH error recovery (Alexander Gordeev) [847404 798048]
- [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] fix crash if block {device|size} read &amp; changed at sametime (Mikulas Patocka) [864823 756506]
- [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}
- [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [861387 819830]
- [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [858774 857448]
- [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [859946 858724]
- [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [857966 854067]
- [scsi] isci: fixup linkspeed definitions (David Milburn) [854986 833000]
- [fs] nfs: nfs_d_automount update caller path after do_add_mount (Carlos Maiolino) [857552 834379]
- [fs] vfs: Fix vfsmount overput on simultaneous automount (Carlos Maiolino) [857552 834379]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.20.1.el5]" date="1352239200">- Revert: [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}</changelog>
</package>
<package pkgid="75d2972ec679366a2b749d3a3c1a744bbb99f242" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.24.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.22.1.el5]" date="1353362400">- [net] bonding: fix link down handling in 802.3ad mode (Andy Gospodarek) [877943 782866]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.23.1.el5]" date="1353535200">- [net] bnx2x: Add remote-fault link detection (Alexander Gordeev) [870120 796905]
- [net] bnx2x: Cosmetic changes (Alexander Gordeev) [870120 796905]
- [net] rds-ping cause kernel panic (Alexander Gordeev) [822755 822756] {CVE-2012-2372}
- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878033 878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870148 870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870150 870151] {CVE-2012-4535}
- [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.24.1.el5]" date="1353535201">- Revert: [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
</package>
<package pkgid="299c2023ea3a1328938580bef26bae5ec3e7a200" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.2.1.el5]" date="1329861600">- [fs] nfs: nfs_fhget should wait on I_NEW instead of I_LOCK (Sachin Prabhu) [795664 785062]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.3.1.el5]" date="1332453600">- [net] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [805462 773735]
- [net] be2net: add vlan/rx-mode/flow-control config to be_setup (Ivan Vecera) [805462 773735]
- [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [805460 799170]
- [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry (Ian Kent) [801726 798809]
- [fs] vfs: fix d_instantiate_unique (Ian Kent) [801726 798809]
- [fs] nfs: allow high priority COMMITs to bypass inode commit lock (Jeff Layton) [799941 773777]
- [fs] nfs: don't skip COMMITs if system under is mem pressure (Jeff Layton) [799941 773777]
- [scsi] qla2xxx: Read the HCCR register to flush any PCIe writes (Chad Dupuis) [798748 772192]
- [scsi] qla2xxx: Complete mbox cmd timeout before next reset cycle (Chad Dupuis) [798748 772192]
- [s390] qdio: wrong buffers-used counter for ERROR buffers (Hendrik Brueckner) [801724 790840]
- [net] bridge: Reset IPCB when entering IP stack (Herbert Xu) [804721 749813]
- [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770649 770650]
- [fs] procfs: parse mount options (Jerome Marchand) [770649 770650]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.4.1.el5]" date="1332972000">- [net] ipv6: fix skb double free in xfrm6_tunnel (Jiri Benc) [752305 743375] {CVE-2012-1583}</changelog>
</package>
<package pkgid="6c444d9bdf9bbc9d9933e0521490240ceec49130" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.6.1.el5]" date="1335564000">- [scsi] fc class: fix scanning when devs are offline (Mike Christie) [816684 799530]
- [md] dm-multipath: delay retry of bypassed pg (Mike Christie) [816684 799530]
- [net] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [811927 800575]
- [net] bonding: remove {master,vlan}_ip and query devices instead (Andy Gospodarek) [810321 772216]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
</package>
<package pkgid="17f5b645c086bccaa21e8df4d84d70487294f4a0" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.2.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.2.el5]" date="1338328800">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970]</changelog>
</package>
<package pkgid="0ff2693fb82c19090f94941250c9f8429f4ce213" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.1.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-347.el5]" date="1353448800">- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870151] {CVE-2012-4535}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
</package>
<package pkgid="3fbab7b4c6be813d91c6361cd513a2f670e3a8a9" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.12.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.10.1.el5]" date="1370642400">- [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955600 955601] {CVE-2013-3224}
- [net] Bluetooth: HCI &amp; L2CAP information leaks (Jacob Tanenbaum) [922415 922416] {CVE-2012-6544}
- [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [971872 872531]
- [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [971872 872531]
- [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [958021 864648]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.11.1.el5]" date="1371852000">- Revert: [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
- Revert: [x86-64] non lazy sleazy fpu implementation (Prarit Bhargava) [948187 731531]
- Revert: [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- Revert: [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- Revert: [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.12.1.el5]" date="1372716000">- Revert: [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]</changelog>
</package>
<package pkgid="eae58d97d8137262a2a9754604c832ca69badfb1" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.14.1.el5]" date="1374019200">- [net] Fix panic for vlan over gre via tun (Thomas Graf) [983452 981337]
- [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [983628 865095]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.15.1.el5]" date="1374537600">- [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [976441 853145]
- [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [976441 853145]
- [fs] nfs: define function to update nfsi-&gt;cache_change_attribute (Scott Mayhew) [976441 853145]
- [net] af_key: fix info leaks in notify messages (Jiri Benc) [980999 981000] {CVE-2013-2234}
- [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981222 981224] {CVE-2013-2237}
- [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981556 981557] {CVE-2013-2232}
- [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980141 980142] {CVE-2013-2224}
- [x86_64] Early segment setup for VT (Paolo Bonzini) [979920 978305]
- [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971245 971246] {CVE-2013-2147}
- [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973103 973104] {CVE-2013-2164}
- [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [972583 965359]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="1aa5ab874326a9b7422ad217f8aa323ea3ee33b1" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.18.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.17.1.el5]" date="1377216000">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [999819 995961]
- [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [983864 956322]
- [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [983864 956322]
- [net] be2net: disable TX in be_close() (Ivan Vecera) [983864 956322]
- [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [983864 956322]
- [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [983864 956322]
- [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [983864 956322]
- [net] be2net: Fixed memory leak (Ivan Vecera) [983864 956322]
- [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [983864 956322]
- [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [983864 956322]
- [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [983864 956322]
- [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [983864 956322]
- [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [983864 956322]
- [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [983864 956322]
- [net] be2net: Fix Endian (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [983864 956322]
- [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [983864 956322]
- [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [983864 956322]
- [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [983864 956322]
- [net] be2net: cleanup be_vid_config() (Ivan Vecera) [983864 956322]
- [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [983864 956322]
- [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [983864 956322]
- [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [983864 956322]
- [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [983864 956322]
- [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [983864 956322]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.18.1.el5]" date="1378512000">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [1005239 987539]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970874 970875] {CVE-2013-2141}
- [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987647 987648] {CVE-2013-4162}
- [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849735 849736] {CVE-2012-3511}
- [fs] autofs: remove autofs dentry mount check (Ian Kent) [1001488 928098]</changelog>
</package>
<package pkgid="c62c34c15090ec87782286db9e899852dff5ebc3" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.2.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
</package>
<package pkgid="7f3a9a5898b42a6fb9e487aaa9d38e69bd1a1a92" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.3.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
</package>
<package pkgid="cb4f02c1f472b6362dafa1a316a2f52a7c12afd6" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
</package>
<package pkgid="93e4514234fe090318b15cdf9304793a5e00a7d7" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.6.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.5.1.el5]" date="1365804000">- [fs] nfs: handle getattr failure during nfsv4 open (David Jeffery) [947736 906909]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.6.1.el5]" date="1367013600">- [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [953435 947732]
- [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [953435 947732]
- [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [954296 948317]
- [fs] nfs: Fix bugs on short read (Sachin Prabhu) [952098 924011]
- [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] introduce xzalloc() &amp; Co (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="90ac79e5f4bf883d48e8418ddd971dd032b1b448" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.1.2.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.2.el5]" date="1381190400">- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
</package>
<package pkgid="8dbb834fb2faf82aaf508ddc47d28a318c18a868" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.11.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
</package>
<package pkgid="2ae5e070337fecd89efe01c20447b34949f9a8a1" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.12.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.12.1.el5]" date="1407456000">- [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102702 1102703] {CVE-2014-3917}
- [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1125246 1080194]
- [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [1121017 924590]
- [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1116027 1081785]
- [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1117665 1102768]</changelog>
</package>
<package pkgid="d2128f0eaeb7d9136bd7df6183c52a7754f11f6b" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.3.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
</package>
<package pkgid="2623e60caa9990bf2c0e68762cd5c993aa2dd05f" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.4.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
</package>
<package pkgid="70bcb26eacdf93a71a98e9a030ee92d4f9d85ad1" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.6.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.5.1.el5]" date="1390348800">- [fs] cifs: stop trying to use virtual circuits (Sachin Prabhu) [1044328 1013469]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
</package>
<package pkgid="cf6b7649f88446a3ebe29da1241225467b134eec" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.8.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
</package>
<package pkgid="7ae0fa789068fd8d130dc1933f18d16ff749c690" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.9.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
</package>
<package pkgid="0b2dd1a3bc3615e2340aa88917cde3c0442eec81" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-369.el5]" date="1376092800">- [fs] nlm: Ensure we resend pending blocking locks after a reclaim (Steve Dickson) [918592]
- [kernel] kmod: kthread_run causes oom killer deadlock (Frantisek Hrbata) [983506]
- [fs] nfs4: ratelimit some messages, add name to bad seq-id mess (Dave Wysochanski) [953121]
- [fs] nfsd: fix EXDEV checking in rename (J. Bruce Fields) [515599]
- [misc] tty: Fix abusers of current-sighand-&gt;tty (Aaron Tomlin) [858981]
- [net] ipv6: don't call addrconf_dst_alloc again when enable lo (Jiri Benc) [981417]
- [redhat] kabi: Adding symbol fc_fabric_login (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_reset (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_els_send (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_fabric_logoff (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_set_mfs (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_elsct_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_up (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv_flogi (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_depth (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_down (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_type (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_free (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_alloc (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_config (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_disc_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol strict_strtoul (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_rport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_get_host_port_state (Jiri Olsa) [864256]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-370.el5]" date="1376956800">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [995961]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970875] {CVE-2013-2141}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
</package>
<package pkgid="5d5697a2c5b57f59915eaaeb371f48903cd84d14" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.1.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.1.1.el5]" date="1418601600">- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="fdecf0fd06678d4c12bb611e8638f9067b5d4595" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-398.el5]" date="1407888000">- [net] security_socket_post_accept before fd_install in sys_accept (Denys Vlasenko) [1059078]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
</package>
<package pkgid="ea026e02445b79ae8bcfa14b994bcdeb70b3c7f7" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="402.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-401.el5]" date="1418256000">- [net] rds: fix possible double free on sock tear down (Herton R. Krzesinski) [1116880]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="4d90cc405f510e426cd03db15ed643c3fad979f1" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="404.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-403.el5]" date="1425600000">- [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
- [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
- [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
</package>
<package pkgid="dfb02b1376682cad795858ebe6b1312b9ac42290" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="406.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-405.el5]" date="1430438400">- [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
- [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
- [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
- [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
- [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
- [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
- [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
- [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
- [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
- [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
</package>
<package pkgid="a032f1dc626335b3c602a5c9fa62e31cd08ad0f6" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="408.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
</package>
<package pkgid="298886590428d41745321e515f01a0ff63c2fc6e" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="409.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-409.el5]" date="1455321600">- [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
- [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [sched] prevent division by zero x-&gt;cpu_power (Denys Vlasenko) [1209728]
- [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}</changelog>
</package>
<package pkgid="1b341fd722886a612c0d5d625b3160ad171ea4bf" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="416.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-414.el5]" date="1474934400">- [redhat] Fix missed -413 kernel version (Alexander Gordeev)</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
</package>
<package pkgid="e16f825d184f4e86f4e9914583243537f0c7e468" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="417.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
</package>
<package pkgid="e227a08f260b6b3e276e65a80e3312d55b8da0a2" name="kernel-xen" arch="i686">
  <version epoch="0" ver="2.6.18" rel="419.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-418.el5]" date="1484352000">- [sched] prevent NULL deref in find_busiest_group (Denys Vlasenko) [1376523]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-419.el5]" date="1487808000">- [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
- [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]</changelog>
</package>
<package pkgid="d23c66ef69d6da7ec248d685c43bad3a3e67c302" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.10.1.el5]" date="1302904800">- [fs] gfs2: creating large files suddenly slow to a crawl (Robert S Peterson) [690239 683155]
- [virt] hypervisor: Overflow fix for clocks &gt; 4GHz (Zachary Amsden) [690134 673242]
- [usb] fix usbfs isochronous data transfer regression (Don Zickus) [696136 688926]
- [fs] partitions: Fix corrupted OSF partition table parsing (Danny Feng) [688022 688023] {CVE-2011-1163}
- [misc] pm: add comment explaining is_registered kabi work-around (Don Zickus) [689699 637930]
- [media] sn9c102: fix world-wirtable sysfs files (Don Howard) [679304 679305]
- [scsi] scsi_dh_rdac: Add two new IBM devices to rdac_dev_list (Rob Evers) [692370 691460]
- [fs] block: fix submit_bh discarding barrier flag on sync write (Lukas Czerner) [690795 667673]
- [net] netfilter/ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689339 689340]
- [net] netfilter: ip6_tables: fix infoleak to userspace (Jiri Pirko) [689348 689349] {CVE-2011-1172}
- [net] netfilter/ip_tables: fix infoleak to userspace (Jiri Pirko) [689331 689332] {CVE-2011-1171}
- [net] netfilter/arp_tables: fix infoleak to userspace (Jiri Pirko) [689322 689323] {CVE-2011-1170}
- [base] Fix potential deadlock in driver core (Don Zickus) [689699 637930]
- [net] forcedeth/r8169: call netif_carrier_off at end of probe (Ivan Vecera) [689808 689805 664705 664707]
- [net] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [693751 680531]
- [net] ixgbe: limit VF access to network traffic (Andy Gospodarek) [693751 680531]
- [fs] lockd: make lockd_down wait for lockd to come down (Jeff Layton) [688156 653286]
- [fs] proc: protect mm start_/end_code in /proc/pid/stat (Eugene Teo) [684570 684571] {CVE-2011-0726}
- [net] dccp: fix oops in dccp_rcv_state_process (Eugene Teo) [682955 682956] {CVE-2011-1093}
- [net] bluetooth: fix bnep buffer overflow (Don Howard) [681318 681319] {CVE-2011-1079}
- [fs] nfs: break nfsd v4 lease on unlink, link, and rename (J. Bruce Fields) [693755 610093]
- [fs] nfs: break lease on nfsd v4 setattr (J. Bruce Fields) [693755 610093]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.11.1.el5]" date="1303941600">- [s390] dasd: fix race between open and offline (Hendrik Brueckner) [699808 695357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.12.1.el5]" date="1304805600">- [x86_64] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [i386] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
- [xen] fix MAX_EVTCHNS definition (Laszlo Ersek) [701242 701240]
- [net] ixgbe: fix for link failure on SFP+ DA cables (Don Howard) [696181 653236]
- [net] netxen: limit skb frags for non tso packet (Phillip Lougher) [699609 672368]
- [block] cciss: fix lost command problem (Phillip Lougher) [696503 696153]
- [fs] gfs2: fix filesystem hang caused by incorrect lock order (Robert S Peterson) [688855 656032]
- [fs] gfs2: restructure reclaim of unlinked dinodes (Phillip Lougher) [688855 656032]
- [fs] gfs2: unlock on gfs2_trans_begin error (Robert S Peterson) [688855 656032]
- [scsi] mpt2sas: prevent heap overflows and unchecked access (Tomas Henzl) [694526 694527] {CVE-2011-1495 CVE-2011-1494}
- [net] bridge/netfilter: fix ebtables information leak (Don Howard) [681325 681326] {CVE-2011-1080}
- [net] bluetooth: fix sco information leak to userspace (Don Howard) [681310 681311] {CVE-2011-1078}
- [fs] fix corrupted GUID partition table kernel oops (Jerome Marchand) [695979 695980] {CVE-2011-1577}
- [xen] x86/domain: fix error checks in arch_set_info_guest (Laszlo Ersek) [688581 688582] {CVE-2011-1166}
- [net] bridge: fix initial packet flood if !STP (Jiri Pirko) [701222 695369]
- [fs] nfsd: fix auth_domain reference leak on nlm operations (J. Bruce Fields) [697448 589512]
- [scsi] qla2xxx: no reset/fw-dump on CT/ELS pt req timeout (Chad Dupuis) [689700 660386]
- [mm] set barrier and send tlb flush to all affected cpus (Prarit Bhargava) [696908 675793]</changelog>
</package>
<package pkgid="ae1b7546cae44ae7b113f5832878e38303fc7c8b" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="238.19.1.el5"/>
  <changelog author="Jiri Pirko &lt;jpirko@redhat.com&gt; [2.6.18-238.17.1.el5]" date="1308952800">- [net] bluetooth: l2cap and rfcomm: fix info leak to userspace (Thomas Graf) [703020 703021] {CVE-2011-2492}
- [net] inet_diag: fix inet_diag_bc_audit data validation (Thomas Graf) [714538 714539] {CVE-2011-2213}
- [misc] signal: fix kill signal spoofing issue (Oleg Nesterov) [690030 690031] {CVE-2011-1182}
- [fs] proc: fix signedness issue in next_pidmap (Oleg Nesterov) [697826 697827] {CVE-2011-1593}
- [char] agp: fix OOM and buffer overflow (Jerome Marchand) [699009 699010] {CVE-2011-1746}
- [char] agp: fix arbitrary kernel memory writes (Jerome Marchand) [699005 699006] {CVE-2011-2022 CVE-2011-1745}
- [infiniband] core: Handle large number of entries in poll CQ (Jay Fenlason) [668370 668371] {CVE-2011-1044 CVE-2010-4649}
- [infiniband] core: fix panic in ib_cm:cm_work_handler (Jay Fenlason) [679995 679996] {CVE-2011-0695}
- [fs] validate size of EFI GUID partition entries (Anton Arapov) [703027 703028] {CVE-2011-1776}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.18.1.el5]" date="1310076000">- [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]
- [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-238.19.1.el5]" date="1310335200">- Revert: [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
- Revert: [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]
- Revert: [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
- Revert: [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
- Revert: [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]</changelog>
</package>
<package pkgid="bb955326d65fe5b7d4bc203b221f7b85726a20a9" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.12.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.10.1.el5]" date="1320357600">- [net] be2net: enable NETIF_F_LLTX and add own locking of Tx path (Ivan Vecera) [750912 731806]
- [net] be2net: fix multicast filter programming (Ivan Vecera) [750912 731806]
- [net] be2net: fix cmd-rx-filter not notifying MCC (Ivan Vecera) [750912 731806]
- [net] be2net: use RX_FILTER cmd to program multicast addresses (Ivan Vecera) [750912 731806]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.11.1.el5]" date="1320616800">- [fs] gfs2: speed up large file delete/unlink (Robert S Peterson) [743806 738440]
- [fs] cifs: fix wrong buffer length returned by SendReceive (Sachin Prabhu) [750842 720363]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [virt] xen/netback: disable features not supported by netfront (Paolo Bonzini) [746600 746225]
- [fs] nfs: don't redirty inodes with no outstanding commits (Jeff Layton) [750477 739665]
- [net] tg3: call netif_carrier_off to initialize operstate value (John Feeney) [744700 635982]
- [xen] make test_assign_device domctl dependent on intremap hw (Laszlo Ersek) [745726 740203]
- [xen] Propagate target dom within XEN_DOMCTL_test_assign_device (Laszlo Ersek) [745726 740203]
- [net] sctp: encode PROTOCOL VIOLATION error cause correctly (Thomas Graf) [750457 636828]
- [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738299 738300] {CVE-2011-3363}
- [char] tpm: Zero buffer after copying to userspace (Jiri Benc) [732630 732631] {CVE-2011-1162}
- [fs] hfs: fix hfs_find_init() sb-&gt;ext_tree NULL ptr oops (Phillip Lougher) [712775 712776] {CVE-2011-2203}
- [net] sctp: Set correct error cause value for missing parameters (Thomas Graf) [750451 629938]
- [misc] kernel: plug taskstats io infoleak (Jerome Marchand) [716845 716846] {CVE-2011-2494}
- [usb] Make device reset stop retrying after disconnect (Don Zickus) [750841 709699]
- [net] ipv6: properly use ICMP6MSGOUT_INC_STATS in ndisc_send_skb (Jiri Pirko) [743611 698728]
- [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [741273 694625]
- [mm] s390: fix first time swap use results in heavy swapping (Hendrik Brueckner) [747876 722482]
- [virt] xen: fix GFP mask handling in dma_alloc_coherent (Laszlo Ersek) [742282 730247]
- [s390] kernel: fix system hang if hangcheck timer expires (Hendrik Brueckner) [747872 730313]
- [usb] fix interface sysfs file-creation bug (Don Zickus) [750848 637930]
- [usb] don't touch sysfs stuff when altsetting is unchanged (Don Zickus) [750848 637930]
- [base] Fix potential deadlock in driver core (Don Zickus) [750848 637930]
- [security] keys: Fix NULL deref in user-defined key type (David Howells) [751300 751301]
- [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.12.1.el5]" date="1320789600">- Revert: [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]</changelog>
</package>
<package pkgid="1f64eb86166c954c408d02df03411c224d16a56f" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.17.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.15.1.el5]" date="1324159200">- [net] e1000e: Avoid wrong check on TX hang (Dean Nelson) [766485 746272]
- [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749159 749160] {CVE-2011-4077}
- [pci] intel-iommu: Default to non-coherent for unattached domains (Don Dutile) [766803 753924]
- [fs] nfs: remove BUG() from encode_share_access() (Jeff Layton) [755442 754901] {CVE-2011-4324}
- [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [759387 756412]
- [fs] hfs: add sanity check for file name length (Eric Sandeen) [755432 755433] {CVE-2011-4330}
- [fs] proc: Fix select on /proc files without -&gt;poll (David Howells) [755483 751214]
- [fs] nfs: Ensure we mark inode as dirty if early exit from commit (Jeff Layton) [755482 714020]
- [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [750460 742079]
- [virt] kvm: fix regression w/ 32 bit KVM clock (Rik van Riel) [747875 753789 751742 731599]
- [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
- [fs] jbd/jbd2: validate sb-&gt;s_first in journal_get_superblock (Eryu Guan) [753343 706810] {CVE-2011-4132}
- [net] igb: enable link power down (Stefan Assmann) [752735 742514]
- [fs] proc: fix oops on invalid /proc/&lt;pid&gt;/maps access (Johannes Weiner) [747851 747699] {CVE-2011-3637}
- [block] cciss: bump driver version (Tomas Henzl) [758024 714129]
- [block] cciss: need to delay after a PCI Power Management reset (Tomas Henzl) [758024 714129]
- [block] cciss: auto engage scsi susbsystem (Tomas Henzl) [758024 714129]
- [block] cciss: store pdev in hba struct (Tomas Henzl) [758024 714129]
- [block] cciss: use consistent variable names (Tomas Henzl) [758024 714129]
- [block] cciss: add a commandline switch for simple mode (Tomas Henzl) [758024 714129]
- [fs] proc: close race with exec in mem_read() (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] implement access_remote_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] factor out main logic of access_process_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] use mm_struct to resolve gate vma's in __get_user_pages (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make in_gate_area take mm_struct instead of a task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [mm] make get_gate_vma take mm_struct instead of task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [x86_64] mark assoc mm when running task in 32 bit compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [misc] sched: add ctx tag to mm running task in ia32 compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: require the target to be tracable (or yourself) (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: close race in /proc/*/environ (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: report errors in /proc/*/*map* sanely (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] proc: shift down_read(mmap_sem) to the caller (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [fs] detect exec transition phase with new mm but old creds (Johannes Weiner) [692041 692042] {CVE-2011-1020}
- [net] igb: fix i350 SR-IOV failture (Stefan Assmann) [741877 714313]
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [755457 754620] {CVE-2011-4325}
- [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [757146 714870] {CVE-2011-4348}
- [scsi] isci: fix 32-bit operation when CONFIG_HIGHMEM64G=n (Phillip Lougher) [750458 713904]
- [net] tg3: Only allow phy ioctls while netif_running (Phillip Lougher) [746343 683393]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
</package>
<package pkgid="fd82f33749a4ecc24f615ea072284e90d0593b3a" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.18.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.16.1.el5]" date="1324418400">- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.17.1.el5]" date="1325714400">- Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.18.1.el5]" date="1327096800">- [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [771774 750283] {CVE-2012-0028}
- [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [773322 771592]
- [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
- [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747943 747946] {CVE-2011-3638}
- [scsi] don't fail scans when host is in recovery (Rob Evers) [772162 657345]
- [fs] jbd2: clear BH_Delay &amp; BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783477 783284] {CVE-2011-4086}
- [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772868 772869] {CVE-2012-0207}</changelog>
</package>
<package pkgid="b0bd2ad9022147e9efaaa1e06051e85c461a2958" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.3.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.1.1.el5]" date="1312581600">- [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [714869 714867]
- [x86_64] Revert ACPI APIC mode test (Prarit Bhargava) [728163 721361]
- [net] sctp: reset packet information after packet transmit (Thomas Graf) [727592 725573]
- [fs] block: initialise bd_super in bdget (Lachlan McIlroy) [726628 707425]
- [fs] nfs: Remove bogus call to nfs4_drop_state_owner (Jeff Layton) [726625 724923]
- [net] be2net: clear interrupt bit in be_probe (Ivan Vecera) [723552 713703]
- [net] be2net: remove certain cmd failure logging (Ivan Vecera) [726619 716821]
- [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [718154 718155] {CVE-2011-2517}
- [fs] xfs: handle NULL mount struct in error reports (Eric Sandeen) [727835 720551]
- [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716827 716828] {CVE-2011-2495}
- [fs] lockd: don't use file's credentials on RPCSEC_GSS mounts (Max Matveev) [722855 701574]
- [fs] xfs: add a missing mutex_unlock to a dio error path (Jeff Moyer) [727590 718232]
- [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [709546 709547] {CVE-2011-2491}
- [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [718883 718884]
- [xen] Fix x86_emulate handling of imul with immediate operands (Igor Mammedov) [712885 700565]
- [fs] Fix wrongly vfree'ing a kmalloc'ed area (Larry Woodman) [721300 719495]
- [fs] dlm: bump default hash table and maximum allocatable sizes (Bryn M. Reeves) [719930 715603]
- [net] tipc: Overhaul of socket locking logic (Max Matveev) [719746 704192]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.18-274.2.1.el5]" date="1313186400">- Fix up some fallout from RHEL5.7 kernel package structure changes</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.3.1.el5]" date="1314396000">- [xen] fix off-by-one shift in x86_64 __addr_ok (Laszlo Ersek) [728043 719850] {CVE-2011-2901}</changelog>
</package>
<package pkgid="6876b1da36f49f85addddde1fc8fa5578839c30a" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="274.7.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.5.1.el5]" date="1316210400">- [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [732775 675781]
- [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [732775 675781]
- [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [fs] nfs: Fix client not honoring nosharecache mount option (David Jeffery) [734772 730097]
- [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716543 716544] {CVE-2011-2496}
- [mm] Fix incorrect off-by-one centisec dirty values (Larry Woodman) [733665 691087]
- [net] bnx2x: fix bringup of BCM57710 (Michal Schmidt) [737475 680411]
- [virt] xen/netfront: no disable s/g when renegotiating features (Paolo Bonzini) [738392 733416]
- [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734157 727504]
- [virt] xen: Allow arbitrary mtu size until frontend connected (Paolo Bonzini) [738389 697021]
- [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730689 692966]
- [net] cnic, bnx2: Check iSCSI support early in bnx2_init_one (Neil Horman) [734761 710272]
- [net] igb: fix WOL on 2nd port on i350 (Stefan Assmann) [730682 718988]
- [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [728521 720212]</changelog>
  <changelog author="Don Howard &lt;dhoward@redhat.com&gt; [2.6.18-274.6.1.el5]" date="1316815200">- [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [730949 703045] {CVE-2011-2942}
- [misc] remove	div_long_long_rem (Prarit Bhargava) [732879 732614] {CVE-2011-3209}
- [net] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: Use NTWK_RX_FILTER command for promiscous mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: non-member vlan pkts not received in promisc mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: remove bogus unlikely on vlan check (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [x86] nmi: make NMI_NONE default watchdog in x86_64 hvm guests (Laszlo Ersek) [739823 707966]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-274.7.1.el5]" date="1318888800">- Revert: [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}</changelog>
</package>
<package pkgid="9e7df553389ab43023d4b43363953fc9a3dab349" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.11.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.9.1.el5]" date="1339020000">- [fs] jbd: clear b_modified before moving the jh to a different transaction (Josef Bacik) [827205 563247]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.10.1.el5]" date="1339711200">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970] {CVE-2012-2934}
- [scsi] qla2xxx: Use ha-&gt;pdev-&gt;revision in 4Gbps MSI-X check. (Chad Dupuis) [816373 800653]
- [fs] sunrpc: do array overrun check in svc_recv before page alloc (J. Bruce Fields) [820358 814626]
- [fs] knfsd: fix an NFSD bug with full size non-page-aligned reads (J. Bruce Fields) [820358 814626]
- [fs] sunrpc: fix oops due to overrunning server's page array (J. Bruce Fields) [820358 814626]
- [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [829670 817131]
- [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [824654 818787]
- [net] sunrpc: Don't use list_for_each_entry_safe in rpc_wake_up (Steve Dickson) [817571 809937]
- [s390] qeth: add missing wake_up call (Hendrik Brueckner) [829059 790900]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
</package>
<package pkgid="5ff4dfcd7df96dbde7ffb2e892d5c2516d7db7ef" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.13.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.11.1.el5]" date="1339797600">- [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
- [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
- [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.12.1.el5]" date="1342216800">- [fs] nfs: Don't allow multiple mounts on same mntpnt with -o noac (Sachin Prabhu) [839806 839753]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.13.1.el5]" date="1343340000">- [net] e1000e: Cleanup logic in e1000_check_for_serdes_link_82571 (Dean Nelson) [841370 771366]
- [net] e1000e: Correct link check logic for 82571 serdes (Dean Nelson) [841370 771366]
- [mm] NULL pointer dereference in __vm_enough_memory (Jerome Marchand) [840077 836244]
- [fs] dlm: fix slow rsb search in dir recovery (David Teigland) [838140 753244]
- [fs] autofs: propogate LOOKUP_DIRECTORY flag only for last comp (Ian Kent) [830264 814418]
- [fs] ext4: properly dirty split extent nodes (Eric Sandeen) [840946 839770]
- [scsi] don't offline devices with a reservation conflict (David Jeffery) [839196 835660]
- [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate (Lukas Czerner) [837226 830351]
- [net] dl2k: Clean up rio_ioctl (Weiping Pan) [818822 818823] {CVE-2012-2313}
- [x86] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835450 834562]
- [net] tg3: Fix TSO handling (John Feeney) [833182 795672]
- [input] evdev: use after free from open/disconnect race (David Jeffery) [832448 822166]</changelog>
</package>
<package pkgid="19be3fd66d1a07c5f5bf30ebae0b09d8ea8eb979" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.14.1.el5]" date="1346277600">- [net] e1000e: drop check of RXCW.CW to eliminate link up and down (Dean Nelson) [852448 840642]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.15.1.el5]" date="1346882400">- [net] sfc: Fix max no of TSO segments and min TX queue size (Michal Schmidt) [845554 845555] {CVE-2012-3412}
- [kernel] xacct_add_tsk: fix pure theoretical -&gt;mm use-after-free (Nikola Pajkovsky) [849723 849725] {CVE-2012-3510}
- [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820255 820256] {CVE-2012-2319}
- [net] netfilter: add dscp netfilter match (Thomas Graf) [847327 842029]
- [net] rds: set correct msg_namelen (Weiping Pan) [822727 822728] {CVE-2012-3430}
- [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [847359 693822]
- [fs] quota: manage reserved space when quota is not active (Eric Sandeen) [847326 818087]
- [fs] quota: Fix warning if delayed write before quota is enabled (Eric Sandeen) [847326 818087]
- [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]
- [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- [xen] x86: whitelist Enhanced SpeedStep for dom0 (Laszlo Ersek) [846125 809103]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.16.1.el5]" date="1348005600">- Revert: [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
- Revert: [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
- Revert: [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
- Revert: [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
- Revert: [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
- Revert: [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
- Revert: [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]</changelog>
</package>
<package pkgid="14c830b6006cf5a565cb75e18ddf4ff8837418a1" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.20.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.18.1.el5]" date="1350079200">- [fs] autofs4: Merge the remaining dentry ops tables (Ian Kent) [857558 850977]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.19.1.el5]" date="1350597600">- [net] be2net: Remove code that stops further access to BE NIC based on UE bits (Alexander Gordeev) [867896 862811]
- [net] netpoll: fix an incorrect check for NULL pointer (Alexander Gordeev) [856079 848098]
- [net] mlx4: Add support for EEH error recovery (Alexander Gordeev) [847404 798048]
- [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
- [fs] fix crash if block {device|size} read &amp; changed at sametime (Mikulas Patocka) [864823 756506]
- [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}
- [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [861387 819830]
- [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [858774 857448]
- [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [859946 858724]
- [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [857966 854067]
- [scsi] isci: fixup linkspeed definitions (David Milburn) [854986 833000]
- [fs] nfs: nfs_d_automount update caller path after do_add_mount (Carlos Maiolino) [857552 834379]
- [fs] vfs: Fix vfsmount overput on simultaneous automount (Carlos Maiolino) [857552 834379]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.20.1.el5]" date="1352239200">- Revert: [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}</changelog>
</package>
<package pkgid="420dbd7da60e2f6718600ac7d1cea7ec60809347" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.24.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.22.1.el5]" date="1353362400">- [net] bonding: fix link down handling in 802.3ad mode (Andy Gospodarek) [877943 782866]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.23.1.el5]" date="1353535200">- [net] bnx2x: Add remote-fault link detection (Alexander Gordeev) [870120 796905]
- [net] bnx2x: Cosmetic changes (Alexander Gordeev) [870120 796905]
- [net] rds-ping cause kernel panic (Alexander Gordeev) [822755 822756] {CVE-2012-2372}
- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878033 878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870148 870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870150 870151] {CVE-2012-4535}
- [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.24.1.el5]" date="1353535201">- Revert: [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]</changelog>
</package>
<package pkgid="b32ddd654ee5666e3bbed9fe3022c0478155bad3" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.2.1.el5]" date="1329861600">- [fs] nfs: nfs_fhget should wait on I_NEW instead of I_LOCK (Sachin Prabhu) [795664 785062]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.3.1.el5]" date="1332453600">- [net] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [805462 773735]
- [net] be2net: add vlan/rx-mode/flow-control config to be_setup (Ivan Vecera) [805462 773735]
- [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [805460 799170]
- [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry (Ian Kent) [801726 798809]
- [fs] vfs: fix d_instantiate_unique (Ian Kent) [801726 798809]
- [fs] nfs: allow high priority COMMITs to bypass inode commit lock (Jeff Layton) [799941 773777]
- [fs] nfs: don't skip COMMITs if system under is mem pressure (Jeff Layton) [799941 773777]
- [scsi] qla2xxx: Read the HCCR register to flush any PCIe writes (Chad Dupuis) [798748 772192]
- [scsi] qla2xxx: Complete mbox cmd timeout before next reset cycle (Chad Dupuis) [798748 772192]
- [s390] qdio: wrong buffers-used counter for ERROR buffers (Hendrik Brueckner) [801724 790840]
- [net] bridge: Reset IPCB when entering IP stack (Herbert Xu) [804721 749813]
- [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770649 770650]
- [fs] procfs: parse mount options (Jerome Marchand) [770649 770650]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.4.1.el5]" date="1332972000">- [net] ipv6: fix skb double free in xfrm6_tunnel (Jiri Benc) [752305 743375] {CVE-2012-1583}</changelog>
</package>
<package pkgid="95a16d50ee76debdab66e6d295bd0ab28236a345" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.6.1.el5]" date="1335564000">- [scsi] fc class: fix scanning when devs are offline (Mike Christie) [816684 799530]
- [md] dm-multipath: delay retry of bypassed pg (Mike Christie) [816684 799530]
- [net] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [811927 800575]
- [net] bonding: remove {master,vlan}_ip and query devices instead (Andy Gospodarek) [810321 772216]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
</package>
<package pkgid="12bed9d715e579ade5479a6fdc3134990f76a6ce" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="308.8.2.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.7.1.el5]" date="1335823200">- [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [809380 804778]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.1.el5]" date="1336168800">- [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
- [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
- [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
- [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
- [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-308.8.2.el5]" date="1338328800">- [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
- [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970]</changelog>
</package>
<package pkgid="268aefb207489e4bfaa3de0c68bbbcbcba27e0db" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.1.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-347.el5]" date="1353448800">- [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878034] {CVE-2012-5513}
- [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870149] {CVE-2012-4537}
- [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870151] {CVE-2012-4535}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
</package>
<package pkgid="a7356bbb3cd263ef6ff5601da2b4e70559ec7747" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.12.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.10.1.el5]" date="1370642400">- [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955600 955601] {CVE-2013-3224}
- [net] Bluetooth: HCI &amp; L2CAP information leaks (Jacob Tanenbaum) [922415 922416] {CVE-2012-6544}
- [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
- [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [971872 872531]
- [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [971872 872531]
- [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [958021 864648]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.11.1.el5]" date="1371852000">- Revert: [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
- Revert: [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
- Revert: [x86-64] non lazy sleazy fpu implementation (Prarit Bhargava) [948187 731531]
- Revert: [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- Revert: [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- Revert: [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.12.1.el5]" date="1372716000">- Revert: [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
- Revert: [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]</changelog>
</package>
<package pkgid="c22efd79ee17dd6292a2ceb8da071c543a5d528d" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.16.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.14.1.el5]" date="1374019200">- [net] Fix panic for vlan over gre via tun (Thomas Graf) [983452 981337]
- [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [983628 865095]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.15.1.el5]" date="1374537600">- [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [976441 853145]
- [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [976441 853145]
- [fs] nfs: define function to update nfsi-&gt;cache_change_attribute (Scott Mayhew) [976441 853145]
- [net] af_key: fix info leaks in notify messages (Jiri Benc) [980999 981000] {CVE-2013-2234}
- [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981222 981224] {CVE-2013-2237}
- [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981556 981557] {CVE-2013-2232}
- [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980141 980142] {CVE-2013-2224}
- [x86_64] Early segment setup for VT (Paolo Bonzini) [979920 978305]
- [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971245 971246] {CVE-2013-2147}
- [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973103 973104] {CVE-2013-2164}
- [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [972583 965359]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="68c12db240509c93560529e901dda3d6b7ae0ccd" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.18.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.16.1.el5]" date="1374883200">- [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
- [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
- [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.17.1.el5]" date="1377216000">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [999819 995961]
- [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [983864 956322]
- [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [983864 956322]
- [net] be2net: disable TX in be_close() (Ivan Vecera) [983864 956322]
- [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [983864 956322]
- [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [983864 956322]
- [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [983864 956322]
- [net] be2net: Fixed memory leak (Ivan Vecera) [983864 956322]
- [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [983864 956322]
- [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [983864 956322]
- [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [983864 956322]
- [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [983864 956322]
- [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [983864 956322]
- [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [983864 956322]
- [net] be2net: Fix Endian (Ivan Vecera) [983864 956322]
- [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [983864 956322]
- [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [983864 956322]
- [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [983864 956322]
- [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [983864 956322]
- [net] be2net: cleanup be_vid_config() (Ivan Vecera) [983864 956322]
- [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [983864 956322]
- [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [983864 956322]
- [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [983864 956322]
- [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [983864 956322]
- [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [983864 956322]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.18.1.el5]" date="1378512000">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [1005239 987539]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970874 970875] {CVE-2013-2141}
- [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987647 987648] {CVE-2013-4162}
- [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849735 849736] {CVE-2012-3511}
- [fs] autofs: remove autofs dentry mount check (Ian Kent) [1001488 928098]</changelog>
</package>
<package pkgid="b0a24c86a520bbfe006100a155ce92054b77261d" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.2.1.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-348.el5]" date="1354140000">- Revert: [x86] exclude iomem resource over 4G for i686 non PAE ... (Phillip Lougher) [880068]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
</package>
<package pkgid="93b5f80d136ccca1749e7f8b0123696a13304c4f" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.3.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.1.1.el5]" date="1355522400">- [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
- [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
- [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
- [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
- [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
- [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
- [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
- [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
- [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
- [fs] nfs: move wait for server-&gt;active from put_super to kill_sb (Jeff Layton) [884708 839839]
- [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
- [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
- [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
- [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
- [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
</package>
<package pkgid="37b33fa234600977995417f8374b0bea260101f6" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.4.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.2.1.el5]" date="1360274400">- [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
- [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
- [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
- [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
- [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
- [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
- [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.3.1.el5]" date="1362520800">- [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
</package>
<package pkgid="3e14400d5da574c8c24b1b7b48007a4004df34c8" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="348.6.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.4.1.el5]" date="1363989600">- [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
- [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
- [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
- [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
- [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
- [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
- [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
- [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
- [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.5.1.el5]" date="1365804000">- [fs] nfs: handle getattr failure during nfsv4 open (David Jeffery) [947736 906909]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-348.6.1.el5]" date="1367013600">- [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [953435 947732]
- [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [953435 947732]
- [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [954296 948317]
- [fs] nfs: Fix bugs on short read (Sachin Prabhu) [952098 924011]
- [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [xen] introduce xzalloc() &amp; Co (Igor Mammedov) [910912 910913] {CVE-2013-0153}
- [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
- [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
- [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]</changelog>
</package>
<package pkgid="8de5693f4cb09408ea3e7507e1861d60d69581b5" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.1.2.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.2.el5]" date="1381190400">- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
</package>
<package pkgid="401b7328efabb7b9b0cac220a651396595dc8823" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.11.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
</package>
<package pkgid="fbbd519d8cf744e3d995f029fb76e8f1edf15d40" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.12.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.10.1.el5]" date="1402617600">- [net] ipv6: fix overlap check for fragments (Francesco Fusco) [1107932 995277]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.11.1.el5]" date="1404172800">- [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
- [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
- [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ndisc: Update neigh-&gt;updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
- [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
- [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
- [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
- [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
- [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
- [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
- [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
- [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.12.1.el5]" date="1407456000">- [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102702 1102703] {CVE-2014-3917}
- [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1125246 1080194]
- [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [1121017 924590]
- [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1116027 1081785]
- [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1116027 1081785]
- [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1116027 1081785]
- [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1116027 1081785]
- [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1117665 1102768]</changelog>
</package>
<package pkgid="77c6508accf6309328272d1724a77ebbdc44822d" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.3.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.1.1.el5]" date="1380931200">- [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
- [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
- [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
- [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
</package>
<package pkgid="945632804da7cc5502c82f15e3f220fedf61b24a" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.4.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.2.1.el5]" date="1382918400">- [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
- [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
- [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
- [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.3.1.el5]" date="1384214400">- [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
- [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
- [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
- [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
</package>
<package pkgid="32a17211a54c2e01857bf3f8ff90419383b1f513" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.6.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.4.1.el5]" date="1389225600">- [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
- [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
- [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
- [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.5.1.el5]" date="1390348800">- [fs] cifs: stop trying to use virtual circuits (Sachin Prabhu) [1044328 1013469]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
</package>
<package pkgid="b60853d0b7053df0533d9a5845c57e4f60295898" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.8.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.6.1.el5]" date="1392768000">- [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
- [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
- [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
- [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
- [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
- [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
- [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
- [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
- [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
- [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
- [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
- [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
- [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
- [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] fix addr_len/msg-&gt;msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
- [net] be2net: prevent Tx stall on SH-R when packet size &lt; 32 (Ivan Vecera) [1051535 1007995]
- [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
- [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
- [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
</package>
<package pkgid="854193a5580a82d52928d5b953793c36f09d16ec" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.9.1.el5"/>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.7.1.el5]" date="1395360000">- [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.8.1.el5]" date="1396051200">- [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
- [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
- [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
- [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
- [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-371.9.1.el5]" date="1400025600">- [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
- [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
- [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
- [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
- [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
- [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
- [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
- [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}</changelog>
</package>
<package pkgid="757119add67ee75f9e37d338c336ace1dbddb985" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="371.el5"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-369.el5]" date="1376092800">- [fs] nlm: Ensure we resend pending blocking locks after a reclaim (Steve Dickson) [918592]
- [kernel] kmod: kthread_run causes oom killer deadlock (Frantisek Hrbata) [983506]
- [fs] nfs4: ratelimit some messages, add name to bad seq-id mess (Dave Wysochanski) [953121]
- [fs] nfsd: fix EXDEV checking in rename (J. Bruce Fields) [515599]
- [misc] tty: Fix abusers of current-sighand-&gt;tty (Aaron Tomlin) [858981]
- [net] ipv6: don't call addrconf_dst_alloc again when enable lo (Jiri Benc) [981417]
- [redhat] kabi: Adding symbol fc_fabric_login (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_reset (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_recv (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_els_send (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_destroy (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_fabric_logoff (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_set_mfs (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_elsct_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_up (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_recv_flogi (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_depth (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fcoe_ctlr_link_down (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_change_queue_type (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_free (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_exch_mgr_alloc (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_lport_config (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_disc_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol strict_strtoul (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_rport_init (Jiri Olsa) [864256]
- [redhat] kabi: Adding symbol fc_get_host_port_state (Jiri Olsa) [864256]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-370.el5]" date="1376956800">- [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [995961]
- [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970875] {CVE-2013-2141}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.18-371.el5]" date="1378425600">- [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [987539]</changelog>
</package>
<package pkgid="6a435d525eb5b5fd22dafc5ce3ed6ddce9439b2c" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.1.1.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.1.1.el5]" date="1418601600">- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="1f7cacfb833d0a04cc7df2d3292df49ae726477c" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="400.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-398.el5]" date="1407888000">- [net] security_socket_post_accept before fd_install in sys_accept (Denys Vlasenko) [1059078]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-399.el5]" date="1412380800">- [kernel] do_setitimer: cancel real_timer if try_to_cancel fails (Oleg Nesterov) [1134654]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
</package>
<package pkgid="20c695804ecdd8cdbb028e148b2032236b2e1243" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="402.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-400.el5]" date="1413590400">- [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
- [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
- [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
- [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-401.el5]" date="1418256000">- [net] rds: fix possible double free on sock tear down (Herton R. Krzesinski) [1116880]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
</package>
<package pkgid="47dae3bb6ddfac04eb47870f49800d78e73b4be5" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="404.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-402.el5]" date="1420761600">- [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
- [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
- [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
- [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
- [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
- [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
- [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
- [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
- [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-403.el5]" date="1425600000">- [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
- [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
- [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
</package>
<package pkgid="00f4cc3bcb5be07ab6e71d52387e7b2a4905d591" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="406.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-404.el5]" date="1425686400">- [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-405.el5]" date="1430438400">- [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
- [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
- [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
- [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
- [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
- [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
- [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
- [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
- [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
- [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
</package>
<package pkgid="50953c7f06ba6cbef2fe6b7ba1acb41f59561ff9" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="408.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-406.el5]" date="1430524800">- [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
</package>
<package pkgid="f0e29d7e165efac6d152aeae0c22887dafa3ac88" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="409.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-407.el5]" date="1445040000">- [utrace] check -&gt;utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
- [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-408.el5]" date="1449878400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
- [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-409.el5]" date="1455321600">- [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
- [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
- [sched] prevent division by zero x-&gt;cpu_power (Denys Vlasenko) [1209728]
- [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}</changelog>
</package>
<package pkgid="50263f8c34e9ccfd3bd0e5d23748a040810f0aa9" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="416.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-414.el5]" date="1474934400">- [redhat] Fix missed -413 kernel version (Alexander Gordeev)</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
</package>
<package pkgid="5507b060567e79f8fab7c54a80d5a08c70e74b33" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="417.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-415.el5]" date="1476144000">- [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
- [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
- Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-416.el5]" date="1477526400">- [mm] Fix Privilege escalation via MAP_PRIVATE (Larry Woodman) [1385112] {CVE-2016-5195}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
</package>
<package pkgid="f982482b796b8145bbefd3a92355f3ee167bcca4" name="kernel-xen-devel" arch="i686">
  <version epoch="0" ver="2.6.18" rel="419.el5"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [2.6.18-417.el5]" date="1479600000">- [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-418.el5]" date="1484352000">- [sched] prevent NULL deref in find_busiest_group (Denys Vlasenko) [1376523]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [2.6.18-419.el5]" date="1487808000">- [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
- [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]</changelog>
</package>
<package pkgid="f7f0c3b27be18cbdff0f172768fbe041380fe6a8" name="kexec-tools" arch="i386">
  <version epoch="0" ver="1.102pre" rel="154.el5"/>
  <changelog author="Amerigo Wang &lt;amwang@redhat.com&gt; - 1.102pre-152" date="1326146400">- Replace sed with awk in interface-mapping code,
  resolve bug 765702.</changelog>
  <changelog author="Amerigo Wang &lt;amwang@redhat.com&gt; - 1.102pre-153" date="1326837600">- Avoid recursive directory deletion when unmount failed, from Cai Qian.
  Resolve bug 781907.</changelog>
  <changelog author="Amerigo Wang &lt;amwang@redhat.com&gt; - 1.102pre-154" date="1327096800">- Add xfs support, resolve bug 668706.</changelog>
</package>
<package pkgid="0b271038a3ffe592b3391bea46aa2e95918e99c3" name="krb5-devel" arch="i386">
  <version epoch="0" ver="1.6.1" rel="63.el5_7"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-61.el5_7" date="1305064800">- rebuild</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-62.el5_7" date="1308348000">- incorporate a fix to teach the file labeling bits about when replay caches
  are expunged (#712453)</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 1.6.1-63.el5_7" date="1325023200">- Fix for CVE-2011-4862</changelog>
</package>
<package pkgid="b1a5851bb55b4a7c5bc2e24b1f041f47c0ed14ce" name="krb5-devel" arch="i386">
  <version epoch="0" ver="1.6.1" rel="70.el5"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-68.el5" date="1319061600">- backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
  to talk to a KDC by using poll() if it's detected at compile-time, revised
  (#701444, RT#6905)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-69.el5" date="1320271200">- ftp: fix a static analysis should-never-happen NULL dereference (#750823)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325023200">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog>
</package>
<package pkgid="a22af31a0d555fdeb5336228fe48c927cf91839c" name="krb5-devel" arch="i386">
  <version epoch="0" ver="1.6.1" rel="70.el5_9.2"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325023200">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5_9.1" date="1370037600">- add backported fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5_9.2" date="1370469600">- rebuild, correcting changelog version/release identifiers</changelog>
</package>
<package pkgid="b4386a9a49a742615043b1db1ee12ae1f7d7113f" name="krb5-devel" arch="i386">
  <version epoch="0" ver="1.6.1" rel="78.el5"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-76.el5" date="1406160000">- run the backported self-tests, such as they are, for CVE-2014-4341</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-77.el5" date="1406592000">- fix what appears to be a cosmetic error in the patch for self-tests
  for CVE-2014-4341</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592001">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog>
</package>
<package pkgid="e64a3acd558a89afef9cebf50374cd2f6d64e547" name="krb5-devel" arch="i386">
  <version epoch="0" ver="1.6.1" rel="80.el5_11"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592000">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-79.el5" date="1408752000">- incorporate fix for MITKRB5-SA-2014-001 (CVE-2014-4345, #1132785)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-80.el5" date="1409270400">- rebuild</changelog>
</package>
<package pkgid="1949a3e472aed71a22d529fbb8c9fadad58849e0" name="krb5-fermi-config" arch="noarch">
  <version epoch="0" ver="4.7" rel="1"/>
  <changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.5-2" date="1349136000">- Update version number in config-krb5.conf script</changelog>
  <changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.6-1" date="1357344000">- Update krb5.conf to v4.6 updating list of Accelerator Division servers
- Fixed bug in make-cron-keytab so it will take error exit if run
- in shared account via ksu rather than ssh into the account.</changelog>
  <changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.7-1" date="1372809600">- Update krb5.conf to v4.7 changing KDC search order to
- put the FCC3 Slave KDC first by default</changelog>
</package>
<package pkgid="9fad47e79620437af86a9b07d12c437a662fdafa" name="krb5-fermi-config" arch="noarch">
  <version epoch="0" ver="4.8" rel="1"/>
  <changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.6-1" date="1357344000">- Update krb5.conf to v4.6 updating list of Accelerator Division servers
- Fixed bug in make-cron-keytab so it will take error exit if run
- in shared account via ksu rather than ssh into the account.</changelog>
  <changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.7-1" date="1372809600">- Update krb5.conf to v4.7 changing KDC search order to
- put the FCC3 Slave KDC first by default</changelog>
  <changelog author="Olga Terlyga &lt;terlyga@fnal.gov&gt; 4.8-1" date="1401926400">- Update  krb5.conf to v4.8 adding kdc to PILOT realm
- Added i-krb-22 and added pilot KDCs t domain-realm section</changelog>
</package>
<package pkgid="ecdb7f4383076d92b3a17e5285cf1b08f1a4489c" name="krb5-fermi-krb5.conf" arch="noarch">
  <version epoch="0" ver="4.7" rel="1"/>
  <changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.5-1" date="1349136000">- Added Nova Far Detector KDC to search list, edit and re-format
- SysAdmin HowTo instructions for a local KDC search list and
- set so krb5-fermi-config and krb5-fermi-krb5.conf conflict with
- each other so only one gets installed</changelog>
  <changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.6-1" date="1357344000">- Update krb5.conf to v4.6 updating list of Accelerator Division servers
- Fixed bug in make-cron-keytab so it will take error exit if run
- in shared account via ksu rather than ssh into the account.</changelog>
  <changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.7-1" date="1372809600">- Update krb5.conf to v4.7 changing KDC search order to
- put the FCC3 Slave KDC first by default</changelog>
</package>
<package pkgid="3e7abb679a0fb23ef235445ba04e507ee42f60d0" name="krb5-fermi-krb5.conf" arch="noarch">
  <version epoch="0" ver="4.8" rel="1"/>
  <changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.6-1" date="1357344000">- Update krb5.conf to v4.6 updating list of Accelerator Division servers
- Fixed bug in make-cron-keytab so it will take error exit if run
- in shared account via ksu rather than ssh into the account.</changelog>
  <changelog author="Frank Nagy &lt;nagy@fnal.gov&gt; 4.7-1" date="1372809600">- Update krb5.conf to v4.7 changing KDC search order to
- put the FCC3 Slave KDC first by default</changelog>
  <changelog author="Olga Terlyga &lt;terlyga@fnal.gov&gt; 4.8-1" date="1401926400">- Update  krb5.conf to v4.8 adding kdc to PILOT realm 
- Added i-krb-22 and added pilot KDCs t domain-realm section</changelog>
</package>
<package pkgid="d876fa8d497b59d6cbb09f27d56f62bf51ad94e4" name="krb5-libs" arch="i386">
  <version epoch="0" ver="1.6.1" rel="63.el5_7"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-61.el5_7" date="1305064800">- rebuild</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-62.el5_7" date="1308348000">- incorporate a fix to teach the file labeling bits about when replay caches
  are expunged (#712453)</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 1.6.1-63.el5_7" date="1325023200">- Fix for CVE-2011-4862</changelog>
</package>
<package pkgid="12e3b106815c87885a2390907e9ce104093e63a6" name="krb5-libs" arch="i386">
  <version epoch="0" ver="1.6.1" rel="70.el5"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-68.el5" date="1319061600">- backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
  to talk to a KDC by using poll() if it's detected at compile-time, revised
  (#701444, RT#6905)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-69.el5" date="1320271200">- ftp: fix a static analysis should-never-happen NULL dereference (#750823)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325023200">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog>
</package>
<package pkgid="7e0e9f28d2539d0de175e370438054d4c4763703" name="krb5-libs" arch="i386">
  <version epoch="0" ver="1.6.1" rel="70.el5_9.2"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325023200">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5_9.1" date="1370037600">- add backported fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5_9.2" date="1370469600">- rebuild, correcting changelog version/release identifiers</changelog>
</package>
<package pkgid="6efd391ee814079e9493ce531d62564fc6996776" name="krb5-libs" arch="i386">
  <version epoch="0" ver="1.6.1" rel="78.el5"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-76.el5" date="1406160000">- run the backported self-tests, such as they are, for CVE-2014-4341</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-77.el5" date="1406592000">- fix what appears to be a cosmetic error in the patch for self-tests
  for CVE-2014-4341</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592001">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog>
</package>
<package pkgid="964d7af1888530ed0895e5903e74550784f88789" name="krb5-libs" arch="i386">
  <version epoch="0" ver="1.6.1" rel="80.el5_11"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592000">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-79.el5" date="1408752000">- incorporate fix for MITKRB5-SA-2014-001 (CVE-2014-4345, #1132785)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-80.el5" date="1409270400">- rebuild</changelog>
</package>
<package pkgid="ec0b7c0d1907406de01cae51d96cbc06fad6c33a" name="krb5-server" arch="i386">
  <version epoch="0" ver="1.6.1" rel="63.el5_7"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-61.el5_7" date="1305064800">- rebuild</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-62.el5_7" date="1308348000">- incorporate a fix to teach the file labeling bits about when replay caches
  are expunged (#712453)</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 1.6.1-63.el5_7" date="1325023200">- Fix for CVE-2011-4862</changelog>
</package>
<package pkgid="cb1b262ea56867beab33b3280838ff65fb9cca66" name="krb5-server" arch="i386">
  <version epoch="0" ver="1.6.1" rel="70.el5"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-68.el5" date="1319061600">- backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
  to talk to a KDC by using poll() if it's detected at compile-time, revised
  (#701444, RT#6905)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-69.el5" date="1320271200">- ftp: fix a static analysis should-never-happen NULL dereference (#750823)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325023200">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog>
</package>
<package pkgid="9510128e35cad5e3552e248b2530c148561c4e71" name="krb5-server" arch="i386">
  <version epoch="0" ver="1.6.1" rel="70.el5_9.2"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325023200">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5_9.1" date="1370037600">- add backported fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5_9.2" date="1370469600">- rebuild, correcting changelog version/release identifiers</changelog>
</package>
<package pkgid="70339a487a65bb2aa2fb4d739e67ee71ebdf1652" name="krb5-server" arch="i386">
  <version epoch="0" ver="1.6.1" rel="78.el5"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-76.el5" date="1406160000">- run the backported self-tests, such as they are, for CVE-2014-4341</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-77.el5" date="1406592000">- fix what appears to be a cosmetic error in the patch for self-tests
  for CVE-2014-4341</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592001">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog>
</package>
<package pkgid="fe5be8e7058445f7e497215a831ba5c5f314e25e" name="krb5-server" arch="i386">
  <version epoch="0" ver="1.6.1" rel="80.el5_11"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592000">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-79.el5" date="1408752000">- incorporate fix for MITKRB5-SA-2014-001 (CVE-2014-4345, #1132785)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-80.el5" date="1409270400">- rebuild</changelog>
</package>
<package pkgid="78b86242237ad51f5e33dd28555bf3f7c8724d21" name="krb5-server-ldap" arch="i386">
  <version epoch="0" ver="1.6.1" rel="63.el5_7"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-61.el5_7" date="1305064800">- rebuild</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-62.el5_7" date="1308348000">- incorporate a fix to teach the file labeling bits about when replay caches
  are expunged (#712453)</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 1.6.1-63.el5_7" date="1325023200">- Fix for CVE-2011-4862</changelog>
</package>
<package pkgid="27362b37b47c51cb29c7b1fff274dccbc5bc1466" name="krb5-server-ldap" arch="i386">
  <version epoch="0" ver="1.6.1" rel="70.el5"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-68.el5" date="1319061600">- backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
  to talk to a KDC by using poll() if it's detected at compile-time, revised
  (#701444, RT#6905)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-69.el5" date="1320271200">- ftp: fix a static analysis should-never-happen NULL dereference (#750823)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325023200">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog>
</package>
<package pkgid="13daaa004860c322ddb5f4d9f2aadbe7319d34e4" name="krb5-server-ldap" arch="i386">
  <version epoch="0" ver="1.6.1" rel="70.el5_9.2"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325023200">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5_9.1" date="1370037600">- add backported fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5_9.2" date="1370469600">- rebuild, correcting changelog version/release identifiers</changelog>
</package>
<package pkgid="b65e6a5a30d543812df2d6e787c9481783d82785" name="krb5-server-ldap" arch="i386">
  <version epoch="0" ver="1.6.1" rel="78.el5"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-76.el5" date="1406160000">- run the backported self-tests, such as they are, for CVE-2014-4341</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-77.el5" date="1406592000">- fix what appears to be a cosmetic error in the patch for self-tests
  for CVE-2014-4341</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592001">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog>
</package>
<package pkgid="a9d5892f5f9b460ea173f0ee6479110ef2f37f30" name="krb5-server-ldap" arch="i386">
  <version epoch="0" ver="1.6.1" rel="80.el5_11"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592000">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-79.el5" date="1408752000">- incorporate fix for MITKRB5-SA-2014-001 (CVE-2014-4345, #1132785)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-80.el5" date="1409270400">- rebuild</changelog>
</package>
<package pkgid="357eea1e6e3de848bcd73740e09edb3e3caf62c3" name="krb5-workstation" arch="i386">
  <version epoch="0" ver="1.6.1" rel="63.el5_7"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-61.el5_7" date="1305064800">- rebuild</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-62.el5_7" date="1308348000">- incorporate a fix to teach the file labeling bits about when replay caches
  are expunged (#712453)</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 1.6.1-63.el5_7" date="1325023200">- Fix for CVE-2011-4862</changelog>
</package>
<package pkgid="1e2ba65ee0944aef11d81ea3c78b12a0c45398b0" name="krb5-workstation" arch="i386">
  <version epoch="0" ver="1.6.1" rel="70.el5"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-68.el5" date="1319061600">- backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
  to talk to a KDC by using poll() if it's detected at compile-time, revised
  (#701444, RT#6905)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-69.el5" date="1320271200">- ftp: fix a static analysis should-never-happen NULL dereference (#750823)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325023200">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog>
</package>
<package pkgid="610de6d4abafae8b2e6a2c8c30eab0e912e70f73" name="krb5-workstation" arch="i386">
  <version epoch="0" ver="1.6.1" rel="70.el5_9.2"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5" date="1325023200">- add upstream patch for telnetd buffer overflow (CVE-2011-4862, #770351)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5_9.1" date="1370037600">- add backported fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-70.el5_9.2" date="1370469600">- rebuild, correcting changelog version/release identifiers</changelog>
</package>
<package pkgid="8e7588198344e61c5d5d0072a658b583905b3b25" name="krb5-workstation" arch="i386">
  <version epoch="0" ver="1.6.1" rel="78.el5"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-76.el5" date="1406160000">- run the backported self-tests, such as they are, for CVE-2014-4341</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-77.el5" date="1406592000">- fix what appears to be a cosmetic error in the patch for self-tests
  for CVE-2014-4341</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592001">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog>
</package>
<package pkgid="46520b6b03b2a02d8bf1e903013cad4b1e4ca04c" name="krb5-workstation" arch="i386">
  <version epoch="0" ver="1.6.1" rel="80.el5_11"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-78.el5" date="1406592000">- gssapi: pull in upstream fix for a possible NULL dereference in spnego
  (CVE-2014-4344, #1121509)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-79.el5" date="1408752000">- incorporate fix for MITKRB5-SA-2014-001 (CVE-2014-4345, #1132785)</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.6.1-80.el5" date="1409270400">- rebuild</changelog>
</package>
<package pkgid="dd63e60f1cb7c02d5ffb853ecf7f17165fe325f8" name="libXfont" arch="i386">
  <version epoch="0" ver="1.2.2" rel="1.0.4.el5_7"/>
  <changelog author="Soren Sandmann &lt;sandmann@redhat.com&gt; 1.2.2-1.0.2.el5" date="1174946400">- Rebuild because of forgotten changelog entry.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.2-1.0.3" date="1200348000">- cve-2008-0006.patch: XFS Integer Overflow Vulnerability</changelog>
  <changelog author="Soren Sandmann &lt;sandmann@redhat.com&gt; 1.2.2-1.0.4.el5" date="1312927200">- cve-2011-2895.patch: LZW decompression heap corruption</changelog>
</package>
<package pkgid="fd90cf1dfd5099047af700176055e380d68053a4" name="libXfont" arch="i386">
  <version epoch="0" ver="1.2.2" rel="1.0.5.el5_10"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.2-1.0.3" date="1200355200">- cve-2008-0006.patch: XFS Integer Overflow Vulnerability</changelog>
  <changelog author="Soren Sandmann &lt;sandmann@redhat.com&gt; 1.2.2-1.0.4.el5" date="1312934400">- cve-2011-2895.patch: LZW decompression heap corruption</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.2.2-1.0.5.el5" date="1389225600">- cve-2013-6462.patch: sscanf overflow (bug 1049684)
- sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)</changelog>
</package>
<package pkgid="4d40f01f0c29210651a1ca541a216e9364b6689c" name="libXfont" arch="i386">
  <version epoch="0" ver="1.2.2" rel="1.0.6.el5_11"/>
  <changelog author="Soren Sandmann &lt;sandmann@redhat.com&gt; 1.2.2-1.0.4.el5" date="1312934400">- cve-2011-2895.patch: LZW decompression heap corruption</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.2.2-1.0.5.el5" date="1389225600">- cve-2013-6462.patch: sscanf overflow (bug 1049684)
- sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)</changelog>
  <changelog author="Benjamin Tissoires &lt;btissoir@redhat.com&gt; 1.2.2-1.0.6" date="1416441600">- CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
- CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
- CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)</changelog>
</package>
<package pkgid="b799b0b4c0fdc76cac469e91e9bdf3beede50987" name="libXfont-devel" arch="i386">
  <version epoch="0" ver="1.2.2" rel="1.0.4.el5_7"/>
  <changelog author="Soren Sandmann &lt;sandmann@redhat.com&gt; 1.2.2-1.0.2.el5" date="1174946400">- Rebuild because of forgotten changelog entry.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.2-1.0.3" date="1200348000">- cve-2008-0006.patch: XFS Integer Overflow Vulnerability</changelog>
  <changelog author="Soren Sandmann &lt;sandmann@redhat.com&gt; 1.2.2-1.0.4.el5" date="1312927200">- cve-2011-2895.patch: LZW decompression heap corruption</changelog>
</package>
<package pkgid="86aacba2aa3d14e73eebb08347eeaa702678fffb" name="libXfont-devel" arch="i386">
  <version epoch="0" ver="1.2.2" rel="1.0.5.el5_10"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.2-1.0.3" date="1200355200">- cve-2008-0006.patch: XFS Integer Overflow Vulnerability</changelog>
  <changelog author="Soren Sandmann &lt;sandmann@redhat.com&gt; 1.2.2-1.0.4.el5" date="1312934400">- cve-2011-2895.patch: LZW decompression heap corruption</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.2.2-1.0.5.el5" date="1389225600">- cve-2013-6462.patch: sscanf overflow (bug 1049684)
- sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)</changelog>
</package>
<package pkgid="43f8c0c08a49a87902721d0db2da2fddba16ac0f" name="libXfont-devel" arch="i386">
  <version epoch="0" ver="1.2.2" rel="1.0.6.el5_11"/>
  <changelog author="Soren Sandmann &lt;sandmann@redhat.com&gt; 1.2.2-1.0.4.el5" date="1312934400">- cve-2011-2895.patch: LZW decompression heap corruption</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.2.2-1.0.5.el5" date="1389225600">- cve-2013-6462.patch: sscanf overflow (bug 1049684)
- sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)</changelog>
  <changelog author="Benjamin Tissoires &lt;btissoir@redhat.com&gt; 1.2.2-1.0.6" date="1416441600">- CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
- CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
- CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)</changelog>
</package>
<package pkgid="9ef8d6140a6445e60cc926578ce2073fafc2f407" name="libatomic" arch="i386">
  <version epoch="0" ver="4.8.0" rel="5.1.1.el5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.0-3.1.1" date="1367539200">- new package</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.0-5.1.1" date="1369872000">- update from DTS gcc-4.8.0-5
- build libitm even for s390{,x}</changelog>
</package>
<package pkgid="29137a1088c44a4ffcdf2db7365f8cc172fc01ee" name="libcollection" arch="i386">
  <version epoch="0" ver="0.6.0" rel="10.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-3" date="1287180000">- New upstream release 0.1.2
- Fixes a serious issue with libdhash where hash_enter() would never update
- existing entries for a key.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-6" date="1297116000">- Resolves: rhbz#665312 - Add ding-libs to RHEL5.7</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-10" date="1297807200">- Resolves: rhbz#677753 - ding-libs developer docs on RHEL 5 are not
-                         multilib-clean
- Removed API documentation from packages</changelog>
</package>
<package pkgid="f66d315b2fb04b4a9104a57d5ae16140c3855d5d" name="libcollection-devel" arch="i386">
  <version epoch="0" ver="0.6.0" rel="10.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-3" date="1287180000">- New upstream release 0.1.2
- Fixes a serious issue with libdhash where hash_enter() would never update
- existing entries for a key.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-6" date="1297116000">- Resolves: rhbz#665312 - Add ding-libs to RHEL5.7</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-10" date="1297807200">- Resolves: rhbz#677753 - ding-libs developer docs on RHEL 5 are not
-                         multilib-clean
- Removed API documentation from packages</changelog>
</package>
<package pkgid="15ba83e3d5a7d90a0ada134a5f78ffc189601370" name="libdhash" arch="i386">
  <version epoch="0" ver="0.4.2" rel="10.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-3" date="1287180000">- New upstream release 0.1.2
- Fixes a serious issue with libdhash where hash_enter() would never update
- existing entries for a key.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-6" date="1297116000">- Resolves: rhbz#665312 - Add ding-libs to RHEL5.7</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-10" date="1297807200">- Resolves: rhbz#677753 - ding-libs developer docs on RHEL 5 are not
-                         multilib-clean
- Removed API documentation from packages</changelog>
</package>
<package pkgid="75918338e0395957d42f1bd1a73f33e92f48929f" name="libdhash-devel" arch="i386">
  <version epoch="0" ver="0.4.2" rel="10.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-3" date="1287180000">- New upstream release 0.1.2
- Fixes a serious issue with libdhash where hash_enter() would never update
- existing entries for a key.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-6" date="1297116000">- Resolves: rhbz#665312 - Add ding-libs to RHEL5.7</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-10" date="1297807200">- Resolves: rhbz#677753 - ding-libs developer docs on RHEL 5 are not
-                         multilib-clean
- Removed API documentation from packages</changelog>
</package>
<package pkgid="4d60c61a75fa1d54aeeea59a62434c2521cfa467" name="libdhcp4client" arch="i386">
  <version epoch="12" ver="3.0.5" rel="29.el5_7.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-28" date="1302213600">- Better fix for CVE-2011-0997: making domain-name check more lenient (RHBZ #690577)
- dhclient requests interface-mtu option by default (RHBZ #694264)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-29" date="1302300000">- dhclient.conf(5), dhclient(8) mention that interface-mtu option
  is also requested by default (RHBZ #694264)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-29.1" date="1313100000">- A pair of defects cause the server to halt upon processing certain packets
  (CVE-2011-2748, CVE-2011-2749, #729880)</changelog>
</package>
<package pkgid="6cacbe17900598e32394da0d2f9f1206c7a96a6c" name="libdhcp4client" arch="i386">
  <version epoch="12" ver="3.0.5" rel="31.el5_8.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-30" date="1313100000">- A pair of defects cause the server to halt upon processing certain packets
  (CVE-2011-2748, CVE-2011-2749, #729881)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-31" date="1315951200">- Propagate libdhcp timeout to internal timeout_arg (RHBZ #736515)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-31.1" date="1343340000">- An error in the handling of malformed client identifiers can
  cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843124)</changelog>
</package>
<package pkgid="a32471f983abe81b8e17e9a5ae81a9e62dd7df3e" name="libdhcp4client-devel" arch="i386">
  <version epoch="12" ver="3.0.5" rel="29.el5_7.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-28" date="1302213600">- Better fix for CVE-2011-0997: making domain-name check more lenient (RHBZ #690577)
- dhclient requests interface-mtu option by default (RHBZ #694264)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-29" date="1302300000">- dhclient.conf(5), dhclient(8) mention that interface-mtu option
  is also requested by default (RHBZ #694264)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-29.1" date="1313100000">- A pair of defects cause the server to halt upon processing certain packets
  (CVE-2011-2748, CVE-2011-2749, #729880)</changelog>
</package>
<package pkgid="f7a34996867426a61bfe517f783ad5c2b7badb67" name="libdhcp4client-devel" arch="i386">
  <version epoch="12" ver="3.0.5" rel="31.el5_8.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-30" date="1313100000">- A pair of defects cause the server to halt upon processing certain packets
  (CVE-2011-2748, CVE-2011-2749, #729881)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-31" date="1315951200">- Propagate libdhcp timeout to internal timeout_arg (RHBZ #736515)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:3.0.5-31.1" date="1343340000">- An error in the handling of malformed client identifiers can
  cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843124)</changelog>
</package>
<package pkgid="1ffc88a3d0140ecca2ead4ecaa0a5d61f151c4b2" name="libexif" arch="i386">
  <version epoch="0" ver="0.6.21" rel="1.el5_8"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 0.6.13-6" date="1181772000">- Fix another segfault.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 0.6.13-7" date="1197756000">- Add patch for CVE-2007-6351. Fixes bug #425681
- Add patch for CVE-2007-6352. Fixes bug #425681</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.21-1" date="1346968800">- Update to version 0.6.21 fixing many bugs and CVEs
- Remove upstreamed patches
- Resolves: #839913</changelog>
</package>
<package pkgid="4fc7605b4a24e3a77f0b914d9d59bb8fbbc3eb70" name="libexif-devel" arch="i386">
  <version epoch="0" ver="0.6.21" rel="1.el5_8"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 0.6.13-6" date="1181772000">- Fix another segfault.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 0.6.13-7" date="1197756000">- Add patch for CVE-2007-6351. Fixes bug #425681
- Add patch for CVE-2007-6352. Fixes bug #425681</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.21-1" date="1346968800">- Update to version 0.6.21 fixing many bugs and CVEs
- Remove upstreamed patches
- Resolves: #839913</changelog>
</package>
<package pkgid="6d9406bdd34165a59e6f6a4cf751d79d0fcc2258" name="libgcrypt" arch="i386">
  <version epoch="0" ver="1.4.4" rel="7.el5_10"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.4-5" date="1239148800">- revert move of libraries to /lib(64)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.4-6" date="1333670400">- Add GCRYCTL_SET_ENFORCED_FIPS_FLAG command</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.4-7" date="1381449600">- fix CVE-2013-4242 GnuPG/libgcrypt susceptible to cache side-channel attack</changelog>
</package>
<package pkgid="416090774510914623898a3bd6d1a8241c49e5e3" name="libgcrypt-devel" arch="i386">
  <version epoch="0" ver="1.4.4" rel="7.el5_10"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.4-5" date="1239148800">- revert move of libraries to /lib(64)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.4-6" date="1333670400">- Add GCRYCTL_SET_ENFORCED_FIPS_FLAG command</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.4-7" date="1381449600">- fix CVE-2013-4242 GnuPG/libgcrypt susceptible to cache side-channel attack</changelog>
</package>
<package pkgid="85f8612e68d0c39bff766ed4db3fc150ddd1152b" name="libicu" arch="i386">
  <version epoch="0" ver="3.6" rel="5.16.1"/>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.6-5.15" date="1244844000">- Resolves: rhbz#505160 CVE-2009-0153, guarantee abi</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.6-5.16" date="1290463200">- Resolves: rhbz#654590 AVC fail on ppc64
- Resolves: rhbz#457656 Kartika.ttf crashes icu</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.6-5.16.1" date="1323727200">- Resolves: rhbz#766537 CVE-2011-4599 localeID overflow</changelog>
</package>
<package pkgid="d13a0c7e3e1c6094058fd4c7fae3594ad7024919" name="libicu-devel" arch="i386">
  <version epoch="0" ver="3.6" rel="5.16.1"/>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.6-5.15" date="1244844000">- Resolves: rhbz#505160 CVE-2009-0153, guarantee abi</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.6-5.16" date="1290463200">- Resolves: rhbz#654590 AVC fail on ppc64
- Resolves: rhbz#457656 Kartika.ttf crashes icu</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.6-5.16.1" date="1323727200">- Resolves: rhbz#766537 CVE-2011-4599 localeID overflow</changelog>
</package>
<package pkgid="19f070b16dbdddf595ad40d4ca7edd6db6a8d717" name="libicu-doc" arch="i386">
  <version epoch="0" ver="3.6" rel="5.16.1"/>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.6-5.15" date="1244844000">- Resolves: rhbz#505160 CVE-2009-0153, guarantee abi</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.6-5.16" date="1290463200">- Resolves: rhbz#654590 AVC fail on ppc64
- Resolves: rhbz#457656 Kartika.ttf crashes icu</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.6-5.16.1" date="1323727200">- Resolves: rhbz#766537 CVE-2011-4599 localeID overflow</changelog>
</package>
<package pkgid="c0af40ea33a4db543ad3eb248c5bc97478a418f3" name="libini_config" arch="i386">
  <version epoch="0" ver="0.6.1" rel="10.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-3" date="1287180000">- New upstream release 0.1.2
- Fixes a serious issue with libdhash where hash_enter() would never update
- existing entries for a key.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-6" date="1297116000">- Resolves: rhbz#665312 - Add ding-libs to RHEL5.7</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-10" date="1297807200">- Resolves: rhbz#677753 - ding-libs developer docs on RHEL 5 are not
-                         multilib-clean
- Removed API documentation from packages</changelog>
</package>
<package pkgid="7537aa7996f05435d31c56c2cc8924937b757477" name="libini_config-devel" arch="i386">
  <version epoch="0" ver="0.6.1" rel="10.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-3" date="1287180000">- New upstream release 0.1.2
- Fixes a serious issue with libdhash where hash_enter() would never update
- existing entries for a key.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-6" date="1297116000">- Resolves: rhbz#665312 - Add ding-libs to RHEL5.7</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-10" date="1297807200">- Resolves: rhbz#677753 - ding-libs developer docs on RHEL 5 are not
-                         multilib-clean
- Removed API documentation from packages</changelog>
</package>
<package pkgid="ca35876ba61f6c285626a77478862305097f58ff" name="libipa_hbac" arch="i386">
  <version epoch="0" ver="1.5.1" rel="58.el5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-56" date="1343944800">- Require libgssapiv2.so to pull in cyrus-sasl-gssapi
- Resolves: rhbz#786443</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-57" date="1345240800">- Process all groups from a single nesting level
- Resolves: rhbz#846664
- Backport the option to disable srchost processing
- Resolves: rhbz#841677</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-58" date="1345672800">- Initialize hbac_ctx to NULL
- Resolves: rhbz#850722</changelog>
</package>
<package pkgid="3332059fa3f3a84fc24a5ad4a5a3c7605bffe747" name="libipa_hbac" arch="i386">
  <version epoch="0" ver="1.5.1" rel="70.el5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-68" date="1368748800">- Add a forgotten break in a switch statement
- Related: rhbz#886165 - sssd will stop functioning correctly if sssd_be
                         hangs for a while</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-69" date="1372204800">- Fix startup with a broken configuration
- Resolves: rhbz#974036 - sssd core process keeps running after backends quit</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-70" date="1372377600">- Fix IPA provider performance issue when storing large host groups
- Resolves: rhbz#979047 - sssd_be goes to 99% CPU and causes significant
                          login delays when client is under load</changelog>
</package>
<package pkgid="b90c9ea54926669ae869897a360337662086acd2" name="libipa_hbac-devel" arch="i386">
  <version epoch="0" ver="1.5.1" rel="58.el5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-56" date="1343944800">- Require libgssapiv2.so to pull in cyrus-sasl-gssapi
- Resolves: rhbz#786443</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-57" date="1345240800">- Process all groups from a single nesting level
- Resolves: rhbz#846664
- Backport the option to disable srchost processing
- Resolves: rhbz#841677</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-58" date="1345672800">- Initialize hbac_ctx to NULL
- Resolves: rhbz#850722</changelog>
</package>
<package pkgid="cd2e3b347528bf517cf88193096d140ed42eb834" name="libipa_hbac-devel" arch="i386">
  <version epoch="0" ver="1.5.1" rel="70.el5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-68" date="1368748800">- Add a forgotten break in a switch statement
- Related: rhbz#886165 - sssd will stop functioning correctly if sssd_be
                         hangs for a while</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-69" date="1372204800">- Fix startup with a broken configuration
- Resolves: rhbz#974036 - sssd core process keeps running after backends quit</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-70" date="1372377600">- Fix IPA provider performance issue when storing large host groups
- Resolves: rhbz#979047 - sssd_be goes to 99% CPU and causes significant
                          login delays when client is under load</changelog>
</package>
<package pkgid="62c47b142f1fa6e13643cbd7e7ab55522b832a9e" name="libipa_hbac-python" arch="i386">
  <version epoch="0" ver="1.5.1" rel="58.el5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-56" date="1343944800">- Require libgssapiv2.so to pull in cyrus-sasl-gssapi
- Resolves: rhbz#786443</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-57" date="1345240800">- Process all groups from a single nesting level
- Resolves: rhbz#846664
- Backport the option to disable srchost processing
- Resolves: rhbz#841677</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-58" date="1345672800">- Initialize hbac_ctx to NULL
- Resolves: rhbz#850722</changelog>
</package>
<package pkgid="5c80c2d241ddae3d6cf555c64b0cf6de5d15d56b" name="libipa_hbac-python" arch="i386">
  <version epoch="0" ver="1.5.1" rel="70.el5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-68" date="1368748800">- Add a forgotten break in a switch statement
- Related: rhbz#886165 - sssd will stop functioning correctly if sssd_be
                         hangs for a while</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-69" date="1372204800">- Fix startup with a broken configuration
- Resolves: rhbz#974036 - sssd core process keeps running after backends quit</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-70" date="1372377600">- Fix IPA provider performance issue when storing large host groups
- Resolves: rhbz#979047 - sssd_be goes to 99% CPU and causes significant
                          login delays when client is under load</changelog>
</package>
<package pkgid="2bc89e759a8520b87463dd5b5fcd99689ce535cd" name="libjpeg" arch="i386">
  <version epoch="0" ver="6b" rel="38"/>
  <changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 6b-36.2.2" date="1152748800">- rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 6b-37" date="1154044800">- Use CFLAGS consistently</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 6b-38" date="1385510400">- Add patch for CVE-2013-6629
- Resolves: #1031952</changelog>
</package>
<package pkgid="8be8d50c1a8eae7657d33c9505c0521fac57f173" name="libjpeg-devel" arch="i386">
  <version epoch="0" ver="6b" rel="38"/>
  <changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 6b-36.2.2" date="1152748800">- rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 6b-37" date="1154044800">- Use CFLAGS consistently</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 6b-38" date="1385510400">- Add patch for CVE-2013-6629
- Resolves: #1031952</changelog>
</package>
<package pkgid="0822d4fd6dc24408824427bcdb095dc9260116da" name="libpath_utils" arch="i386">
  <version epoch="0" ver="0.2.1" rel="10.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-3" date="1287180000">- New upstream release 0.1.2
- Fixes a serious issue with libdhash where hash_enter() would never update
- existing entries for a key.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-6" date="1297116000">- Resolves: rhbz#665312 - Add ding-libs to RHEL5.7</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-10" date="1297807200">- Resolves: rhbz#677753 - ding-libs developer docs on RHEL 5 are not
-                         multilib-clean
- Removed API documentation from packages</changelog>
</package>
<package pkgid="1357ebfec3987189ad87ed36eb549f6e2fe4b5ca" name="libpath_utils-devel" arch="i386">
  <version epoch="0" ver="0.2.1" rel="10.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-3" date="1287180000">- New upstream release 0.1.2
- Fixes a serious issue with libdhash where hash_enter() would never update
- existing entries for a key.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-6" date="1297116000">- Resolves: rhbz#665312 - Add ding-libs to RHEL5.7</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-10" date="1297807200">- Resolves: rhbz#677753 - ding-libs developer docs on RHEL 5 are not
-                         multilib-clean
- Removed API documentation from packages</changelog>
</package>
<package pkgid="0e6801af68103cb1c411dc3e492c2066467f2ba9" name="libpng" arch="i386">
  <version epoch="2" ver="1.2.10" rel="15.el5_7"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-13" date="1310680800">- Back-port fixes for CVE-2011-2690, CVE-2011-2692
  Note: CVE-2011-2691, announced at the same time, does not apply to 1.2.10;
  likewise for CVE-2011-2501
Resolves: #721304</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-14" date="1311717600">- Install the correct fix for CVE-2011-2690
Resolves: #721304</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-15" date="1329429600">- Fix CVE-2011-3026
Resolves: CVE-2011-3026</changelog>
</package>
<package pkgid="9d6d461e32517e058426f9f6a1b120d3e9aa1a06" name="libpng" arch="i386">
  <version epoch="2" ver="1.2.10" rel="16.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-14" date="1311717600">- Install the correct fix for CVE-2011-2690
Resolves: #721304</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-15" date="1329429600">- Fix CVE-2011-3026
Resolves: CVE-2011-3026</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-16" date="1331503200">- Fix CVE-2011-3045
Resolves: CVE-2011-3045</changelog>
</package>
<package pkgid="2e474b2f253bbd670e7646f9a2f47f4172e55440" name="libpng" arch="i386">
  <version epoch="2" ver="1.2.10" rel="17.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-15" date="1329429600">- Fix CVE-2011-3026
Resolves: CVE-2011-3026</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-16" date="1331503200">- Fix CVE-2011-3045
Resolves: CVE-2011-3045</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-17" date="1334786400">- Fix CVE-2011-3048
Resolves: CVE-2011-3048</changelog>
</package>
<package pkgid="e261bf4a6d3134cf9e36b301b1a6c58c03729519" name="libpng" arch="i386">
  <version epoch="2" ver="1.2.10" rel="7.1.el5_7.5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-7.1.el5_5.3" date="1278108000">- Back-port fixes for CVE-2009-2042, CVE-2010-0205, CVE-2010-1205,
  CVE-2010-2249
Resolves: #609921</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-7.1.el5_7.4" date="1310680800">- Back-port fixes for CVE-2011-2690, CVE-2011-2692
  Note: CVE-2011-2691, announced at the same time, does not apply to 1.2.10;
  likewise for CVE-2011-2501
Resolves: #721303</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-7.1.el5_7.5" date="1311717600">- Install the correct fix for CVE-2011-2690
Resolves: #721303</changelog>
</package>
<package pkgid="a1be9e7441b6fbc2082c2768c75a16108e61c17d" name="libpng-devel" arch="i386">
  <version epoch="2" ver="1.2.10" rel="15.el5_7"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-13" date="1310680800">- Back-port fixes for CVE-2011-2690, CVE-2011-2692
  Note: CVE-2011-2691, announced at the same time, does not apply to 1.2.10;
  likewise for CVE-2011-2501
Resolves: #721304</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-14" date="1311717600">- Install the correct fix for CVE-2011-2690
Resolves: #721304</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-15" date="1329429600">- Fix CVE-2011-3026
Resolves: CVE-2011-3026</changelog>
</package>
<package pkgid="c6093852b6c8d01671d402238ed89c566319c38c" name="libpng-devel" arch="i386">
  <version epoch="2" ver="1.2.10" rel="16.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-14" date="1311717600">- Install the correct fix for CVE-2011-2690
Resolves: #721304</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-15" date="1329429600">- Fix CVE-2011-3026
Resolves: CVE-2011-3026</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-16" date="1331503200">- Fix CVE-2011-3045
Resolves: CVE-2011-3045</changelog>
</package>
<package pkgid="94116172ac91ac6898bea6cb7829de75a79686e0" name="libpng-devel" arch="i386">
  <version epoch="2" ver="1.2.10" rel="17.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-15" date="1329429600">- Fix CVE-2011-3026
Resolves: CVE-2011-3026</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-16" date="1331503200">- Fix CVE-2011-3045
Resolves: CVE-2011-3045</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-17" date="1334786400">- Fix CVE-2011-3048
Resolves: CVE-2011-3048</changelog>
</package>
<package pkgid="ca541b89d52aaaebcb4988f36d8a60c0533412b8" name="libpng-devel" arch="i386">
  <version epoch="2" ver="1.2.10" rel="7.1.el5_7.5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-7.1.el5_5.3" date="1278108000">- Back-port fixes for CVE-2009-2042, CVE-2010-0205, CVE-2010-1205,
  CVE-2010-2249
Resolves: #609921</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-7.1.el5_7.4" date="1310680800">- Back-port fixes for CVE-2011-2690, CVE-2011-2692
  Note: CVE-2011-2691, announced at the same time, does not apply to 1.2.10;
  likewise for CVE-2011-2501
Resolves: #721303</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.10-7.1.el5_7.5" date="1311717600">- Install the correct fix for CVE-2011-2690
Resolves: #721303</changelog>
</package>
<package pkgid="3ef533c36f9757ec7b31d2e003adde3adc0f181b" name="libpurple" arch="i386">
  <version epoch="0" ver="2.6.6" rel="11.el5.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.2" date="1341439200">- Add patch for CVE-2012-2318 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.3" date="1341439201">- Add patch for CVE-2012-3374 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.4" date="1341871200">- Add patch for CVE-2011-2485 (RH bug #837559).</changelog>
</package>
<package pkgid="825b512ff681734c791a43084fc29ccb8ca9ed12" name="libpurple" arch="i386">
  <version epoch="0" ver="2.6.6" rel="17.el5_9.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-16.el5" date="1361570400">- Add patch for CVE-2013-0273 (RH bug #910651).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-17.el5" date="1361570401">- Add patch for CVE-2013-0274 (RH bug #910651).</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 2.6.6-17.el5_9.1" date="1362434400">- Fix spec file for disttag</changelog>
</package>
<package pkgid="04c0fefd297cd1b3259b0f232d429625711608b2" name="libpurple" arch="i386">
  <version epoch="0" ver="2.6.6" rel="32.el5"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-30.el5" date="1391040000">- Add patch for CVE-2013-6490 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-31.el5" date="1391040001">- Add patch for CVE-2014-0020 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-32.el5" date="1391472000">- Fix regression in CVE-2013-6483.</changelog>
</package>
<package pkgid="e54e0cb1a77c700ca9e35bd3c31f537accbee4e8" name="libpurple" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.1" date="1318370400">- Add patch for CVE-2011-1091 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.2" date="1318370401">- Add patch for CVE-2011-3594 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.1" date="1318456800">- I messed up the release tag.  Fix it to use the proper form.</changelog>
</package>
<package pkgid="acf2a7bea4a91996f28e2b76f5e41ce1c2eb869c" name="libpurple" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.2" date="1323727200">- Add patch for CVE-2011-4601 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.3" date="1323727201">- Add patch for CVE-2011-4602 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.4" date="1323727202">- Add patch for CVE-2011-4603 (RH bug #766450).</changelog>
</package>
<package pkgid="513a98e4bc6843c1b5a22654f299ecc8a076e130" name="libpurple-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="11.el5.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.2" date="1341439200">- Add patch for CVE-2012-2318 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.3" date="1341439201">- Add patch for CVE-2012-3374 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.4" date="1341871200">- Add patch for CVE-2011-2485 (RH bug #837559).</changelog>
</package>
<package pkgid="3284c94955e8fde981ca1af48638cd9a2ff05af6" name="libpurple-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="17.el5_9.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-16.el5" date="1361570400">- Add patch for CVE-2013-0273 (RH bug #910651).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-17.el5" date="1361570401">- Add patch for CVE-2013-0274 (RH bug #910651).</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 2.6.6-17.el5_9.1" date="1362434400">- Fix spec file for disttag</changelog>
</package>
<package pkgid="7e289bbf70d80e6dfa9ecd25c8e1d4c47e73adc7" name="libpurple-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="32.el5"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-30.el5" date="1391040000">- Add patch for CVE-2013-6490 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-31.el5" date="1391040001">- Add patch for CVE-2014-0020 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-32.el5" date="1391472000">- Fix regression in CVE-2013-6483.</changelog>
</package>
<package pkgid="e3fd6fc62a6af6a7ab7950045c4c901e426891e7" name="libpurple-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.1" date="1318370400">- Add patch for CVE-2011-1091 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.2" date="1318370401">- Add patch for CVE-2011-3594 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.1" date="1318456800">- I messed up the release tag.  Fix it to use the proper form.</changelog>
</package>
<package pkgid="798eed26e02682ffa6766c89c2406cb644f77b74" name="libpurple-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.2" date="1323727200">- Add patch for CVE-2011-4601 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.3" date="1323727201">- Add patch for CVE-2011-4602 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.4" date="1323727202">- Add patch for CVE-2011-4603 (RH bug #766450).</changelog>
</package>
<package pkgid="77a56f1a8ba06ac8dc9ff2f66993b3f49a6c3099" name="libpurple-perl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="11.el5.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.2" date="1341439200">- Add patch for CVE-2012-2318 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.3" date="1341439201">- Add patch for CVE-2012-3374 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.4" date="1341871200">- Add patch for CVE-2011-2485 (RH bug #837559).</changelog>
</package>
<package pkgid="4318362d0bd8cff7979d7d94fd58304766cca66c" name="libpurple-perl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="17.el5_9.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-16.el5" date="1361570400">- Add patch for CVE-2013-0273 (RH bug #910651).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-17.el5" date="1361570401">- Add patch for CVE-2013-0274 (RH bug #910651).</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 2.6.6-17.el5_9.1" date="1362434400">- Fix spec file for disttag</changelog>
</package>
<package pkgid="bdc2dc5d18a40bbb0171de8d563526a3cd97ae66" name="libpurple-perl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="32.el5"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-30.el5" date="1391040000">- Add patch for CVE-2013-6490 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-31.el5" date="1391040001">- Add patch for CVE-2014-0020 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-32.el5" date="1391472000">- Fix regression in CVE-2013-6483.</changelog>
</package>
<package pkgid="0bf37ffc6aa32fc70f46c1d928656add563cc903" name="libpurple-perl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.1" date="1318370400">- Add patch for CVE-2011-1091 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.2" date="1318370401">- Add patch for CVE-2011-3594 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.1" date="1318456800">- I messed up the release tag.  Fix it to use the proper form.</changelog>
</package>
<package pkgid="faea0174b82e1eb533cae85b8600893701f26827" name="libpurple-perl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.2" date="1323727200">- Add patch for CVE-2011-4601 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.3" date="1323727201">- Add patch for CVE-2011-4602 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.4" date="1323727202">- Add patch for CVE-2011-4603 (RH bug #766450).</changelog>
</package>
<package pkgid="b266f7a21a0edc1b8d1fc4fb537818215d81da89" name="libpurple-tcl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="11.el5.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.2" date="1341439200">- Add patch for CVE-2012-2318 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.3" date="1341439201">- Add patch for CVE-2012-3374 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.4" date="1341871200">- Add patch for CVE-2011-2485 (RH bug #837559).</changelog>
</package>
<package pkgid="3352c48f992897ae40172af5d8dd109ae9d910d9" name="libpurple-tcl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="17.el5_9.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-16.el5" date="1361570400">- Add patch for CVE-2013-0273 (RH bug #910651).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-17.el5" date="1361570401">- Add patch for CVE-2013-0274 (RH bug #910651).</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 2.6.6-17.el5_9.1" date="1362434400">- Fix spec file for disttag</changelog>
</package>
<package pkgid="75c3cf4823a22ad2aac6f2fc07b35370bb6ebc47" name="libpurple-tcl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="32.el5"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-30.el5" date="1391040000">- Add patch for CVE-2013-6490 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-31.el5" date="1391040001">- Add patch for CVE-2014-0020 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-32.el5" date="1391472000">- Fix regression in CVE-2013-6483.</changelog>
</package>
<package pkgid="a0731b56f0218f0acac3a340344ffed98c54fced" name="libpurple-tcl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.1" date="1318370400">- Add patch for CVE-2011-1091 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.2" date="1318370401">- Add patch for CVE-2011-3594 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.1" date="1318456800">- I messed up the release tag.  Fix it to use the proper form.</changelog>
</package>
<package pkgid="96a5a51d3147bbc6f4bc9185c3b0725f9e5953a4" name="libpurple-tcl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.2" date="1323727200">- Add patch for CVE-2011-4601 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.3" date="1323727201">- Add patch for CVE-2011-4602 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.4" date="1323727202">- Add patch for CVE-2011-4603 (RH bug #766450).</changelog>
</package>
<package pkgid="ff766968c585b6be95bbc6e2de1a0caad69af26a" name="libref_array" arch="i386">
  <version epoch="0" ver="0.1.1" rel="10.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-3" date="1287180000">- New upstream release 0.1.2
- Fixes a serious issue with libdhash where hash_enter() would never update
- existing entries for a key.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-6" date="1297116000">- Resolves: rhbz#665312 - Add ding-libs to RHEL5.7</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-10" date="1297807200">- Resolves: rhbz#677753 - ding-libs developer docs on RHEL 5 are not
-                         multilib-clean
- Removed API documentation from packages</changelog>
</package>
<package pkgid="53fbde73a2d4f3a0fd74a228282ef8e9e7c68b25" name="libref_array-devel" arch="i386">
  <version epoch="0" ver="0.1.1" rel="10.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-3" date="1287180000">- New upstream release 0.1.2
- Fixes a serious issue with libdhash where hash_enter() would never update
- existing entries for a key.</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-6" date="1297116000">- Resolves: rhbz#665312 - Add ding-libs to RHEL5.7</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.1.2-10" date="1297807200">- Resolves: rhbz#677753 - ding-libs developer docs on RHEL 5 are not
-                         multilib-clean
- Removed API documentation from packages</changelog>
</package>
<package pkgid="44818f38cf67eb6288cfd167d461c56a548a1148" name="libsane-hpaio3" arch="i386">
  <version epoch="0" ver="3.9.8" rel="15.el5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-13" date="1341007200">- Several parallel-install fixes (bug #501834).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-14" date="1344376800">- Create debugging files securely (CVE-2011-2722, bug #725830).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.9.8-15" date="1345240800">- Another D-Bus fix, part of bug #501834.</changelog>
</package>
<package pkgid="5cd08d9e701232c56ed6cad07f92e4ef6596a600" name="libsmbclient" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.29.el5_7.4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.29.el5.2" date="1298066400">- Security Release, fixes CVE-2011-0719
- resolves: #678330</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.0.33-3.29.el5.3" date="1311631200">- Security Release, fixes CVE-2010-0547, CVE-2010-0787, CVE-2011-2694,
  CVE-2011-2522, CVE-2011-1678
- resolves: #722552</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.0.33-3.29.el5.4" date="1311976800">- Security Release, Add fix also for CVE-2011-2724
- related: #722552</changelog>
</package>
<package pkgid="80e1ef5e08c7f86fc5f29c5f167eb459d6ecfc63" name="libsmbclient" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.38.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.36.el5" date="1326837600">- Security Release, fixes CVE-2010-0926
- resolves: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.37.el5" date="1327010400">- Regenerate manpage for "wide links" and "unix extensions" sections
- related: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329861600">- Security release, fixes CVE-2012-0870
- resolves: #795718</changelog>
</package>
<package pkgid="9c59c27486d9f62916e2a42b617130c7d08d759c" name="libsmbclient" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.39.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.37.el5" date="1327010400">- Regenerate manpage for "wide links" and "unix extensions" sections
- related: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329861600">- Security release, fixes CVE-2012-0870
- resolves: #795718</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804638</changelog>
</package>
<package pkgid="bf00cbc75cf0ebfefcb80d2882023ff2b87893ea" name="libsmbclient" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.40.el5_10"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329868800">- Security release, fixes CVE-2012-0870
- resolves: #795719</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332288000">- Security Release, fixes CVE-2012-1182
- resolves: #804639</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; 3.0.33-3.40.el5" date="1394236800">- Security Release, fixes CVE-2013-0213 and CVE-2013-4124
- resolves: #1073350</changelog>
</package>
<package pkgid="d6460501907411d26884faf8f2a0b32cafed7e61" name="libsmbclient" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.41.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332288000">- Security Release, fixes CVE-2012-1182
- resolves: #804639</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; 3.0.33-3.40.el5" date="1394236800">- Security Release, fixes CVE-2013-0213 and CVE-2013-4124
- resolves: #1073351</changelog>
  <changelog author="- Simo Sorce &lt;simo@redhat.com&gt; 3.0.33-3.41.el5" date="1460419200">- Security Release "BadLock"
- resolves: CVE-2016-2110
- resolves: CVE-2016-2111</changelog>
</package>
<package pkgid="7778d09491c2f79c1c82531f1724188dc9c08485" name="libsmbclient-devel" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.29.el5_7.4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.29.el5.2" date="1298066400">- Security Release, fixes CVE-2011-0719
- resolves: #678330</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.0.33-3.29.el5.3" date="1311631200">- Security Release, fixes CVE-2010-0547, CVE-2010-0787, CVE-2011-2694,
  CVE-2011-2522, CVE-2011-1678
- resolves: #722552</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.0.33-3.29.el5.4" date="1311976800">- Security Release, Add fix also for CVE-2011-2724
- related: #722552</changelog>
</package>
<package pkgid="0d7357292eb3f3450f8c522eb2063454c1df94da" name="libsmbclient-devel" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.38.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.36.el5" date="1326837600">- Security Release, fixes CVE-2010-0926
- resolves: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.37.el5" date="1327010400">- Regenerate manpage for "wide links" and "unix extensions" sections
- related: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329861600">- Security release, fixes CVE-2012-0870
- resolves: #795718</changelog>
</package>
<package pkgid="11ff5952d7bbe09ac913dc27526e2d386fad2b8c" name="libsmbclient-devel" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.39.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.37.el5" date="1327010400">- Regenerate manpage for "wide links" and "unix extensions" sections
- related: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329861600">- Security release, fixes CVE-2012-0870
- resolves: #795718</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804638</changelog>
</package>
<package pkgid="5baef75402b0a6e18a8d6886b4aa8a71cca7f796" name="libsmbclient-devel" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.40.el5_10"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329868800">- Security release, fixes CVE-2012-0870
- resolves: #795719</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332288000">- Security Release, fixes CVE-2012-1182
- resolves: #804639</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; 3.0.33-3.40.el5" date="1394236800">- Security Release, fixes CVE-2013-0213 and CVE-2013-4124
- resolves: #1073350</changelog>
</package>
<package pkgid="b94cdbcef4b314d51c0fe5980963a2eac58f3bdd" name="libsmbclient-devel" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.41.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332288000">- Security Release, fixes CVE-2012-1182
- resolves: #804639</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; 3.0.33-3.40.el5" date="1394236800">- Security Release, fixes CVE-2013-0213 and CVE-2013-4124
- resolves: #1073351</changelog>
  <changelog author="- Simo Sorce &lt;simo@redhat.com&gt; 3.0.33-3.41.el5" date="1460419200">- Security Release "BadLock"
- resolves: CVE-2016-2110
- resolves: CVE-2016-2111</changelog>
</package>
<package pkgid="5ead8dcb3bea5f9db704241fff452a9acf672f30" name="libtalloc" arch="i386">
  <version epoch="0" ver="2.0.7" rel="2.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.0.1-13" date="1343772000">- Run 'make test' during RPM build
- Resolves: rhbz#837853 - talloc doesn't ensure that the sibling linked list
                          remains valid during a free</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-1" date="1347573600">- Rebase to 2.0.7
- Resolves: rhbz#855862 - Rebase libtalloc to version 2.0.7 to pick
                          the latest bug fixes</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-2" date="1347573601">- Mark libraries as executable so that they are stripped and included
  in the -debuginfo
- Resolves: rhbz#855862 - Rebase libtalloc to version 2.0.7 to pick
                          the latest bug fixes</changelog>
</package>
<package pkgid="9b1deed3b1daaa89ce1531eb5bb65305a10d831b" name="libtalloc-compat1" arch="i386">
  <version epoch="0" ver="2.0.7" rel="2.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.0.1-13" date="1343772000">- Run 'make test' during RPM build
- Resolves: rhbz#837853 - talloc doesn't ensure that the sibling linked list
                          remains valid during a free</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-1" date="1347573600">- Rebase to 2.0.7
- Resolves: rhbz#855862 - Rebase libtalloc to version 2.0.7 to pick
                          the latest bug fixes</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-2" date="1347573601">- Mark libraries as executable so that they are stripped and included
  in the -debuginfo
- Resolves: rhbz#855862 - Rebase libtalloc to version 2.0.7 to pick
                          the latest bug fixes</changelog>
</package>
<package pkgid="3f53242b1aa4ca481c0c6c3d888e7128031b20a1" name="libtalloc-devel" arch="i386">
  <version epoch="0" ver="2.0.7" rel="2.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.0.1-13" date="1343772000">- Run 'make test' during RPM build
- Resolves: rhbz#837853 - talloc doesn't ensure that the sibling linked list
                          remains valid during a free</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-1" date="1347573600">- Rebase to 2.0.7
- Resolves: rhbz#855862 - Rebase libtalloc to version 2.0.7 to pick
                          the latest bug fixes</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-2" date="1347573601">- Mark libraries as executable so that they are stripped and included
  in the -debuginfo
- Resolves: rhbz#855862 - Rebase libtalloc to version 2.0.7 to pick
                          the latest bug fixes</changelog>
</package>
<package pkgid="04caef6416619c5ef191f739e44ec847d9c29c30" name="libtdb" arch="i386">
  <version epoch="0" ver="1.2.10" rel="1.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.2.1-6" date="1302645600">- Resolves: rhbz#693785 - tdb_extend() can cause a memory-usage explosion if
-                         the size of its entries are very large</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.2.1-7" date="1334959200">- Resolves: rhbz#736112 - tdb-tools subpackage conflicts with samba</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.2.10-1" date="1341525600">- Rebase to version 1.2.10 to support new samba 3.6.6
- Resolves: rhbz#837865 - Rebase libtdb to version 1.2.10 in RHEL 5.9</changelog>
</package>
<package pkgid="c7b592edae3e90c647585eff912505b9bd98f6f3" name="libtdb-devel" arch="i386">
  <version epoch="0" ver="1.2.10" rel="1.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.2.1-6" date="1302645600">- Resolves: rhbz#693785 - tdb_extend() can cause a memory-usage explosion if
-                         the size of its entries are very large</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.2.1-7" date="1334959200">- Resolves: rhbz#736112 - tdb-tools subpackage conflicts with samba</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.2.10-1" date="1341525600">- Rebase to version 1.2.10 to support new samba 3.6.6
- Resolves: rhbz#837865 - Rebase libtdb to version 1.2.10 in RHEL 5.9</changelog>
</package>
<package pkgid="2f4aea85de633113731a5c6be2be14ccd304020e" name="libtevent" arch="i386">
  <version epoch="0" ver="0.9.18" rel="2.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.9.8-10" date="1281571200">- Update summary</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.18-1" date="1368576000">- Resolves: rhbz#951045 - Rebase libtevent to version 0.9.18
- Relax libtalloc requirements - only require 2.0.7 and do not check for
  pytalloc presence if python is disabled
- Drop the ABI compatibility patch (no longer needed)
- Drop the tevent_signal segv patch (upstreamed)</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.18-2" date="1371772800">- Resolves: rhbz#975488 - Additional flags might have no effect
                          on 32bit architectures</changelog>
</package>
<package pkgid="bee33457d45da793f3c945b9293dec4fc6e16be7" name="libtevent-devel" arch="i386">
  <version epoch="0" ver="0.9.18" rel="2.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.9.8-10" date="1281571200">- Update summary</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.18-1" date="1368576000">- Resolves: rhbz#951045 - Rebase libtevent to version 0.9.18
- Relax libtalloc requirements - only require 2.0.7 and do not check for
  pytalloc presence if python is disabled
- Drop the ABI compatibility patch (no longer needed)
- Drop the tevent_signal segv patch (upstreamed)</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.18-2" date="1371772800">- Resolves: rhbz#975488 - Additional flags might have no effect
                          on 32bit architectures</changelog>
</package>
<package pkgid="389ffae69cfb287a4e673bc722f2a22baa6fb34b" name="libtiff" arch="i386">
  <version epoch="0" ver="3.8.2" rel="14.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-12" date="1298498400">- Add fix for CVE-2011-0192
Resolves: #679297</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-13" date="1300485600">- Fix incorrect fix for CVE-2011-0192
Resolves: #688828
- Add fix for CVE-2011-1167
Resolves: #688745</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-14" date="1333404000">- Add fix for CVE-2012-1173
Resolves: #CVE-2012-1173</changelog>
</package>
<package pkgid="eb20c983733a434344c6142874e78baffa5d039f" name="libtiff" arch="i386">
  <version epoch="0" ver="3.8.2" rel="15.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-13" date="1300485600">- Fix incorrect fix for CVE-2011-0192
Resolves: #688828
- Add fix for CVE-2011-1167
Resolves: #688745</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-14" date="1333404000">- Add fix for CVE-2012-1173
Resolves: #CVE-2012-1173</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-15" date="1340834400">- Add fixes for CVE-2012-2088, CVE-2012-2113
Resolves: #835746</changelog>
</package>
<package pkgid="ff465b3f9858bc6e9c1e1095e335e85a83a6c08a" name="libtiff" arch="i386">
  <version epoch="0" ver="3.8.2" rel="18.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-16" date="1355176800">- Add fixes for CVE-2012-3401, CVE-2012-4447, CVE-2012-4564, CVE-2012-5581
Resolves: #885308</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-17" date="1355263200">- Fix incomplete patch for CVE-2012-3401
- Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
  with pre-4.0.2 libtiff
Resolves: #885308</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-18" date="1355436000">- Still more fixes to make test case for CVE-2012-5581 work on all platforms
Resolves: #885308</changelog>
</package>
<package pkgid="8e2475d52e82532fef6f500ba85e312a531ff2f3" name="libtiff" arch="i386">
  <version epoch="0" ver="3.8.2" rel="19.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-17" date="1355270400">- Fix incomplete patch for CVE-2012-3401
- Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
  with pre-4.0.2 libtiff
Resolves: #885309</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-18" date="1355443200">- Still more fixes to make test case for CVE-2012-5581 work on all platforms
Resolves: #885309</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 3.8.2-19" date="1392249600">- Resolves: #1063460 CVE-2013-1960 CVE-2013-1961 CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
  libtiff various flaws</changelog>
</package>
<package pkgid="609444468a6f66753101497a2667fe1c37498d1c" name="libtiff-devel" arch="i386">
  <version epoch="0" ver="3.8.2" rel="14.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-12" date="1298498400">- Add fix for CVE-2011-0192
Resolves: #679297</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-13" date="1300485600">- Fix incorrect fix for CVE-2011-0192
Resolves: #688828
- Add fix for CVE-2011-1167
Resolves: #688745</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-14" date="1333404000">- Add fix for CVE-2012-1173
Resolves: #CVE-2012-1173</changelog>
</package>
<package pkgid="6a9cc195341ecde8b75cf22e78c629d95ccd6c41" name="libtiff-devel" arch="i386">
  <version epoch="0" ver="3.8.2" rel="15.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-13" date="1300485600">- Fix incorrect fix for CVE-2011-0192
Resolves: #688828
- Add fix for CVE-2011-1167
Resolves: #688745</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-14" date="1333404000">- Add fix for CVE-2012-1173
Resolves: #CVE-2012-1173</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-15" date="1340834400">- Add fixes for CVE-2012-2088, CVE-2012-2113
Resolves: #835746</changelog>
</package>
<package pkgid="608d2f62a314e315eb5f560818c619a2ca5db883" name="libtiff-devel" arch="i386">
  <version epoch="0" ver="3.8.2" rel="18.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-16" date="1355176800">- Add fixes for CVE-2012-3401, CVE-2012-4447, CVE-2012-4564, CVE-2012-5581
Resolves: #885308</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-17" date="1355263200">- Fix incomplete patch for CVE-2012-3401
- Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
  with pre-4.0.2 libtiff
Resolves: #885308</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-18" date="1355436000">- Still more fixes to make test case for CVE-2012-5581 work on all platforms
Resolves: #885308</changelog>
</package>
<package pkgid="6ddded16ece485f82e71d189a3e2e1d4b05d4156" name="libtiff-devel" arch="i386">
  <version epoch="0" ver="3.8.2" rel="19.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-17" date="1355270400">- Fix incomplete patch for CVE-2012-3401
- Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
  with pre-4.0.2 libtiff
Resolves: #885309</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 3.8.2-18" date="1355443200">- Still more fixes to make test case for CVE-2012-5581 work on all platforms
Resolves: #885309</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 3.8.2-19" date="1392249600">- Resolves: #1063460 CVE-2013-1960 CVE-2013-1961 CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
  libtiff various flaws</changelog>
</package>
<package pkgid="b6194d0123fc8bc2c2155348f9c102b7a840746d" name="libvirt" arch="i386">
  <version epoch="0" ver="0.8.2" rel="22.el5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.8.2-20.el5" date="1305151200">- Support enabling or disabling the HPET for Xen domains (rhbz#703193)
- SMBIOS support (rhbz#661365)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-21.el5" date="1309384800">- remote: Protect against integer overflow (rhbz#717207)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-22.el5" date="1309384801">- Fix auditing of disk hotunplug operations (rhbz#710151)</changelog>
</package>
<package pkgid="32755d7249a912a2099fb40bb9a24d155de171f5" name="libvirt" arch="i386">
  <version epoch="0" ver="0.8.2" rel="29.el5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-27.el5" date="1341007200">- qemu: Delete USB devices used by domain on stop (rhbz#816601)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-28.el5" date="1342130400">- qemu: Rollback on used USB devices (rhbz#816601)
- qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#816601)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-29.el5" date="1343772000">- Coverity pointed out an use after free in the fix for 816601 (rhbz#772848)</changelog>
</package>
<package pkgid="ea576178b382bfdd14b99727b071cb19a7366cb3" name="libvirt-devel" arch="i386">
  <version epoch="0" ver="0.8.2" rel="22.el5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.8.2-20.el5" date="1305151200">- Support enabling or disabling the HPET for Xen domains (rhbz#703193)
- SMBIOS support (rhbz#661365)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-21.el5" date="1309384800">- remote: Protect against integer overflow (rhbz#717207)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-22.el5" date="1309384801">- Fix auditing of disk hotunplug operations (rhbz#710151)</changelog>
</package>
<package pkgid="4722c569fc01682300d8e570e02359eb4202d297" name="libvirt-devel" arch="i386">
  <version epoch="0" ver="0.8.2" rel="29.el5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-27.el5" date="1341007200">- qemu: Delete USB devices used by domain on stop (rhbz#816601)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-28.el5" date="1342130400">- qemu: Rollback on used USB devices (rhbz#816601)
- qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#816601)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-29.el5" date="1343772000">- Coverity pointed out an use after free in the fix for 816601 (rhbz#772848)</changelog>
</package>
<package pkgid="29afa2a4f99cad5df24bcbc5c1fa057104179644" name="libvirt-python" arch="i386">
  <version epoch="0" ver="0.8.2" rel="22.el5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.8.2-20.el5" date="1305151200">- Support enabling or disabling the HPET for Xen domains (rhbz#703193)
- SMBIOS support (rhbz#661365)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-21.el5" date="1309384800">- remote: Protect against integer overflow (rhbz#717207)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-22.el5" date="1309384801">- Fix auditing of disk hotunplug operations (rhbz#710151)</changelog>
</package>
<package pkgid="ec5b17cc848e9e6506a64a0b7cf6ccd483b39985" name="libvirt-python" arch="i386">
  <version epoch="0" ver="0.8.2" rel="29.el5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-27.el5" date="1341007200">- qemu: Delete USB devices used by domain on stop (rhbz#816601)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-28.el5" date="1342130400">- qemu: Rollback on used USB devices (rhbz#816601)
- qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#816601)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libvirt-0.8.2-29.el5" date="1343772000">- Coverity pointed out an use after free in the fix for 816601 (rhbz#772848)</changelog>
</package>
<package pkgid="4f919c4ffc6ba49ea46de6b0f5c5c1499312151a" name="libvorbis" arch="i386">
  <version epoch="1" ver="1.1.2" rel="3.el5_7.6"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt;  - 1:1.1.2-3.el5.4" date="1257372000">- fix CVE-CVE-2009-3379
Resolves: #532418</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; - 1:1.1.2-3.el5_7.5" date="1328652000">- fix CVE-2012-0444
Resolves #787074</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; - 1:1.1.2-3.el5_7.6" date="1329256800">- Apply correct patch, fix CVE-2012-0444
Resolves #787074</changelog>
</package>
<package pkgid="8512493e5a5b2af9590668fe5722ee4cf927c172" name="libvorbis-devel" arch="i386">
  <version epoch="1" ver="1.1.2" rel="3.el5_7.6"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt;  - 1:1.1.2-3.el5.4" date="1257372000">- fix CVE-CVE-2009-3379
Resolves: #532418</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; - 1:1.1.2-3.el5_7.5" date="1328652000">- fix CVE-2012-0444
Resolves #787074</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; - 1:1.1.2-3.el5_7.6" date="1329256800">- Apply correct patch, fix CVE-2012-0444
Resolves #787074</changelog>
</package>
<package pkgid="fc0986f8e5dad07cb383e68b8410d21f5245d309" name="libwpd" arch="i386">
  <version epoch="0" ver="0.8.7" rel="3.1.el5_8"/>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.8.7-1" date="1160431200">- next version</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.8.7-3" date="1172786400">- Resolves: rhbz#222808 CVE-2007-0002 buffer overflows</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.8.7-3.1" date="1339192800">- Resolves: rhbz#829381 CVE-2012-2149 memory overwrite flaw</changelog>
</package>
<package pkgid="0809ebdc249b1ff974177b817f537565d9d0b92a" name="libwpd-devel" arch="i386">
  <version epoch="0" ver="0.8.7" rel="3.1.el5_8"/>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.8.7-1" date="1160431200">- next version</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.8.7-3" date="1172786400">- Resolves: rhbz#222808 CVE-2007-0002 buffer overflows</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.8.7-3.1" date="1339192800">- Resolves: rhbz#829381 CVE-2012-2149 memory overwrite flaw</changelog>
</package>
<package pkgid="72c17b2c839fd8d2eb34f0462bbf6302b7e0ecd1" name="libwpd-tools" arch="i386">
  <version epoch="0" ver="0.8.7" rel="3.1.el5_8"/>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.8.7-1" date="1160431200">- next version</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.8.7-3" date="1172786400">- Resolves: rhbz#222808 CVE-2007-0002 buffer overflows</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.8.7-3.1" date="1339192800">- Resolves: rhbz#829381 CVE-2012-2149 memory overwrite flaw</changelog>
</package>
<package pkgid="b6c7cda6ec0e36c6a5d815e56ed35a39b7e150c8" name="libxml2" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.12.el5_7.2"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.12-1" date="1319493600">- fix schemas validation of empty integer values (rhbz#747865)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.12.el5_7.1" date="1319580000">- we love complexity (rhbz#747865)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.12.el5_7.2" date="1325887200">- Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008
- Fix an off by one error in encoding CVE-2011-0216
- Fix some potential problems on reallocation failures CVE-2011-1944
- Fix missing error status in XPath evaluation CVE-2011-2834
- Make sure the parser returns when getting a Stop order CVE-2011-3905
- Fix an allocation error when copying entities CVE-2011-3919.patch
- Resolves: rhbz#771906</changelog>
</package>
<package pkgid="b74a25011baf22874edcdd6f630e2333d24a2c30" name="libxml2" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.15.el5_8.2"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5" date="1325887200">- Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008
- Fix an off by one error in encoding CVE-2011-0216
- Fix some potential problems on reallocation failures CVE-2011-1944
- Fix missing error status in XPath evaluation CVE-2011-2834
- Make sure the parser returns when getting a Stop order CVE-2011-3905
- Fix an allocation error when copying entities CVE-2011-3919.patch
- Resolves: rhbz#771907</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.1" date="1328911200">- adds randomization to hash and dict structures CVE-2012-0841
- Resolves: rhbz#788843</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.2" date="1329170400">- fix previous build to force compilation of randomization code
- Resolves: rhbz#788843</changelog>
</package>
<package pkgid="1ea65bafee390b6b8a7c53ea98fcd4696624dc20" name="libxml2" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.15.el5_8.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.3" date="1345586400">- Fix parser local buffers size problems (rhbz#843739)
- Fix entities local buffers size problems (rhbz#843739)
- Fix an error in previous commit (rhbz#843739)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.4" date="1345672800">- Fix an off by one pointer access (CVE-2011-3102)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.5" date="1346882400">- Implement some default limits in the XPath module (CVE-2011-1944)
- Change the XPath code to percolate allocation errors (CVE-2011-1944)</changelog>
</package>
<package pkgid="c706e28b5056ae5a8b540f7ff896a8748e1c147c" name="libxml2" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.15.el5_8.6"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.4" date="1345672800">- Fix an off by one pointer access (CVE-2011-3102)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.5" date="1346882400">- Implement some default limits in the XPath module (CVE-2011-1944)
- Change the XPath code to percolate allocation errors (CVE-2011-1944)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.6" date="1354226400">- fix out of range heap access (CVE-2012-5134)</changelog>
</package>
<package pkgid="847e2315aa733e19d1f6b0dac97f7e2164039508" name="libxml2" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.21.el5_9.1"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.20.el5" date="1346882400">- Implement some default limits in the XPath module (CVE-2011-1944)
- Change the XPath code to percolate allocation errors (CVE-2011-1944)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.21.el5" date="1354226400">- fix out of range heap access (CVE-2012-5134)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.21.el5_9.1" date="1361311200">- detect and stop excessive entities expansion upon replacement (rhbz#912572)</changelog>
</package>
<package pkgid="6f5850ecf6f65f79631523a62c61803e2028071c" name="libxml2" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.25.el5_11"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.23.el5" date="1361318400">- detect and stop excessive entities expansion upon replacement (rhbz#912573)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.24.el5" date="1374624000">- fixed one regexp bug and added a (rhbz#922450)
- Another small change on the algorithm for the elimination of epsilon (rhbz#922450)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.25.el5" date="1416268800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1161841)</changelog>
</package>
<package pkgid="073d5bc30d4bc5c5cdd2bf109546ed3ea8274574" name="libxml2-devel" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.12.el5_7.2"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.12-1" date="1319493600">- fix schemas validation of empty integer values (rhbz#747865)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.12.el5_7.1" date="1319580000">- we love complexity (rhbz#747865)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.12.el5_7.2" date="1325887200">- Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008
- Fix an off by one error in encoding CVE-2011-0216
- Fix some potential problems on reallocation failures CVE-2011-1944
- Fix missing error status in XPath evaluation CVE-2011-2834
- Make sure the parser returns when getting a Stop order CVE-2011-3905
- Fix an allocation error when copying entities CVE-2011-3919.patch
- Resolves: rhbz#771906</changelog>
</package>
<package pkgid="051787f8fd4616b0ee7f14df2ab56dd1504dcecb" name="libxml2-devel" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.15.el5_8.2"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5" date="1325887200">- Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008
- Fix an off by one error in encoding CVE-2011-0216
- Fix some potential problems on reallocation failures CVE-2011-1944
- Fix missing error status in XPath evaluation CVE-2011-2834
- Make sure the parser returns when getting a Stop order CVE-2011-3905
- Fix an allocation error when copying entities CVE-2011-3919.patch
- Resolves: rhbz#771907</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.1" date="1328911200">- adds randomization to hash and dict structures CVE-2012-0841
- Resolves: rhbz#788843</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.2" date="1329170400">- fix previous build to force compilation of randomization code
- Resolves: rhbz#788843</changelog>
</package>
<package pkgid="c84025eb364b7b6c5243379953e8f1ba40cc6bf2" name="libxml2-devel" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.15.el5_8.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.3" date="1345586400">- Fix parser local buffers size problems (rhbz#843739)
- Fix entities local buffers size problems (rhbz#843739)
- Fix an error in previous commit (rhbz#843739)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.4" date="1345672800">- Fix an off by one pointer access (CVE-2011-3102)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.5" date="1346882400">- Implement some default limits in the XPath module (CVE-2011-1944)
- Change the XPath code to percolate allocation errors (CVE-2011-1944)</changelog>
</package>
<package pkgid="e834ad41b7a6722ad7af80c6b94342ee1c6d1937" name="libxml2-devel" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.15.el5_8.6"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.4" date="1345672800">- Fix an off by one pointer access (CVE-2011-3102)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.5" date="1346882400">- Implement some default limits in the XPath module (CVE-2011-1944)
- Change the XPath code to percolate allocation errors (CVE-2011-1944)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.6" date="1354226400">- fix out of range heap access (CVE-2012-5134)</changelog>
</package>
<package pkgid="3689385e8db177b77d35ea135a2ef98844a39e13" name="libxml2-devel" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.21.el5_9.1"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.20.el5" date="1346882400">- Implement some default limits in the XPath module (CVE-2011-1944)
- Change the XPath code to percolate allocation errors (CVE-2011-1944)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.21.el5" date="1354226400">- fix out of range heap access (CVE-2012-5134)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.21.el5_9.1" date="1361311200">- detect and stop excessive entities expansion upon replacement (rhbz#912572)</changelog>
</package>
<package pkgid="038113bba7c25ae05d12395fa54445aa467ae4e7" name="libxml2-devel" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.25.el5_11"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.23.el5" date="1361318400">- detect and stop excessive entities expansion upon replacement (rhbz#912573)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.24.el5" date="1374624000">- fixed one regexp bug and added a (rhbz#922450)
- Another small change on the algorithm for the elimination of epsilon (rhbz#922450)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.25.el5" date="1416268800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1161841)</changelog>
</package>
<package pkgid="43aaba324fce1d479b6a6827018d407ed934e787" name="libxml2-python" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.12.el5_7.2"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.12-1" date="1319493600">- fix schemas validation of empty integer values (rhbz#747865)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.12.el5_7.1" date="1319580000">- we love complexity (rhbz#747865)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.12.el5_7.2" date="1325887200">- Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008
- Fix an off by one error in encoding CVE-2011-0216
- Fix some potential problems on reallocation failures CVE-2011-1944
- Fix missing error status in XPath evaluation CVE-2011-2834
- Make sure the parser returns when getting a Stop order CVE-2011-3905
- Fix an allocation error when copying entities CVE-2011-3919.patch
- Resolves: rhbz#771906</changelog>
</package>
<package pkgid="3c17ba85ac9ddd35452a2b9e59e1ef5f68437ea7" name="libxml2-python" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.15.el5_8.2"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5" date="1325887200">- Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008
- Fix an off by one error in encoding CVE-2011-0216
- Fix some potential problems on reallocation failures CVE-2011-1944
- Fix missing error status in XPath evaluation CVE-2011-2834
- Make sure the parser returns when getting a Stop order CVE-2011-3905
- Fix an allocation error when copying entities CVE-2011-3919.patch
- Resolves: rhbz#771907</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.1" date="1328911200">- adds randomization to hash and dict structures CVE-2012-0841
- Resolves: rhbz#788843</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.2" date="1329170400">- fix previous build to force compilation of randomization code
- Resolves: rhbz#788843</changelog>
</package>
<package pkgid="240f4467c26bd73d09ae029b9155eaa20b52564c" name="libxml2-python" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.15.el5_8.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.3" date="1345586400">- Fix parser local buffers size problems (rhbz#843739)
- Fix entities local buffers size problems (rhbz#843739)
- Fix an error in previous commit (rhbz#843739)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.4" date="1345672800">- Fix an off by one pointer access (CVE-2011-3102)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.5" date="1346882400">- Implement some default limits in the XPath module (CVE-2011-1944)
- Change the XPath code to percolate allocation errors (CVE-2011-1944)</changelog>
</package>
<package pkgid="2f2caed39fd229ac0dd22c6a28ba9acdbc0175f4" name="libxml2-python" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.15.el5_8.6"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.4" date="1345672800">- Fix an off by one pointer access (CVE-2011-3102)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.5" date="1346882400">- Implement some default limits in the XPath module (CVE-2011-1944)
- Change the XPath code to percolate allocation errors (CVE-2011-1944)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.15.el5_8.6" date="1354226400">- fix out of range heap access (CVE-2012-5134)</changelog>
</package>
<package pkgid="9f3229e366057f6cc3451193b444cb67b46134bb" name="libxml2-python" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.21.el5_9.1"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.20.el5" date="1346882400">- Implement some default limits in the XPath module (CVE-2011-1944)
- Change the XPath code to percolate allocation errors (CVE-2011-1944)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.21.el5" date="1354226400">- fix out of range heap access (CVE-2012-5134)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.21.el5_9.1" date="1361311200">- detect and stop excessive entities expansion upon replacement (rhbz#912572)</changelog>
</package>
<package pkgid="6be14d8c3a598f17d854defc66566667b171a365" name="libxml2-python" arch="i386">
  <version epoch="0" ver="2.6.26" rel="2.1.25.el5_11"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.23.el5" date="1361318400">- detect and stop excessive entities expansion upon replacement (rhbz#912573)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.24.el5" date="1374624000">- fixed one regexp bug and added a (rhbz#922450)
- Another small change on the algorithm for the elimination of epsilon (rhbz#922450)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.6.26-2.1.25.el5" date="1416268800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1161841)</changelog>
</package>
<package pkgid="751cda3596710d59cf72dd6c2fb4bd2e20262f26" name="libxslt" arch="i386">
  <version epoch="0" ver="1.1.17" rel="4.el5_8.3"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 1.1.17-4.el5_8.1" date="1346709600">- fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
- Fix portability to upcoming libxml2-2.9.0
- Fix generate-id() to not expose object addresses (CVE-2011-1202)
- Fix some case of pattern parsing errors (CVE-2011-3970)
- Fix a bug in selecting XSLT elements (CVE-2012-2825)
- Fix default template processing on namespace nodes (CVE-2012-2871)
- Fixed problem with namespace on compound predicate
- Fix direct pattern matching bug
- Big fixes of pattern compilations
- Fixes #527297 general patter comps fix and cleanup other cleanups Daniel
- QName parsing fix for patterns
- Cleanup of the pattern compilation code (CVE-2012-2870)
- Hardening of code checking node types in various entry point (CVE-2012-2870)
- Hardening of code checking node types in EXSLT (CVE-2012-2870)
- Fix system-property with unknown namespace
- Xsltproc should return an error code if xinclude fails
- Fix a dictionary string usage
- Avoid a heap use after free error</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 1.1.17-4.el5_8.2" date="1346796000">- remove the ChangeLog.gz which was raising multilib problems</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 1.1.17-4.el5_8.3" date="1346796001">- CVE-2012-2825 requires an extra patch on 1.1.17</changelog>
</package>
<package pkgid="a56561c141d62fdd03f4fbf0cff3e3963630a9f3" name="libxslt-devel" arch="i386">
  <version epoch="0" ver="1.1.17" rel="4.el5_8.3"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 1.1.17-4.el5_8.1" date="1346709600">- fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
- Fix portability to upcoming libxml2-2.9.0
- Fix generate-id() to not expose object addresses (CVE-2011-1202)
- Fix some case of pattern parsing errors (CVE-2011-3970)
- Fix a bug in selecting XSLT elements (CVE-2012-2825)
- Fix default template processing on namespace nodes (CVE-2012-2871)
- Fixed problem with namespace on compound predicate
- Fix direct pattern matching bug
- Big fixes of pattern compilations
- Fixes #527297 general patter comps fix and cleanup other cleanups Daniel
- QName parsing fix for patterns
- Cleanup of the pattern compilation code (CVE-2012-2870)
- Hardening of code checking node types in various entry point (CVE-2012-2870)
- Hardening of code checking node types in EXSLT (CVE-2012-2870)
- Fix system-property with unknown namespace
- Xsltproc should return an error code if xinclude fails
- Fix a dictionary string usage
- Avoid a heap use after free error</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 1.1.17-4.el5_8.2" date="1346796000">- remove the ChangeLog.gz which was raising multilib problems</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 1.1.17-4.el5_8.3" date="1346796001">- CVE-2012-2825 requires an extra patch on 1.1.17</changelog>
</package>
<package pkgid="9c5b2081a4b2f733566d04d3f2506fad4a03b4b7" name="libxslt-python" arch="i386">
  <version epoch="0" ver="1.1.17" rel="4.el5_8.3"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 1.1.17-4.el5_8.1" date="1346709600">- fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
- Fix portability to upcoming libxml2-2.9.0
- Fix generate-id() to not expose object addresses (CVE-2011-1202)
- Fix some case of pattern parsing errors (CVE-2011-3970)
- Fix a bug in selecting XSLT elements (CVE-2012-2825)
- Fix default template processing on namespace nodes (CVE-2012-2871)
- Fixed problem with namespace on compound predicate
- Fix direct pattern matching bug
- Big fixes of pattern compilations
- Fixes #527297 general patter comps fix and cleanup other cleanups Daniel
- QName parsing fix for patterns
- Cleanup of the pattern compilation code (CVE-2012-2870)
- Hardening of code checking node types in various entry point (CVE-2012-2870)
- Hardening of code checking node types in EXSLT (CVE-2012-2870)
- Fix system-property with unknown namespace
- Xsltproc should return an error code if xinclude fails
- Fix a dictionary string usage
- Avoid a heap use after free error</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 1.1.17-4.el5_8.2" date="1346796000">- remove the ChangeLog.gz which was raising multilib problems</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 1.1.17-4.el5_8.3" date="1346796001">- CVE-2012-2825 requires an extra patch on 1.1.17</changelog>
</package>
<package pkgid="813b323f5f062ae50cb7b494b9611ae628546457" name="luci" arch="i386">
  <version epoch="0" ver="0.12.2" rel="51.el5"/>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; 0.12.2-44" date="1323900000">- Fix bz577019 (CVE-2010-1104 zope: XSS on error page)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.12.2-45" date="1325800800">- Fix bz751359 (Add luci support for fence_ipmilan's -L option)</changelog>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; 0.12.2-51" date="1326319200">- Fix bz711494 (CVE-2011-1948 plone: reflected XSS vulnerability)
- Fix bz771920 (CVE-2011-4924 Zope: Incomplete upstream patch for CVE-2010-1104/bz577019)</changelog>
</package>
<package pkgid="f36f5377d1301fd821443a2f3975894bcf776703" name="luci" arch="i386">
  <version epoch="0" ver="0.12.2" rel="64.el5"/>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; 0.12.2-59" date="1343772000">- Fix bz835649 (luci uninstall will leave /var/lib/luci/var/pts and /usr/lib*/luci/zope/var/pts behind)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.12.2-60" date="1344981600">- Improvements for bz832185 (Luci cannot configure the "identity_file" attribute for fence_ilo_mp)
- Improvements for bz822633 (Add luci support for nfsrestart)</changelog>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; 0.12.2-64" date="1346191200">- Improvements for bz786372 (Better protect luci's authentication cookie)
- Improvements for bz607179 (Improper handling of session timeouts)</changelog>
</package>
<package pkgid="b4504ea026dad42f983871154e674f9899d83654" name="luci" arch="i386">
  <version epoch="0" ver="0.12.2" rel="81.el5"/>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; - 0.12.2-78" date="1397779200">- luci: reflect startup_wait parameter added in postgres-8 RA
  Resolves: rhbz#1065263
- luci: Multiple information leak flaws in various luci site extensions
  Resolves: rhbz#1076148</changelog>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; - 0.12.2-79" date="1397779201">- luci: drop unsuccessful monkey patch application wrt. Plone 20121106 advisory
  Related: rhbz#956861</changelog>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; - 0.12.2-81" date="1398470400">- luci: prevent non-admin user from unauthorized executive access
  Resolves: rhbz#1089310</changelog>
</package>
<package pkgid="9bfe98daef61a1c542a471bfd552989a37b74410" name="mesa-libGL" arch="i386">
  <version epoch="0" ver="6.5.1" rel="7.11.el5_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.9" date="1313618400">- mesa-6.5.1-glu-invert-matrix.patch: Fix matrix inversion math (#508438)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.10" date="1320962400">- mesa-6.5.1-nonconformant-visual.patch: Don't warn about the non-
  conformant synthetic Composite visual (#442738)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 6.5.1-7.11" date="1368655200">- CVE-2013-1993 - buffer overflows in DRI protocol (#963066)</changelog>
</package>
<package pkgid="8f10e2f65d9e3e906cdeb0d8c14f71e3b941861d" name="mesa-libGL-devel" arch="i386">
  <version epoch="0" ver="6.5.1" rel="7.11.el5_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.9" date="1313618400">- mesa-6.5.1-glu-invert-matrix.patch: Fix matrix inversion math (#508438)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.10" date="1320962400">- mesa-6.5.1-nonconformant-visual.patch: Don't warn about the non-
  conformant synthetic Composite visual (#442738)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 6.5.1-7.11" date="1368655200">- CVE-2013-1993 - buffer overflows in DRI protocol (#963066)</changelog>
</package>
<package pkgid="f79af1fef32252a3bc161c3b28e21855b3814875" name="mesa-libGLU" arch="i386">
  <version epoch="0" ver="6.5.1" rel="7.11.el5_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.9" date="1313618400">- mesa-6.5.1-glu-invert-matrix.patch: Fix matrix inversion math (#508438)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.10" date="1320962400">- mesa-6.5.1-nonconformant-visual.patch: Don't warn about the non-
  conformant synthetic Composite visual (#442738)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 6.5.1-7.11" date="1368655200">- CVE-2013-1993 - buffer overflows in DRI protocol (#963066)</changelog>
</package>
<package pkgid="1e07492c9e7c2c7cb47167ce7ee97cb98952411b" name="mesa-libGLU-devel" arch="i386">
  <version epoch="0" ver="6.5.1" rel="7.11.el5_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.9" date="1313618400">- mesa-6.5.1-glu-invert-matrix.patch: Fix matrix inversion math (#508438)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.10" date="1320962400">- mesa-6.5.1-nonconformant-visual.patch: Don't warn about the non-
  conformant synthetic Composite visual (#442738)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 6.5.1-7.11" date="1368655200">- CVE-2013-1993 - buffer overflows in DRI protocol (#963066)</changelog>
</package>
<package pkgid="3a4122f9bb37a17556244bf879db56a8677352f4" name="mesa-libGLw" arch="i386">
  <version epoch="0" ver="6.5.1" rel="7.11.el5_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.9" date="1313618400">- mesa-6.5.1-glu-invert-matrix.patch: Fix matrix inversion math (#508438)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.10" date="1320962400">- mesa-6.5.1-nonconformant-visual.patch: Don't warn about the non-
  conformant synthetic Composite visual (#442738)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 6.5.1-7.11" date="1368655200">- CVE-2013-1993 - buffer overflows in DRI protocol (#963066)</changelog>
</package>
<package pkgid="802dae1b9097264be8ed09fba2472df1e39962f6" name="mesa-libGLw-devel" arch="i386">
  <version epoch="0" ver="6.5.1" rel="7.11.el5_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.9" date="1313618400">- mesa-6.5.1-glu-invert-matrix.patch: Fix matrix inversion math (#508438)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.10" date="1320962400">- mesa-6.5.1-nonconformant-visual.patch: Don't warn about the non-
  conformant synthetic Composite visual (#442738)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 6.5.1-7.11" date="1368655200">- CVE-2013-1993 - buffer overflows in DRI protocol (#963066)</changelog>
</package>
<package pkgid="5f6459e5d1489ca4f4d9dc95f3fbad12ef19447c" name="mesa-libOSMesa" arch="i386">
  <version epoch="0" ver="6.5.1" rel="7.11.el5_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.9" date="1313618400">- mesa-6.5.1-glu-invert-matrix.patch: Fix matrix inversion math (#508438)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.10" date="1320962400">- mesa-6.5.1-nonconformant-visual.patch: Don't warn about the non-
  conformant synthetic Composite visual (#442738)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 6.5.1-7.11" date="1368655200">- CVE-2013-1993 - buffer overflows in DRI protocol (#963066)</changelog>
</package>
<package pkgid="7d8fb8f33a59154adbfec3d0b66df693edf69f20" name="mesa-libOSMesa-devel" arch="i386">
  <version epoch="0" ver="6.5.1" rel="7.11.el5_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.9" date="1313618400">- mesa-6.5.1-glu-invert-matrix.patch: Fix matrix inversion math (#508438)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.10" date="1320962400">- mesa-6.5.1-nonconformant-visual.patch: Don't warn about the non-
  conformant synthetic Composite visual (#442738)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 6.5.1-7.11" date="1368655200">- CVE-2013-1993 - buffer overflows in DRI protocol (#963066)</changelog>
</package>
<package pkgid="074687139415b554eaee6e57c9294a80b84e0990" name="mesa-source" arch="i386">
  <version epoch="0" ver="6.5.1" rel="7.11.el5_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.9" date="1313618400">- mesa-6.5.1-glu-invert-matrix.patch: Fix matrix inversion math (#508438)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.5.1-7.10" date="1320962400">- mesa-6.5.1-nonconformant-visual.patch: Don't warn about the non-
  conformant synthetic Composite visual (#442738)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 6.5.1-7.11" date="1368655200">- CVE-2013-1993 - buffer overflows in DRI protocol (#963066)</changelog>
</package>
<package pkgid="d0b1944ed865648edcaf86ed00e70a70048736c8" name="mod_dav_svn" arch="i386">
  <version epoch="0" ver="1.6.11" rel="11.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-9" date="1333144800">- add reintegrate merge parent dir access fixes (#691375)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-10" date="1334268000">- fix regression in reintegrate merge fixes (#691375)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-11" date="1365026400">- add security fixes for CVE-2013-1845, CVE-2013-1846, CVE-2013-1847,
  CVE-2013-1849 (#947369)</changelog>
</package>
<package pkgid="8bd9929245ea8e79eb83beeaa4be280f7034ba18" name="mod_dav_svn" arch="i386">
  <version epoch="0" ver="1.6.11" rel="12.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-10" date="1334275200">- fix regression in reintegrate merge fixes (#691375)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-11" date="1365033600">- add security fixes for CVE-2013-1845, CVE-2013-1846, CVE-2013-1847,
  CVE-2013-1849 (#947370)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-12" date="1392249600">- add security fixes for CVE-2013-1968, CVE-2013-2112, CVE-2014-0032</changelog>
</package>
<package pkgid="b8e5f41998d3e4615101339e71cf43689802de2a" name="mod_dav_svn" arch="i386">
  <version epoch="0" ver="1.6.11" rel="7.el5_6.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.2" date="1299016800">- add security fix for CVE-2011-0715 (#681171)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.3" date="1299016801">- add fix for svnadmin hotcopy (#681522)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.4" date="1306879200">- add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 (#709218)</changelog>
</package>
<package pkgid="571b452b361717a2fa9bc1cde7bfca3a88b84eca" name="mod_nss" arch="i386">
  <version epoch="0" ver="1.0.8" rel="8.el5_10"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.8-6" date="1320883200">- Bugzilla Bug #749401 - https://server.testrelm/ipa/xml: Bad Request
  intermittent errors
- Bugzilla Bug #749402 - may be possible to spoof mod_nss FakeBasicAuth
- Bugzilla Bug #749405 - mod_nss fails debug assertion
- Bugzilla Bug #749406 - Add 'libnssckbi.so' runtime dependency . .</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 1.0.8-7" date="1327708800">- Fix 'Bugzilla Bug #749405 - mod_nss fails debug assertion' by removing
  'mod_nss-no_shutdown_if_not_init.patch' and applying
  'mod_nss-no_shutdown_if_not_init_2.patch' instead
- The 'mod_nss-no_shutdown_if_not_init_2.patch' patch also fixes
  Bugzilla Bug #784548 - File descriptor leak after "service httpd reload"
  or httpd doesn't reload</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.8-8" date="1384560000">- Resolves: CVE-2013-4566
- Bugzilla Bug #989724 - mod_nss does not respect `NSSVerifyClient` in
  Directory [rhel-5.10.z]</changelog>
</package>
<package pkgid="b6edfdf607929b90c646604917b3757bea9b20a7" name="mod_ssl" arch="i386">
  <version epoch="1" ver="2.2.3" rel="53.sl5.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-52" date="1305151200">- mod_include: fix parsing across bucket boundaries (#698402)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53" date="1308261600">- mod_cache: add "hard" argument to CacheMaxExpire (#379811)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53.1" date="1314741600">- add security fix for CVE-2011-3192 (#733059)</changelog>
</package>
<package pkgid="438fa64b0e678d406671b7e18a92ed17e76d35a3" name="mod_ssl" arch="i386">
  <version epoch="1" ver="2.2.3" rel="53.sl5.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53" date="1308261600">- mod_cache: add "hard" argument to CacheMaxExpire (#379811)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53.1" date="1314741600">- add security fix for CVE-2011-3192 (#733059)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-53.3" date="1317938400">- add security fix for CVE-2011-3368 (#743903)
- fix regressions in byterange handling (#736593)</changelog>
</package>
<package pkgid="f1ece6aa674c217eb3c1b729f45abb99cc074c21" name="mod_ssl" arch="i386">
  <version epoch="1" ver="2.2.3" rel="63.sl5.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-63" date="1325714400">- revert addition of LDAP nested group support (#546443)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-63.1" date="1328738400">- add security fixes for CVE-2012-0053, CVE-2012-0031, CVE-2011-3607 (#787596)	
- remove patch for CVE-2011-3638, obviated by fix for CVE-2011-3639</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt; 2.2.3-63.sl5.1" date="1330380000">This package must not feature TUVs branding
  Spec change: The index.html file is outside of the source tarball, so we need to patch it in the install step
- Added patch httpd-sl_index.html.sl5.patch
  Switches to an SL branded default index
- Added patch httpd-spec_sl_index.html.sl5.patch
- Prevented application of patch httpd-sl_index.html.sl5.patch
  This is the patch we need, just can	 be applied in the normal place
- Prevented application of patch httpd-spec_sl_index.html.sl5.patch</changelog>
</package>
<package pkgid="c17c5d2abc498b53c6177248f3de311ffa8b971b" name="mod_ssl" arch="i386">
  <version epoch="1" ver="2.2.3" rel="74.sl5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-73" date="1350597600">- fix %post scriptlet output (#752618, #867736)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-74" date="1351116000">- further %post scriptlet fix (#752618, #867736)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt; 2.2.3-74.sl5" date="1357682400">This package must not feature TUVs branding
  Spec change: The index.html file is outside of the source tarball, so we need to patch it in the install step
- Added patch httpd-spec_sl_index.html.sl5.patch
- Added patch httpd-sl_index.html.sl5.patch
  Switches to an SL branded default index
- Prevented application of patch httpd-sl_index.html.sl5.patch
  This is the patch we need, just can	 be applied in the normal place
- Prevented application of patch httpd-spec_sl_index.html.sl5.patch</changelog>
</package>
<package pkgid="062e351ebe1481da3ef4caa8028d41a50dd66a37" name="mod_ssl" arch="i386">
  <version epoch="1" ver="2.2.3" rel="78.sl5"/>
  <changelog author="&lt;jorton@redhat.com&gt; - 2.2.3-77" date="1362780000">- add security fixes for CVE-2012-3499, CVE-2012-4558 (#915883, #915884)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-78" date="1367272800">- mod_rewrite: add security fix for CVE-2013-1862 (#953729)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1368568800">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: (Release: .*).el5(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script</changelog>
</package>
<package pkgid="d918737e5c68219130f0a6728e0dca03b711801f" name="mod_ssl" arch="i386">
  <version epoch="1" ver="2.2.3" rel="82.sl5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-81" date="1371168000">- mod_mem_cache: thread-safety fixes (Jan Kaluza, #970994)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-82" date="1375488000">- mod_dav: add security fix for CVE-2013-1896 (#991366)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1376438400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="d415c775d686db84f218fb7820616edd07be158f" name="mod_ssl" arch="i386">
  <version epoch="1" ver="2.2.3" rel="85.sl5"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-84" date="1395360000">- mod_dav: add security fix for CVE-2013-6438 (#1078176)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-85" date="1395878400">- mod_log_config: add security fix for CVE-2014-0098 (#1078176)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1396656000">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="5dc929954918eb419ce785a6c1673bbce3089777" name="mod_ssl" arch="i386">
  <version epoch="1" ver="2.2.3" rel="87.sl5"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-86" date="1405728000">- mod_status: add security fix for CVE-2014-0226</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-87" date="1405728001">- mod_cgid: add security fix for CVE-2014-0231
- mod_deflate: add security fix for CVE-2014-0118</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1406160000">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="f0833ab0a9ab97c1a74b970b1dd14a84c66a20f8" name="mod_ssl" arch="i386">
  <version epoch="1" ver="2.2.3" rel="92.sl5"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.3-91" date="1405728000">- mod_cgid: add security fix for CVE-2014-0231
- mod_deflate: add security fix for CVE-2014-0118</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-92" date="1468368000">- add security fix for CVE-2016-5387</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1468886400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: distro Red Hat Enterprise Linux =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding</changelog>
</package>
<package pkgid="0b8c4a23b236f0cf1b9ba1f990543b59dc3e14c7" name="mysql" arch="i386">
  <version epoch="0" ver="5.0.95" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.77-4.5" date="1291413600">- Add fix for crash during SHOW CREATE TABLE
Resolves: #659609
- Add fix for corruption of large BLOB values during dump/reload
Resolves: #658863</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.77-4.el5_6.6" date="1304028000">- Add fix for regression with input lines over 1MB (caused by fix for 658863)
Resolves: #700497
- Add fix for memory leak with DISTINCT, ORDER BY in subquery
Resolves: #692953</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-1.el5_7.1" date="1328392800">- Update to 5.0.95, to get the last upstream bugfixes in this release series
  including numerous CVEs announced in January 2012
Resolves: #787140</changelog>
</package>
<package pkgid="6e0c567556c952819f2f062255b12dd8bc04edf3" name="mysql" arch="i386">
  <version epoch="0" ver="5.0.95" rel="3.el5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-1" date="1328392800">- Update to 5.0.95, to get the last upstream bugfixes in this release series
  including numerous CVEs announced in January 2012
Resolves: #787141</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-2" date="1338674400">- Support rotation of mysqld log (though this is not enabled by default)
Resolves: #647223
- Fix crash with EXPLAIN and prepared statements
Resolves: #654000
- Adopt init script updates from the last Fedora init script (F-15)
Resolves: #703476
- Re-enable profiling feature, unintentionally disabled in 5.0.95-1
Resolves: #806365</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-3" date="1348783200">- Re-add patch for CVE-2009-4030, mistakenly removed in 5.0.95 rebase
Resolves: CVE-2012-4452</changelog>
</package>
<package pkgid="98396617ff822343e5294be2be8f5d22da1c7f70" name="mysql" arch="i386">
  <version epoch="0" ver="5.0.95" rel="5.el5_9"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-3" date="1348783200">- Re-add patch for CVE-2009-4030, mistakenly removed in 5.0.95 rebase
Resolves: CVE-2012-4452</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-4" date="1357596000">- Add patches for CVE-2012-2122, CVE-2012-2749, CVE-2012-5611
Resolves: #892679</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-5" date="1357682400">- Rebuild to fix wrong package tag
Related: #892679</changelog>
</package>
<package pkgid="72be1432fd4fa21c4766fa4a033a160ae7af9e3e" name="mysql-bench" arch="i386">
  <version epoch="0" ver="5.0.95" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.77-4.5" date="1291413600">- Add fix for crash during SHOW CREATE TABLE
Resolves: #659609
- Add fix for corruption of large BLOB values during dump/reload
Resolves: #658863</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.77-4.el5_6.6" date="1304028000">- Add fix for regression with input lines over 1MB (caused by fix for 658863)
Resolves: #700497
- Add fix for memory leak with DISTINCT, ORDER BY in subquery
Resolves: #692953</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-1.el5_7.1" date="1328392800">- Update to 5.0.95, to get the last upstream bugfixes in this release series
  including numerous CVEs announced in January 2012
Resolves: #787140</changelog>
</package>
<package pkgid="6110881611efa2577fa87cbc6dd81c0ce01417d4" name="mysql-bench" arch="i386">
  <version epoch="0" ver="5.0.95" rel="3.el5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-1" date="1328392800">- Update to 5.0.95, to get the last upstream bugfixes in this release series
  including numerous CVEs announced in January 2012
Resolves: #787141</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-2" date="1338674400">- Support rotation of mysqld log (though this is not enabled by default)
Resolves: #647223
- Fix crash with EXPLAIN and prepared statements
Resolves: #654000
- Adopt init script updates from the last Fedora init script (F-15)
Resolves: #703476
- Re-enable profiling feature, unintentionally disabled in 5.0.95-1
Resolves: #806365</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-3" date="1348783200">- Re-add patch for CVE-2009-4030, mistakenly removed in 5.0.95 rebase
Resolves: CVE-2012-4452</changelog>
</package>
<package pkgid="e22f703464fef6fb7046da5ac1541576dad1391e" name="mysql-bench" arch="i386">
  <version epoch="0" ver="5.0.95" rel="5.el5_9"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-3" date="1348783200">- Re-add patch for CVE-2009-4030, mistakenly removed in 5.0.95 rebase
Resolves: CVE-2012-4452</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-4" date="1357596000">- Add patches for CVE-2012-2122, CVE-2012-2749, CVE-2012-5611
Resolves: #892679</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-5" date="1357682400">- Rebuild to fix wrong package tag
Related: #892679</changelog>
</package>
<package pkgid="5afa81a033a69253382998ad1d1085ad96ff18b8" name="mysql-devel" arch="i386">
  <version epoch="0" ver="5.0.95" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.77-4.5" date="1291413600">- Add fix for crash during SHOW CREATE TABLE
Resolves: #659609
- Add fix for corruption of large BLOB values during dump/reload
Resolves: #658863</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.77-4.el5_6.6" date="1304028000">- Add fix for regression with input lines over 1MB (caused by fix for 658863)
Resolves: #700497
- Add fix for memory leak with DISTINCT, ORDER BY in subquery
Resolves: #692953</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-1.el5_7.1" date="1328392800">- Update to 5.0.95, to get the last upstream bugfixes in this release series
  including numerous CVEs announced in January 2012
Resolves: #787140</changelog>
</package>
<package pkgid="e9ed383bc20a3eaae0eed105b4c5e0f6b80379ce" name="mysql-devel" arch="i386">
  <version epoch="0" ver="5.0.95" rel="3.el5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-1" date="1328392800">- Update to 5.0.95, to get the last upstream bugfixes in this release series
  including numerous CVEs announced in January 2012
Resolves: #787141</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-2" date="1338674400">- Support rotation of mysqld log (though this is not enabled by default)
Resolves: #647223
- Fix crash with EXPLAIN and prepared statements
Resolves: #654000
- Adopt init script updates from the last Fedora init script (F-15)
Resolves: #703476
- Re-enable profiling feature, unintentionally disabled in 5.0.95-1
Resolves: #806365</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-3" date="1348783200">- Re-add patch for CVE-2009-4030, mistakenly removed in 5.0.95 rebase
Resolves: CVE-2012-4452</changelog>
</package>
<package pkgid="85071a33d0060e634db4f35091d3fb81e6f84a0d" name="mysql-devel" arch="i386">
  <version epoch="0" ver="5.0.95" rel="5.el5_9"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-3" date="1348783200">- Re-add patch for CVE-2009-4030, mistakenly removed in 5.0.95 rebase
Resolves: CVE-2012-4452</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-4" date="1357596000">- Add patches for CVE-2012-2122, CVE-2012-2749, CVE-2012-5611
Resolves: #892679</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-5" date="1357682400">- Rebuild to fix wrong package tag
Related: #892679</changelog>
</package>
<package pkgid="d2f94baff5c3b1834e2d50d9e546ed6809fef319" name="mysql-server" arch="i386">
  <version epoch="0" ver="5.0.95" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.77-4.5" date="1291413600">- Add fix for crash during SHOW CREATE TABLE
Resolves: #659609
- Add fix for corruption of large BLOB values during dump/reload
Resolves: #658863</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.77-4.el5_6.6" date="1304028000">- Add fix for regression with input lines over 1MB (caused by fix for 658863)
Resolves: #700497
- Add fix for memory leak with DISTINCT, ORDER BY in subquery
Resolves: #692953</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-1.el5_7.1" date="1328392800">- Update to 5.0.95, to get the last upstream bugfixes in this release series
  including numerous CVEs announced in January 2012
Resolves: #787140</changelog>
</package>
<package pkgid="028b34f2dadee0600dc69210ce44adfe2d1d5d16" name="mysql-server" arch="i386">
  <version epoch="0" ver="5.0.95" rel="3.el5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-1" date="1328392800">- Update to 5.0.95, to get the last upstream bugfixes in this release series
  including numerous CVEs announced in January 2012
Resolves: #787141</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-2" date="1338674400">- Support rotation of mysqld log (though this is not enabled by default)
Resolves: #647223
- Fix crash with EXPLAIN and prepared statements
Resolves: #654000
- Adopt init script updates from the last Fedora init script (F-15)
Resolves: #703476
- Re-enable profiling feature, unintentionally disabled in 5.0.95-1
Resolves: #806365</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-3" date="1348783200">- Re-add patch for CVE-2009-4030, mistakenly removed in 5.0.95 rebase
Resolves: CVE-2012-4452</changelog>
</package>
<package pkgid="11da7dc05c3a7f0a08d3f29c046b568b9370fad4" name="mysql-server" arch="i386">
  <version epoch="0" ver="5.0.95" rel="5.el5_9"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-3" date="1348783200">- Re-add patch for CVE-2009-4030, mistakenly removed in 5.0.95 rebase
Resolves: CVE-2012-4452</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-4" date="1357596000">- Add patches for CVE-2012-2122, CVE-2012-2749, CVE-2012-5611
Resolves: #892679</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-5" date="1357682400">- Rebuild to fix wrong package tag
Related: #892679</changelog>
</package>
<package pkgid="48de6edc444e77a6d1a305cb3309cdf2e2f0afe9" name="mysql-test" arch="i386">
  <version epoch="0" ver="5.0.95" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.77-4.5" date="1291413600">- Add fix for crash during SHOW CREATE TABLE
Resolves: #659609
- Add fix for corruption of large BLOB values during dump/reload
Resolves: #658863</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.77-4.el5_6.6" date="1304028000">- Add fix for regression with input lines over 1MB (caused by fix for 658863)
Resolves: #700497
- Add fix for memory leak with DISTINCT, ORDER BY in subquery
Resolves: #692953</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-1.el5_7.1" date="1328392800">- Update to 5.0.95, to get the last upstream bugfixes in this release series
  including numerous CVEs announced in January 2012
Resolves: #787140</changelog>
</package>
<package pkgid="29d44f9fbdd66e49ed7392d0b3aba9940f8e7031" name="mysql-test" arch="i386">
  <version epoch="0" ver="5.0.95" rel="3.el5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-1" date="1328392800">- Update to 5.0.95, to get the last upstream bugfixes in this release series
  including numerous CVEs announced in January 2012
Resolves: #787141</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-2" date="1338674400">- Support rotation of mysqld log (though this is not enabled by default)
Resolves: #647223
- Fix crash with EXPLAIN and prepared statements
Resolves: #654000
- Adopt init script updates from the last Fedora init script (F-15)
Resolves: #703476
- Re-enable profiling feature, unintentionally disabled in 5.0.95-1
Resolves: #806365</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-3" date="1348783200">- Re-add patch for CVE-2009-4030, mistakenly removed in 5.0.95 rebase
Resolves: CVE-2012-4452</changelog>
</package>
<package pkgid="6d18902c3e305ae84136378d60acf15d9bdce106" name="mysql-test" arch="i386">
  <version epoch="0" ver="5.0.95" rel="5.el5_9"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-3" date="1348783200">- Re-add patch for CVE-2009-4030, mistakenly removed in 5.0.95 rebase
Resolves: CVE-2012-4452</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-4" date="1357596000">- Add patches for CVE-2012-2122, CVE-2012-2749, CVE-2012-5611
Resolves: #892679</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.0.95-5" date="1357682400">- Rebuild to fix wrong package tag
Related: #892679</changelog>
</package>
<package pkgid="36586cec8826b1520224cf9c67f415624d67116b" name="mysql51" arch="i386">
  <version epoch="0" ver="1" rel="9.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-6" date="1367539200">- Add better descriptions for packages
- Create SELinux context rules</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-8" date="1367625600">- Add context for mysqld_safe</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-9" date="1369353600">- Fix MANPATH definition, colon in the end is correct (it means default)
  Resolves: #966404</changelog>
</package>
<package pkgid="393e00f306670e551f7c3db74f5260abea9460a7" name="mysql51-build" arch="i386">
  <version epoch="0" ver="1" rel="9.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-6" date="1367539200">- Add better descriptions for packages
- Create SELinux context rules</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-8" date="1367625600">- Add context for mysqld_safe</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-9" date="1369353600">- Fix MANPATH definition, colon in the end is correct (it means default)
  Resolves: #966404</changelog>
</package>
<package pkgid="357d2120c9ce13a1a7954c9273b58eb2d5545de1" name="mysql51-mysql" arch="i386">
  <version epoch="0" ver="5.1.70" rel="1.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.69-6" date="1368144000">- Restore SELinux context after installing -server package
- Sub-package -test should require -libs
- Added BuildRequire: scl-utils-build for any case</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.69-7" date="1368230400">- Sub-packages -server and -bench also should require -libs</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.70-1" date="1374624000">- Update to MySQL 5.1.70, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
  Resolves: #986138</changelog>
</package>
<package pkgid="a9d27f15f9515cb02b0cb117d5c537af0a5a7acb" name="mysql51-mysql-bench" arch="i386">
  <version epoch="0" ver="5.1.70" rel="1.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.69-6" date="1368144000">- Restore SELinux context after installing -server package
- Sub-package -test should require -libs
- Added BuildRequire: scl-utils-build for any case</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.69-7" date="1368230400">- Sub-packages -server and -bench also should require -libs</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.70-1" date="1374624000">- Update to MySQL 5.1.70, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
  Resolves: #986138</changelog>
</package>
<package pkgid="85dfcfd950cca843f7f68b2af2a02496eb5f428f" name="mysql51-mysql-libs" arch="i386">
  <version epoch="0" ver="5.1.70" rel="1.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.69-6" date="1368144000">- Restore SELinux context after installing -server package
- Sub-package -test should require -libs
- Added BuildRequire: scl-utils-build for any case</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.69-7" date="1368230400">- Sub-packages -server and -bench also should require -libs</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.70-1" date="1374624000">- Update to MySQL 5.1.70, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
  Resolves: #986138</changelog>
</package>
<package pkgid="d3322fdfd3a7a780cb8e08d242d7bcfa06607a02" name="mysql51-mysql-server" arch="i386">
  <version epoch="0" ver="5.1.70" rel="1.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.69-6" date="1368144000">- Restore SELinux context after installing -server package
- Sub-package -test should require -libs
- Added BuildRequire: scl-utils-build for any case</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.69-7" date="1368230400">- Sub-packages -server and -bench also should require -libs</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.70-1" date="1374624000">- Update to MySQL 5.1.70, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
  Resolves: #986138</changelog>
</package>
<package pkgid="1e71f2257b4cb1ce6365be1e252b75c7a53f4627" name="mysql51-mysql-test" arch="i386">
  <version epoch="0" ver="5.1.70" rel="1.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.69-6" date="1368144000">- Restore SELinux context after installing -server package
- Sub-package -test should require -libs
- Added BuildRequire: scl-utils-build for any case</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.69-7" date="1368230400">- Sub-packages -server and -bench also should require -libs</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.1.70-1" date="1374624000">- Update to MySQL 5.1.70, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
  Resolves: #986138</changelog>
</package>
<package pkgid="dbc110c273129253851b024d0747fcef3300d4a9" name="mysql51-runtime" arch="i386">
  <version epoch="0" ver="1" rel="9.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-6" date="1367539200">- Add better descriptions for packages
- Create SELinux context rules</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-8" date="1367625600">- Add context for mysqld_safe</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-9" date="1369353600">- Fix MANPATH definition, colon in the end is correct (it means default)
  Resolves: #966404</changelog>
</package>
<package pkgid="cf0a379f2eaf6e179639f6c5370fa99d0c394738" name="mysql55" arch="i386">
  <version epoch="0" ver="1" rel="12.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-10" date="1367539200">- Handle context of the init script
- Change context on whole root directory (libselinux is fixed now #953947)
- Add better descriptions for packages
- Create SELinux context rules also for RHEL-5</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-11" date="1367625600">- Remove RHEL-6 stuff
- Define context for mysqld_safe</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-12" date="1369353600">- Fix MANPATH definition, colon in the end is correct (it means default)
  Resolves: #966405</changelog>
</package>
<package pkgid="1eb0a534eff712517d3a9592aa5f696b262dd388" name="mysql55-build" arch="i386">
  <version epoch="0" ver="1" rel="12.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-10" date="1367539200">- Handle context of the init script
- Change context on whole root directory (libselinux is fixed now #953947)
- Add better descriptions for packages
- Create SELinux context rules also for RHEL-5</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-11" date="1367625600">- Remove RHEL-6 stuff
- Define context for mysqld_safe</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-12" date="1369353600">- Fix MANPATH definition, colon in the end is correct (it means default)
  Resolves: #966405</changelog>
</package>
<package pkgid="009ea6db1e7df83c54c77614d5e232316291e06d" name="mysql55-mysql" arch="i386">
  <version epoch="0" ver="5.5.32" rel="3.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-1" date="1372118400">- Update to MySQL 5.5.32, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
  Resolves: #975113
- Use man pages from 5.5.30 due to license change
  Resolves: #975785
- Fix issues found by Coverity
  Resolves: #975904</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-2" date="1374278400">- Fix text in mysql-readme-devel for RHEL-5
  Resolves: #975119
- Fix misleading error message when uninstalling built-in plugins
  Resolves: #985402
- Do not use pie linker flags, they don't work in RHEL-5
  Resolves: #985418</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-3" date="1376352000">- Remove -N option in useradd call, it is not supported
  Resolves: #994496</changelog>
</package>
<package pkgid="cac47ad47266f4d9102af881835e20288f31c014" name="mysql55-mysql" arch="i386">
  <version epoch="0" ver="5.5.36" rel="2.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-3" date="1376352000">- Remove -N option in useradd call, it is not supported
  Resolves: #994496</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-1" date="1391472000">- Update to MySQL 5.5.36, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
  Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
  CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
  CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
  Resolves: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-2" date="1392163200">- Fix CVE-2014-0001
  Related: #1055875</changelog>
</package>
<package pkgid="e93b61136be49bdba26cedcbb0710f67637fccae" name="mysql55-mysql" arch="i386">
  <version epoch="0" ver="5.5.37" rel="1.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-1" date="1391472000">- Update to MySQL 5.5.36, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
  Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
  CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
  CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
  Resolves: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-2" date="1392163200">- Fix CVE-2014-0001
  Related: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.5.37-1" date="1397779200">- Update to MySQL 5.5.37, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
  Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
  CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
  Resolves: #1089202</changelog>
</package>
<package pkgid="ca4982866cf85bd5b8d94a49adae27d289778a0d" name="mysql55-mysql" arch="i386">
  <version epoch="0" ver="5.5.40" rel="2.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.5.37-1" date="1397779200">- Update to MySQL 5.5.37, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
  Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
  CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
  Resolves: #1089203</changelog>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.40-1" date="1415318400">- Rebase to 5.5.40
  Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
  CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
  CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
  Resolves: #1160514</changelog>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.5.40-2" date="1415664000">filter perl(GD) from Requires (perl-gd is not available for RHEL5)
  Resolves: #1160514</changelog>
</package>
<package pkgid="33fe4c0b32a53d3a2a69d6c5599cd3dcc4bd9cfe" name="mysql55-mysql" arch="i386">
  <version epoch="0" ver="5.5.45" rel="1.el5"/>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.40-1" date="1415318400">- Rebase to 5.5.40
  Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
  CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
  CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
  Resolves: #1160514</changelog>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.5.40-2" date="1415664000">filter perl(GD) from Requires (perl-gd is not available for RHEL5)
  Resolves: #1160514</changelog>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.45-1" date="1438128000">- Rebase to 5.5.45
  Includes fixes for: CVE-2014-6568 CVE-2015-0374
  CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
  CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571 CVE-2015-0433
  CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582 CVE-2015-2620
  CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752 CVE-2015-4757
  Resolves: #1247020</changelog>
</package>
<package pkgid="85a4fc48f84f379d9110d73c2aea64fbb15ca973" name="mysql55-mysql-bench" arch="i386">
  <version epoch="0" ver="5.5.32" rel="3.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-1" date="1372118400">- Update to MySQL 5.5.32, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
  Resolves: #975113
- Use man pages from 5.5.30 due to license change
  Resolves: #975785
- Fix issues found by Coverity
  Resolves: #975904</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-2" date="1374278400">- Fix text in mysql-readme-devel for RHEL-5
  Resolves: #975119
- Fix misleading error message when uninstalling built-in plugins
  Resolves: #985402
- Do not use pie linker flags, they don't work in RHEL-5
  Resolves: #985418</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-3" date="1376352000">- Remove -N option in useradd call, it is not supported
  Resolves: #994496</changelog>
</package>
<package pkgid="ae293c05a4431e27b8a4e565fd9fd929a1911def" name="mysql55-mysql-bench" arch="i386">
  <version epoch="0" ver="5.5.36" rel="2.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-3" date="1376352000">- Remove -N option in useradd call, it is not supported
  Resolves: #994496</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-1" date="1391472000">- Update to MySQL 5.5.36, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
  Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
  CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
  CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
  Resolves: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-2" date="1392163200">- Fix CVE-2014-0001
  Related: #1055875</changelog>
</package>
<package pkgid="1c03cefe4dbfad572f7881a1459815c873dd1c17" name="mysql55-mysql-bench" arch="i386">
  <version epoch="0" ver="5.5.37" rel="1.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-1" date="1391472000">- Update to MySQL 5.5.36, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
  Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
  CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
  CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
  Resolves: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-2" date="1392163200">- Fix CVE-2014-0001
  Related: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.5.37-1" date="1397779200">- Update to MySQL 5.5.37, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
  Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
  CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
  Resolves: #1089202</changelog>
</package>
<package pkgid="e33a35000421481c8504fc6f6cff059140afb747" name="mysql55-mysql-bench" arch="i386">
  <version epoch="0" ver="5.5.40" rel="2.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.5.37-1" date="1397779200">- Update to MySQL 5.5.37, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
  Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
  CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
  Resolves: #1089203</changelog>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.40-1" date="1415318400">- Rebase to 5.5.40
  Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
  CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
  CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
  Resolves: #1160514</changelog>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.5.40-2" date="1415664000">filter perl(GD) from Requires (perl-gd is not available for RHEL5)
  Resolves: #1160514</changelog>
</package>
<package pkgid="047aac751e5138e7a29677bd62e36e3fb11c6f4c" name="mysql55-mysql-bench" arch="i386">
  <version epoch="0" ver="5.5.45" rel="1.el5"/>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.40-1" date="1415318400">- Rebase to 5.5.40
  Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
  CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
  CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
  Resolves: #1160514</changelog>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.5.40-2" date="1415664000">filter perl(GD) from Requires (perl-gd is not available for RHEL5)
  Resolves: #1160514</changelog>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.45-1" date="1438128000">- Rebase to 5.5.45
  Includes fixes for: CVE-2014-6568 CVE-2015-0374
  CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
  CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571 CVE-2015-0433
  CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582 CVE-2015-2620
  CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752 CVE-2015-4757
  Resolves: #1247020</changelog>
</package>
<package pkgid="b3f49416ae8cff8ddfcfc863ef50fe400df4f24b" name="mysql55-mysql-devel" arch="i386">
  <version epoch="0" ver="5.5.32" rel="3.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-1" date="1372118400">- Update to MySQL 5.5.32, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
  Resolves: #975113
- Use man pages from 5.5.30 due to license change
  Resolves: #975785
- Fix issues found by Coverity
  Resolves: #975904</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-2" date="1374278400">- Fix text in mysql-readme-devel for RHEL-5
  Resolves: #975119
- Fix misleading error message when uninstalling built-in plugins
  Resolves: #985402
- Do not use pie linker flags, they don't work in RHEL-5
  Resolves: #985418</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-3" date="1376352000">- Remove -N option in useradd call, it is not supported
  Resolves: #994496</changelog>
</package>
<package pkgid="51aa5f9d12b448e55c45075cc750cc26010d76a9" name="mysql55-mysql-devel" arch="i386">
  <version epoch="0" ver="5.5.36" rel="2.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-3" date="1376352000">- Remove -N option in useradd call, it is not supported
  Resolves: #994496</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-1" date="1391472000">- Update to MySQL 5.5.36, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
  Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
  CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
  CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
  Resolves: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-2" date="1392163200">- Fix CVE-2014-0001
  Related: #1055875</changelog>
</package>
<package pkgid="c1bf153add36539726b55a82f5deaeb8c95a1336" name="mysql55-mysql-devel" arch="i386">
  <version epoch="0" ver="5.5.37" rel="1.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-1" date="1391472000">- Update to MySQL 5.5.36, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
  Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
  CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
  CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
  Resolves: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-2" date="1392163200">- Fix CVE-2014-0001
  Related: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.5.37-1" date="1397779200">- Update to MySQL 5.5.37, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
  Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
  CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
  Resolves: #1089202</changelog>
</package>
<package pkgid="354c40854e5cf119c1aba7337988485e81102fea" name="mysql55-mysql-devel" arch="i386">
  <version epoch="0" ver="5.5.40" rel="2.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.5.37-1" date="1397779200">- Update to MySQL 5.5.37, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
  Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
  CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
  Resolves: #1089203</changelog>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.40-1" date="1415318400">- Rebase to 5.5.40
  Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
  CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
  CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
  Resolves: #1160514</changelog>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.5.40-2" date="1415664000">filter perl(GD) from Requires (perl-gd is not available for RHEL5)
  Resolves: #1160514</changelog>
</package>
<package pkgid="9859d16de6c6166643319324e7b69afd0c2a058e" name="mysql55-mysql-devel" arch="i386">
  <version epoch="0" ver="5.5.45" rel="1.el5"/>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.40-1" date="1415318400">- Rebase to 5.5.40
  Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
  CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
  CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
  Resolves: #1160514</changelog>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.5.40-2" date="1415664000">filter perl(GD) from Requires (perl-gd is not available for RHEL5)
  Resolves: #1160514</changelog>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.45-1" date="1438128000">- Rebase to 5.5.45
  Includes fixes for: CVE-2014-6568 CVE-2015-0374
  CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
  CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571 CVE-2015-0433
  CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582 CVE-2015-2620
  CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752 CVE-2015-4757
  Resolves: #1247020</changelog>
</package>
<package pkgid="48f7b6163fbc0a510b8ff95f33d0df7524b1bb68" name="mysql55-mysql-libs" arch="i386">
  <version epoch="0" ver="5.5.32" rel="3.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-1" date="1372118400">- Update to MySQL 5.5.32, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
  Resolves: #975113
- Use man pages from 5.5.30 due to license change
  Resolves: #975785
- Fix issues found by Coverity
  Resolves: #975904</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-2" date="1374278400">- Fix text in mysql-readme-devel for RHEL-5
  Resolves: #975119
- Fix misleading error message when uninstalling built-in plugins
  Resolves: #985402
- Do not use pie linker flags, they don't work in RHEL-5
  Resolves: #985418</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-3" date="1376352000">- Remove -N option in useradd call, it is not supported
  Resolves: #994496</changelog>
</package>
<package pkgid="019c44aa376cd48f026c2a3d3f657cd8ce9fba1e" name="mysql55-mysql-libs" arch="i386">
  <version epoch="0" ver="5.5.36" rel="2.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-3" date="1376352000">- Remove -N option in useradd call, it is not supported
  Resolves: #994496</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-1" date="1391472000">- Update to MySQL 5.5.36, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
  Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
  CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
  CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
  Resolves: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-2" date="1392163200">- Fix CVE-2014-0001
  Related: #1055875</changelog>
</package>
<package pkgid="b806462bae6e5abd096496793f5b5e5a3dca63fc" name="mysql55-mysql-libs" arch="i386">
  <version epoch="0" ver="5.5.37" rel="1.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-1" date="1391472000">- Update to MySQL 5.5.36, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
  Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
  CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
  CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
  Resolves: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-2" date="1392163200">- Fix CVE-2014-0001
  Related: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.5.37-1" date="1397779200">- Update to MySQL 5.5.37, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
  Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
  CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
  Resolves: #1089202</changelog>
</package>
<package pkgid="a83c58cb2b0af82ff11c887a9fc856686df5efa6" name="mysql55-mysql-libs" arch="i386">
  <version epoch="0" ver="5.5.40" rel="2.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.5.37-1" date="1397779200">- Update to MySQL 5.5.37, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
  Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
  CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
  Resolves: #1089203</changelog>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.40-1" date="1415318400">- Rebase to 5.5.40
  Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
  CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
  CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
  Resolves: #1160514</changelog>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.5.40-2" date="1415664000">filter perl(GD) from Requires (perl-gd is not available for RHEL5)
  Resolves: #1160514</changelog>
</package>
<package pkgid="cc4b0cd98ba7448815242576c73e1d0edbb9d40c" name="mysql55-mysql-libs" arch="i386">
  <version epoch="0" ver="5.5.45" rel="1.el5"/>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.40-1" date="1415318400">- Rebase to 5.5.40
  Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
  CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
  CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
  Resolves: #1160514</changelog>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.5.40-2" date="1415664000">filter perl(GD) from Requires (perl-gd is not available for RHEL5)
  Resolves: #1160514</changelog>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.45-1" date="1438128000">- Rebase to 5.5.45
  Includes fixes for: CVE-2014-6568 CVE-2015-0374
  CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
  CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571 CVE-2015-0433
  CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582 CVE-2015-2620
  CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752 CVE-2015-4757
  Resolves: #1247020</changelog>
</package>
<package pkgid="5c295e019189096cb30372af2eb2ec7029844307" name="mysql55-mysql-server" arch="i386">
  <version epoch="0" ver="5.5.32" rel="3.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-1" date="1372118400">- Update to MySQL 5.5.32, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
  Resolves: #975113
- Use man pages from 5.5.30 due to license change
  Resolves: #975785
- Fix issues found by Coverity
  Resolves: #975904</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-2" date="1374278400">- Fix text in mysql-readme-devel for RHEL-5
  Resolves: #975119
- Fix misleading error message when uninstalling built-in plugins
  Resolves: #985402
- Do not use pie linker flags, they don't work in RHEL-5
  Resolves: #985418</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-3" date="1376352000">- Remove -N option in useradd call, it is not supported
  Resolves: #994496</changelog>
</package>
<package pkgid="7a5081aacccda806294f17f1bfdfe100d33ed9a7" name="mysql55-mysql-server" arch="i386">
  <version epoch="0" ver="5.5.36" rel="2.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-3" date="1376352000">- Remove -N option in useradd call, it is not supported
  Resolves: #994496</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-1" date="1391472000">- Update to MySQL 5.5.36, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
  Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
  CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
  CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
  Resolves: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-2" date="1392163200">- Fix CVE-2014-0001
  Related: #1055875</changelog>
</package>
<package pkgid="4250a9932054305302b54bac391660ff80291103" name="mysql55-mysql-server" arch="i386">
  <version epoch="0" ver="5.5.37" rel="1.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-1" date="1391472000">- Update to MySQL 5.5.36, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
  Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
  CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
  CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
  Resolves: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-2" date="1392163200">- Fix CVE-2014-0001
  Related: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.5.37-1" date="1397779200">- Update to MySQL 5.5.37, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
  Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
  CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
  Resolves: #1089202</changelog>
</package>
<package pkgid="56566dbed9500af4e8f590ede82d35f50a3d51ec" name="mysql55-mysql-server" arch="i386">
  <version epoch="0" ver="5.5.40" rel="2.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.5.37-1" date="1397779200">- Update to MySQL 5.5.37, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
  Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
  CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
  Resolves: #1089203</changelog>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.40-1" date="1415318400">- Rebase to 5.5.40
  Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
  CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
  CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
  Resolves: #1160514</changelog>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.5.40-2" date="1415664000">filter perl(GD) from Requires (perl-gd is not available for RHEL5)
  Resolves: #1160514</changelog>
</package>
<package pkgid="a82e5551d174f2aa579a790b0172a4f90f5aaa9e" name="mysql55-mysql-server" arch="i386">
  <version epoch="0" ver="5.5.45" rel="1.el5"/>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.40-1" date="1415318400">- Rebase to 5.5.40
  Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
  CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
  CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
  Resolves: #1160514</changelog>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.5.40-2" date="1415664000">filter perl(GD) from Requires (perl-gd is not available for RHEL5)
  Resolves: #1160514</changelog>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.45-1" date="1438128000">- Rebase to 5.5.45
  Includes fixes for: CVE-2014-6568 CVE-2015-0374
  CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
  CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571 CVE-2015-0433
  CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582 CVE-2015-2620
  CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752 CVE-2015-4757
  Resolves: #1247020</changelog>
</package>
<package pkgid="273a4610a176cd9150cef1cafa6b6f2cb33eca3b" name="mysql55-mysql-test" arch="i386">
  <version epoch="0" ver="5.5.32" rel="3.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-1" date="1372118400">- Update to MySQL 5.5.32, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
  Resolves: #975113
- Use man pages from 5.5.30 due to license change
  Resolves: #975785
- Fix issues found by Coverity
  Resolves: #975904</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-2" date="1374278400">- Fix text in mysql-readme-devel for RHEL-5
  Resolves: #975119
- Fix misleading error message when uninstalling built-in plugins
  Resolves: #985402
- Do not use pie linker flags, they don't work in RHEL-5
  Resolves: #985418</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-3" date="1376352000">- Remove -N option in useradd call, it is not supported
  Resolves: #994496</changelog>
</package>
<package pkgid="a53ba7a6e14b4ba8294fe574c82225229c3c47d4" name="mysql55-mysql-test" arch="i386">
  <version epoch="0" ver="5.5.36" rel="2.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.32-3" date="1376352000">- Remove -N option in useradd call, it is not supported
  Resolves: #994496</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-1" date="1391472000">- Update to MySQL 5.5.36, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
  Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
  CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
  CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
  Resolves: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-2" date="1392163200">- Fix CVE-2014-0001
  Related: #1055875</changelog>
</package>
<package pkgid="ce4ce5edb9fb08b2cc39a07b4032ccda2e92058c" name="mysql55-mysql-test" arch="i386">
  <version epoch="0" ver="5.5.37" rel="1.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-1" date="1391472000">- Update to MySQL 5.5.36, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
  Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
  CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
  CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
  Resolves: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 5.5.36-2" date="1392163200">- Fix CVE-2014-0001
  Related: #1055875</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.5.37-1" date="1397779200">- Update to MySQL 5.5.37, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
  Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
  CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
  Resolves: #1089202</changelog>
</package>
<package pkgid="ebecad4215664389617bb3bb085992a3e734842b" name="mysql55-mysql-test" arch="i386">
  <version epoch="0" ver="5.5.40" rel="2.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.5.37-1" date="1397779200">- Update to MySQL 5.5.37, for various fixes described at
  http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
  Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
  CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
  Resolves: #1089203</changelog>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.40-1" date="1415318400">- Rebase to 5.5.40
  Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
  CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
  CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
  Resolves: #1160514</changelog>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.5.40-2" date="1415664000">filter perl(GD) from Requires (perl-gd is not available for RHEL5)
  Resolves: #1160514</changelog>
</package>
<package pkgid="8f63956ad635e7cd62793a56201e94b7fcf7569a" name="mysql55-mysql-test" arch="i386">
  <version epoch="0" ver="5.5.45" rel="1.el5"/>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.40-1" date="1415318400">- Rebase to 5.5.40
  Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
  CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
  CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
  Resolves: #1160514</changelog>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.5.40-2" date="1415664000">filter perl(GD) from Requires (perl-gd is not available for RHEL5)
  Resolves: #1160514</changelog>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5.5.45-1" date="1438128000">- Rebase to 5.5.45
  Includes fixes for: CVE-2014-6568 CVE-2015-0374
  CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
  CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571 CVE-2015-0433
  CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582 CVE-2015-2620
  CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752 CVE-2015-4757
  Resolves: #1247020</changelog>
</package>
<package pkgid="05ef461fded349eec91c5622601fb94b99b9125f" name="mysql55-runtime" arch="i386">
  <version epoch="0" ver="1" rel="12.el5"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-10" date="1367539200">- Handle context of the init script
- Change context on whole root directory (libselinux is fixed now #953947)
- Add better descriptions for packages
- Create SELinux context rules also for RHEL-5</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-11" date="1367625600">- Remove RHEL-6 stuff
- Define context for mysqld_safe</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; 1-12" date="1369353600">- Fix MANPATH definition, colon in the end is correct (it means default)
  Resolves: #966405</changelog>
</package>
<package pkgid="22209e555569e42836e7469ed62cbcc85e3c98a0" name="net-snmp" arch="i386">
  <version epoch="1" ver="5.3.2.2" rel="20.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-18" date="1339452000">- added support of ocfs2, tmpfs and reiserfs in hrStorageTable
  (#754652, #755958, #822061)
- updated documentation of '-c' option of snmptrapd (#760001)
- fixed endless loop after truncating 64bit int (#783892)
- fixed snmpd exiting shortly after startup due to incoming signal (#799699)
- fixed decoding of COUNTER64 values from AgentX (#803585)
- fixed engineID of outgoing traps if 'trapsess -e &lt;engineID&gt;' is used in
  snmpd.conf (#805689)
- fixed CVE-2012-2141, an array index error in the extension table (#815813)
- fixed snmpd showing "failed to run mteTrigger query" when 'monitor'
  config option is used (#830042)
- added support for port numbers in 'clientaddr' configuration option
  (#828691)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-19" date="1344463200">- fixed support for port numbers in 'clientaddr' configuration option
  (#840861, #845974)
- added support of cvfs filesystem hrStorageTable (#846391)
- removed various error log messages when IPv6 is disabled (#845155)
- removed various error log messages related to counte64 expansions
  (#846905)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20" date="1346277600">- fixed error message when the address specified by clientaddr option
  is wrong or cannot be bound (#840861)</changelog>
</package>
<package pkgid="1e71b058298d064a18c633a9355ff1fb165f641a" name="net-snmp" arch="i386">
  <version epoch="1" ver="5.3.2.2" rel="22.el5_10.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-19" date="1344470400">- fixed support for port numbers in 'clientaddr' configuration option
  (#840861, #845974)
- added support of cvfs filesystem hrStorageTable (#846391)
- removed various error log messages when IPv6 is disabled (#845155)
- removed various error log messages related to counte64 expansions
  (#846905)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20" date="1346284800">- fixed error message when the address specified by clientaddr option
  is wrong or cannot be bound (#840861)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20.1" date="1393977600">- Fixed CVE-2012-6151: snmpd crashing when AgentX subagent disconnects in
  the middle of request processing (#1073224)
- Fixed CVE-2014-2285: snmptrapd crash when using a trap with empty community
  string (#1073224)</changelog>
</package>
<package pkgid="7249c1cba74408dc6177f085e9106e8d7659ca7f" name="net-snmp-devel" arch="i386">
  <version epoch="1" ver="5.3.2.2" rel="20.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-18" date="1339452000">- added support of ocfs2, tmpfs and reiserfs in hrStorageTable
  (#754652, #755958, #822061)
- updated documentation of '-c' option of snmptrapd (#760001)
- fixed endless loop after truncating 64bit int (#783892)
- fixed snmpd exiting shortly after startup due to incoming signal (#799699)
- fixed decoding of COUNTER64 values from AgentX (#803585)
- fixed engineID of outgoing traps if 'trapsess -e &lt;engineID&gt;' is used in
  snmpd.conf (#805689)
- fixed CVE-2012-2141, an array index error in the extension table (#815813)
- fixed snmpd showing "failed to run mteTrigger query" when 'monitor'
  config option is used (#830042)
- added support for port numbers in 'clientaddr' configuration option
  (#828691)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-19" date="1344463200">- fixed support for port numbers in 'clientaddr' configuration option
  (#840861, #845974)
- added support of cvfs filesystem hrStorageTable (#846391)
- removed various error log messages when IPv6 is disabled (#845155)
- removed various error log messages related to counte64 expansions
  (#846905)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20" date="1346277600">- fixed error message when the address specified by clientaddr option
  is wrong or cannot be bound (#840861)</changelog>
</package>
<package pkgid="97ec567a6cdd3008d0bdc1e347caf3447ace19b3" name="net-snmp-devel" arch="i386">
  <version epoch="1" ver="5.3.2.2" rel="22.el5_10.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-19" date="1344470400">- fixed support for port numbers in 'clientaddr' configuration option
  (#840861, #845974)
- added support of cvfs filesystem hrStorageTable (#846391)
- removed various error log messages when IPv6 is disabled (#845155)
- removed various error log messages related to counte64 expansions
  (#846905)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20" date="1346284800">- fixed error message when the address specified by clientaddr option
  is wrong or cannot be bound (#840861)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20.1" date="1393977600">- Fixed CVE-2012-6151: snmpd crashing when AgentX subagent disconnects in
  the middle of request processing (#1073224)
- Fixed CVE-2014-2285: snmptrapd crash when using a trap with empty community
  string (#1073224)</changelog>
</package>
<package pkgid="e7833e976eb637ce1b9c4b538e9ea9f498d339ca" name="net-snmp-libs" arch="i386">
  <version epoch="1" ver="5.3.2.2" rel="20.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-18" date="1339452000">- added support of ocfs2, tmpfs and reiserfs in hrStorageTable
  (#754652, #755958, #822061)
- updated documentation of '-c' option of snmptrapd (#760001)
- fixed endless loop after truncating 64bit int (#783892)
- fixed snmpd exiting shortly after startup due to incoming signal (#799699)
- fixed decoding of COUNTER64 values from AgentX (#803585)
- fixed engineID of outgoing traps if 'trapsess -e &lt;engineID&gt;' is used in
  snmpd.conf (#805689)
- fixed CVE-2012-2141, an array index error in the extension table (#815813)
- fixed snmpd showing "failed to run mteTrigger query" when 'monitor'
  config option is used (#830042)
- added support for port numbers in 'clientaddr' configuration option
  (#828691)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-19" date="1344463200">- fixed support for port numbers in 'clientaddr' configuration option
  (#840861, #845974)
- added support of cvfs filesystem hrStorageTable (#846391)
- removed various error log messages when IPv6 is disabled (#845155)
- removed various error log messages related to counte64 expansions
  (#846905)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20" date="1346277600">- fixed error message when the address specified by clientaddr option
  is wrong or cannot be bound (#840861)</changelog>
</package>
<package pkgid="1da1228e314d33a738abad2345ccb839a7843a28" name="net-snmp-libs" arch="i386">
  <version epoch="1" ver="5.3.2.2" rel="22.el5_10.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-19" date="1344470400">- fixed support for port numbers in 'clientaddr' configuration option
  (#840861, #845974)
- added support of cvfs filesystem hrStorageTable (#846391)
- removed various error log messages when IPv6 is disabled (#845155)
- removed various error log messages related to counte64 expansions
  (#846905)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20" date="1346284800">- fixed error message when the address specified by clientaddr option
  is wrong or cannot be bound (#840861)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20.1" date="1393977600">- Fixed CVE-2012-6151: snmpd crashing when AgentX subagent disconnects in
  the middle of request processing (#1073224)
- Fixed CVE-2014-2285: snmptrapd crash when using a trap with empty community
  string (#1073224)</changelog>
</package>
<package pkgid="4829d15e4e0dbaf63037a9d686af2708e6026ae3" name="net-snmp-perl" arch="i386">
  <version epoch="1" ver="5.3.2.2" rel="20.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-18" date="1339452000">- added support of ocfs2, tmpfs and reiserfs in hrStorageTable
  (#754652, #755958, #822061)
- updated documentation of '-c' option of snmptrapd (#760001)
- fixed endless loop after truncating 64bit int (#783892)
- fixed snmpd exiting shortly after startup due to incoming signal (#799699)
- fixed decoding of COUNTER64 values from AgentX (#803585)
- fixed engineID of outgoing traps if 'trapsess -e &lt;engineID&gt;' is used in
  snmpd.conf (#805689)
- fixed CVE-2012-2141, an array index error in the extension table (#815813)
- fixed snmpd showing "failed to run mteTrigger query" when 'monitor'
  config option is used (#830042)
- added support for port numbers in 'clientaddr' configuration option
  (#828691)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-19" date="1344463200">- fixed support for port numbers in 'clientaddr' configuration option
  (#840861, #845974)
- added support of cvfs filesystem hrStorageTable (#846391)
- removed various error log messages when IPv6 is disabled (#845155)
- removed various error log messages related to counte64 expansions
  (#846905)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20" date="1346277600">- fixed error message when the address specified by clientaddr option
  is wrong or cannot be bound (#840861)</changelog>
</package>
<package pkgid="281846e46a1262aab2ff6af76964e46badc43fbc" name="net-snmp-perl" arch="i386">
  <version epoch="1" ver="5.3.2.2" rel="22.el5_10.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-19" date="1344470400">- fixed support for port numbers in 'clientaddr' configuration option
  (#840861, #845974)
- added support of cvfs filesystem hrStorageTable (#846391)
- removed various error log messages when IPv6 is disabled (#845155)
- removed various error log messages related to counte64 expansions
  (#846905)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20" date="1346284800">- fixed error message when the address specified by clientaddr option
  is wrong or cannot be bound (#840861)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20.1" date="1393977600">- Fixed CVE-2012-6151: snmpd crashing when AgentX subagent disconnects in
  the middle of request processing (#1073224)
- Fixed CVE-2014-2285: snmptrapd crash when using a trap with empty community
  string (#1073224)</changelog>
</package>
<package pkgid="dbc596fb7d5028bd1970e55d785146f7dd33a16d" name="net-snmp-utils" arch="i386">
  <version epoch="1" ver="5.3.2.2" rel="20.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-18" date="1339452000">- added support of ocfs2, tmpfs and reiserfs in hrStorageTable
  (#754652, #755958, #822061)
- updated documentation of '-c' option of snmptrapd (#760001)
- fixed endless loop after truncating 64bit int (#783892)
- fixed snmpd exiting shortly after startup due to incoming signal (#799699)
- fixed decoding of COUNTER64 values from AgentX (#803585)
- fixed engineID of outgoing traps if 'trapsess -e &lt;engineID&gt;' is used in
  snmpd.conf (#805689)
- fixed CVE-2012-2141, an array index error in the extension table (#815813)
- fixed snmpd showing "failed to run mteTrigger query" when 'monitor'
  config option is used (#830042)
- added support for port numbers in 'clientaddr' configuration option
  (#828691)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-19" date="1344463200">- fixed support for port numbers in 'clientaddr' configuration option
  (#840861, #845974)
- added support of cvfs filesystem hrStorageTable (#846391)
- removed various error log messages when IPv6 is disabled (#845155)
- removed various error log messages related to counte64 expansions
  (#846905)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20" date="1346277600">- fixed error message when the address specified by clientaddr option
  is wrong or cannot be bound (#840861)</changelog>
</package>
<package pkgid="40ceeebd2953efa2b98f6d9584faf183de02903c" name="net-snmp-utils" arch="i386">
  <version epoch="1" ver="5.3.2.2" rel="22.el5_10.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-19" date="1344470400">- fixed support for port numbers in 'clientaddr' configuration option
  (#840861, #845974)
- added support of cvfs filesystem hrStorageTable (#846391)
- removed various error log messages when IPv6 is disabled (#845155)
- removed various error log messages related to counte64 expansions
  (#846905)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20" date="1346284800">- fixed error message when the address specified by clientaddr option
  is wrong or cannot be bound (#840861)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 5.3.2.2-20.1" date="1393977600">- Fixed CVE-2012-6151: snmpd crashing when AgentX subagent disconnects in
  the middle of request processing (#1073224)
- Fixed CVE-2014-2285: snmptrapd crash when using a trap with empty community
  string (#1073224)</changelog>
</package>
<package pkgid="b0359943239ec57bcd4294382d2145819596d422" name="netpbm" arch="i386">
  <version epoch="0" ver="10.35.58" rel="8.el5_7.3"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 10.35.58-8.el5.1" date="1323295200">- fix libjasper heap buffer overflow CVE-2011-4516 CVE-2011-4517 (#760849)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 10.35.58-8.el5.2" date="1323295201">- fix xpmtoppm overfow - CVE-2009-4274 (#760849)</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 10.35.58-8.el5.3" date="1323381600">- Actually apply the patch for - CVE-2009-4274 #760849</changelog>
</package>
<package pkgid="91253c0e00d4bfcd310887a2abe8958a93919bae" name="netpbm-devel" arch="i386">
  <version epoch="0" ver="10.35.58" rel="8.el5_7.3"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 10.35.58-8.el5.1" date="1323295200">- fix libjasper heap buffer overflow CVE-2011-4516 CVE-2011-4517 (#760849)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 10.35.58-8.el5.2" date="1323295201">- fix xpmtoppm overfow - CVE-2009-4274 (#760849)</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 10.35.58-8.el5.3" date="1323381600">- Actually apply the patch for - CVE-2009-4274 #760849</changelog>
</package>
<package pkgid="cb8727833ad6f02a2feecd71104c370fdaa91e88" name="netpbm-progs" arch="i386">
  <version epoch="0" ver="10.35.58" rel="8.el5_7.3"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 10.35.58-8.el5.1" date="1323295200">- fix libjasper heap buffer overflow CVE-2011-4516 CVE-2011-4517 (#760849)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 10.35.58-8.el5.2" date="1323295201">- fix xpmtoppm overfow - CVE-2009-4274 (#760849)</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 10.35.58-8.el5.3" date="1323381600">- Actually apply the patch for - CVE-2009-4274 #760849</changelog>
</package>
<package pkgid="44517f0e0b6bb706eaa0cf1e83251d363e8469e6" name="nfs-utils" arch="i386">
  <version epoch="1" ver="1.0.9" rel="60.el5"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.0.9-58" date="1325628000">- gss: turned off more excessive syslogs (bz 593097)
- initfiles: more initscripts improvements (bz 710020)
- specfile: correct typo when nfsnobodys gid already exists (bz 729603)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.0.9-59" date="1326319200">- gss: turned of even more excessive syslogs (bz 593097)
- mount.nfs: Ignored the SIGXFSZ when handling RLIMIT_FSIZE changes (bz 697979)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.0.9-60" date="1326751200">- Updated idmapd.conf and idmapd.conf.man to reflect the 
  static user name mapping (502707)
- Fixed an umount regression introduced by bz 513094 (bz 781931)</changelog>
</package>
<package pkgid="e0eb95c0a0605afa9bf561d8b9c5bc94b1914295" name="nscd" arch="i386">
  <version epoch="0" ver="2.5" rel="107.el5_9.4"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.2" date="1365631200">- Call feraiseexcept only if exceptions are not masked (#861871).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-107.3" date="1365717600">- Fix multibyte character processing crash in regexp (CVE-2013-0242, #951130)
  - Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951130)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-107.4" date="1365804000">- Add missing patch to avoid use after free (#816647).</changelog>
</package>
<package pkgid="dc40a9eeca51ebcbcf97fc0e09deb2df745ba22b" name="nscd" arch="i386">
  <version epoch="0" ver="2.5" rel="118.el5_10.2"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.5-118" date="1376006400">- Revert incomplete fix for bug #758193.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
</package>
<package pkgid="c89f255a1d7826be9f738814aa45a5c0d6d31406" name="nscd" arch="i386">
  <version epoch="0" ver="2.5" rel="118.el5_10.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.1" date="1380067200">- Add support for newer L3 caches on x86-64 and correctly count
  the number of hardware threads sharing a cacheline (#1011424).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-118.2" date="1380153600">- Fix integer overflows in *valloc and memalign. (#1011804).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-118.3" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
</package>
<package pkgid="138cc1d6c2dac36227ac451ba21ace55f7a23bc6" name="nscd" arch="i386">
  <version epoch="0" ver="2.5" rel="123.el5_11.1"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-122" date="1397779200">- Fix patch for integer overflows in *valloc and memalign. 
  (CVE-2013-4332,#1011805).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
</package>
<package pkgid="6e6717b603d72ccf025ccbabac97848b025d797f" name="nscd" arch="i386">
  <version epoch="0" ver="2.5" rel="123.el5_11.3"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123" date="1409097600">- Remove gconv transliteration loadable modules support (CVE-2014-5119,
  - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.5-123.1" date="1421712000">- Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.5-123.3" date="1438387200">- Fix invalid-free when using getaddrinfo() and AI_IDN (CVE-2013-7424,</changelog>
</package>
<package pkgid="e2c110d86615f86c6225a85f705ca995017f7bb3" name="nscd" arch="i386">
  <version epoch="0" ver="2.5" rel="65.el5_7.3"/>
  <changelog author="Andreas Schwab &lt;schwab@redhat.com&gt; - 2.5-65.el5_7.1" date="1319580000">- Correct cycle detection during dependency sorting (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.2" date="1324332000">- Check values from TZ file header (#767687)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-65.el5_7.3" date="1327442400">- Use correct type when casting d_tag (#767687)
- Report write error  in addmnt even for cached streams (#767687)
- ldd: Never run file directly (#767687).
- Workaround misconfigured system (#767687)</changelog>
</package>
<package pkgid="889e2edbe17d9a0b8995f0931c3860ce206e511f" name="nscd" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.1"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-80" date="1324245600">- Check values from TZ file header (#767688)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81" date="1326924000">- Correct test for detecting cycle during topo sort (#729661)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.1" date="1330380000">- Add dist tag
- Filter out &lt;built-in&gt; when building file lists (#784646).
- Avoid "nargs" integer overflow which could be used to bypass FORTIFY_SOURCE (#794813)</changelog>
</package>
<package pkgid="a875506b2723c3e17fc79ad2222cf55d1d1a38d9" name="nscd" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.4"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.2" date="1333663200">- Fix memory leak in NIS endgrent (#810323)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.5-81.el5_8.3" date="1340316000">- Fix unbound alloca in vfprintf (#833720)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.5-81.el5_8.4" date="1341525600">- Fix iconv() segfault if the invalid multibyte character 0xffff is input when converting from IBM930 (#837896)</changelog>
</package>
<package pkgid="6ef9f99cd922d2fbad41244805a6be0f4163c2e0" name="nscd" arch="i386">
  <version epoch="0" ver="2.5" rel="81.el5_8.7"/>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.5" date="1342821600">- Do not use PT_IEEE_IP ptrace calls (#839411)
- Update ULPs (#839411)
- Fix various transcendentals in non-default rounding modes (#839411)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.6" date="1344981600">- Fix integer overflow leading to buffer overflow in strto* (#847929)</changelog>
  <changelog author="Jeff Law &lt;loaw@redhat.com&gt; - 2.5-81.el5_8.7" date="1344981601">- Fix out of bounds array access in strto* exposed by 847929 patch.</changelog>
</package>
<package pkgid="6023d38be0ffe1dc095378c25479463bdf51ce87" name="nspr" arch="i386">
  <version epoch="0" ver="4.10.2" rel="2.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.0-2" date="1382054400">- Retagging to fix an inconsitency in the release tags
- Resolves: rhbz#1002641 - Rebase RHEL 5 to NSPR 4.10 (for FF 24.x)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.2-1" date="1385164800">- Update to nspr-4.10.2
- Remove an unused patch
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.2-2" date="1385164801">- Fix changelog comments
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
</package>
<package pkgid="dda5db6e3d99e6eb7a70951d97cb5c0af29233e6" name="nspr" arch="i386">
  <version epoch="0" ver="4.10.6" rel="1.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.2-2" date="1385164800">- Fix changelog comments
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.2-3" date="1385251200">- Retagging
- Resolves: rhbz#1032466</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.2-4" date="1404864000">- Rebase to nspr-4.10.6
- Resolves: Bug 1116199</changelog>
</package>
<package pkgid="e1a7a87251cde16af12a4eadafc866d9031a18b2" name="nspr" arch="i386">
  <version epoch="0" ver="4.10.8" rel="1.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.2-3" date="1385251200">- Retagging
- Resolves: rhbz#1032468</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-1" date="1403136000">- Rebase to nspr-4.10.6
- Resolves: Bug 1110857 - Rebase nspr in RHEL 5.11 to NSPR 4.10.6 for FF31</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427068800">- Rebase to nspr-4.10.8
- Resolves: Bug 1200921 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-5.11]</changelog>
</package>
<package pkgid="cd56b2cc7b83db55f5c390522a64624a88810eed" name="nspr" arch="i386">
  <version epoch="0" ver="4.10.8" rel="2.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-1" date="1403136000">- Rebase to nspr-4.10.6
- Resolves: Bug 1110857 - Rebase nspr in RHEL 5.11 to NSPR 4.10.6 for FF31</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427068800">- Rebase to nspr-4.10.8
- Resolves: Bug 1200921 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-5.11]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1445040000">- Resolves: Bug 1269359 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption [rhel-5.11.z]</changelog>
</package>
<package pkgid="6244dfb651659617b8c7dc616449bc2e49d1290d" name="nspr" arch="i386">
  <version epoch="0" ver="4.11.0" rel="1.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427068800">- Rebase to nspr-4.10.8
- Resolves: Bug 1200921 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-5.11]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1445040000">- Resolves: Bug 1269359 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption [rhel-5.11.z]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-0.1" date="1458086400">- Rebase to NSPR 4.11
- Resolves: Bug 1297943 - Rebase RHEL 5.11.z to NSPR 4.11 in preparation for Firefox 45</changelog>
</package>
<package pkgid="d85d6ae604c8b975a8f7f99e969f0db5093de574" name="nspr" arch="i386">
  <version epoch="0" ver="4.8.8" rel="1.el5_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.8.4-1" date="1266789600">- Update to NSPR 4.8.4</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 4.8.6-1" date="1282687200">- update to 4.8.6</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.8.8-1" date="1311026400">- Update to 4.8.8</changelog>
</package>
<package pkgid="eba8ac7c5118d0d00d68ea233a154982af60fde2" name="nspr" arch="i386">
  <version epoch="0" ver="4.8.9" rel="1.el5_8"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.8.8-1" date="1310421600">- Update to 4.8.8</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.8.8-2" date="1323381600">- Bumping the relase tag so it's higher than the one in 5.7-z</changelog>
  <changelog author="Elio Maldonado Batiz &lt;emaldona@redhat.com&gt; - 4.8.9-1" date="1328824800">- Resolves: rhbz#788672 - [RFE] Async update nspr to make firefox 10 LTS rebase possible
- Update to 4.8.9</changelog>
</package>
<package pkgid="e1c6f35cacf932d59ec499810beca647d1e8d21f" name="nspr" arch="i386">
  <version epoch="0" ver="4.9.1" rel="4.el5_8"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.1-2" date="1340402400">- Resolves: rhbz#834219 - restore top section of nspr-config-pc.patch
- Needed to prevent multilib regressions</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.1-3" date="1340402401">- Resolves: rhbz#834219 - Ensure nspr-config.in changes get applied</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.1-4" date="1342044000">- Resolves: rhbz#834219 - Fix postinstall scriptlet failures
- Fix %post and %postun lines per packaging guidelines
- Updated License: to MPLv2.0 per upstream</changelog>
</package>
<package pkgid="2fe5beea8f87b94df2b223e9815f5b61a1d3319a" name="nspr" arch="i386">
  <version epoch="0" ver="4.9.2" rel="2.el5_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 4.9.1-6" date="1343167200">- Resolves: rhbz#633519 - pthread_key_t leak and memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.2-1" date="1357336800">- Resolves: rhbz#893372- [RFE] Rebase nspr to 4.9.2 due to Firefox 17 ESR</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; - 4.9.2-2" date="1358200800">- NVR bump</changelog>
</package>
<package pkgid="3bf66dbb4c5cf3805d8638fac910ae293f38cbaf" name="nspr" arch="i386">
  <version epoch="0" ver="4.9.5" rel="1.el5_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.2-1" date="1357336800">- Resolves: rhbz#893372- [RFE] Rebase nspr to 4.9.2 due to Firefox 17 ESR</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; - 4.9.2-2" date="1358200800">- NVR bump</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.2-4" date="1364767200">- Resolves: rhbz#924741 - Rebase to nspr-4.9.5</changelog>
</package>
<package pkgid="8d021c52c36a92476254b0979796acad4fb11e6c" name="nspr-devel" arch="i386">
  <version epoch="0" ver="4.10.2" rel="2.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.0-2" date="1382054400">- Retagging to fix an inconsitency in the release tags
- Resolves: rhbz#1002641 - Rebase RHEL 5 to NSPR 4.10 (for FF 24.x)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.2-1" date="1385164800">- Update to nspr-4.10.2
- Remove an unused patch
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.2-2" date="1385164801">- Fix changelog comments
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
</package>
<package pkgid="e01c52c297876b5e2f74e4c19c5b413042bb6fda" name="nspr-devel" arch="i386">
  <version epoch="0" ver="4.10.6" rel="1.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.2-2" date="1385164800">- Fix changelog comments
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.2-3" date="1385251200">- Retagging
- Resolves: rhbz#1032466</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.2-4" date="1404864000">- Rebase to nspr-4.10.6
- Resolves: Bug 1116199</changelog>
</package>
<package pkgid="084a05c58069f6d27da99ce2df47b3d974d591b1" name="nspr-devel" arch="i386">
  <version epoch="0" ver="4.10.8" rel="1.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.2-3" date="1385251200">- Retagging
- Resolves: rhbz#1032468</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-1" date="1403136000">- Rebase to nspr-4.10.6
- Resolves: Bug 1110857 - Rebase nspr in RHEL 5.11 to NSPR 4.10.6 for FF31</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427068800">- Rebase to nspr-4.10.8
- Resolves: Bug 1200921 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-5.11]</changelog>
</package>
<package pkgid="1e1f2919683582013178ab7364a055a6df823d14" name="nspr-devel" arch="i386">
  <version epoch="0" ver="4.10.8" rel="2.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-1" date="1403136000">- Rebase to nspr-4.10.6
- Resolves: Bug 1110857 - Rebase nspr in RHEL 5.11 to NSPR 4.10.6 for FF31</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427068800">- Rebase to nspr-4.10.8
- Resolves: Bug 1200921 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-5.11]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1445040000">- Resolves: Bug 1269359 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption [rhel-5.11.z]</changelog>
</package>
<package pkgid="819a9e8fc52216f447f885864917fb66d3bf10b9" name="nspr-devel" arch="i386">
  <version epoch="0" ver="4.11.0" rel="1.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427068800">- Rebase to nspr-4.10.8
- Resolves: Bug 1200921 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-5.11]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1445040000">- Resolves: Bug 1269359 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption [rhel-5.11.z]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-0.1" date="1458086400">- Rebase to NSPR 4.11
- Resolves: Bug 1297943 - Rebase RHEL 5.11.z to NSPR 4.11 in preparation for Firefox 45</changelog>
</package>
<package pkgid="7e3fd6e155dd6bb549cf5343a45c7a93372f1b06" name="nspr-devel" arch="i386">
  <version epoch="0" ver="4.8.8" rel="1.el5_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.8.4-1" date="1266789600">- Update to NSPR 4.8.4</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 4.8.6-1" date="1282687200">- update to 4.8.6</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.8.8-1" date="1311026400">- Update to 4.8.8</changelog>
</package>
<package pkgid="d5d5d63f507d7c5c9f33fe44329b7d3f2d185993" name="nspr-devel" arch="i386">
  <version epoch="0" ver="4.8.9" rel="1.el5_8"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.8.8-1" date="1310421600">- Update to 4.8.8</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.8.8-2" date="1323381600">- Bumping the relase tag so it's higher than the one in 5.7-z</changelog>
  <changelog author="Elio Maldonado Batiz &lt;emaldona@redhat.com&gt; - 4.8.9-1" date="1328824800">- Resolves: rhbz#788672 - [RFE] Async update nspr to make firefox 10 LTS rebase possible
- Update to 4.8.9</changelog>
</package>
<package pkgid="538b0be08857379714019000fdebef8240082f9c" name="nspr-devel" arch="i386">
  <version epoch="0" ver="4.9.1" rel="4.el5_8"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.1-2" date="1340402400">- Resolves: rhbz#834219 - restore top section of nspr-config-pc.patch
- Needed to prevent multilib regressions</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.1-3" date="1340402401">- Resolves: rhbz#834219 - Ensure nspr-config.in changes get applied</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.1-4" date="1342044000">- Resolves: rhbz#834219 - Fix postinstall scriptlet failures
- Fix %post and %postun lines per packaging guidelines
- Updated License: to MPLv2.0 per upstream</changelog>
</package>
<package pkgid="88d751cf20c863ea5cba887617b3620776c7b385" name="nspr-devel" arch="i386">
  <version epoch="0" ver="4.9.2" rel="2.el5_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 4.9.1-6" date="1343167200">- Resolves: rhbz#633519 - pthread_key_t leak and memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.2-1" date="1357336800">- Resolves: rhbz#893372- [RFE] Rebase nspr to 4.9.2 due to Firefox 17 ESR</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; - 4.9.2-2" date="1358200800">- NVR bump</changelog>
</package>
<package pkgid="20b5086a91cb9822bfd297d81b44eff607d8f898" name="nspr-devel" arch="i386">
  <version epoch="0" ver="4.9.5" rel="1.el5_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.2-1" date="1357336800">- Resolves: rhbz#893372- [RFE] Rebase nspr to 4.9.2 due to Firefox 17 ESR</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; - 4.9.2-2" date="1358200800">- NVR bump</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.2-4" date="1364767200">- Resolves: rhbz#924741 - Rebase to nspr-4.9.5</changelog>
</package>
<package pkgid="f667159cf579c49ee6205b005b885b15aa4266b1" name="nss" arch="i386">
  <version epoch="0" ver="3.12.10" rel="4.el5_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-2" date="1314741600">- Update builtins certs to NSSCKBI_1_85_RTM</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-3" date="1314828000">- Update builtins certs to those from NSSCKBI_1_86_RTM</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-4" date="1315000800">- Update builtins certs to those from NSSCKBI_1_87_RTM</changelog>
</package>
<package pkgid="5574567c11975a44066310a1412d4ccd36214541" name="nss" arch="i386">
  <version epoch="0" ver="3.12.10" rel="7.el5_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-5" date="1317852000">- Plug file descriptor leaks on httpd service reloads</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-6" date="1320444000">- Update builtins certs to those from NSSCKBI_1_88_RTM</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-7" date="1320530400">- Fix a syntax error in the spec file</changelog>
</package>
<package pkgid="67f8bed6f080d6f8ef2091465f56f4cb4dd42c5d" name="nss" arch="i386">
  <version epoch="0" ver="3.13.1" rel="5.el5_8"/>
  <changelog author="Elio Maldonado Batiz &lt;emaldona@redhat.com&gt; - 3.13.1-4" date="1328911200">- Related: Bug 788964 - retagging</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.1-4" date="1330466400">- Resolves: rhbz#798462 - Protect NSS_Shutdown from clients that fail to initialize nss</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.1-5" date="1330552800">- Resolves: rhbz#798462 - bumping the release tag</changelog>
</package>
<package pkgid="8a5428ea2e9a66f199b782b2317a1f925200c83a" name="nss" arch="i386">
  <version epoch="0" ver="3.13.5" rel="4.el5_8"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-2" date="1342044000">- Resolves: rhbz#834219 - Fix multilib and scriptlet problems
- Fix %post and %postun lines per packaging guildelines
- Add %{?_isa} to tools Requires: per packaging guidelines
- Fix explicit-lib-dependency zlib error reported by rpmlint</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-3" date="1342044001">- Resolves: rhbz#834219 - Fix the changes to the %post line
- Having multiple commands requires that /sbin/lconfig be the beginning of the scriptlet</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-4" date="1342216800">- Related: rhbz#834219 - Fix ia64 / i386 multilib nss install failure
- Remove no longer needed %pre and %preun scriplets meant for nss updates from RHEL-5.0</changelog>
</package>
<package pkgid="8d6344b69cdcb49c46bf1a778888797c5fe96a7f" name="nss" arch="i386">
  <version epoch="0" ver="3.13.6" rel="3.el5_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.6-1" date="1357941600">- Update to NSS_3_13_6_RTM
- Resolves: rhbz#893371 - [RFE] [RHEL5] Rebase to NSS &gt;= 3.13.6</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.6-2" date="1357941601">- [CVE-2013-0743] - Resolves: rhbz#891149 - Dis-trust TURKTRUST mis-issued *.google.com certificate</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.6-3" date="1358028000">- Fix changelog inconsistencies with commit and bug resolved
- Resolves: rhbz#891149 [CVE-2013-0743]</changelog>
</package>
<package pkgid="f9f0689fae59487379b963cfa826963df5bd5943" name="nss" arch="i386">
  <version epoch="0" ver="3.14.3" rel="6.el5_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-4" date="1366754400">- Fix rpmdiff test reported failures and remove other unwanted changes
- Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-5" date="1368482400">- Define -DNO_FORK_CHECK when compiling softoken for ABI compatibility
- Remove the unused and obsolete nss-nochktest.patch
- Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-6" date="1374616800">- Resolves: rhbz#986969 - nssutil_ReadSecmodDB() leaks memory</changelog>
</package>
<package pkgid="4f121c01edf3fe1491c887b7f64692fab0e86dd2" name="nss" arch="i386">
  <version epoch="0" ver="3.15.3" rel="3.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.1-2" date="1385164800">- Remove unused patches
- Resolves: rhbz#1033478 - Rebase RHEL 5 to NSS 3.15.1 (for FF 24.x)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-1" date="1385164801">- Update to nss-3.15.3
- Remove unused patch
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.15.3-3" date="1385683200">- remove unnecessary and problematic template-removal patch
  which was added as part of the 3.15.1 rebase
- bump release number</changelog>
</package>
<package pkgid="3677bfb2552d1422c18f3b555bf0d6a1bbbe138e" name="nss" arch="i386">
  <version epoch="0" ver="3.15.3" rel="4.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-1" date="1385164800">- Update to nss-3.15.3
- Remove unused patch
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.15.3-3" date="1385683200">- remove unnecessary and problematic template-removal patch
  which was added as part of the 3.15.1 rebase
- bump release number</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-4" date="1386979200">- Revoke trust in one mis-issued anssi certificate
- Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)</changelog>
</package>
<package pkgid="848053d168e0555e59d9d306e4704c116151e056" name="nss" arch="i386">
  <version epoch="0" ver="3.15.3" rel="7.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-5" date="1387238400">- Remove two unused patches
- Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-6" date="1404518400">- Fix race-condition in certificate validation
- Resolves: Bug 1116199</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-7" date="1404518401">- Remove an unused patch
- Related: Bug 1116199</changelog>
</package>
<package pkgid="2d722b0cfff51df46fc72997715ee1396676caaf" name="nss" arch="i386">
  <version epoch="0" ver="3.16.1" rel="2.el5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-6" date="1398816000">- Remove unused and obsolete patches
- Related: Bug 1032468</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-1" date="1403654400">- Rebase to nss-3.16.1 for FF31
- Resolves: Bug 1110860 - Rebase nss in RHEL 5.11 to NSS 3.16.1, required for FF 31</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-2" date="1404172800">- Backport nss-3.12.6 upstream fix required by Firefox 31 ESR
- Resolves: Bug 1110860</changelog>
</package>
<package pkgid="645b6a6aa50bfb2be80f65fbac507f7f91183d99" name="nss" arch="i386">
  <version epoch="0" ver="3.16.1" rel="4.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-2" date="1404172800">- Backport nss-3.12.6 upstream fix required by Firefox 31 ESR
- Resolves: Bug 1110860</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-3" date="1411603200">- Add patches published with NSS 3.16.2.1
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.1-4" date="1411689600">- Adjust softokn patch to be compatible with legacy softokn API.
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
</package>
<package pkgid="994a209914a99bb11a61f115cf900290de541956" name="nss" arch="i386">
  <version epoch="0" ver="3.16.2.3" rel="1.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-3" date="1411603200">- Add patches published with NSS 3.16.2.1
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.1-4" date="1411689600">- Adjust softokn patch to be compatible with legacy softokn API.
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-5" date="1415923200">- Resolves: Bug 1158159 - Upgrade to NSS 3.16.2.3 for Firefox 31.3</changelog>
</package>
<package pkgid="59cc5b4e5daa4701c43f784a59f618370baba6a7" name="nss" arch="i386">
  <version epoch="0" ver="3.18.0" rel="6.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-4" date="1429401600">- Update and reeneable nss-646045.patch on account of the rebase
- Enable additional ssl test cycles and document why some aren't enabled
- Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-5" date="1429401601">- Copy PayPalICA.cert and PayPalRootCA.cert to nss/tests/libpkix/certs
- Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.18.0-6" date="1430265600">- On RHEL 6.x keep the TLS version defaults unchanged.
- Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)</changelog>
</package>
<package pkgid="26ca1b0197357ff40ef78986ba538b970ec2e14e" name="nss" arch="i386">
  <version epoch="0" ver="3.19.1" rel="1.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.18.0-6" date="1430265600">- On RHEL 6.x keep the TLS version defaults unchanged.
- Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-7" date="1438128000">- Pick up upstream patch from nss-3.19.1
- Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
- Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-1" date="1438214400">- Rebase nss to 3.19.1
- Pick up upstream fix for client auth. regression caused by 3.19.1
- Revert upstream change to minimum key sizes
- Remove patches that rendered obsolote by the rebase
- Update existing patches on account of the rebase</changelog>
</package>
<package pkgid="dd734b2e3fff8c85657475344d91fb412afa3068" name="nss" arch="i386">
  <version epoch="0" ver="3.19.1" rel="2.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-7" date="1438128000">- Pick up upstream patch from nss-3.19.1
- Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
- Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-1" date="1438214400">- Rebase nss to 3.19.1
- Pick up upstream fix for client auth. regression caused by 3.19.1
- Revert upstream change to minimum key sizes
- Remove patches that rendered obsolote by the rebase
- Update existing patches on account of the rebase</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-2" date="1445299200">- Resolves: Bug 1269354 - CVE-2015-7182 CVE-2015-7181</changelog>
</package>
<package pkgid="3cc238236ea3690a4a821abb88aea8bb9414e355" name="nss" arch="i386">
  <version epoch="0" ver="3.19.1" rel="4.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-2" date="1445299200">- Resolves: Bug 1269354 - CVE-2015-7182 CVE-2015-7181</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-3" date="1456358400">- Include the fix for CVE-2016-1950 from NSS 3.19.2.3</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-4" date="1457049600">- Actually apply the fix for CVE-2016-1950 from NSS 3.19.2.3 ...</changelog>
</package>
<package pkgid="2fa27924a12d86e02c06d2a77cd80f5e4b982202" name="nss" arch="i386">
  <version epoch="0" ver="3.21.0" rel="6.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-4" date="1459382400">- Run SSL tests</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-5" date="1460160000">- Keep SSL_DH_MIN_P_BITS at 768 as in the previously released build.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-6" date="1460160001">- Fix SSL_DH_MIN_P_BITS in more places.</changelog>
</package>
<package pkgid="8cad52f27b32073c52873b61db354abed8f76d1d" name="nss" arch="i386">
  <version epoch="0" ver="3.21.3" rel="2.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-6" date="1460160000">- Fix SSL_DH_MIN_P_BITS in more places.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.21.3-1" date="1477440000">- Rebase to NSS 3.21.3
- Resolves: Bug 1347908</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.3-2" date="1478649600">- Mozilla #1314604 / Red Hat CVE-2016-8635</changelog>
</package>
<package pkgid="5d3a3688c27262d207b365e221276e41a0e02f85" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.12.10" rel="4.el5_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-2" date="1314741600">- Update builtins certs to NSSCKBI_1_85_RTM</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-3" date="1314828000">- Update builtins certs to those from NSSCKBI_1_86_RTM</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-4" date="1315000800">- Update builtins certs to those from NSSCKBI_1_87_RTM</changelog>
</package>
<package pkgid="ed3a9d785c5657174ae888452f59341d45836798" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.12.10" rel="7.el5_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-5" date="1317852000">- Plug file descriptor leaks on httpd service reloads</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-6" date="1320444000">- Update builtins certs to those from NSSCKBI_1_88_RTM</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-7" date="1320530400">- Fix a syntax error in the spec file</changelog>
</package>
<package pkgid="d515fb09c8de9cc9cae18e4069d5251e1ed64545" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.13.1" rel="5.el5_8"/>
  <changelog author="Elio Maldonado Batiz &lt;emaldona@redhat.com&gt; - 3.13.1-4" date="1328911200">- Related: Bug 788964 - retagging</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.1-4" date="1330466400">- Resolves: rhbz#798462 - Protect NSS_Shutdown from clients that fail to initialize nss</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.1-5" date="1330552800">- Resolves: rhbz#798462 - bumping the release tag</changelog>
</package>
<package pkgid="457212ad61ccc8fd277a76c055a22c2cfa093534" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.13.5" rel="4.el5_8"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-2" date="1342044000">- Resolves: rhbz#834219 - Fix multilib and scriptlet problems
- Fix %post and %postun lines per packaging guildelines
- Add %{?_isa} to tools Requires: per packaging guidelines
- Fix explicit-lib-dependency zlib error reported by rpmlint</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-3" date="1342044001">- Resolves: rhbz#834219 - Fix the changes to the %post line
- Having multiple commands requires that /sbin/lconfig be the beginning of the scriptlet</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-4" date="1342216800">- Related: rhbz#834219 - Fix ia64 / i386 multilib nss install failure
- Remove no longer needed %pre and %preun scriplets meant for nss updates from RHEL-5.0</changelog>
</package>
<package pkgid="925a4e3ff9f499506ad55a071f3b96145a8b94ea" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.13.6" rel="3.el5_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.6-1" date="1357941600">- Update to NSS_3_13_6_RTM
- Resolves: rhbz#893371 - [RFE] [RHEL5] Rebase to NSS &gt;= 3.13.6</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.6-2" date="1357941601">- [CVE-2013-0743] - Resolves: rhbz#891149 - Dis-trust TURKTRUST mis-issued *.google.com certificate</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.6-3" date="1358028000">- Fix changelog inconsistencies with commit and bug resolved
- Resolves: rhbz#891149 [CVE-2013-0743]</changelog>
</package>
<package pkgid="f8e6e6f5ac3d0ab947c754564f40e3730d7a06a6" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.14.3" rel="6.el5_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-4" date="1366754400">- Fix rpmdiff test reported failures and remove other unwanted changes
- Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-5" date="1368482400">- Define -DNO_FORK_CHECK when compiling softoken for ABI compatibility
- Remove the unused and obsolete nss-nochktest.patch
- Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-6" date="1374616800">- Resolves: rhbz#986969 - nssutil_ReadSecmodDB() leaks memory</changelog>
</package>
<package pkgid="56fbfae97a9a8c0e8469d8c8dca5b4a2392c8c36" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.15.3" rel="3.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.1-2" date="1385164800">- Remove unused patches
- Resolves: rhbz#1033478 - Rebase RHEL 5 to NSS 3.15.1 (for FF 24.x)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-1" date="1385164801">- Update to nss-3.15.3
- Remove unused patch
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.15.3-3" date="1385683200">- remove unnecessary and problematic template-removal patch
  which was added as part of the 3.15.1 rebase
- bump release number</changelog>
</package>
<package pkgid="beaedc35a9ee4e4a69a3f9c2f3fbc5028eb820fc" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.15.3" rel="4.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-1" date="1385164800">- Update to nss-3.15.3
- Remove unused patch
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.15.3-3" date="1385683200">- remove unnecessary and problematic template-removal patch
  which was added as part of the 3.15.1 rebase
- bump release number</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-4" date="1386979200">- Revoke trust in one mis-issued anssi certificate
- Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)</changelog>
</package>
<package pkgid="8155fd220f7471addf9ff5301c2f6f1616a22f03" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.15.3" rel="7.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-5" date="1387238400">- Remove two unused patches
- Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-6" date="1404518400">- Fix race-condition in certificate validation
- Resolves: Bug 1116199</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-7" date="1404518401">- Remove an unused patch
- Related: Bug 1116199</changelog>
</package>
<package pkgid="50ff7020588adc40fc4381eb0e95ff5574713eba" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.16.1" rel="2.el5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-6" date="1398816000">- Remove unused and obsolete patches
- Related: Bug 1032468</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-1" date="1403654400">- Rebase to nss-3.16.1 for FF31
- Resolves: Bug 1110860 - Rebase nss in RHEL 5.11 to NSS 3.16.1, required for FF 31</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-2" date="1404172800">- Backport nss-3.12.6 upstream fix required by Firefox 31 ESR
- Resolves: Bug 1110860</changelog>
</package>
<package pkgid="747837872e8acb774017073f5aa73687e6befa3c" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.16.1" rel="4.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-2" date="1404172800">- Backport nss-3.12.6 upstream fix required by Firefox 31 ESR
- Resolves: Bug 1110860</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-3" date="1411603200">- Add patches published with NSS 3.16.2.1
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.1-4" date="1411689600">- Adjust softokn patch to be compatible with legacy softokn API.
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
</package>
<package pkgid="dc9eca927b5dd97442289a9dcc08cf7782d9923b" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.16.2.3" rel="1.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-3" date="1411603200">- Add patches published with NSS 3.16.2.1
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.1-4" date="1411689600">- Adjust softokn patch to be compatible with legacy softokn API.
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-5" date="1415923200">- Resolves: Bug 1158159 - Upgrade to NSS 3.16.2.3 for Firefox 31.3</changelog>
</package>
<package pkgid="a7c78aaca29e670108edf9871834d537877625ae" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.18.0" rel="6.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-4" date="1429401600">- Update and reeneable nss-646045.patch on account of the rebase
- Enable additional ssl test cycles and document why some aren't enabled
- Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-5" date="1429401601">- Copy PayPalICA.cert and PayPalRootCA.cert to nss/tests/libpkix/certs
- Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.18.0-6" date="1430265600">- On RHEL 6.x keep the TLS version defaults unchanged.
- Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)</changelog>
</package>
<package pkgid="a1729add6abba89226535b53b89263307a22df97" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.19.1" rel="1.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.18.0-6" date="1430265600">- On RHEL 6.x keep the TLS version defaults unchanged.
- Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-7" date="1438128000">- Pick up upstream patch from nss-3.19.1
- Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
- Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-1" date="1438214400">- Rebase nss to 3.19.1
- Pick up upstream fix for client auth. regression caused by 3.19.1
- Revert upstream change to minimum key sizes
- Remove patches that rendered obsolote by the rebase
- Update existing patches on account of the rebase</changelog>
</package>
<package pkgid="274fa8c3dc3b544ed1b5154ea431ae3dddbd22d9" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.19.1" rel="2.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-7" date="1438128000">- Pick up upstream patch from nss-3.19.1
- Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
- Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-1" date="1438214400">- Rebase nss to 3.19.1
- Pick up upstream fix for client auth. regression caused by 3.19.1
- Revert upstream change to minimum key sizes
- Remove patches that rendered obsolote by the rebase
- Update existing patches on account of the rebase</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-2" date="1445299200">- Resolves: Bug 1269354 - CVE-2015-7182 CVE-2015-7181</changelog>
</package>
<package pkgid="8cbe44f80e381ab067b2ec072bfc14df2112e0f8" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.19.1" rel="4.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-2" date="1445299200">- Resolves: Bug 1269354 - CVE-2015-7182 CVE-2015-7181</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-3" date="1456358400">- Include the fix for CVE-2016-1950 from NSS 3.19.2.3</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-4" date="1457049600">- Actually apply the fix for CVE-2016-1950 from NSS 3.19.2.3 ...</changelog>
</package>
<package pkgid="06526a09a19e653c4530684094b2b8263160854f" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.21.0" rel="6.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-4" date="1459382400">- Run SSL tests</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-5" date="1460160000">- Keep SSL_DH_MIN_P_BITS at 768 as in the previously released build.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-6" date="1460160001">- Fix SSL_DH_MIN_P_BITS in more places.</changelog>
</package>
<package pkgid="dd8193efed843cfcaa13b6dd7ce90fd359e6b8e3" name="nss-devel" arch="i386">
  <version epoch="0" ver="3.21.3" rel="2.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-6" date="1460160000">- Fix SSL_DH_MIN_P_BITS in more places.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.21.3-1" date="1477440000">- Rebase to NSS 3.21.3
- Resolves: Bug 1347908</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.3-2" date="1478649600">- Mozilla #1314604 / Red Hat CVE-2016-8635</changelog>
</package>
<package pkgid="54f45eb14216766178baeb1759c49c36d1029781" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.12.10" rel="4.el5_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-2" date="1314741600">- Update builtins certs to NSSCKBI_1_85_RTM</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-3" date="1314828000">- Update builtins certs to those from NSSCKBI_1_86_RTM</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-4" date="1315000800">- Update builtins certs to those from NSSCKBI_1_87_RTM</changelog>
</package>
<package pkgid="4d5122c2c95d74da97df6b3e76b3014a419e6658" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.12.10" rel="7.el5_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-5" date="1317852000">- Plug file descriptor leaks on httpd service reloads</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-6" date="1320444000">- Update builtins certs to those from NSSCKBI_1_88_RTM</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-7" date="1320530400">- Fix a syntax error in the spec file</changelog>
</package>
<package pkgid="5fccc8cee41d45a7736e7d869a2c8035796c8b78" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.13.1" rel="5.el5_8"/>
  <changelog author="Elio Maldonado Batiz &lt;emaldona@redhat.com&gt; - 3.13.1-4" date="1328911200">- Related: Bug 788964 - retagging</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.1-4" date="1330466400">- Resolves: rhbz#798462 - Protect NSS_Shutdown from clients that fail to initialize nss</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.1-5" date="1330552800">- Resolves: rhbz#798462 - bumping the release tag</changelog>
</package>
<package pkgid="44a19465bae82780e951004a7ff221b2a255f4bc" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.13.5" rel="4.el5_8"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-2" date="1342044000">- Resolves: rhbz#834219 - Fix multilib and scriptlet problems
- Fix %post and %postun lines per packaging guildelines
- Add %{?_isa} to tools Requires: per packaging guidelines
- Fix explicit-lib-dependency zlib error reported by rpmlint</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-3" date="1342044001">- Resolves: rhbz#834219 - Fix the changes to the %post line
- Having multiple commands requires that /sbin/lconfig be the beginning of the scriptlet</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-4" date="1342216800">- Related: rhbz#834219 - Fix ia64 / i386 multilib nss install failure
- Remove no longer needed %pre and %preun scriplets meant for nss updates from RHEL-5.0</changelog>
</package>
<package pkgid="4f153018180a6c90f9a0741647e9973383dace43" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.13.6" rel="3.el5_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.6-1" date="1357941600">- Update to NSS_3_13_6_RTM
- Resolves: rhbz#893371 - [RFE] [RHEL5] Rebase to NSS &gt;= 3.13.6</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.6-2" date="1357941601">- [CVE-2013-0743] - Resolves: rhbz#891149 - Dis-trust TURKTRUST mis-issued *.google.com certificate</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.6-3" date="1358028000">- Fix changelog inconsistencies with commit and bug resolved
- Resolves: rhbz#891149 [CVE-2013-0743]</changelog>
</package>
<package pkgid="7e7a4239664294533435a040236114be64dafb94" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.14.3" rel="6.el5_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-4" date="1366754400">- Fix rpmdiff test reported failures and remove other unwanted changes
- Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-5" date="1368482400">- Define -DNO_FORK_CHECK when compiling softoken for ABI compatibility
- Remove the unused and obsolete nss-nochktest.patch
- Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-6" date="1374616800">- Resolves: rhbz#986969 - nssutil_ReadSecmodDB() leaks memory</changelog>
</package>
<package pkgid="c4ad10951957fb3d5b03a9d478111191417c4b06" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.15.3" rel="3.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.1-2" date="1385164800">- Remove unused patches
- Resolves: rhbz#1033478 - Rebase RHEL 5 to NSS 3.15.1 (for FF 24.x)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-1" date="1385164801">- Update to nss-3.15.3
- Remove unused patch
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.15.3-3" date="1385683200">- remove unnecessary and problematic template-removal patch
  which was added as part of the 3.15.1 rebase
- bump release number</changelog>
</package>
<package pkgid="0ed06702e45062cd1f8dfdad29a4480357f8963c" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.15.3" rel="4.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-1" date="1385164800">- Update to nss-3.15.3
- Remove unused patch
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.15.3-3" date="1385683200">- remove unnecessary and problematic template-removal patch
  which was added as part of the 3.15.1 rebase
- bump release number</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-4" date="1386979200">- Revoke trust in one mis-issued anssi certificate
- Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)</changelog>
</package>
<package pkgid="55d76fc7d7f0f6e18176a782715c75bc9e616b30" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.15.3" rel="7.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-5" date="1387238400">- Remove two unused patches
- Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-6" date="1404518400">- Fix race-condition in certificate validation
- Resolves: Bug 1116199</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-7" date="1404518401">- Remove an unused patch
- Related: Bug 1116199</changelog>
</package>
<package pkgid="af4bb5839161b75cc8aae5710a74e1e64c0da709" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.16.1" rel="2.el5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-6" date="1398816000">- Remove unused and obsolete patches
- Related: Bug 1032468</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-1" date="1403654400">- Rebase to nss-3.16.1 for FF31
- Resolves: Bug 1110860 - Rebase nss in RHEL 5.11 to NSS 3.16.1, required for FF 31</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-2" date="1404172800">- Backport nss-3.12.6 upstream fix required by Firefox 31 ESR
- Resolves: Bug 1110860</changelog>
</package>
<package pkgid="e0de25006c45a24c520856720436a0ea3453233e" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.16.1" rel="4.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-2" date="1404172800">- Backport nss-3.12.6 upstream fix required by Firefox 31 ESR
- Resolves: Bug 1110860</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-3" date="1411603200">- Add patches published with NSS 3.16.2.1
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.1-4" date="1411689600">- Adjust softokn patch to be compatible with legacy softokn API.
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
</package>
<package pkgid="fc8942081e86cde75810ff6b429f9d022c73a64e" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.16.2.3" rel="1.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-3" date="1411603200">- Add patches published with NSS 3.16.2.1
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.1-4" date="1411689600">- Adjust softokn patch to be compatible with legacy softokn API.
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-5" date="1415923200">- Resolves: Bug 1158159 - Upgrade to NSS 3.16.2.3 for Firefox 31.3</changelog>
</package>
<package pkgid="d86fb6b67a89467adbd13a259e499797f4317671" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.18.0" rel="6.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-4" date="1429401600">- Update and reeneable nss-646045.patch on account of the rebase
- Enable additional ssl test cycles and document why some aren't enabled
- Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-5" date="1429401601">- Copy PayPalICA.cert and PayPalRootCA.cert to nss/tests/libpkix/certs
- Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.18.0-6" date="1430265600">- On RHEL 6.x keep the TLS version defaults unchanged.
- Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)</changelog>
</package>
<package pkgid="b3f7d44ac1ebc7d0ce5ebc907653eaeb382ec72d" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.19.1" rel="1.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.18.0-6" date="1430265600">- On RHEL 6.x keep the TLS version defaults unchanged.
- Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-7" date="1438128000">- Pick up upstream patch from nss-3.19.1
- Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
- Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-1" date="1438214400">- Rebase nss to 3.19.1
- Pick up upstream fix for client auth. regression caused by 3.19.1
- Revert upstream change to minimum key sizes
- Remove patches that rendered obsolote by the rebase
- Update existing patches on account of the rebase</changelog>
</package>
<package pkgid="9a4057c6be3c9d5227029a9cf43658b8c029889f" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.19.1" rel="2.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-7" date="1438128000">- Pick up upstream patch from nss-3.19.1
- Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
- Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-1" date="1438214400">- Rebase nss to 3.19.1
- Pick up upstream fix for client auth. regression caused by 3.19.1
- Revert upstream change to minimum key sizes
- Remove patches that rendered obsolote by the rebase
- Update existing patches on account of the rebase</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-2" date="1445299200">- Resolves: Bug 1269354 - CVE-2015-7182 CVE-2015-7181</changelog>
</package>
<package pkgid="e9503df32a6d392166eddbd691eaed391d29e5b6" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.19.1" rel="4.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-2" date="1445299200">- Resolves: Bug 1269354 - CVE-2015-7182 CVE-2015-7181</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-3" date="1456358400">- Include the fix for CVE-2016-1950 from NSS 3.19.2.3</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-4" date="1457049600">- Actually apply the fix for CVE-2016-1950 from NSS 3.19.2.3 ...</changelog>
</package>
<package pkgid="ffdf488e2d5951db2bac16fc48e7326deb0869e0" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.21.0" rel="6.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-4" date="1459382400">- Run SSL tests</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-5" date="1460160000">- Keep SSL_DH_MIN_P_BITS at 768 as in the previously released build.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-6" date="1460160001">- Fix SSL_DH_MIN_P_BITS in more places.</changelog>
</package>
<package pkgid="43b3a9a18e79346a285dba82819f388ca0662cd3" name="nss-pkcs11-devel" arch="i386">
  <version epoch="0" ver="3.21.3" rel="2.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-6" date="1460160000">- Fix SSL_DH_MIN_P_BITS in more places.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.21.3-1" date="1477440000">- Rebase to NSS 3.21.3
- Resolves: Bug 1347908</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.3-2" date="1478649600">- Mozilla #1314604 / Red Hat CVE-2016-8635</changelog>
</package>
<package pkgid="ad72d62fc7453f97a10f254705b209064c4b0f34" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.12.10" rel="4.el5_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-2" date="1314741600">- Update builtins certs to NSSCKBI_1_85_RTM</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-3" date="1314828000">- Update builtins certs to those from NSSCKBI_1_86_RTM</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-4" date="1315000800">- Update builtins certs to those from NSSCKBI_1_87_RTM</changelog>
</package>
<package pkgid="cf689a83448983a19c0422fac1008fe86a7fdb78" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.12.10" rel="7.el5_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-5" date="1317852000">- Plug file descriptor leaks on httpd service reloads</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-6" date="1320444000">- Update builtins certs to those from NSSCKBI_1_88_RTM</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.10-7" date="1320530400">- Fix a syntax error in the spec file</changelog>
</package>
<package pkgid="30f3967b0381f48630a89548fcedb5e3a96bfcc9" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.13.1" rel="5.el5_8"/>
  <changelog author="Elio Maldonado Batiz &lt;emaldona@redhat.com&gt; - 3.13.1-4" date="1328911200">- Related: Bug 788964 - retagging</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.1-4" date="1330466400">- Resolves: rhbz#798462 - Protect NSS_Shutdown from clients that fail to initialize nss</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.1-5" date="1330552800">- Resolves: rhbz#798462 - bumping the release tag</changelog>
</package>
<package pkgid="566c763fbdbb65f906e3e42d4407cff0018c1e66" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.13.5" rel="4.el5_8"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-2" date="1342044000">- Resolves: rhbz#834219 - Fix multilib and scriptlet problems
- Fix %post and %postun lines per packaging guildelines
- Add %{?_isa} to tools Requires: per packaging guidelines
- Fix explicit-lib-dependency zlib error reported by rpmlint</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-3" date="1342044001">- Resolves: rhbz#834219 - Fix the changes to the %post line
- Having multiple commands requires that /sbin/lconfig be the beginning of the scriptlet</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-4" date="1342216800">- Related: rhbz#834219 - Fix ia64 / i386 multilib nss install failure
- Remove no longer needed %pre and %preun scriplets meant for nss updates from RHEL-5.0</changelog>
</package>
<package pkgid="f399388821cd27d872a5bfb78b34c3fe7585d4fe" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.13.6" rel="3.el5_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.6-1" date="1357941600">- Update to NSS_3_13_6_RTM
- Resolves: rhbz#893371 - [RFE] [RHEL5] Rebase to NSS &gt;= 3.13.6</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.6-2" date="1357941601">- [CVE-2013-0743] - Resolves: rhbz#891149 - Dis-trust TURKTRUST mis-issued *.google.com certificate</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.6-3" date="1358028000">- Fix changelog inconsistencies with commit and bug resolved
- Resolves: rhbz#891149 [CVE-2013-0743]</changelog>
</package>
<package pkgid="6ddc568a4200265af102b5091f5fe6dbf11d85e8" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.14.3" rel="6.el5_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-4" date="1366754400">- Fix rpmdiff test reported failures and remove other unwanted changes
- Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-5" date="1368482400">- Define -DNO_FORK_CHECK when compiling softoken for ABI compatibility
- Remove the unused and obsolete nss-nochktest.patch
- Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-6" date="1374616800">- Resolves: rhbz#986969 - nssutil_ReadSecmodDB() leaks memory</changelog>
</package>
<package pkgid="885e0439ded790772cf93c9be5cdf2b06c2c9e66" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.15.3" rel="3.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.1-2" date="1385164800">- Remove unused patches
- Resolves: rhbz#1033478 - Rebase RHEL 5 to NSS 3.15.1 (for FF 24.x)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-1" date="1385164801">- Update to nss-3.15.3
- Remove unused patch
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.15.3-3" date="1385683200">- remove unnecessary and problematic template-removal patch
  which was added as part of the 3.15.1 rebase
- bump release number</changelog>
</package>
<package pkgid="a32135b7e64225385a1208abf25b0f9349173510" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.15.3" rel="4.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-1" date="1385164800">- Update to nss-3.15.3
- Remove unused patch
- Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.15.3-3" date="1385683200">- remove unnecessary and problematic template-removal patch
  which was added as part of the 3.15.1 rebase
- bump release number</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-4" date="1386979200">- Revoke trust in one mis-issued anssi certificate
- Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)</changelog>
</package>
<package pkgid="d973fc90d326ade9e2ca42950062e1f6c30833c5" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.15.3" rel="7.el5_10"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-5" date="1387238400">- Remove two unused patches
- Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-6" date="1404518400">- Fix race-condition in certificate validation
- Resolves: Bug 1116199</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-7" date="1404518401">- Remove an unused patch
- Related: Bug 1116199</changelog>
</package>
<package pkgid="9ac8328469fb217f3eedc9745f91461a90be51d5" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.16.1" rel="2.el5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.15.3-6" date="1398816000">- Remove unused and obsolete patches
- Related: Bug 1032468</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-1" date="1403654400">- Rebase to nss-3.16.1 for FF31
- Resolves: Bug 1110860 - Rebase nss in RHEL 5.11 to NSS 3.16.1, required for FF 31</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-2" date="1404172800">- Backport nss-3.12.6 upstream fix required by Firefox 31 ESR
- Resolves: Bug 1110860</changelog>
</package>
<package pkgid="1215bba8d72d4170dea8e9bffeadce333c8f4be7" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.16.1" rel="4.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-2" date="1404172800">- Backport nss-3.12.6 upstream fix required by Firefox 31 ESR
- Resolves: Bug 1110860</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-3" date="1411603200">- Add patches published with NSS 3.16.2.1
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.1-4" date="1411689600">- Adjust softokn patch to be compatible with legacy softokn API.
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
</package>
<package pkgid="e37a80410ad0d2ff118b05757faced39764e31ee" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.16.2.3" rel="1.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-3" date="1411603200">- Add patches published with NSS 3.16.2.1
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.1-4" date="1411689600">- Adjust softokn patch to be compatible with legacy softokn API.
- Resolves: Bug 1145430 - CVE-2014-1568</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.1-5" date="1415923200">- Resolves: Bug 1158159 - Upgrade to NSS 3.16.2.3 for Firefox 31.3</changelog>
</package>
<package pkgid="0182889cb4599698cd7960b118bb7933f495aadf" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.18.0" rel="6.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-4" date="1429401600">- Update and reeneable nss-646045.patch on account of the rebase
- Enable additional ssl test cycles and document why some aren't enabled
- Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-5" date="1429401601">- Copy PayPalICA.cert and PayPalRootCA.cert to nss/tests/libpkix/certs
- Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.18.0-6" date="1430265600">- On RHEL 6.x keep the TLS version defaults unchanged.
- Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)</changelog>
</package>
<package pkgid="ed039cbdd36ccf436108511d6c1fe57354c7503a" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.19.1" rel="1.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.18.0-6" date="1430265600">- On RHEL 6.x keep the TLS version defaults unchanged.
- Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-7" date="1438128000">- Pick up upstream patch from nss-3.19.1
- Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
- Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-1" date="1438214400">- Rebase nss to 3.19.1
- Pick up upstream fix for client auth. regression caused by 3.19.1
- Revert upstream change to minimum key sizes
- Remove patches that rendered obsolote by the rebase
- Update existing patches on account of the rebase</changelog>
</package>
<package pkgid="5ea51d97be2c8cd469fa315d26cd064e44cf0b76" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.19.1" rel="2.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-7" date="1438128000">- Pick up upstream patch from nss-3.19.1
- Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
- Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-1" date="1438214400">- Rebase nss to 3.19.1
- Pick up upstream fix for client auth. regression caused by 3.19.1
- Revert upstream change to minimum key sizes
- Remove patches that rendered obsolote by the rebase
- Update existing patches on account of the rebase</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-2" date="1445299200">- Resolves: Bug 1269354 - CVE-2015-7182 CVE-2015-7181</changelog>
</package>
<package pkgid="79c32dcf700fca68caa055361b504cf7f2fd30f1" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.19.1" rel="4.el5_11"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-2" date="1445299200">- Resolves: Bug 1269354 - CVE-2015-7182 CVE-2015-7181</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-3" date="1456358400">- Include the fix for CVE-2016-1950 from NSS 3.19.2.3</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-4" date="1457049600">- Actually apply the fix for CVE-2016-1950 from NSS 3.19.2.3 ...</changelog>
</package>
<package pkgid="529abb836f9f2131fecf09fe391bb6dc0aa4fa41" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.21.0" rel="6.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-4" date="1459382400">- Run SSL tests</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-5" date="1460160000">- Keep SSL_DH_MIN_P_BITS at 768 as in the previously released build.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-6" date="1460160001">- Fix SSL_DH_MIN_P_BITS in more places.</changelog>
</package>
<package pkgid="5e899f1623cbfc69193ceddaddc39b99e87591c8" name="nss-tools" arch="i386">
  <version epoch="0" ver="3.21.3" rel="2.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-6" date="1460160000">- Fix SSL_DH_MIN_P_BITS in more places.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.21.3-1" date="1477440000">- Rebase to NSS 3.21.3
- Resolves: Bug 1347908</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.3-2" date="1478649600">- Mozilla #1314604 / Red Hat CVE-2016-8635</changelog>
</package>
<package pkgid="9692caefe9a0286fc2f5207f8976def29447758d" name="ntp" arch="i386">
  <version epoch="0" ver="4.2.2p1" rel="18.el5_11"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.2p1-16.el5" date="1319587200">- allow selection of cipher for private key files (#741573)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.2p1-17.el5" date="1386028800">- increase memlock limit again (#1035198)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.2p1-18.el5" date="1419033600">- don't generate weak control key for resolver (CVE-2014-9293)
- don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
- fix buffer overflows via specially-crafted packets (CVE-2014-9295)</changelog>
</package>
<package pkgid="03b4bcc4a1129466e8550c0942a2d968f4d82ace" name="openafs" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="bfb260ea2382faf77c19efffc1300336e2dc0736" name="openafs" arch="i386">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346623200">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357941600">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374703200">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="d435204ef1a919ec83309925ece3946841aef392" name="openafs" arch="i386">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="4280152b521ad674c76b64749872c0a50ddae5af" name="openafs" arch="i386">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="8689f71a3ef65196033a49258d6e96b4e2018bc7" name="openafs" arch="i386">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="5f9fc16e9e970dfc23266ce32e95bebd94807d30" name="openafs" arch="i386">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="50564efd6124f23b03dfd61585b819313f960706" name="openafs" arch="i386">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="e8c0f06c9dad99f25bfd4fa2452d092c95757dec" name="openafs-authlibs" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="0a7c4f634b3bbc648ee55c9f2f1afc62863ca15c" name="openafs-authlibs" arch="i386">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346623200">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357941600">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374703200">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="37fbcd79752daafaa9a9603e240477371c78f08c" name="openafs-authlibs" arch="i386">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="b57880465672d166ca398a42df4d377aef37c8a2" name="openafs-authlibs" arch="i386">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="825063f814e6392d91a27221cadff101e7c2fa34" name="openafs-authlibs" arch="i386">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="8ffb6c511ca64a20c302efc1d31e3e8e58ee5f8f" name="openafs-authlibs" arch="i386">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="6639641e4616252b16e574988d893946c6bf494a" name="openafs-authlibs" arch="i386">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="47966b0916a736b1d0f2fe9aa3cecc867f89f67b" name="openafs-authlibs-devel" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="026fffb35b3cab621812f83b6efab356cd1b2801" name="openafs-authlibs-devel" arch="i386">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346623200">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357941600">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374703200">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="2a6c85eadd73dc64004a99f99170c3fecf8eb52f" name="openafs-authlibs-devel" arch="i386">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="e9d6804fa271b90e20ce9ed6f53907a9082a3681" name="openafs-authlibs-devel" arch="i386">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="3b3992b41fb999f363bd79b47e1900d671a472cd" name="openafs-authlibs-devel" arch="i386">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="36cebbcdf977c994903b60abf88e554594769ec9" name="openafs-authlibs-devel" arch="i386">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="2350b3fc599c24b33592a5e36c2eb1c901bcfef3" name="openafs-authlibs-devel" arch="i386">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="7cd578d5dfa5ecccef8aee7741ee49c60cb2d528" name="openafs-client" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="90dd25aed3f297f897245dae2c9db07ab1e7cc9b" name="openafs-client" arch="i386">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346623200">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357941600">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374703200">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="173115f37a36a1a12250b15aaa958d8d8d8300ad" name="openafs-client" arch="i386">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="721cd59c9148f9d0a3ea5bd0723294a463c70611" name="openafs-client" arch="i386">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="82caea6dfaa207a176822ed89bf4d4dc934650d3" name="openafs-client" arch="i386">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="c1f998044def2e60ff9d9678aef4f47170144a37" name="openafs-client" arch="i386">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="5b0336747226a7c0c52aef649e8183d715ed09a9" name="openafs-client" arch="i386">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="2303f2455672f6100d31a23a8242eaa1a4ced9c6" name="openafs-compat" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="8121c4bb49daa121199879a79653d990bdd9df33" name="openafs-compat" arch="i386">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346623200">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357941600">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374703200">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="09ea02f9578e16d57e0ab83e819d02d2f74999eb" name="openafs-compat" arch="i386">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="d965a5ab4e535a2646fa813eeeb732acc8eba4d6" name="openafs-compat" arch="i386">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="22446ca859c37e58eb0b662c01cf79fe8d89ceb0" name="openafs-compat" arch="i386">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="0e2dd4d859d5fb476740e25330df7f7191371b29" name="openafs-compat" arch="i386">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="cd5856ce7498776c5492f5b625c6c662966458cd" name="openafs-compat" arch="i386">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="6deb2cbe16a7f1255b0b2780031d22f53eb6b3e0" name="openafs-debug" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="58d2a15469476ddeab07707a16b348c382353db0" name="openafs-debug" arch="i386">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346623200">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357941600">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374703200">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="4f4ea5d4edebb08832b320ba6a267bd62373beb6" name="openafs-debug" arch="i386">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="9369f277f005b92a1590c25de31bddbe67392335" name="openafs-debug" arch="i386">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="1e0a668cce99fd94754995d7d39314aae7a6feab" name="openafs-debug" arch="i386">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="3f9072c020d16d71987e25f7b1f183f1169b92c1" name="openafs-debug" arch="i386">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="e945c14bb52bdb4f5adf48d9d43f98bebc67acbf" name="openafs-debug" arch="i386">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="de8a8e9d855ccd9746d204037f14447ac2c2dc2f" name="openafs-devel" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="9c30cf65fa552308c26c6df7be4d541d743dabe4" name="openafs-devel" arch="i386">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346623200">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357941600">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374703200">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="4a45fac02110edf3a19a8a3b6dedf4621ade10ed" name="openafs-devel" arch="i386">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="17520e7036e1a0a10c5acbf7ad321425d5f9acc1" name="openafs-devel" arch="i386">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="736e4de9184869a7e656856a666ed3e81d65922b" name="openafs-devel" arch="i386">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="0ff08fb760b913009b0af85cd96c858d9055a650" name="openafs-devel" arch="i386">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="5aa76f60bf429498f896f8e53f62688bcb5b9d10" name="openafs-devel" arch="i386">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="d88fb2140d09d8bd5762ca0c63005357678d6845" name="openafs-kernel-source" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="0dc537c2142d86d9a40c253725169358c01bd027" name="openafs-kernel-source" arch="i386">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346623200">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357941600">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374703200">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="4e05d28a55d52bcba59ec656f3806aaefd8ef824" name="openafs-kernel-source" arch="i386">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="d7ca54336fe968574eca76d2e4fe60fb5769339d" name="openafs-kernel-source" arch="i386">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="58e55a9d6775c756dfe43b039a7415a086d9e6e6" name="openafs-kernel-source" arch="i386">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="f1407f570393e17b7ae39bb23c200a3a81dafcfa" name="openafs-kernel-source" arch="i386">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="ab21b41704e41864d2f32ab6d476bf77c107027b" name="openafs-kernel-source" arch="i386">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="66c71cee61cac52128899321cbd364a41a482b59" name="openafs-kpasswd" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="bac62d89e593e009f6f294aff23ee4def06081e2" name="openafs-kpasswd" arch="i386">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346623200">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357941600">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374703200">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="b109085ba22892aa4ccc02ab8d6cd87f04fec229" name="openafs-kpasswd" arch="i386">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="b95f5132c82c6961074f677ddb8841ca0ab735d4" name="openafs-kpasswd" arch="i386">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="0e08743a664c758a80c7e889b66d02b0fe9a1f01" name="openafs-kpasswd" arch="i386">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="e48380f8732c604b1db4f92c11c5daebeaf8534b" name="openafs-kpasswd" arch="i386">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="0b9d64729bf13e34314d93cf14fd56e6c7d5a67e" name="openafs-kpasswd" arch="i386">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="a40ae1982bbb00524f63054d9dba5212551f781c" name="openafs-krb5" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="61f7f56a36d20393cdba08ffc3db22d6a707c314" name="openafs-krb5" arch="i386">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346623200">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357941600">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374703200">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="8101ce50a3d9528fb7d5ffd464f2ed54e5672c3c" name="openafs-krb5" arch="i386">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="f491c22c44bb224914f98b4ad3465f1623b8f953" name="openafs-krb5" arch="i386">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="c1ed0470dcc8efa133b4a0a01152dc118efdd7ae" name="openafs-krb5" arch="i386">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="10f0534fff47d805c36b53c98ab9fc5b1e73fe1d" name="openafs-krb5" arch="i386">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="28e10f734b2deed7c085ee2f5be07d3f96993e34" name="openafs-krb5" arch="i386">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="014f6d0cce84c82d89f091b0d80f5cdcf3ed625e" name="openafs-server" arch="i686">
  <version epoch="0" ver="1.4.14" rel="82.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.1.SLx" date="1303430400">- patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
- this hopefully fixes the client hangups on parallel directory acces</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346630400">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
</package>
<package pkgid="5f889b869035f843cbf64eac8652b3933a94125c" name="openafs-server" arch="i386">
  <version epoch="0" ver="1.4.15" rel="83.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-80.2.SLx" date="1346623200">- patch 1074 should fix partition size/free for large vice partitions</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357941600">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374703200">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
</package>
<package pkgid="9c4f9d06df97b49723f0e1801f3ed1d52e7536e3" name="openafs-server" arch="i386">
  <version epoch="0" ver="1.4.15" rel="84.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.14-82.SLx" date="1357948800">- patch 1075 to fix buffer overflows (backport from 1.6.2 release)
- backed out patch 1074 to make this is a security-only release</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-83.SLx" date="1374710400">- 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
- see SECURITY.txt for important info on how to actually secure your site
- just updating to this build is *not* sufficient</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
</package>
<package pkgid="7e05be6c51cc6dbbf34cdacf5ec3edd34a63faa8" name="openafs-server" arch="i386">
  <version epoch="0" ver="1.4.15" rel="86.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-84.SLx" date="1396569600">- security fixes from openafs-1.6.7 addressing openafs-sa-2014-001 + DOS
- fix build on SL 5.10</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-85.SLx" date="1413936000">- patch 1080 with aklog/524 fix from gerrit 11536, + manpage update from 11538</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
</package>
<package pkgid="34c5c528bb78852952e938c5146332b8348f2052" name="openafs-server" arch="i386">
  <version epoch="0" ver="1.4.15" rel="88.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-86.SLx" date="1438041600">- apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
- (the 6th patch in that release is specific to Solaris)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
</package>
<package pkgid="578a1ac569dc38ccf3e2a5989d2ac179d558f80a" name="openafs-server" arch="i386">
  <version epoch="0" ver="1.4.15" rel="89.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-87.SLx" date="1439596800">- implement the vlserver fix from openafs-1.6.14:
- back out patch 1086 (which disabled querying the vldb by regex)
- new patches 1087, 1088 to limit this to admins and fix buffer overflows</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
</package>
<package pkgid="bec1d23680e07d44ffe746bba457a542a73cbf16" name="openafs-server" arch="i386">
  <version epoch="0" ver="1.4.15" rel="90.sl5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-88.SLx" date="1446163200">- added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
- note tat CVE-2015-7763 does not apply to openafs-1.4</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-89.SLx" date="1458259200">- patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
- patches 1091..1095 to fix OPENAFS-SA-2016-001 &amp; 2 (from release 1.6.17)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.4.15-90.SLx" date="1481241600">- patches 1096..1099 to fix OPEANFS-SA-2016-003 (from release 1.6.20)</changelog>
</package>
<package pkgid="35071429eea3bd09e662d8c1469107d623119df4" name="openldap" arch="i386">
  <version epoch="0" ver="2.3.43" rel="27.el5_10"/>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-25" date="1326326400">- fix: disable static libraries stripping (#684630)</changelog>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-26" date="1340755200">- fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#812772)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064145)</changelog>
</package>
<package pkgid="faefbf2d40b06db1a21f61474b51aa46f38db72d" name="openldap" arch="i386">
  <version epoch="0" ver="2.3.43" rel="29.el5_11"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064146)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-28" date="1397088000">- fix: syncprov psearch race condition (#999811)</changelog>
  <changelog author="Mat&#xFA;&#x161; Hon&#x11B;k &lt;mhonek@redhat.com&gt; - 2.3.43-29" date="1442534400">- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263170)</changelog>
</package>
<package pkgid="f6088160c9494df86105c70ee2fc59e7ec45a541" name="openldap-clients" arch="i386">
  <version epoch="0" ver="2.3.43" rel="27.el5_10"/>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-25" date="1326326400">- fix: disable static libraries stripping (#684630)</changelog>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-26" date="1340755200">- fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#812772)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064145)</changelog>
</package>
<package pkgid="1d253563e1e009b7c73c8f0f3e925367ce2733c8" name="openldap-clients" arch="i386">
  <version epoch="0" ver="2.3.43" rel="29.el5_11"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064146)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-28" date="1397088000">- fix: syncprov psearch race condition (#999811)</changelog>
  <changelog author="Mat&#xFA;&#x161; Hon&#x11B;k &lt;mhonek@redhat.com&gt; - 2.3.43-29" date="1442534400">- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263170)</changelog>
</package>
<package pkgid="a4fafd4fd22e6ced9b92f55cddd92567e3f11b86" name="openldap-devel" arch="i386">
  <version epoch="0" ver="2.3.43" rel="27.el5_10"/>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-25" date="1326326400">- fix: disable static libraries stripping (#684630)</changelog>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-26" date="1340755200">- fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#812772)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064145)</changelog>
</package>
<package pkgid="e2cc3b38293946be627c8f71fd880330a83f5913" name="openldap-devel" arch="i386">
  <version epoch="0" ver="2.3.43" rel="29.el5_11"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064146)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-28" date="1397088000">- fix: syncprov psearch race condition (#999811)</changelog>
  <changelog author="Mat&#xFA;&#x161; Hon&#x11B;k &lt;mhonek@redhat.com&gt; - 2.3.43-29" date="1442534400">- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263170)</changelog>
</package>
<package pkgid="1cb55dde4c949f29928fa0f20de0ef2abedd4230" name="openldap-servers" arch="i386">
  <version epoch="0" ver="2.3.43" rel="27.el5_10"/>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-25" date="1326326400">- fix: disable static libraries stripping (#684630)</changelog>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-26" date="1340755200">- fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#812772)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064145)</changelog>
</package>
<package pkgid="60464d788822770647da3d9ef6e4fc00597e35ab" name="openldap-servers" arch="i386">
  <version epoch="0" ver="2.3.43" rel="29.el5_11"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064146)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-28" date="1397088000">- fix: syncprov psearch race condition (#999811)</changelog>
  <changelog author="Mat&#xFA;&#x161; Hon&#x11B;k &lt;mhonek@redhat.com&gt; - 2.3.43-29" date="1442534400">- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263170)</changelog>
</package>
<package pkgid="1c2ddd2a7a332d1e4b942a00927b202f3d7f7ae7" name="openldap-servers-overlays" arch="i386">
  <version epoch="0" ver="2.3.43" rel="27.el5_10"/>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-25" date="1326326400">- fix: disable static libraries stripping (#684630)</changelog>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-26" date="1340755200">- fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#812772)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064145)</changelog>
</package>
<package pkgid="49e24d7f25acf800d20731b14ac6d3d3ab73fb58" name="openldap-servers-overlays" arch="i386">
  <version epoch="0" ver="2.3.43" rel="29.el5_11"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064146)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-28" date="1397088000">- fix: syncprov psearch race condition (#999811)</changelog>
  <changelog author="Mat&#xFA;&#x161; Hon&#x11B;k &lt;mhonek@redhat.com&gt; - 2.3.43-29" date="1442534400">- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263170)</changelog>
</package>
<package pkgid="542521d440fa7ff742dcf2f060e907dc5c1afde6" name="openldap-servers-sql" arch="i386">
  <version epoch="0" ver="2.3.43" rel="27.el5_10"/>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-25" date="1326326400">- fix: disable static libraries stripping (#684630)</changelog>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.3.43-26" date="1340755200">- fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#812772)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064145)</changelog>
</package>
<package pkgid="2daba11806a7c2f4b59868d5248a314eca673095" name="openldap-servers-sql" arch="i386">
  <version epoch="0" ver="2.3.43" rel="29.el5_11"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-27" date="1392336000">- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064146)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.3.43-28" date="1397088000">- fix: syncprov psearch race condition (#999811)</changelog>
  <changelog author="Mat&#xFA;&#x161; Hon&#x11B;k &lt;mhonek@redhat.com&gt; - 2.3.43-29" date="1442534400">- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263170)</changelog>
</package>
<package pkgid="956a4bc211ecbb7e59975eaac3522638bc28ee1b" name="openldap24-libs" arch="i386">
  <version epoch="0" ver="2.4.23" rel="5.el5"/>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-3" date="1299621600">- included missing NSS patches from RHEL-6</changelog>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-4" date="1300140000">- fix: devel subpackage - typo in Requires</changelog>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-5" date="1305064800">- use OpenSSL instead of Mozilla NSS to support PEM certificates (#703382)</changelog>
</package>
<package pkgid="e9e765ad105afc46c9ddb26c0ed243ba70756882" name="openldap24-libs-devel" arch="i386">
  <version epoch="0" ver="2.4.23" rel="5.el5"/>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-3" date="1299621600">- included missing NSS patches from RHEL-6</changelog>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-4" date="1300140000">- fix: devel subpackage - typo in Requires</changelog>
  <changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-5" date="1305064800">- use OpenSSL instead of Mozilla NSS to support PEM certificates (#703382)</changelog>
</package>
<package pkgid="4ad6ccc53f90111b44adf6d2bb6950a7b8089e6c" name="openoffice.org-base" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="493138fd8950878b7fba2c6265c71a97e6037591" name="openoffice.org-base" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="b4767235c5970a1c2fa06c4213d9d9bfe28ff4ad" name="openoffice.org-base" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="204a1d98685127c2374d9c5428d6bcd37cc88a2c" name="openoffice.org-calc" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="63c36eab693de988c223159d8d3fbc9ddb57342b" name="openoffice.org-calc" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="798eac49d99d0aa4ca9e2d35f492a9f172ba615f" name="openoffice.org-calc" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="5d15cd5917d2d290d8a8b0bf8f4ce456a70bcdb6" name="openoffice.org-core" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="192c8bda28cbfde5a4a0d8be0010becf7da8ca7e" name="openoffice.org-core" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="26bb7d5b2c311625d99014226fdb2aa129f946a6" name="openoffice.org-core" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="262b87cac18ddfd7551b4bd2b1e4b415e80b6ae5" name="openoffice.org-draw" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="18da74f9e0bd8cfd8b71e2684f5e3b56ea0c049a" name="openoffice.org-draw" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="821a940355974ed2903fcf396adcf32ea3793ea6" name="openoffice.org-draw" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="549b156fc48ab54b85548df3a9d4256fdc62aaa5" name="openoffice.org-emailmerge" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="ea844e4425e7aada9fcf316b32f691e1e709be49" name="openoffice.org-emailmerge" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="5e81ce529f0a4a690163c25d823defd2d90848d8" name="openoffice.org-emailmerge" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="841f565dfcdc4fb13916c279d53fdda6c39d4495" name="openoffice.org-graphicfilter" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="b273441451925b672ed0ae61f118097c3c63575d" name="openoffice.org-graphicfilter" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="fd88f98f54ae1312994b2ed7ffc47df2a9da8dbf" name="openoffice.org-graphicfilter" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="2a43deb08677d9b393b81257f5c5d0d2614d7e42" name="openoffice.org-headless" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="98391b48e1da6dc0b931f60a58124d2746ca14c6" name="openoffice.org-headless" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="5ad88a68e3a7594dfe1d68305df59d6443926888" name="openoffice.org-headless" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="7d2090b61377324116269835bfdedcf620799af2" name="openoffice.org-impress" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="fa19a8af5e40470e2b0949cadede9fa9be4b3a9b" name="openoffice.org-impress" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="7e1ddedc6132a5ca5dfa4452d9ab83e447ff2fd4" name="openoffice.org-impress" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="628d733145f63c96d2227baad68b8716cd2fadb0" name="openoffice.org-javafilter" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="7883cc05d05559f28d26aedd78250b48b7ad225b" name="openoffice.org-javafilter" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="24a3fc80eccb7a6bc9588271c9996fccf7a62a6f" name="openoffice.org-javafilter" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="612afcc92953a4e02fe5b05dad79ba428050303c" name="openoffice.org-langpack-af_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="b639d0241490e13f535c9886e2826313deae8f9b" name="openoffice.org-langpack-af_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="84671a317f45b553b64f692dd52db17489035e67" name="openoffice.org-langpack-af_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="835daeef23720d2c3eae9d83ca0e8108adcafd9a" name="openoffice.org-langpack-ar" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="d39ca9d798a436cb2a67e5a7c48e14a147f0c3c4" name="openoffice.org-langpack-ar" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="5064741c1e3771c26a165532001975c7f7ee9e8a" name="openoffice.org-langpack-ar" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="4a84386db2a05ac12bf7db605a62899954803250" name="openoffice.org-langpack-as_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="ee38c1d351706eded629677696ee03650db93f92" name="openoffice.org-langpack-as_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="c6c8034af6814d324f76bd513a1ad491ed39d63d" name="openoffice.org-langpack-as_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="3440f930d0232eadc60cf16b8b10e45fea2f14ce" name="openoffice.org-langpack-bg_BG" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="d9de04ae379529722c0187a60d54f6c3e3e6030b" name="openoffice.org-langpack-bg_BG" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="b784a7850a419bb8808d09faa3dcda52cf11e940" name="openoffice.org-langpack-bg_BG" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="fa89981ba2c35f9e6b21bc6e49125ba7a63a75b5" name="openoffice.org-langpack-bn" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="128e2de2b5385ad7d3a4faa386073ab9c89da712" name="openoffice.org-langpack-bn" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="0d96aadf90989144a4b05a7be4ae569d045c39da" name="openoffice.org-langpack-bn" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="a606e413ffea2d5636da997a1a20f8531377fc1f" name="openoffice.org-langpack-ca_ES" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="4273b0092cdcc042fc69328929e1cc29ac44f09c" name="openoffice.org-langpack-ca_ES" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="baac6e8599e5917080ba9e87b49dc97bf364d90b" name="openoffice.org-langpack-ca_ES" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="09c56a8307b1a4ccfa6e7a2d4408548ca0375a0c" name="openoffice.org-langpack-cs_CZ" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="27206ed996d855f3e853e5670d0f35b27b66b684" name="openoffice.org-langpack-cs_CZ" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="5fc62ce5835102d853b511487ef8aa817077a6b0" name="openoffice.org-langpack-cs_CZ" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="9e1d5fe48ee3ca03c32ad393d797858148c54b1c" name="openoffice.org-langpack-cy_GB" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="57050e234fe0adb95c2c728e2f12411c9bfb21ae" name="openoffice.org-langpack-cy_GB" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="db35fa6f5bb9e885618397bef0145b88612cc213" name="openoffice.org-langpack-cy_GB" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="ee92016cb682d960ce3e05c3417bafeeed466051" name="openoffice.org-langpack-da_DK" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="c5a4342116f9b4639fa25dc441c3f8b6a5acdd05" name="openoffice.org-langpack-da_DK" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="17bf64bf26e56826d271780401729c494030dff4" name="openoffice.org-langpack-da_DK" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="147f42f546fb5d7ebc7ad5b7751487f5f41123e2" name="openoffice.org-langpack-de" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="316d646342073abe5a073d77fd83878491a7342f" name="openoffice.org-langpack-de" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="bfe8e3cbb00c914bb9035bb691240c48174d74ac" name="openoffice.org-langpack-de" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="b30365b188f62faf4fd05cd8a12813f1197b01f7" name="openoffice.org-langpack-el_GR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="900ffedcd121525c434164f37a98b53a7e5fcf21" name="openoffice.org-langpack-el_GR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="2906dfd2610ccc91a51fe54efbcc791c8d4baf0e" name="openoffice.org-langpack-el_GR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="ebfa0a30452f3a7903f0ebf6b407ecdab5a855f3" name="openoffice.org-langpack-es" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="d81625201e05aa76566c343bd00991b44bc047d6" name="openoffice.org-langpack-es" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="37f5a64bb671d9ad806ebf25657311ae9c15e376" name="openoffice.org-langpack-es" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="a904a566e47e823a3c270c6e0f7f1f1d5693881e" name="openoffice.org-langpack-et_EE" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="da647ed5ec17a719df015b9f037fa265a6ab5c83" name="openoffice.org-langpack-et_EE" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="5e8e26c7dbfdb579418fe50993bbade08c0ecf4b" name="openoffice.org-langpack-et_EE" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="0c01a2ed2277f28672b4aa2cddcf0a69ac8840f8" name="openoffice.org-langpack-eu_ES" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="aef53419d0d0e7ca7187c6b9c95b66de8ce26d2a" name="openoffice.org-langpack-eu_ES" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="63fb9969ddc7ac330287a5432e6aa4902455217e" name="openoffice.org-langpack-eu_ES" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="debfd09f225665fe57a47e682a4ed3285c6525b4" name="openoffice.org-langpack-fi_FI" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="d9a3e142cac9e4c014fabc006247aeb2338e82f0" name="openoffice.org-langpack-fi_FI" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="dc3b437303bd00347261ea2da9baa90d70f7b98c" name="openoffice.org-langpack-fi_FI" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="7666cd6d3c299e2180b4c1e43cdf063c5c48bdc6" name="openoffice.org-langpack-fr" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="c835a0963a848904dcf5f3509b74e8a05c653cbc" name="openoffice.org-langpack-fr" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="f20f58a8ade51ce5697617aa7f717f5ac4d13b43" name="openoffice.org-langpack-fr" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="ad5059e1c1ea1e4c83f696074983b7286685d110" name="openoffice.org-langpack-ga_IE" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="a967e4b699acbf2ac95919e99909d54f9fb7f14b" name="openoffice.org-langpack-ga_IE" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="35bbaa1962bbe0c8abf94017286209fe9bc43d87" name="openoffice.org-langpack-ga_IE" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="41a760551dc849d356ed538bc5f2084bf68a3389" name="openoffice.org-langpack-gl_ES" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="7a1d09d6ec47b5353808e93159810c7ab0c9d22e" name="openoffice.org-langpack-gl_ES" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="02584e868085a83b140d6159789de778d5a635b2" name="openoffice.org-langpack-gl_ES" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="553f4f3a504747a8f9b3c3ee5bda995411dc5b86" name="openoffice.org-langpack-gu_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="34d19ca15371818009aa1d9b560317cafa6de81e" name="openoffice.org-langpack-gu_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="81d8d4ec5ef0f6386049b29dc72cd4ef3bd91545" name="openoffice.org-langpack-gu_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="b44d87600c02a561f4a86b37c248bee87ca69ea2" name="openoffice.org-langpack-he_IL" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="708c51920a840a3fb3bd21c4fbf1b81495604ba8" name="openoffice.org-langpack-he_IL" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="171cd916d1ae88e84b0de2ba920c56df172c870f" name="openoffice.org-langpack-he_IL" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="f823ac504eb4db321462463f42b82ed1cf99c9e6" name="openoffice.org-langpack-hi_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="c3bd6b934ea250329654fdea90dd09d1dcdf6d18" name="openoffice.org-langpack-hi_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="9ce2bedec3bd22ab680e26d6a4c457cf7b56130e" name="openoffice.org-langpack-hi_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="61a0ee7be782607d410256428a79bddb4dd2edcc" name="openoffice.org-langpack-hr_HR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="8dcead12f8a4dae8fd594a587b16129546fba63f" name="openoffice.org-langpack-hr_HR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="1e4025f24fe24d5ae36a3382393f415e89ed11b7" name="openoffice.org-langpack-hr_HR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="06ded7701b4e63114426cd5ede3a92f0673ed817" name="openoffice.org-langpack-hu_HU" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="ad486ab920edab10d7e6f1353304fab5a835f9be" name="openoffice.org-langpack-hu_HU" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="a2b4db4316198f8e420736520b9460be101883f9" name="openoffice.org-langpack-hu_HU" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="ba37ab62b0708e93e7ce8582326e413cc52b4458" name="openoffice.org-langpack-it" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="c05f462d1c10952842bae9e6729ea8a3d6832a5c" name="openoffice.org-langpack-it" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="99826500940b6dd4538d2405cbfccbb021a87e04" name="openoffice.org-langpack-it" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="9099001a8e8cab058cf0cf8a7fc614f70afc1881" name="openoffice.org-langpack-ja_JP" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="a52171e153c604670f824c6eb65f7cf3f421aa48" name="openoffice.org-langpack-ja_JP" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="cdc8ce34937b6b816f7f58134b8e8133d9f250a0" name="openoffice.org-langpack-ja_JP" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="215e1a87dc5948a7855607b1975bbab9171901bf" name="openoffice.org-langpack-kn_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="ae1838ea5b0a3e3180309135213505b033b38a16" name="openoffice.org-langpack-kn_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="cabae77ea7961ad416c183a9c15fa2c1b59780e5" name="openoffice.org-langpack-kn_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="f2a443c8c2e147bc8d5e00853a7b5ab015498e5b" name="openoffice.org-langpack-ko_KR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="86325477043ebfaa395554a6e9e526bce821560c" name="openoffice.org-langpack-ko_KR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="c2118004022b48904c5dc7bce8d5bc11279de7ae" name="openoffice.org-langpack-ko_KR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="4fe8095baa838a0a98094307e443a329e2d264bd" name="openoffice.org-langpack-lt_LT" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="5d3486edbe3622001fcca9df06b152f6ca8df79a" name="openoffice.org-langpack-lt_LT" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="eda945d1db78d2c7a10fc6a4a5e72630a4c47138" name="openoffice.org-langpack-lt_LT" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="4032adc060f1504e1ccbdba7b6ecf0946fb08695" name="openoffice.org-langpack-ml_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="9fded1e29307582ff883cc4719356b3fe5415db1" name="openoffice.org-langpack-ml_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="2bd55b02a653266c9a5903391df8565d31da0fa5" name="openoffice.org-langpack-ml_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="19d8d1f0e7611073d5c8dd9e11cf44cfe3c34582" name="openoffice.org-langpack-mr_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="5ae31e51645cac8df9021ed0816a344031edc65a" name="openoffice.org-langpack-mr_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="89172e7f08f9155b9a54343d9f18d857b6fa9c62" name="openoffice.org-langpack-mr_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="90eaeb60a1106d26b30b3d671307d11083e7543c" name="openoffice.org-langpack-ms_MY" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="4dab005d3dd11286b5e284ddcc77017a819e89f1" name="openoffice.org-langpack-ms_MY" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="c80ed947d481366833f3a6dfd5af23a6321caa4f" name="openoffice.org-langpack-ms_MY" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="38d48d31a3b8915347e70efb83ff85055a6a06f7" name="openoffice.org-langpack-nb_NO" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="b1e9d4efe39d31b0326425df8ff429fcc6c1016a" name="openoffice.org-langpack-nb_NO" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="ef93fee23b315357a5df2ae63e623abc74d74207" name="openoffice.org-langpack-nb_NO" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="d5ed10aad92aae6960be461f69700d6759cd23a2" name="openoffice.org-langpack-nl" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="25a2f2862eadd575c8131badecba79764711844f" name="openoffice.org-langpack-nl" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="97948500eaade2a77c5f1f4946b24de6cf6bb53d" name="openoffice.org-langpack-nl" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="6c6039a2ebdeffe7ce83e04d12b7edecdca053fa" name="openoffice.org-langpack-nn_NO" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="e0c0ee87a1b356e4d8abe43967fa48b386b6dc76" name="openoffice.org-langpack-nn_NO" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="c7c23f892e559480f8e52cf908d2a4de8d6a6a27" name="openoffice.org-langpack-nn_NO" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="932a3ed80ce76f180e20c99638dafb74d64ae641" name="openoffice.org-langpack-nr_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="815e5aa84faed6bf9c613fad611332a0e08e4546" name="openoffice.org-langpack-nr_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="b19933249ca3983ea42952b95cea63a42d26f486" name="openoffice.org-langpack-nr_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="5119672b1b439058ed2f72d5de1e46a2789ba406" name="openoffice.org-langpack-nso_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="b2ef3ad9e5bc453d0eb4867916602d067f3ae97a" name="openoffice.org-langpack-nso_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="84b5973254833f9a1214d5b56c2d57114f2801f2" name="openoffice.org-langpack-nso_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="a35684bffaa3177c282790795d85d8d2c3e68e7a" name="openoffice.org-langpack-or_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="7c137711d91f1f607ebd5ed979f38e836d764e46" name="openoffice.org-langpack-or_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="575845249073ec3050b7f2365662078283672b51" name="openoffice.org-langpack-or_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="fcdab86944c05674d5db684e567e464d02375cef" name="openoffice.org-langpack-pa_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="9d80f384541d8fe55f8555fbd5b75370f25fdc06" name="openoffice.org-langpack-pa_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="78612fe8192b0cd1ec8274b32604f4dd78ef9f0f" name="openoffice.org-langpack-pa_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="26e40e9329751d26ac5b40aded1fceb1b4eec4c0" name="openoffice.org-langpack-pl_PL" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="09c1f585c8a0e28ab40f70415baf7016afa0ae1f" name="openoffice.org-langpack-pl_PL" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="ec96cb8dc7a93343d7c0359f729be14e5962e3a4" name="openoffice.org-langpack-pl_PL" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="da4d2e2c717fb8eeef95d94606e7108b7b1404e4" name="openoffice.org-langpack-pt_BR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="b3157bb57679b713592a0ebc7fc20e5532799b5e" name="openoffice.org-langpack-pt_BR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="82be0529b25870eb43c72dcfb4659483524d0192" name="openoffice.org-langpack-pt_BR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="1c541c71b8ed29cd3aa0df0c44c88faa1adc32b6" name="openoffice.org-langpack-pt_PT" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="86cc59cc041d1214ee72bdda72dc1837372d055c" name="openoffice.org-langpack-pt_PT" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="d1fbe547558526427d7e511fb5f6baa494b27d2f" name="openoffice.org-langpack-pt_PT" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="dcd35fadc3c10bb8a78861a7342f08ca61c861d7" name="openoffice.org-langpack-ru" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="7a1c98eee85cdbf3ea6fce257833e5ed2fa4ec40" name="openoffice.org-langpack-ru" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="5b8c9a632fbc8b25f1f18aa054f78d349c81f17e" name="openoffice.org-langpack-ru" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="95c9d6b5d39b39210d0ba8b468a8fef32a95e798" name="openoffice.org-langpack-sk_SK" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="9f15c56934a61f6d4209bf5009e5b9cbfd52138f" name="openoffice.org-langpack-sk_SK" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="d5ae67a7aad1e6664e9a2f3972df60acdba43027" name="openoffice.org-langpack-sk_SK" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="5101db4d647de759c0168ab3385099ecd6854139" name="openoffice.org-langpack-sl_SI" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="814231371d8f08748b820f715499f59e1c7fa84b" name="openoffice.org-langpack-sl_SI" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="01bf3bce78c1d08746aeef098da13fdc79e9daac" name="openoffice.org-langpack-sl_SI" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="120696fee634ab2bb4bcdbdc2f5bd451b756feee" name="openoffice.org-langpack-sr_CS" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="5fb199041ccb0aa8d1bd27b51f3f958bc1aa8eda" name="openoffice.org-langpack-sr_CS" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="8a1014e9caba5d04b7ffc7a34f22e24738773c19" name="openoffice.org-langpack-sr_CS" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="9dc888dcb56514d8576008b2b258c8b3290e46f1" name="openoffice.org-langpack-ss_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="f721cf5951217d7181437ce48ec816bf17299494" name="openoffice.org-langpack-ss_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="54109a4819f1b5db3116b01be242657a85519dd0" name="openoffice.org-langpack-ss_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="9d22c7bf7512c16cd76897510b9a152138cc33ee" name="openoffice.org-langpack-st_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="3c2a8a3d244730a82b0070271d8bc7886d108b08" name="openoffice.org-langpack-st_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="3764fd250c503d0839c379c0486b5071209ad2fb" name="openoffice.org-langpack-st_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="d52aa8d256415651efd155be80e77b33f3d7c221" name="openoffice.org-langpack-sv" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="34d5fd1f209c7567652b96acfd3c562c35d81450" name="openoffice.org-langpack-sv" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="2e71cbb0d5ede2c89de0c6374260601e1a925761" name="openoffice.org-langpack-sv" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="236203665d889ba8a908546df1c21c15ca2403a1" name="openoffice.org-langpack-ta_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="b3a63b90d6a098f7b1836e77cfe6d085bbc0d11a" name="openoffice.org-langpack-ta_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="ff52309b4a27dd0827f91f4001d5c819c8ecd93a" name="openoffice.org-langpack-ta_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="73fa26b2479361993d1ff1d88408b217c23ad3c6" name="openoffice.org-langpack-te_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="0486470eccd108ed8b1a3183594af748a9397c9a" name="openoffice.org-langpack-te_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="f243652881e5034425234f70475d66e2ea1affb6" name="openoffice.org-langpack-te_IN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="cdcc3ddcd892deadc8dbacf9ea0a5ccce5a92764" name="openoffice.org-langpack-th_TH" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="d4ab49dd98b3d18abaaf7880bbf0a8b198fa16a6" name="openoffice.org-langpack-th_TH" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="2a95106091bd0ab7ea7549eb00a79ba57cd8a6f6" name="openoffice.org-langpack-th_TH" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="adc2219236f6a378c0a7af8c1257d0461d182e7c" name="openoffice.org-langpack-tn_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="210636030d41d17a81f946dc628b692a149657d6" name="openoffice.org-langpack-tn_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="e800dbf8d62d5dac062aaecafd1b50eafa50c18d" name="openoffice.org-langpack-tn_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="dda67e8b67e0fc4350c172fa445ca26d25158fc3" name="openoffice.org-langpack-tr_TR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="18433dc534a6862ea4c4f90e1621191878f46d9f" name="openoffice.org-langpack-tr_TR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="7aebf9e206f0b75a4e3e09b828596d5c9be3870a" name="openoffice.org-langpack-tr_TR" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="39c46ea8ed3278d404f815e42a24502eb7052642" name="openoffice.org-langpack-ts_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="88e86c8f27f743118d4f6a554cd9a177302f8e01" name="openoffice.org-langpack-ts_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="ab587db5db9e68a45a2bb40451165922182f1ba5" name="openoffice.org-langpack-ts_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="81841af37cb1baaf8f5474a18b00ec8c4777e721" name="openoffice.org-langpack-ur" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="41d7b14d6aec163c08d7e1a9deab63d6921cecdb" name="openoffice.org-langpack-ur" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="8cef3c8cda109a0ee20e10d67ba9f8e1a598d11f" name="openoffice.org-langpack-ur" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="1d409bc9ca6838c59640da1dd89ee2e5aca6be5b" name="openoffice.org-langpack-ve_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="1c5882c2ba84bf6b093257ff13385af7928df6e8" name="openoffice.org-langpack-ve_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="cfc92f484d1858ad9b312853d5460ad973205108" name="openoffice.org-langpack-ve_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="e07c8feb8839ff4f8fda6767aa02c0b581029497" name="openoffice.org-langpack-xh_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="b67cbaf9066a8f993755d8574f82dfb217e806c7" name="openoffice.org-langpack-xh_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="cc105aa9170cfc9ec6939b2167b04237c8b56758" name="openoffice.org-langpack-xh_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="0a6334f2aef8920a2f43cad80f5203216ed4ba13" name="openoffice.org-langpack-zh_CN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="775d28fbd7f2878ff17a1dbcd6ce6faca8561333" name="openoffice.org-langpack-zh_CN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="f98809a6312bd29847386832c19c445e142378a0" name="openoffice.org-langpack-zh_CN" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="3543327b4c26c4f3f112e3258c6524e14a66ca0c" name="openoffice.org-langpack-zh_TW" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="5da2a31cbdb316c18cdd03aab1bbb60a31a7355b" name="openoffice.org-langpack-zh_TW" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="b88fd04c1031fd1ffd5b4237f23a4670841615be" name="openoffice.org-langpack-zh_TW" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="f9a80132c446a595b39ff6fb351ea967b5143b93" name="openoffice.org-langpack-zu_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="a3f4be63b060bd0a981089ae103257aa318c3e9c" name="openoffice.org-langpack-zu_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="a883d5ef9cd8987fcf9a7cc8db01bd59d67a60fd" name="openoffice.org-langpack-zu_ZA" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="0f492d0a016f0537f23d522608e352c172a063ec" name="openoffice.org-math" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="dfd384a6a5d8c8b19179263416a3bb4755a6cb4e" name="openoffice.org-math" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="88d665e592e328ddffa17b85901c529636c18297" name="openoffice.org-math" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="4d00f9ea63d6670c4aaac46ad29f27466393a449" name="openoffice.org-pyuno" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="8a981cf2cc78345d1f870da654f5de141b4d00b9" name="openoffice.org-pyuno" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="882c519882ed8b0ed870d58bc16b7f24ebd24161" name="openoffice.org-pyuno" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="3c57828453a23411fb3a25ffb663c8d1f7c5a25a" name="openoffice.org-sdk" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="5e65c3b8453ad14450ee351ad20dcfff376ea91c" name="openoffice.org-sdk" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="2e231bfe2ad0b849f6612f0711efad5ebe229adc" name="openoffice.org-sdk" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="74e85eb2ca8fe300a2ddfb0b33a81b2ca73a9889" name="openoffice.org-sdk-doc" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="96b69c5a06abb4ab7417598340e71f3e0d96db4f" name="openoffice.org-sdk-doc" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="a6761d256be1b09e9f4aae9bc50a2ef7e080e46f" name="openoffice.org-sdk-doc" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="f3972f74618195794302d9bfc3afb5b7a2c3a651" name="openoffice.org-testtools" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="88bbb6d92234af11afcdb9104bd0ade69458ce84" name="openoffice.org-testtools" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="8e9fef180fe19bd78ed8dbf55bfbe3f1d9d3c78b" name="openoffice.org-testtools" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="f7a7fbc87ff89f5dafb1cbbb7408373b3cfcbf49" name="openoffice.org-ure" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="88c904ff282a4c2b0794b930547ae9005ac51be9" name="openoffice.org-ure" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="209346d92351e330303d63d77a67696677260de9" name="openoffice.org-ure" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="b44ff162f7810b8c91366ad5ab178a0b10046bff" name="openoffice.org-writer" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="63dd198a7106df89e80ea1942cccc8fd25bb4bfe" name="openoffice.org-writer" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="f1a0c88382c477a160efcccd2029aa49b7f51f59" name="openoffice.org-writer" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="f1e01214038662e546af856a844eccca2b9cc46d" name="openoffice.org-xsltfilter" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.1.1-19.9" date="1287007200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
  descriptions and OXT extension files
- CVE-2010-3451 Array index error by insecure parsing of broken rtf
  tables
- CVE-2010-3452 Integer signedness error (crash) by processing certain
  RTF tags
- CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
  with WW8 list styles with specially-crafted count of list levels
- CVE-2010-3454 Array index error by scanning document typography
  information of certain *.doc files
- CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10" date="1294351200">- Resolves: rhbz#642185 openoffice.org various flaws
- CVE-2010-4253 heap based buffer overflow in PPT import
- CVE-2010-4643 heap based buffer overflow when parsing TGA files</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
</package>
<package pkgid="94ff0b80c9e81179327a830dd42edf2d724f1e0d" name="openoffice.org-xsltfilter" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.3"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.1" date="1332194400">- Resolves: CVE-2012-0037 raptor XML Entity Expansion by processing RDF file</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
</package>
<package pkgid="afbb0da7697831bd476200ad819714f826713453" name="openoffice.org-xsltfilter" arch="i386">
  <version epoch="1" ver="3.1.1" rel="19.10.el5_8.4"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.2" date="1337551200">- Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
  overflows in JPEG, PNG and BMP reader implementations</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:3.2.1-19.10.3" date="1337896800">- Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
  processing invalid Escher graphics records length in the Powerpoint
  documents</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:3.2.1-19.10.4" date="1342735200">- Resolves: rhbz#839864 CVE-2012-2665</changelog>
</package>
<package pkgid="d1143964bc360c663b83ae6fc0d97e4f62a50477" name="opensm" arch="i386">
  <version epoch="0" ver="3.3.3" rel="2.el5"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.2.6-2.el5" date="1245621600">- Fix an incorrect use of #elif that makes later gcc versions give an error
- Fix compile flags to include -fno-strict-aliasing that is also needed on
  later gcc versions</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.3-1.el5" date="1261519200">- Update to latest upstream version
- Own the var/cache/opensm directory
- don't include the bare .so file in the libs package, put it in devel
- Related: bz518218</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.3-2.el5" date="1288994400">- Fix broken SRP client issue (bz645547)
- Resolves: bz645547</changelog>
</package>
<package pkgid="4975f1ff822d8ca541be4af89e2b585374df104b" name="opensm-devel" arch="i386">
  <version epoch="0" ver="3.3.3" rel="2.el5"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.2.6-2.el5" date="1245621600">- Fix an incorrect use of #elif that makes later gcc versions give an error
- Fix compile flags to include -fno-strict-aliasing that is also needed on
  later gcc versions</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.3-1.el5" date="1261519200">- Update to latest upstream version
- Own the var/cache/opensm directory
- don't include the bare .so file in the libs package, put it in devel
- Related: bz518218</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.3-2.el5" date="1288994400">- Fix broken SRP client issue (bz645547)
- Resolves: bz645547</changelog>
</package>
<package pkgid="5cda34805d008f414726b709e6752b9528046021" name="opensm-libs" arch="i386">
  <version epoch="0" ver="3.3.3" rel="2.el5"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.2.6-2.el5" date="1245621600">- Fix an incorrect use of #elif that makes later gcc versions give an error
- Fix compile flags to include -fno-strict-aliasing that is also needed on
  later gcc versions</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.3-1.el5" date="1261519200">- Update to latest upstream version
- Own the var/cache/opensm directory
- don't include the bare .so file in the libs package, put it in devel
- Related: bz518218</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.3-2.el5" date="1288994400">- Fix broken SRP client issue (bz645547)
- Resolves: bz645547</changelog>
</package>
<package pkgid="11f49eb221f21fbeaaea1e88c58d26617047403e" name="opensm-static" arch="i386">
  <version epoch="0" ver="3.3.3" rel="2.el5"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.2.6-2.el5" date="1245621600">- Fix an incorrect use of #elif that makes later gcc versions give an error
- Fix compile flags to include -fno-strict-aliasing that is also needed on
  later gcc versions</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.3-1.el5" date="1261519200">- Update to latest upstream version
- Own the var/cache/opensm directory
- don't include the bare .so file in the libs package, put it in devel
- Related: bz518218</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.3-2.el5" date="1288994400">- Fix broken SRP client issue (bz645547)
- Resolves: bz645547</changelog>
</package>
<package pkgid="46c7613ea94c87b930112f35cf1479a1b2281860" name="openssl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="20.el5_7.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-19" date="1301954400">- presort list of ciphers available in SSL (#688901)
- accept connection in s_server even if getaddrinfo() fails (#561260)
- point to openssl dgst for list of supported digests (#608639)
- fix handling of future TLS versions (#599112)
- added VeriSign Class 3 Public Primary Certification Authority - G5
  and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
- upstream fixes for the CHIL engine (#622003, #671484)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-20" date="1304546400">- add missing DH_check_pub_key() call when DH key is computed (#698175)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-20.1" date="1326924000">- fix for CVE-2011-4108 &amp; CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)</changelog>
</package>
<package pkgid="d73f91c51b2a07e13fa8ef4dbcf4a22f170df7fc" name="openssl" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="20.el5_7.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-19" date="1301954400">- presort list of ciphers available in SSL (#688901)
- accept connection in s_server even if getaddrinfo() fails (#561260)
- point to openssl dgst for list of supported digests (#608639)
- fix handling of future TLS versions (#599112)
- added VeriSign Class 3 Public Primary Certification Authority - G5
  and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
- upstream fixes for the CHIL engine (#622003, #671484)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-20" date="1304546400">- add missing DH_check_pub_key() call when DH key is computed (#698175)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-20.1" date="1326924000">- fix for CVE-2011-4108 &amp; CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)</changelog>
</package>
<package pkgid="c939b5523ea9fc6bfe96a883f2a80e038caca38d" name="openssl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="22.el5_8.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-21" date="1318975200">- add known answer test for SHA2 algorithms (#740866)
- make default private key length in certificate Makefile 2048 bits
  (can be changed with PRIVATE_KEY_BITS setting) (#745410)
- fix incorrect return value in parse_yesno() (#726593)
- added DigiCert CA certificates to ca-bundle (#735819)
- added a new section about error states to README.FIPS (#628976)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22" date="1326924000">- fix for CVE-2011-4108 &amp; CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.1" date="1332194400">- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)</changelog>
</package>
<package pkgid="8056c238558c6fcb0b1c6964064bed8fbe5295af" name="openssl" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="22.el5_8.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-21" date="1318975200">- add known answer test for SHA2 algorithms (#740866)
- make default private key length in certificate Makefile 2048 bits
  (can be changed with PRIVATE_KEY_BITS setting) (#745410)
- fix incorrect return value in parse_yesno() (#726593)
- added DigiCert CA certificates to ca-bundle (#735819)
- added a new section about error states to README.FIPS (#628976)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22" date="1326924000">- fix for CVE-2011-4108 &amp; CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.1" date="1332194400">- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)</changelog>
</package>
<package pkgid="4510967df8574b7cc3d075341fc74f77f2493bce" name="openssl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="22.el5_8.3"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22" date="1326924000">- fix for CVE-2011-4108 &amp; CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.1" date="1332194400">- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.3" date="1335218400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
</package>
<package pkgid="dc8b7c0eb8fb99a0826304f83baf4f85ceba9c87" name="openssl" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="22.el5_8.3"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22" date="1326924000">- fix for CVE-2011-4108 &amp; CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.1" date="1332194400">- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.3" date="1335218400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
</package>
<package pkgid="a69c1b23ab18b7bf441594700fdccc68a4dabf7b" name="openssl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="22.el5_8.4"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.1" date="1332194400">- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.3" date="1335218400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.4" date="1337119200">- fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)</changelog>
</package>
<package pkgid="725d9fc001733882b3bdf15a1af0fe56dae3935a" name="openssl" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="22.el5_8.4"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.1" date="1332194400">- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.3" date="1335218400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.4" date="1337119200">- fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)</changelog>
</package>
<package pkgid="a0fb70d62d8d9adb1e19da98a778edd6e40ded72" name="openssl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="26.el5_9.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-25" date="1335218400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-26" date="1337119200">- fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-26.1" date="1361829600">- fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
- fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
- enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
  environment variable is set (fixes CVE-2012-4929 #857051)
- use __secure_getenv() everywhere instead of getenv() (#839735)</changelog>
</package>
<package pkgid="4e24d0c14eea28cda5807bb1f8bd32e8866c1692" name="openssl" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="26.el5_9.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-25" date="1335218400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-26" date="1337119200">- fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-26.1" date="1361829600">- fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
- fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
- enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
  environment variable is set (fixes CVE-2012-4929 #857051)
- use __secure_getenv() everywhere instead of getenv() (#839735)</changelog>
</package>
<package pkgid="611809202c86d12eab0c10697e50b1bb797b1e40" name="openssl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="27.el5_10.3"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27" date="1361836800">- fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
- fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
- enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
  environment variable is set (fixes CVE-2012-4929 #857051)
- use __secure_getenv() everywhere instead of getenv() (#839735)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.1" date="1390953600">- replace expired GlobalSign Root CA certificate in ca-bundle.crt</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.3" date="1401840000">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
</package>
<package pkgid="247a922683e6853efaef3234cf808100947a909d" name="openssl" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="27.el5_10.3"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27" date="1361836800">- fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
- fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
- enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
  environment variable is set (fixes CVE-2012-4929 #857051)
- use __secure_getenv() everywhere instead of getenv() (#839735)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.1" date="1390953600">- replace expired GlobalSign Root CA certificate in ca-bundle.crt</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.3" date="1401840000">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
</package>
<package pkgid="714ff49901dda9c2121663300f8ffaf73a16ec48" name="openssl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="27.el5_10.4"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.1" date="1390953600">- replace expired GlobalSign Root CA certificate in ca-bundle.crt</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.3" date="1401840000">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.4" date="1407542400">- fix CVE-2014-0221 - recursion in DTLS code leading to DoS
- fix CVE-2014-3505 - doublefree in DTLS packet processing
- fix CVE-2014-3506 - avoid memory exhaustion in DTLS
- fix CVE-2014-3508 - fix OID handling to avoid information leak
- fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS</changelog>
</package>
<package pkgid="f8183b923f840026fd5a2b10512871ac0d0b6e1e" name="openssl" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="27.el5_10.4"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.1" date="1390953600">- replace expired GlobalSign Root CA certificate in ca-bundle.crt</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.3" date="1401840000">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.4" date="1407542400">- fix CVE-2014-0221 - recursion in DTLS code leading to DoS
- fix CVE-2014-3505 - doublefree in DTLS packet processing
- fix CVE-2014-3506 - avoid memory exhaustion in DTLS
- fix CVE-2014-3508 - fix OID handling to avoid information leak
- fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS</changelog>
</package>
<package pkgid="69d845607d9077beb6efce68b817ce7b1cfe424d" name="openssl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="31.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-29" date="1401753600">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-30" date="1407542400">- fix CVE-2014-0221 - recursion in DTLS code leading to DoS
- fix CVE-2014-3505 - doublefree in DTLS packet processing
- fix CVE-2014-3506 - avoid memory exhaustion in DTLS
- fix CVE-2014-3508 - fix OID handling to avoid information leak
- fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-31" date="1413417600">- add support for fallback SCSV to partially mitigate CVE-2014-3566
  (padding attack on SSL3)</changelog>
</package>
<package pkgid="a08805f40a8588a6b70e8da550f7bbeb703e000d" name="openssl" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="31.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-29" date="1401753600">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-30" date="1407542400">- fix CVE-2014-0221 - recursion in DTLS code leading to DoS
- fix CVE-2014-3505 - doublefree in DTLS packet processing
- fix CVE-2014-3506 - avoid memory exhaustion in DTLS
- fix CVE-2014-3508 - fix OID handling to avoid information leak
- fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-31" date="1413417600">- add support for fallback SCSV to partially mitigate CVE-2014-3566
  (padding attack on SSL3)</changelog>
</package>
<package pkgid="a03b56ec1e78ef9003f0ea3c2963297226a4f67c" name="openssl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="33.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-31" date="1413417600">- add support for fallback SCSV to partially mitigate CVE-2014-3566
  (padding attack on SSL3)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-32" date="1418860800">- properly lock X509_STORE accesses (#1168938)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-33" date="1428019200">- fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various
  certificate fingerprint issues
- fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
  ciphersuites and on server
- fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
- fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
- fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
- fix CVE-2015-0292 - integer underflow in base64 decoder
- fix CVE-2015-0293 - triggerable assert in SSLv2 server</changelog>
</package>
<package pkgid="53ff4468848f5eb2c1ac24a16e6d82b0a6c8667a" name="openssl" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="33.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-31" date="1413417600">- add support for fallback SCSV to partially mitigate CVE-2014-3566
  (padding attack on SSL3)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-32" date="1418860800">- properly lock X509_STORE accesses (#1168938)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-33" date="1428019200">- fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various
  certificate fingerprint issues
- fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
  ciphersuites and on server
- fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
- fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
- fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
- fix CVE-2015-0292 - integer underflow in base64 decoder
- fix CVE-2015-0293 - triggerable assert in SSLv2 server</changelog>
</package>
<package pkgid="5fbe88c4a3b7471f7499ee82d08861e7cd9f86cb" name="openssl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="36.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; 0.9.8e-34" date="1430179200">- Rebase ca-bundle.crt to the upstream version 2.4 with legacy
  modifications. For compatibility reasons, several CA certificates with
  RSA sizes of 1024 bits are still included.
- Add a patch to the source RPM that documents the changes from the
  upstream version.</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-35" date="1435104000">- fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
- fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
- fix CVE-2015-4000 - prevent the logjam attack on client - restrict
  the DH key size to at least 768 bits (limit will be increased in future)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-36" date="1435276800">- also change the default DH parameters in s_server to 1024 bits</changelog>
</package>
<package pkgid="c00af5531e6317cef5ef08b6cb119b2340ecb195" name="openssl" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="36.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; 0.9.8e-34" date="1430179200">- Rebase ca-bundle.crt to the upstream version 2.4 with legacy
  modifications. For compatibility reasons, several CA certificates with
  RSA sizes of 1024 bits are still included.
- Add a patch to the source RPM that documents the changes from the
  upstream version.</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-35" date="1435104000">- fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
- fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
- fix CVE-2015-4000 - prevent the logjam attack on client - restrict
  the DH key size to at least 768 bits (limit will be increased in future)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-36" date="1435276800">- also change the default DH parameters in s_server to 1024 bits</changelog>
</package>
<package pkgid="29996b83b41ef38e5398a5ac12265ef0995e85ff" name="openssl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="37.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-35" date="1435104000">- fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
- fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
- fix CVE-2015-4000 - prevent the logjam attack on client - restrict
  the DH key size to at least 768 bits (limit will be increased in future)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-36" date="1435276800">- also change the default DH parameters in s_server to 1024 bits</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-37" date="1449273600">- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak</changelog>
</package>
<package pkgid="6f4eac8f59b1fcc15144e8003180762a17634c05" name="openssl" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="37.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-35" date="1435104000">- fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
- fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
- fix CVE-2015-4000 - prevent the logjam attack on client - restrict
  the DH key size to at least 768 bits (limit will be increased in future)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-36" date="1435276800">- also change the default DH parameters in s_server to 1024 bits</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-37" date="1449273600">- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak</changelog>
</package>
<package pkgid="997ad242b99b2d47952567df774c5c16f7ab8ef1" name="openssl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="39.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-37" date="1449273600">- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-38" date="1455840000">- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method (can be reenabled
  by setting environment variable OPENSSL_ENABLE_SSL2)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-39" date="1456444800">- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
</package>
<package pkgid="0391159dde59ae4cfd645059158fa9a8fc541522" name="openssl" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="39.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-37" date="1449273600">- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-38" date="1455840000">- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method (can be reenabled
  by setting environment variable OPENSSL_ENABLE_SSL2)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-39" date="1456444800">- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
</package>
<package pkgid="22d576d347464560bb031d6e0ff4ed95886dd468" name="openssl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="40.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-38" date="1455840000">- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method (can be reenabled
  by setting environment variable OPENSSL_ENABLE_SSL2)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-39" date="1456444800">- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-40" date="1463529600">- fix CVE-2016-2108 - memory corruption in ASN.1 encoder</changelog>
</package>
<package pkgid="bffd76552548f80a979e7dd6abeb9bb34b9df688" name="openssl" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="40.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-38" date="1455840000">- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method (can be reenabled
  by setting environment variable OPENSSL_ENABLE_SSL2)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-39" date="1456444800">- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-40" date="1463529600">- fix CVE-2016-2108 - memory corruption in ASN.1 encoder</changelog>
</package>
<package pkgid="648a8c8e814de05bfb409271e380dbb23655910b" name="openssl-devel" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="20.el5_7.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-19" date="1301954400">- presort list of ciphers available in SSL (#688901)
- accept connection in s_server even if getaddrinfo() fails (#561260)
- point to openssl dgst for list of supported digests (#608639)
- fix handling of future TLS versions (#599112)
- added VeriSign Class 3 Public Primary Certification Authority - G5
  and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
- upstream fixes for the CHIL engine (#622003, #671484)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-20" date="1304546400">- add missing DH_check_pub_key() call when DH key is computed (#698175)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-20.1" date="1326924000">- fix for CVE-2011-4108 &amp; CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)</changelog>
</package>
<package pkgid="7f39786cf3aa5b434499eb55042f1502790a1a6e" name="openssl-devel" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="22.el5_8.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-21" date="1318975200">- add known answer test for SHA2 algorithms (#740866)
- make default private key length in certificate Makefile 2048 bits
  (can be changed with PRIVATE_KEY_BITS setting) (#745410)
- fix incorrect return value in parse_yesno() (#726593)
- added DigiCert CA certificates to ca-bundle (#735819)
- added a new section about error states to README.FIPS (#628976)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22" date="1326924000">- fix for CVE-2011-4108 &amp; CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.1" date="1332194400">- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)</changelog>
</package>
<package pkgid="befaecf947513770a9bbca4b088c9eb3c7cb0314" name="openssl-devel" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="22.el5_8.3"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22" date="1326924000">- fix for CVE-2011-4108 &amp; CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.1" date="1332194400">- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.3" date="1335218400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
</package>
<package pkgid="68341abaea71a6d9c5215eae1e8ffea381154e9f" name="openssl-devel" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="22.el5_8.4"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.1" date="1332194400">- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.3" date="1335218400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.4" date="1337119200">- fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)</changelog>
</package>
<package pkgid="42414586c3c157c187f183d279cbc62a5c8f58f7" name="openssl-devel" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="26.el5_9.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-25" date="1335218400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-26" date="1337119200">- fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-26.1" date="1361829600">- fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
- fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
- enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
  environment variable is set (fixes CVE-2012-4929 #857051)
- use __secure_getenv() everywhere instead of getenv() (#839735)</changelog>
</package>
<package pkgid="6b00ab5b1bf4604fa6e26b5489d961040451594c" name="openssl-devel" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="27.el5_10.3"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27" date="1361836800">- fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
- fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
- enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
  environment variable is set (fixes CVE-2012-4929 #857051)
- use __secure_getenv() everywhere instead of getenv() (#839735)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.1" date="1390953600">- replace expired GlobalSign Root CA certificate in ca-bundle.crt</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.3" date="1401840000">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
</package>
<package pkgid="d9218b4ec9212ba2e9bf44d558b19bac34b7e783" name="openssl-devel" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="27.el5_10.4"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.1" date="1390953600">- replace expired GlobalSign Root CA certificate in ca-bundle.crt</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.3" date="1401840000">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.4" date="1407542400">- fix CVE-2014-0221 - recursion in DTLS code leading to DoS
- fix CVE-2014-3505 - doublefree in DTLS packet processing
- fix CVE-2014-3506 - avoid memory exhaustion in DTLS
- fix CVE-2014-3508 - fix OID handling to avoid information leak
- fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS</changelog>
</package>
<package pkgid="860ce589037069ad456bb44badca8a8e657de465" name="openssl-devel" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="31.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-29" date="1401753600">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-30" date="1407542400">- fix CVE-2014-0221 - recursion in DTLS code leading to DoS
- fix CVE-2014-3505 - doublefree in DTLS packet processing
- fix CVE-2014-3506 - avoid memory exhaustion in DTLS
- fix CVE-2014-3508 - fix OID handling to avoid information leak
- fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-31" date="1413417600">- add support for fallback SCSV to partially mitigate CVE-2014-3566
  (padding attack on SSL3)</changelog>
</package>
<package pkgid="2efa56063f94a9f140e889ce13ae2f07ab6cc09a" name="openssl-devel" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="33.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-31" date="1413417600">- add support for fallback SCSV to partially mitigate CVE-2014-3566
  (padding attack on SSL3)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-32" date="1418860800">- properly lock X509_STORE accesses (#1168938)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-33" date="1428019200">- fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various
  certificate fingerprint issues
- fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
  ciphersuites and on server
- fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
- fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
- fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
- fix CVE-2015-0292 - integer underflow in base64 decoder
- fix CVE-2015-0293 - triggerable assert in SSLv2 server</changelog>
</package>
<package pkgid="28ecbc62a93896cb4b8c4447f822a8ef28bb9649" name="openssl-devel" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="36.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; 0.9.8e-34" date="1430179200">- Rebase ca-bundle.crt to the upstream version 2.4 with legacy
  modifications. For compatibility reasons, several CA certificates with
  RSA sizes of 1024 bits are still included.
- Add a patch to the source RPM that documents the changes from the
  upstream version.</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-35" date="1435104000">- fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
- fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
- fix CVE-2015-4000 - prevent the logjam attack on client - restrict
  the DH key size to at least 768 bits (limit will be increased in future)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-36" date="1435276800">- also change the default DH parameters in s_server to 1024 bits</changelog>
</package>
<package pkgid="35aaaad1dbf1c306ad9b5de9c353bddb1ee543a2" name="openssl-devel" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="37.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-35" date="1435104000">- fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
- fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
- fix CVE-2015-4000 - prevent the logjam attack on client - restrict
  the DH key size to at least 768 bits (limit will be increased in future)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-36" date="1435276800">- also change the default DH parameters in s_server to 1024 bits</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-37" date="1449273600">- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak</changelog>
</package>
<package pkgid="de59d51cbe7b8a5c4c8f8e5daa6e6738daa83c5d" name="openssl-devel" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="39.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-37" date="1449273600">- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-38" date="1455840000">- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method (can be reenabled
  by setting environment variable OPENSSL_ENABLE_SSL2)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-39" date="1456444800">- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
</package>
<package pkgid="4644ecc188d2891666bf5de3acaf921ef7ad3c4f" name="openssl-devel" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="40.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-38" date="1455840000">- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method (can be reenabled
  by setting environment variable OPENSSL_ENABLE_SSL2)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-39" date="1456444800">- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-40" date="1463529600">- fix CVE-2016-2108 - memory corruption in ASN.1 encoder</changelog>
</package>
<package pkgid="bf12c499ec88163be27586e6302bf6497ccb0202" name="openssl-perl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="20.el5_7.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-19" date="1301954400">- presort list of ciphers available in SSL (#688901)
- accept connection in s_server even if getaddrinfo() fails (#561260)
- point to openssl dgst for list of supported digests (#608639)
- fix handling of future TLS versions (#599112)
- added VeriSign Class 3 Public Primary Certification Authority - G5
  and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
- upstream fixes for the CHIL engine (#622003, #671484)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-20" date="1304546400">- add missing DH_check_pub_key() call when DH key is computed (#698175)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-20.1" date="1326924000">- fix for CVE-2011-4108 &amp; CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)</changelog>
</package>
<package pkgid="8e6d0bc186cc67b620bc6523c40c2414ebfa92e4" name="openssl-perl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="22.el5_8.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-21" date="1318975200">- add known answer test for SHA2 algorithms (#740866)
- make default private key length in certificate Makefile 2048 bits
  (can be changed with PRIVATE_KEY_BITS setting) (#745410)
- fix incorrect return value in parse_yesno() (#726593)
- added DigiCert CA certificates to ca-bundle (#735819)
- added a new section about error states to README.FIPS (#628976)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22" date="1326924000">- fix for CVE-2011-4108 &amp; CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.1" date="1332194400">- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)</changelog>
</package>
<package pkgid="c34720cc374939c4a8333d2c1e377a0088d12ef9" name="openssl-perl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="22.el5_8.3"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22" date="1326924000">- fix for CVE-2011-4108 &amp; CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.1" date="1332194400">- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.3" date="1335218400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
</package>
<package pkgid="345be6ccec332a9c78976879408bf07cb3d81d02" name="openssl-perl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="22.el5_8.4"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.1" date="1332194400">- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.3" date="1335218400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-22.4" date="1337119200">- fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)</changelog>
</package>
<package pkgid="2fb6faadd5cfc7e376d491d094a3c47951c88045" name="openssl-perl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="26.el5_9.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-25" date="1335218400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-26" date="1337119200">- fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-26.1" date="1361829600">- fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
- fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
- enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
  environment variable is set (fixes CVE-2012-4929 #857051)
- use __secure_getenv() everywhere instead of getenv() (#839735)</changelog>
</package>
<package pkgid="a6497b9298fc49c74392352b70b2e02b330dfce4" name="openssl-perl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="27.el5_10.3"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27" date="1361836800">- fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
- fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
- enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
  environment variable is set (fixes CVE-2012-4929 #857051)
- use __secure_getenv() everywhere instead of getenv() (#839735)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.1" date="1390953600">- replace expired GlobalSign Root CA certificate in ca-bundle.crt</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.3" date="1401840000">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
</package>
<package pkgid="54816808d8d31264279dd2d4a98ba70d72d82e41" name="openssl-perl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="27.el5_10.4"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.1" date="1390953600">- replace expired GlobalSign Root CA certificate in ca-bundle.crt</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.3" date="1401840000">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-27.4" date="1407542400">- fix CVE-2014-0221 - recursion in DTLS code leading to DoS
- fix CVE-2014-3505 - doublefree in DTLS packet processing
- fix CVE-2014-3506 - avoid memory exhaustion in DTLS
- fix CVE-2014-3508 - fix OID handling to avoid information leak
- fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS</changelog>
</package>
<package pkgid="a8ab37d156cd903de2987b2eafcc9a9743e7c9ff" name="openssl-perl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="31.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-29" date="1401753600">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-30" date="1407542400">- fix CVE-2014-0221 - recursion in DTLS code leading to DoS
- fix CVE-2014-3505 - doublefree in DTLS packet processing
- fix CVE-2014-3506 - avoid memory exhaustion in DTLS
- fix CVE-2014-3508 - fix OID handling to avoid information leak
- fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-31" date="1413417600">- add support for fallback SCSV to partially mitigate CVE-2014-3566
  (padding attack on SSL3)</changelog>
</package>
<package pkgid="79d2a6853038c54f1814405f0c69430cce8b1f05" name="openssl-perl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="33.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-31" date="1413417600">- add support for fallback SCSV to partially mitigate CVE-2014-3566
  (padding attack on SSL3)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-32" date="1418860800">- properly lock X509_STORE accesses (#1168938)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-33" date="1428019200">- fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various
  certificate fingerprint issues
- fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
  ciphersuites and on server
- fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
- fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
- fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
- fix CVE-2015-0292 - integer underflow in base64 decoder
- fix CVE-2015-0293 - triggerable assert in SSLv2 server</changelog>
</package>
<package pkgid="5e10fdd62b79872ec57aacf15e55b6e7a213bfb3" name="openssl-perl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="36.el5_11"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; 0.9.8e-34" date="1430179200">- Rebase ca-bundle.crt to the upstream version 2.4 with legacy
  modifications. For compatibility reasons, several CA certificates with
  RSA sizes of 1024 bits are still included.
- Add a patch to the source RPM that documents the changes from the
  upstream version.</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-35" date="1435104000">- fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
- fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
- fix CVE-2015-4000 - prevent the logjam attack on client - restrict
  the DH key size to at least 768 bits (limit will be increased in future)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-36" date="1435276800">- also change the default DH parameters in s_server to 1024 bits</changelog>
</package>
<package pkgid="8eacc0f78ad0b2f6e5ab336553cf053b91f861c5" name="openssl-perl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="37.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-35" date="1435104000">- fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
- fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
- fix CVE-2015-4000 - prevent the logjam attack on client - restrict
  the DH key size to at least 768 bits (limit will be increased in future)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-36" date="1435276800">- also change the default DH parameters in s_server to 1024 bits</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-37" date="1449273600">- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak</changelog>
</package>
<package pkgid="ebc3bb84eb38561c6ec97481b7956a3c8d7480a2" name="openssl-perl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="39.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-37" date="1449273600">- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-38" date="1455840000">- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method (can be reenabled
  by setting environment variable OPENSSL_ENABLE_SSL2)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-39" date="1456444800">- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
</package>
<package pkgid="621e5e812f93ebcbe31be0ba56f5461aac61ad16" name="openssl-perl" arch="i386">
  <version epoch="0" ver="0.9.8e" rel="40.el5_11"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-38" date="1455840000">- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method (can be reenabled
  by setting environment variable OPENSSL_ENABLE_SSL2)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-39" date="1456444800">- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-40" date="1463529600">- fix CVE-2016-2108 - memory corruption in ASN.1 encoder</changelog>
</package>
<package pkgid="765950e26c8df5db37f479fe33eb3db4fcb1d409" name="openssl097a" arch="i386">
  <version epoch="0" ver="0.9.7a" rel="11.el5_8.2"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.7a-10" date="1229551200">- CVE-2008-5077 - incorrect checks for malformed signatures (#476671)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.7a-11" date="1266530400">- CVE-2009-3555 - support the secure renegotiation RFC (#533125)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.7a-11.2" date="1335218400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
</package>
<package pkgid="f403777243e099b8853c8070268d40a24a30f4a9" name="openssl097a" arch="i386">
  <version epoch="0" ver="0.9.7a" rel="12.el5_10.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.7a-11" date="1266537600">- CVE-2009-3555 - support the secure renegotiation RFC (#533125)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.7a-12" date="1334966400">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.7a-12.1" date="1401840000">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
</package>
<package pkgid="e0d8a8724f14e5ecffdc05fd767d0f062df703e9" name="openswan" arch="i386">
  <version epoch="0" ver="2.6.21" rel="5.el5_7.6"/>
  <changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.21-5.4" date="1298584800">Resolves: #680044</changelog>
  <changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.21-5.5" date="1319666400">Resolves: #748967 cve-2011-4073</changelog>
  <changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.21-5.6" date="1319839200">Resolves: #748967 cve-2011-4073 updated patch by upstream</changelog>
</package>
<package pkgid="54033bd3f39b98010aca63d2f340221f6a9e4cc5" name="openswan" arch="i386">
  <version epoch="0" ver="2.6.32" rel="5.el5_9"/>
  <changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-3" date="1319839200">Resolves: #748968 cve-2011-4073 updated upstream patch
Resolves: #609343</changelog>
  <changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-4" date="1341871200">Resolves: #807772</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 2.6.32-5" date="1368223200">Resolves: #960232 - CVE-2013-2053</changelog>
</package>
<package pkgid="523c5c9cff93951c12bf2733ef1ba882c8df175f" name="openswan" arch="i386">
  <version epoch="0" ver="2.6.32" rel="7.3.el5_10"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 2.6.32-7.1" date="1381190400">- Resolves: CVE-2013-2053 Openswan: remote buffer overflow in atodn()</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 2.6.32-7.2" date="1390867200">- Resolves: CVE-2013-6466 missing IKEv2 payloads causes pluto daemon to restart</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 2.6.32-7.3" date="1391817600">- Resolves: CVE-2013-6466 (fixup for delete/notify)</changelog>
</package>
<package pkgid="5539573cf672c4fb6b4f7a31b21efb288012ff78" name="openswan-doc" arch="i386">
  <version epoch="0" ver="2.6.21" rel="5.el5_7.6"/>
  <changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.21-5.4" date="1298584800">Resolves: #680044</changelog>
  <changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.21-5.5" date="1319666400">Resolves: #748967 cve-2011-4073</changelog>
  <changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.21-5.6" date="1319839200">Resolves: #748967 cve-2011-4073 updated patch by upstream</changelog>
</package>
<package pkgid="1d9e936a5db2ccc803de16a454bd1d150d4acff1" name="openswan-doc" arch="i386">
  <version epoch="0" ver="2.6.32" rel="5.el5_9"/>
  <changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-3" date="1319839200">Resolves: #748968 cve-2011-4073 updated upstream patch
Resolves: #609343</changelog>
  <changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-4" date="1341871200">Resolves: #807772</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 2.6.32-5" date="1368223200">Resolves: #960232 - CVE-2013-2053</changelog>
</package>
<package pkgid="60ffb8bbf95b6460abd95bc6b36ae444ded37887" name="openswan-doc" arch="i386">
  <version epoch="0" ver="2.6.32" rel="7.3.el5_10"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 2.6.32-7.1" date="1381190400">- Resolves: CVE-2013-2053 Openswan: remote buffer overflow in atodn()</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 2.6.32-7.2" date="1390867200">- Resolves: CVE-2013-6466 missing IKEv2 payloads causes pluto daemon to restart</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 2.6.32-7.3" date="1391817600">- Resolves: CVE-2013-6466 (fixup for delete/notify)</changelog>
</package>
<package pkgid="9dc7f0d1920412871c7c72b1d0d6be54daa9146e" name="pango" arch="i386">
  <version epoch="0" ver="1.14.9" rel="8.el5_7.3"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.14.9-8.el5_1.1" date="1295906400">- Prevent heap corruption with malformed fonts. (CVE-2011-0020)
- Resolves: #671527</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.14.9-8.el5_1.2" date="1295906401">- Use -fno-strict-aliasing for C++, too</changelog>
  <changelog author="Cosimo Cecchi &lt;ccecchi@redhat.com&gt; - 1.14.9.8.el5_1.3" date="1316469600">- Prevent buffer overflow errors in harfbuzz module (CVE-2011-3193)
- Resolves: #737819</changelog>
</package>
<package pkgid="728650d34b308fa2bd97d07c66505e5ec2eb72b9" name="pango-devel" arch="i386">
  <version epoch="0" ver="1.14.9" rel="8.el5_7.3"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.14.9-8.el5_1.1" date="1295906400">- Prevent heap corruption with malformed fonts. (CVE-2011-0020)
- Resolves: #671527</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.14.9-8.el5_1.2" date="1295906401">- Use -fno-strict-aliasing for C++, too</changelog>
  <changelog author="Cosimo Cecchi &lt;ccecchi@redhat.com&gt; - 1.14.9.8.el5_1.3" date="1316469600">- Prevent buffer overflow errors in harfbuzz module (CVE-2011-3193)
- Resolves: #737819</changelog>
</package>
<package pkgid="e09f0bff55593da6347d14eb40731ab876eb4b46" name="perl" arch="i386">
  <version epoch="4" ver="5.8.8" rel="32.el5_7.6"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 4:5.8.8-32.el5.4" date="1317765600">- 743010 - perl: code injection vulnerability in Digest-&gt;new()
- Resolves: rhbz#743094</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 4:5.8.8-32.el5.5" date="1317938400">- CVE-2010-2761 CVE-2010-4410 perl: CGI module multiple issues fixed by update
  of CGI module to 3.54
- Resolves: rhbz#743626</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 4:5.8.8-32.el5.6" date="1321048800">- CVE-2010-2761 CVE-2010-4410 perl: CGI module multiple issues fixed by security
  patch based on commit from version 3.50
- Related: rhbz#743626</changelog>
</package>
<package pkgid="11e82ae191896f7ac31d8c912f90f6f20be4cdf3" name="perl" arch="i386">
  <version epoch="4" ver="5.8.8" rel="40.el5_9"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 4:5.8.8-38.el5" date="1324072800">- 590644 - CGI.pm popup_menu produces invalid HTML
- Resolves: rhbz#590644</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.8.8-39.el5" date="1349733600">- 848156 - Reverts code of perl-5.8.8-U32019.patch
- Resolves: rhbz#848156</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.8.8-40" date="1362434400">- Fix CVE-2012-5195 heap buffer overrun at repeatcpy (Resolves: rhbz#915690)
- Fix CVE-2012-5526 newline injection due to improper CRLF escaping in
  Set-Cookie and P3P headers (Resolves: rhbz#915690)
- Fix CVE-2012-6329 possible arbitrary code execution via Locale::Maketext
  (Resolves: rhbz#915690)
- Fix CVE-2013-1667 DoS in rehashing code (Resolves: rhbz#915690)</changelog>
</package>
<package pkgid="30b93711be6c949885a74c6507be60f307efc885" name="perl-DBD-Pg" arch="i386">
  <version epoch="0" ver="1.49" rel="4.el5_8"/>
  <changelog author="Stepan Kasal &lt;skasal@redhat.com&gt; - 1.49-2" date="1221861600">- BuildRequire fixed perl-DBI (1.52-2), rebuild
- Resolves: #444579</changelog>
  <changelog author="Stepan Kasal &lt;skasal@redhat.com&gt; - 1.49-3" date="1241042400">- fix CVE-2009-0663 and CVE-2009-1341 
- Resolves: #498001</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.49-4" date="1342735200">- Resolves: rhbz#841129 (CVE-2012-1151)</changelog>
</package>
<package pkgid="e8ad3bf46a8be921d8782af4034c6bd1d44082cf" name="perl-suidperl" arch="i386">
  <version epoch="4" ver="5.8.8" rel="32.el5_7.6"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 4:5.8.8-32.el5.4" date="1317765600">- 743010 - perl: code injection vulnerability in Digest-&gt;new()
- Resolves: rhbz#743094</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 4:5.8.8-32.el5.5" date="1317938400">- CVE-2010-2761 CVE-2010-4410 perl: CGI module multiple issues fixed by update
  of CGI module to 3.54
- Resolves: rhbz#743626</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 4:5.8.8-32.el5.6" date="1321048800">- CVE-2010-2761 CVE-2010-4410 perl: CGI module multiple issues fixed by security
  patch based on commit from version 3.50
- Related: rhbz#743626</changelog>
</package>
<package pkgid="ea3d873fda587e21c12bad6afa67a3448975ec09" name="perl-suidperl" arch="i386">
  <version epoch="4" ver="5.8.8" rel="40.el5_9"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 4:5.8.8-38.el5" date="1324072800">- 590644 - CGI.pm popup_menu produces invalid HTML
- Resolves: rhbz#590644</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.8.8-39.el5" date="1349733600">- 848156 - Reverts code of perl-5.8.8-U32019.patch
- Resolves: rhbz#848156</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.8.8-40" date="1362434400">- Fix CVE-2012-5195 heap buffer overrun at repeatcpy (Resolves: rhbz#915690)
- Fix CVE-2012-5526 newline injection due to improper CRLF escaping in
  Set-Cookie and P3P headers (Resolves: rhbz#915690)
- Fix CVE-2012-6329 possible arbitrary code execution via Locale::Maketext
  (Resolves: rhbz#915690)
- Fix CVE-2013-1667 DoS in rehashing code (Resolves: rhbz#915690)</changelog>
</package>
<package pkgid="3b697e36656473765b6e879feee142e578485669" name="php" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="98074fa2c7312df05f1028ee095588426e423256" name="php" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="587a5f68cbc1510a783f4e28228ed903a76fb423" name="php" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="dd8022eb27bb0bfa813326dbc8a1a49432173ba6" name="php" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="8473d1b3181521129ed58db6b1ad85dcd24f1291" name="php" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="3d53111a084a943f0e907cc8e93dfda5fbe90217" name="php" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="7c0dba43adc64ad916034c74b2bbe7a01379d344" name="php" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="bf78a44bba87e41447335fad28013c3027039e1b" name="php" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="ea6fdaa6480e4232ce881c0565eca2f03a7585ad" name="php-bcmath" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="b8b82f1dc67a42dabb0653a16df7438127d44fce" name="php-bcmath" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="048c3de091e6d12cffabf9bd0fd0f7b856e900fb" name="php-bcmath" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="a24125d0ccc87f4ecc5dcd2a3c972396408a91a4" name="php-bcmath" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="70ac3de694cb28c8d7446e2b8b78ef7c66c37739" name="php-bcmath" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="21d2cb6d1d84f68c803bd9f9280ddeb959c7acab" name="php-bcmath" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="7a292086616d4b3f07edb1d23ded2d213f0f61e2" name="php-bcmath" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="925bbce01f74b3b41e93f905d8353f99caed8f7d" name="php-bcmath" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="9be35cfccdabbcba1f9f9b765e7b57ae9cf68d55" name="php-cli" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="3539ea68bd9d56f532f62ff6f842f50d7b9af557" name="php-cli" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="a804b04fbac6a741704c6b03fd9c9e62a5984df4" name="php-cli" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="5fd8e077b48a3a37d02c2e16da9f8474e011a29b" name="php-cli" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="e1d4a4e17752079fded464558d52a5f9388974cf" name="php-cli" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="d5ece7da3ef55f32f459518be522331553072828" name="php-cli" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="e12cf42682e3b1901d7178bd0b117483d8c1ea9a" name="php-cli" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="aa2e14a939786c71c438079982bcb17afedf3b43" name="php-cli" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="1441868335082d08331be6a09916a905a2af72f8" name="php-common" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="cf495a8521f42e60a1bd1f3ea7098cc57b1e2494" name="php-common" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="cbe8d01ab5d9453eb695c6f81b7c87a629cbcb54" name="php-common" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="f5f6e2aca0a57be29cf22d6707522d28ce3b2bde" name="php-common" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="e9ed7a7fa6bd683854c9d4cec194e2102f3677b6" name="php-common" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="814aeb0f61802ee55aa3a95874814542d9c012f7" name="php-common" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="d9d1b24930e4e51285ed7dc130f55c7aff4076ec" name="php-common" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="da113618556937172de8938475b3dcdb2219ba59" name="php-common" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="2df19dab21361d6045e2a762aef9ab680a960d1b" name="php-dba" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="03fd632a4ab065154c34ba81203c16944c4c0ba6" name="php-dba" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="ddc76f00ca91fe14df51f36831b881645566e47d" name="php-dba" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="34474a1dd25018b0fb79178dc91217d8e44d8e3d" name="php-dba" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="0118e7094c92db224a595b1a87c5645a920eac82" name="php-dba" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="7c8a480493f230e3de37be24120ecc9af76eeb16" name="php-dba" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="1428a9ae50e4ae87ca348138bdd2e8edaf27144c" name="php-dba" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="30663551bd6a9284a05bc649d457f412230a1849" name="php-dba" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="be30391954afe57b84ae9f89aee0ffbda9a2edd6" name="php-devel" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="33ffc0b48ebd76cd5e0ba746095b74806742f5f0" name="php-devel" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="cfbaab2f832feeab9d4c1a4f65bc13259d26dde8" name="php-devel" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="c079e5a605de19dc8498fbbea3cbff671651db86" name="php-devel" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="d7a4114148eb555287c332e0abf51fe1d15e80bc" name="php-devel" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="13b9b58b14ab05eaa8eca5ab3bf679a56a9a0fe0" name="php-devel" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="3d79ac05e51cda1acb09ff0abfc83b7a25993aac" name="php-devel" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="58529c03573f1a483aac5e58ab37e159068e0dee" name="php-devel" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="2a37662ec42cc3d105f442da6afd7331bdec59ef" name="php-gd" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="a04c4cbafbd70cbe60cdc49ceabb817e30a61e00" name="php-gd" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="613fed8fc80f15faffa570d37f40d285faa138fc" name="php-gd" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="942c7861c284574466ec1745911bedbe1093b319" name="php-gd" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="e926948f00927e341ba000c8f8fec0d02990eafb" name="php-gd" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="2d70196faf5a4ab735be8fc4ceb53c117ea2abef" name="php-gd" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="c0379a8d3c95938f266bab7c366825f4f1572bf0" name="php-gd" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="c7c3bb7b6ba6f627f824fefc0b7dfc49891ebdda" name="php-gd" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="26acc86d4b50597994c3b9587a964af60a31f20e" name="php-imap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="77b21ec2c96c57c719cae1816d6c4cb02f29276f" name="php-imap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="05327844b2843cd5775bc802fd994c0f13fead26" name="php-imap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="8779d632b6f914ad1baf407af95d1c82618d9454" name="php-imap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="2630e91b2bc450b081704e612d75cc0367c1f5e0" name="php-imap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="f7e2a63881afc1ac32c4a29299c0aa6aa2c92dc4" name="php-imap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="6982d22e8d820223bfcde6311d18566eb6d6d785" name="php-imap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="5a2905b0624caea89d1af7b6fbd8d746226b0119" name="php-imap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="ce419f9f9907f7977557d238abd16ac66036e204" name="php-ldap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="47dae58886e7ce27d66e65b750521f88524e7719" name="php-ldap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="f29b75422d910330969595b47bb43ba845ae44c6" name="php-ldap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="50869947756cb3f718297d9372197fde1c8cc447" name="php-ldap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="a79a68f87e03b337507960477251277af218057f" name="php-ldap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="9967a93fdd30ab7931953dc920e19ea0f46cf4f8" name="php-ldap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="26ca53170cb868ea8b7e0035e779c196de7c80c1" name="php-ldap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="b652ec7723f0240ce59e0cf3fd5193e5fda333ac" name="php-ldap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="100e8074c12ce1d2cf315895f091606cfdcfa01f" name="php-mbstring" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="782bca078e1248bdd9bece76fd119f32063c7ee0" name="php-mbstring" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="b83d192aad7b914fc8d5f81d7fb34d0ff5df420f" name="php-mbstring" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="c1fe3aaad7419bb4c3865f356fd59a45e6c0967e" name="php-mbstring" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="c268a5d21a5f4629516f07e12bcc6d5b69ef8fd0" name="php-mbstring" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="38a1d5b6ebc256a805151efdb912467982887d67" name="php-mbstring" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="7c43df277c3b33c71c22aad7692befd8bd8c12a8" name="php-mbstring" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="5638420754feaed475dbaf04ed53116a1da7b396" name="php-mbstring" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="afed199374e389798d9c261f31b2b89d8700737b" name="php-mysql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="e01a880d3fe954cf0a03993489b6c7c427d79f4d" name="php-mysql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="6ac22a614cb0e854985021a6fe00f0afd52aca47" name="php-mysql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="42fea1488a39bf8a65dc68598db3033ddba90242" name="php-mysql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="c9b1c2b5a06b22cd4b1a705ad8d7e11d229d3f61" name="php-mysql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="3e91f4d5a86d29dd8ad0ebc4c78b83432755c1a7" name="php-mysql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="ac0096765272c5b66824864eb5156ff6f96f3d74" name="php-mysql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="2a4deeaef0aaf78999118bfe846bf96278c3c337" name="php-mysql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="3b2ed08759449a6d4d6a88ea840325ba18ba886e" name="php-ncurses" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="86e77860e7919dcb0f9964a8425b999e8b54c611" name="php-ncurses" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="6ebf1fc5010a9b74670398173480fa0c4149b427" name="php-ncurses" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="de84de41cc98024642ac81fabfac5303f5d773a3" name="php-ncurses" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="cb242999572d89846e2565c9cb9dad422e4d7913" name="php-ncurses" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="15fa3ddef2f0ecb3bd8314e4e7fd78c37397b2d9" name="php-ncurses" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="da911b038ef2b9a56e4dd80109aafa794c72c649" name="php-ncurses" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="30f1635e7bd39027a6e53d0e363bb55bf3b9335b" name="php-ncurses" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="9e77e927ba6158da73d1cd30012152e386cfdde8" name="php-odbc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="1ef9a7c160608fc792a70350af607cbff9bc9d07" name="php-odbc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="7ec4db67f637ca59ae19a87a8ebf458766c1b8fb" name="php-odbc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="8dfcda86f65aa69067fc10b11484f54fcb7bdf40" name="php-odbc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="0e4c1e09c407d64db3e62f440a046bf709a7f552" name="php-odbc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="6963241b36320ec639f93dc6a46f8ceef6d32113" name="php-odbc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="939e097d0d0a36d189f1c9287358bb1f499d866f" name="php-odbc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="201bde400c416af9d67a7750eded345246b9b81a" name="php-odbc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="15102a8c937fa529963fac5366a3950113319ae5" name="php-pdo" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="288741eb4cbb1f66a364ac107687c9943ab8358b" name="php-pdo" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="fc1d497e43b111ffea59a9eab73d4233f56c1eda" name="php-pdo" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="f119035587ffe0c5447a3b61a9e5c3e10ba15631" name="php-pdo" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="a6933cbe8809d3fe7dc316b27a96380ad91f9fbc" name="php-pdo" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="6665a06bf267dd06f7d65038128e52cb46aa8704" name="php-pdo" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="694663a62c88cf2bba26747a25c1f45465125b8a" name="php-pdo" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="29674b5301aeb852f6b759e7bc7dd782583ef0bd" name="php-pdo" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="6e96a2d53aa1b92712ba10f89476337bd10926a2" name="php-pgsql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="22b8bc89fb92bf18379c2f789766f5c3854201f6" name="php-pgsql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="0b60ba53b522d1df293e42e4fdfd335f173ed065" name="php-pgsql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="eea1898abf6bf61c18b3369fcd976d9471e67be9" name="php-pgsql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="f9dddd8b737b98d710026d01df9cee8652951a7f" name="php-pgsql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="9599fba36fb6490c49e991146fc57f667379b57d" name="php-pgsql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="2cfbb04bded717cb6560a68b13d6fa00865ba41b" name="php-pgsql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="c75c9fa6c1cb2047ab07661b470e3490bd84e406" name="php-pgsql" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="fa3827ae3b6c344e573959e2162dd87812a32520" name="php-snmp" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="9c4fcaa7c4d867d7bf2f104e6143c0a6a4a1c1b3" name="php-snmp" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="1e41192851551171c1adb02c5a89ab1c02cc6dc9" name="php-snmp" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="ce71353e77a3c0d297908904cbdf76706f12b124" name="php-snmp" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="b2249ba345f87c8d6efdb527525482434cec1e3d" name="php-snmp" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="2e4b2a9480080bf988f6d4d64b3df5ea885eb4c9" name="php-snmp" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="aa33fe612ac9eeea5300d199782bedd73418ba9b" name="php-snmp" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="369290ed679929c57638a9f90e2c05e3e2f7772a" name="php-snmp" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="c7aca99450635eae7c3111624e5b958d621f6ba4" name="php-soap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="0fccf110e0c009464ec7ec64cda674379d482a9d" name="php-soap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="c535ef5219ae32ad8b985005496933cbe77727ee" name="php-soap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="1a184f89135cba9e077a70d7413c501caed11e5e" name="php-soap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="5b58017d174377d027cb6a3c3c0d47df42029e2c" name="php-soap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="5c5a9e16220a0f18c3e2adcbf749fc868e5eb277" name="php-soap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="6c82ac7ab1a4445e8a67b845343316660b335ec7" name="php-soap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="3d51805251c0a659c45bb052b294516a0c147b59" name="php-soap" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="9d3abafc63c89e5a88825ab30035c8f797ef84ad" name="php-xml" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="eb1d7f3e27ba14a802d97c98d1aa4536c89d8814" name="php-xml" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="f5a4f8cacedb9e8129679bd13137f25fdfe725cf" name="php-xml" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="7a2d7fcf3ab2eb490ad5b9076e6433cdb950bb39" name="php-xml" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="0f84d28a49fd4f9a96757c4a71ec7951bd569c74" name="php-xml" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="c71216b71856c838cdce236fb2411496971e3eeb" name="php-xml" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="f3269ef7563b64537613fd740553bc5d0e876591" name="php-xml" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="85ab6b2a65a509cb3aea03c89cc1ec6be27d5f65" name="php-xml" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="dcb8f2845e10e6486231af407b5a412f14a0d9bf" name="php-xmlrpc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.2" date="1284069600">- fix var_export test cases (#626735)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
</package>
<package pkgid="4da6f393a18b59c8f9963473a311991260d99c6c" name="php-xmlrpc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="27.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.3" date="1289599200">- add security fix for CVE-2010-3870 (#626735)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.1.6-27.4" date="1325800800">- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-27.5" date="1328220000">- add security fix for CVE-2012-0830 (#786755)</changelog>
</package>
<package pkgid="24ead56b941c5e4a9be7631a77218fef5f0ced05" name="php-xmlrpc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="34.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-32" date="1328220000">- add security fix for CVE-2012-0830 (#786756)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-33" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-34" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="2c9219d4a392b5159ea583b0516c5a899879936e" name="php-xmlrpc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="39.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-37" date="1339538400">- add security fixes for CVE-2012-0057, CVE-2011-4153, CVE-2012-0789,
  CVE-2012-1172</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
</package>
<package pkgid="de13c3ccaadf20543f909811e343e27bf70742a3" name="php-xmlrpc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="40.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-38" date="1339624800">- fix memory handling in CVE-2012-0789 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-39" date="1340402400">- fix issue in CVE-2012-0057 patch</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373666400">- add security fix for CVE-2013-4113 (#983689)</changelog>
</package>
<package pkgid="9426ae0c65c1158ac1d5962cdcac6e85f65044dc" name="php-xmlrpc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="43.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.1.6-40" date="1373673600">- add security fix for CVE-2013-4113 (#983689)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
</package>
<package pkgid="12c902807e749fef764ca59758db5901d1da109c" name="php-xmlrpc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="44.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-42" date="1386288000">- add security fixes for CVE-2012-2688,
  CVE-2011-1398, CVE-2013-1643, CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
</package>
<package pkgid="1e30a842189ba30f38fb1621807bb161e6c9c2bf" name="php-xmlrpc" arch="i386">
  <version epoch="0" ver="5.1.6" rel="45.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-43" date="1386633600">- drop unneeded patch</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-44" date="1393286400">- add security fixes for CVE-2006-7243, CVE-2009-0689</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.6-45" date="1414540800">- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
- xmlrpc: fix buffer overflow in date parser #1155607</changelog>
</package>
<package pkgid="2c3212a46136e25df82d17c69c9d31af65ec85dd" name="php53" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="4dd2e08f56ba82ee4f7000bd63ec2fc736859c55" name="php53" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="cd341408fb10cb73531dadabd25409d767b09a30" name="php53" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="d21497670e6b32df25ed5d3c8166d13c97ffad8c" name="php53" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="436e1fc37639dd82d2f6b27807513692b2ff1137" name="php53" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="c207be28c8f9ea36be3dbb13041505d3dfb6056d" name="php53" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="808ade8063b4b1f27bd2fcb47e0d182380729276" name="php53" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="333e4a03a414c78239bb8b72c4861842437daa06" name="php53" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="e72b70ca5975f8720265e868a7d40a930ad852ee" name="php53" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="fb36bd16585c54d2e18166ccf1520f46eef52373" name="php53" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="e2bee6abd91c211e0044c44fbbfd3d6275441531" name="php53" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="e43783443ad348f19ef84b3154b5b94f9c2bb38f" name="php53-bcmath" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="94f4abdec427cd2ad6abcbf2addbcf09b0b48477" name="php53-bcmath" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="f3fb9e34e6dc021344fdf798564b8fc4f72bb272" name="php53-bcmath" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="4c891f755131737957d15f73b2befd8524e444cc" name="php53-bcmath" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="df3a98923809e6d26f457584b1e221a7ef6d4f0b" name="php53-bcmath" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="9ad4e6977d9085f957bcf36d77dd318fa49774a1" name="php53-bcmath" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="90f17bff76c6b67005db3964741569486430b5bb" name="php53-bcmath" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="28706e4d627789e37630dcb30c8cffcfa1ccd5a6" name="php53-bcmath" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="a6b28ed03fb7f09a2908278f002c10772fe986ff" name="php53-bcmath" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="3bbb8b79dc31019eb722c2e499f065fff118fa18" name="php53-bcmath" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="9eb7e3093302dc49f313cf2c54fbfce399d0ff27" name="php53-bcmath" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="c71d4d1c31e0cad1c79e88c00f97471cd74dc4f6" name="php53-cli" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="ad469bc3fa4d66f00da416e657bc3127fc782383" name="php53-cli" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="6ba0d44a9162b2598ac2dd2b3653b5ca70ee938e" name="php53-cli" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="c5d3689ed91938214368934327caf9dddba24431" name="php53-cli" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="52457096a248f6d6196a61c4de64ed603f804c0f" name="php53-cli" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="bddf10118971127660e2bcd663ba4eec2d98dc56" name="php53-cli" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="836d64c46dd346f5bbfee4cc2a1dd6d0c23b343c" name="php53-cli" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="e0b3d841eb83f543cfb9f480b69cecb69a235b30" name="php53-cli" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="7708d48910703bff26790c31661940e8c5df3ee8" name="php53-cli" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="f863f7a7633b0c6406b8ef95229014897b644ddc" name="php53-cli" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="3cce989389d24b83ab0fcac5153481d0be4a7a02" name="php53-cli" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="32ffa1a9bcdd3b37767933d27e955debe1d6df60" name="php53-common" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="114315de0ce6210f4b346929184f1829304d2014" name="php53-common" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="fd75a1e424852db765f4cfffa436cfa125c827ea" name="php53-common" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="699d2e4927ffebb741c5f2a1fef5273c0112a43b" name="php53-common" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="2b9ee299201b0c9a8ff28a8f4d6133c70d1b83bd" name="php53-common" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="3e21b96fec437fc55d5eb34b70f8cece394aaa4f" name="php53-common" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="84742b3786f7614ec83f647e0835fb4d6afd4fc6" name="php53-common" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="3895ae500dfdb2fba0a9f540b57ac7c4728cc23c" name="php53-common" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="80ed419c05eddd2e6fe7f018f1960de660b7601e" name="php53-common" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="e3de049c6a9ee242be63fbaab14edc9d0321b63a" name="php53-common" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="6072c4cc73dcde3d2cb038700527eda5fd111689" name="php53-common" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="eebd0ced8c92004ab8c97137f13eaa9056ab8292" name="php53-dba" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="0d378fc358ec0c2d60144daf3d7ffe294321899a" name="php53-dba" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="34e00439374ae26733cba2394ceef55b3571e99e" name="php53-dba" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="c448410d14d467551cf690c8f5a1e5962d7fa931" name="php53-dba" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="2e3544d436a89e3a650c525570dafe124ad8164d" name="php53-dba" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="e17bc5b94825dddd5f49808d49d9bfbe1fca31a1" name="php53-dba" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="b7faf8be7dd371300f898459eff598498682caec" name="php53-dba" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="4905a680c1d75d2de46a6eb8332c91376f528c4a" name="php53-dba" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="35100750b52cd1415879854bf4900d4d4aea71eb" name="php53-dba" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="8a7e2c057868ab79019e4486a1b6f1e4055312f0" name="php53-dba" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="4f949a5d72bc74d1412edbc2589c26a1625741b8" name="php53-dba" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="30afc10b023cfa7b17ed992293f3d6da10fd2574" name="php53-devel" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="82cbee54d2fe5775a7290bb0ef5ec0d7e1dd69f7" name="php53-devel" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="9bf66d105ce672e23763933ee63cdfa3269f64ca" name="php53-devel" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="fe5c2cafd2358825afc0e16f69b6afcacee8ce0a" name="php53-devel" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="968dc0471264e7a5bda13a94e37a7371f7abc9c5" name="php53-devel" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="6369a38f2910b1f7fc995abe7cd8cfe8583d7643" name="php53-devel" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="5f8200fc814d2bd58177589c683203163a6160bf" name="php53-devel" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="555727b46b0450029b0e9f16e53ce720bcbeff22" name="php53-devel" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="0663fd2752794908a714b024d97e0bf5f23f5239" name="php53-devel" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="278ec03edbe5387fa52b2ccf2399c47c7953ba90" name="php53-devel" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="f75b89ae83a09fd610bea1523769a6bc61187964" name="php53-devel" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="0180517589558c49931b09df8a5b95966fea4f23" name="php53-gd" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="940143da7033a7c7f8ee6487af402e9261471662" name="php53-gd" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="a90f4d801571438819f2eefb6f77c19b1c896069" name="php53-gd" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="de85a039d24bd606d85d1c9826435371db541c89" name="php53-gd" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="d7d9e85e5d7ecb15e6b39d2870bf927d9a49cf1d" name="php53-gd" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="485882c84a08d0318130adc2e09bf2ec513ccff9" name="php53-gd" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="226c1a5cf62e6244e1db85cc73f006ab575baff0" name="php53-gd" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="e9d9265e1729ca21fa3d6af9088865a810f26cad" name="php53-gd" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="6d5ea1893c9a3e4cb6d4cd35b8bbb562e710716f" name="php53-gd" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="437274a2f3a0b8518bca30503044ed4aaabac133" name="php53-gd" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="453fac58e2478db3fd1690985727fd0cf0c671b7" name="php53-gd" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="bda06e5c05d46f4db5be2203fde27bf2a2653953" name="php53-imap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="9a4aa685f92bec505a0267e67f79cace6c59a246" name="php53-imap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="46173b49f7b33dad038f414fb920f7d64e9b3dd1" name="php53-imap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="33a8294b15fe53d17750950995bfa68cbe65eda1" name="php53-imap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="ac74162b8775748a91a9cd0bebfd6e6288d4d756" name="php53-imap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="327138eed1e1c54e596b6e70fb2ebe9f07e52456" name="php53-imap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="9736a1bcd9a15466ee5e45ce3b20966844d44186" name="php53-imap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="c2a93a6bdc78a3e3acdeea7a3a3e4349a4573a87" name="php53-imap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="7b2ec89500a77ca960ba2cc290169e8a10fb2c50" name="php53-imap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="ea7755e5948b62b6e2c581f38b834d87dfc4736d" name="php53-imap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="ed2cbc198fb8304c983d8f677ebe326dd1e6a225" name="php53-imap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="fd8bc0d46c7adfebd5cff51b08dae8a843b2cdae" name="php53-intl" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="8cca0383d33402a217d238d59c35fe74e72ddfdf" name="php53-intl" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="acdd4557d61ce6061696bf2a0811c56046faf2a9" name="php53-intl" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="f55d1a98c0d5d6ea410d23a8824506c7c621c333" name="php53-intl" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="df965896c32d3fd85b728b20c8596349fbc07506" name="php53-intl" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="36f176b01108467390d844abca41f50cb85094fb" name="php53-intl" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="55c178564a099c5578cf1ef2525c8dc44ff44c34" name="php53-intl" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="81a96f3d397811ff382070027f67e746df5d67be" name="php53-intl" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="db07f57b1a614f823bfe196aecb71d4bfa9a4f35" name="php53-intl" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="bbcf3e68fccfc88c2ab7320079c02b117754a2a0" name="php53-intl" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="a3afd8187e870da675b8c2ace28e42a2dbe251d9" name="php53-intl" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="0731d8ea284cfa305730b0d10fd7f63046582691" name="php53-ldap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="dca43e938ca2c8dc505cf6054b9c34132d0d4a74" name="php53-ldap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="2fdb087d470787162c8cf301bc18ad67e0f19c8c" name="php53-ldap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="5b8f0c17b71ce41b6513188195c0894859292019" name="php53-ldap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="7e4d055d9778516dd898566813827db6b7c67fc2" name="php53-ldap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="c0e8bfa50747cf8597818516d19b1d0950e63678" name="php53-ldap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="2a69ed482701255064606910a28cfa53fc1ccece" name="php53-ldap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="79a84884d3d1b6f0d08d83498b06f86475ae1447" name="php53-ldap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="d7b9884bf2a7cb5caefe75070a6b3e274c4f2367" name="php53-ldap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="3e657c2d7cc94b7c0d0b795fc8e07e3063de41a3" name="php53-ldap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="79beb616cb60d04c70d64021e287d5a512c6bc0e" name="php53-ldap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="7a5b7503543faa5d356b107b8bd2c19216ef64b8" name="php53-mbstring" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="c9d2ce335e7cb3c4d93c338fba4085b41f6b9f10" name="php53-mbstring" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="f5958c702d55d8f2cf10d9b98b6497a8e6a4a228" name="php53-mbstring" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="3c5f2906546d8a3f0c2525707ba95e8dcf596cd6" name="php53-mbstring" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="09182ee978eaa1df9a82daa0d25080fc50e224bc" name="php53-mbstring" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="71499cb04511dae483e1b5c81984ff7482ec1401" name="php53-mbstring" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="1de3b96f25e8d5f694ce3fe386d9fd1423dd12f7" name="php53-mbstring" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="85ac6f25177a1d927066e3565a72a3a3600b5280" name="php53-mbstring" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="f5d2d7a427e73bc1b501c4e14040aaf940326f36" name="php53-mbstring" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="aebaf9bc6da590a298fef2c912da693825ada373" name="php53-mbstring" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="96bb29fc98747f2aae56633e2dfa84998e4690aa" name="php53-mbstring" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="a4400ef81631e8c9b1aed76ada70c405fbfc3747" name="php53-mysql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="a33f2c99b0eeeb697906d32cab639b4c2af84b33" name="php53-mysql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="95b583a7d4dc455cc44a4d066ea6573a50b29473" name="php53-mysql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="fd68e8132aaada82bc89669d85d9a19fdda15462" name="php53-mysql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="45c957d69e68282e7e4178a9ae1a8f7018a1f7b7" name="php53-mysql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="a544fb066cff66f663302d69ba2d9eac3091c02a" name="php53-mysql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="4563912aa786bf06249f4b36c7c8921624669302" name="php53-mysql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="aec260a6440de462545b6752dd0ec2edd2f03d08" name="php53-mysql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="42ef5d5de7af6c3e34000f3cc1d5c445b91f1175" name="php53-mysql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="357859a5ab7ecc335d08ee6c23c77e675dbba21c" name="php53-mysql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="071e2ea93c81fe9ae31d38f19775bd3074e60943" name="php53-mysql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="4e5caf143b4c8a34fd5a20607cf02f58e03c88f9" name="php53-odbc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="08f26ae15a01f042a67ad632b20fb571875b7cb3" name="php53-odbc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="2c2f9b8d97cfba2d89c1f4e96b86d17227f3d652" name="php53-odbc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="9990069a1ad7cad2cb12e3db4eacad90a1c12016" name="php53-odbc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="135d815e89270b73d7aa35114e03b64b56f4a1d7" name="php53-odbc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="24dde6e8c9029ec96c0dc2ef99eeaa7ad422fb67" name="php53-odbc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="5b2ed4f2ba97a12f6d059cd638122a1fba28854d" name="php53-odbc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="34e0750126b596f7d500e9cd26b3674a63793bf4" name="php53-odbc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="66868bf3b8133112fa3c2d943d4447a8dc75febd" name="php53-odbc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="b7a0375ca3b694aedd396382ae6eb23a26517952" name="php53-odbc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="cc4259b10900d74e308048bc4f34edef1886ddb9" name="php53-odbc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="0ea39565bdf51bf0fd8ecc480fdc5b1f33083615" name="php53-odbc64" arch="i386">
  <version epoch="0" ver="5.3.3" rel="2.el5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1" date="1333144800">- Initial revision (#772293)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-2" date="1335564000">- disable strict-aliasing (#772293)</changelog>
</package>
<package pkgid="b99427e82714096dea28c6742479cf2700aa821e" name="php53-pdo" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="084f3b1e6f4299283a4f2fa82c545c76b9e05506" name="php53-pdo" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="fb525c4b7fee5bfa54227b7a319c4296e2cc2944" name="php53-pdo" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="78d37b823d9191ad3279248f9abfdf1d169c0d5c" name="php53-pdo" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="32e7086e5d327cc3c2dc0ff9a1d9ca3f79c09235" name="php53-pdo" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="ba050bba1a38e80c9aeb45d3bed48188cbb52f0a" name="php53-pdo" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="57e57b538e918fdf6f9d8036b3c8ff2d13e420b2" name="php53-pdo" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="25c32d92a29eae96e932a649f6062574269d847e" name="php53-pdo" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="42393d9f69fd9c893f8f89224f77072b725fca77" name="php53-pdo" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="4e2a3dc6d3b164e631e8a39b9ce45a888986a46c" name="php53-pdo" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="f6896605e49e3f6cec274937b3bb3619d68da0af" name="php53-pdo" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="1c6de315fcc29373ed4293396fe8682a36c495dc" name="php53-pgsql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="4d96a945c1b889d540c3940a1e9d488c7d5547f3" name="php53-pgsql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="e3cfdc9632db99add6323d4dfc365d62dba1157a" name="php53-pgsql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="87d463c3e4a646a006cd397b1295b6a858ac03ef" name="php53-pgsql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="459b663747417208a9623a278b8fe4ea5418333a" name="php53-pgsql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="f4cfc23b90e8de27ed804843a06b8ea2a56a3e3f" name="php53-pgsql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="5d36b99898773983d766a8eb96a9573661f89037" name="php53-pgsql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="e85c144646b0d4536b52d159798b99ea17b9638e" name="php53-pgsql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="9ff7d8bb9f1b0007135bb8321bd60d0955f4f4bf" name="php53-pgsql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="1d3e8989a192d090479aba9d844511263d2a269f" name="php53-pgsql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="5b12c33bac478ef229af47c1ce22008c62ba1f75" name="php53-pgsql" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="75585e65b6d40f85bdf6d175836a598e2f284f80" name="php53-process" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="c2123191f64e5c57291fde7300ccefbbbd7e9488" name="php53-process" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="f3052344fdbcfbaa70affd0e223207321c06055f" name="php53-process" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="13471f0a1e1e13d1137ed973fe5f0fae61dc30f8" name="php53-process" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="43303f0e5df49b8247c78288ad7f88b0d660719d" name="php53-process" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="7f0d1c7f48b4e5c7c783a207f8e7ee2c9ba49496" name="php53-process" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="10a33305d1712cf71d583d765c003a0e9107b04d" name="php53-process" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="b81e3d1c1085ebaacaa251a2b0b194551c74da3d" name="php53-process" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="24fc46a60a204bfa7f0215c2a82ff4e0a67981e5" name="php53-process" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="14c5d592b7bb0bf790a13514581196daedc09f12" name="php53-process" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="a5b8e94d10cb7b2d3a5beb4e3649209992fcb6ae" name="php53-process" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="132f4c2dc1e9ba70e7faa39c95753464619c5565" name="php53-pspell" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="eaca340d8d617a2331d9ccf616f7de496026fe42" name="php53-pspell" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="d76104778c7a250f7b8eb2bfdbe21b7ed95fb087" name="php53-pspell" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="3c997f803a8b63106d057d40e226118b0d62a410" name="php53-pspell" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="585026616350d69e8472bde38f9e6eaa5ddc0e98" name="php53-pspell" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="a0e361de1c65fd9c01dcfe01e797299c9b17dff7" name="php53-pspell" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="a4a2528b855d286350f2a26cd8dc8a1e3d6d81ed" name="php53-pspell" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="c13ac23dd3941932e4ca850d0eb7f96cf5853854" name="php53-pspell" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="674fe7789d9fec7fcf08e912e2013b2ab97de140" name="php53-pspell" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="31e88582348f2cefd0d263c35d181a3b72b4840f" name="php53-pspell" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="87997972381353e34967fd7566cdfee7dc48b78e" name="php53-pspell" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="c0ba46b171c51cf9b06a541d0a0a50f4a01e151a" name="php53-snmp" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="30e2cbbd06df7e80a72f8138c063dd8cdf8bdebf" name="php53-snmp" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="a1229b5a486f91720daa8c7b94781eaf8210fa76" name="php53-snmp" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="5bad708f65552ab4ba5351f9f7fecacc87bc02c1" name="php53-snmp" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="05b3a2bc20e4b924e720adee6ccb1207d4cbd339" name="php53-snmp" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="2da7333c95f9143f4eba6d79792eb3c65df97cf9" name="php53-snmp" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="3eed45783d3219e409b109f5d0b1ba0088534173" name="php53-snmp" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="be63e9fdb881b559e574bf830f2a91a65fbedb5e" name="php53-snmp" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="10f704f36ba55f7695ce41554e7d4c05b20763ef" name="php53-snmp" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="02169d0df1613c7ebe0a789322fb726177eb855a" name="php53-snmp" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="3c471c88362c99b1e4e57bc253bdc60fb8803ff2" name="php53-snmp" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="fed89c4e84b9d9dff0356615b8665a77a299efe1" name="php53-soap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="46d13efc7b2b1eec05841eda976ecefee03a26ec" name="php53-soap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="ea2345938747002dd0fcdc8e0651ebe040e1ee05" name="php53-soap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="419a66c9baa57618d26ccdb08c789f27dc4c0dac" name="php53-soap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="f6f289c52e1c38673e913c913c8dac8520d2eb1c" name="php53-soap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="9c6ad94cb2b1acbd34330a2c762d8f59c4f149d5" name="php53-soap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="8044ece1928e0bf037f47c658cfff41c2a9bbc61" name="php53-soap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="733eca7defe0db2a9205fc54d0f16c0059f33cbf" name="php53-soap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="b23463b3b298e68fa59f33dda3419ebcbc391d32" name="php53-soap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="b3b0849fdba8b8534582b3191dd4fb0e84224a15" name="php53-soap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="b9635846c3717a51d251a90ecd470c6218681443" name="php53-soap" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="22b405663132d103420d651f5adfe7e1d3537e4c" name="php53-xml" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="58a6c4831aca2eabaf955efffd3bdeeabcce84d9" name="php53-xml" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="00ca430fe83f7b2b1702d23ff0baa0be6fc8532b" name="php53-xml" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="41cfa73ee99183ec614c182075188946495be74f" name="php53-xml" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="1f69ab10ed651bd1ea2e68669992acc3a416c4ea" name="php53-xml" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="11b0122ef0c80d4e483b412d8d1b023153a02820" name="php53-xml" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="4a3bf1f909f839e3f9bdbffcdde7c7f0094eddff" name="php53-xml" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="40566af41925ef0ab296e5c7588bef0a491064a5" name="php53-xml" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="c3544460746fcb1fb780652a2bcd8946dbb49304" name="php53-xml" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="a1c2969edba6f0b44625fc5f9d2a24e2629de735" name="php53-xml" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="70c22aca2491402adeeb50e7cf76e04f68d21bdb" name="php53-xml" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="2c4d80d17e31846de2f72ecbd9dd92ef1d898c72" name="php53-xmlrpc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.3"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.1" date="1295474400">- add security fixes for CVE-2010-3710, CVE-2010-4156, 
  CVE-2010-4645 (#670463)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.2" date="1317074400">- add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
  CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
  CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
</package>
<package pkgid="3048fb0b48700272dac11b15475c68fd21ce0420" name="php53-xmlrpc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.3" date="1319493600">- improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
</package>
<package pkgid="b54b82a92e535c88f57a1c5b91ba1c33a30171ab" name="php53-xmlrpc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="1.el5_7.6"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.4" date="1325628000">- add security fixes for CVE-2011-4885, CVE-2011-4566 (#769758)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 5.3.3-1.5" date="1325714400">- remove extra php.ini-prod/devel files caused by %patch -b</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-1.6" date="1328220000">- add security fix for CVE-2012-0830 (#786757)</changelog>
</package>
<package pkgid="9dbb32350f72383148de09a34965cef0100caa20" name="php53-xmlrpc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-10" date="1339538400">- add security fix for CVE-2012-2336</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
</package>
<package pkgid="1c97c2641bd13b3dfb0084e112837fd5115c7116" name="php53-xmlrpc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="13.el5_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-11" date="1339624800">- fix tests for CVE-2012-2143, CVE-2012-0789</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-13" date="1340661600">- add security fix for CVE-2010-2950</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-13.1" date="1373666400">- add security fix for CVE-2013-4113</changelog>
</package>
<package pkgid="ecf9879256fe8a1e9b82d5c1ec61d04dd02bfaed" name="php53-xmlrpc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="21.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1369267200">- add upstream reproducer for error_handler (#951075)</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
</package>
<package pkgid="d835a8644fb9d50cb42e24a8d73cf606f0395d9c" name="php53-xmlrpc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="22.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1373673600">- add security fix for CVE-2013-4113</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
</package>
<package pkgid="178a3dc1c4232660e6c7e663a9762d5045a5799b" name="php53-xmlrpc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="23.el5_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1376956800">- add security fix for CVE-2013-4248</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
</package>
<package pkgid="36b5c764fb32adb05b382ba0755714a153decbea" name="php53-xmlrpc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="24.el5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1386288000">- add security fix for CVE-2013-6420</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1405641600">- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
</package>
<package pkgid="5547d0a8c2a6425fb2148bf268eea7c44246d3e6" name="php53-xmlrpc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="26.el5_11"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-24" date="1410393600">- spl: fix use-after-free in ArrayIterator due to object
  change during sorting. CVE-2014-4698
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670
- gd: fix NULL pointer dereference in gdImageCreateFromXpm.
  CVE-2014-2497
- fileinfo: fix incomplete fix for CVE-2012-1571 in
  cdf_read_property_info. CVE-2014-3587
- core: fix incomplete fix for CVE-2014-4049 DNS TXT
  record parsing. CVE-2014-3597</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-25" date="1414022400">- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
- core: fix integer overflow in unserialize() CVE-2014-3669
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 5.3.3-26" date="1414108800">- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710</changelog>
</package>
<package pkgid="173f35d9643b87ea3ad4750a708b0dbd632d220e" name="php53-xmlrpc" arch="i386">
  <version epoch="0" ver="5.3.3" rel="7.el5_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-5" date="1328220000">- add security fix for CVE-2012-0830 (#786758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-6" date="1336082400">- add security fix for CVE-2012-1823 (#818607)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-7" date="1336082401">- correct detection of = in CVE-2012-1823 fix (#818607)</changelog>
</package>
<package pkgid="bbf9e1af677931eec3026bcd9b9f85d68f29471a" name="pidgin" arch="i386">
  <version epoch="0" ver="2.6.6" rel="11.el5.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.2" date="1341439200">- Add patch for CVE-2012-2318 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.3" date="1341439201">- Add patch for CVE-2012-3374 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.4" date="1341871200">- Add patch for CVE-2011-2485 (RH bug #837559).</changelog>
</package>
<package pkgid="8e4dc07275b92ea0e6ed7dfb2ee57d750da39721" name="pidgin" arch="i386">
  <version epoch="0" ver="2.6.6" rel="17.el5_9.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-16.el5" date="1361570400">- Add patch for CVE-2013-0273 (RH bug #910651).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-17.el5" date="1361570401">- Add patch for CVE-2013-0274 (RH bug #910651).</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 2.6.6-17.el5_9.1" date="1362434400">- Fix spec file for disttag</changelog>
</package>
<package pkgid="0cc09bdf3bbc1fbfea243cbdd4754039dc6f91b2" name="pidgin" arch="i386">
  <version epoch="0" ver="2.6.6" rel="32.el5"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-30.el5" date="1391040000">- Add patch for CVE-2013-6490 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-31.el5" date="1391040001">- Add patch for CVE-2014-0020 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-32.el5" date="1391472000">- Fix regression in CVE-2013-6483.</changelog>
</package>
<package pkgid="591db632f60ab0f76205a4a7455244fde47b163f" name="pidgin" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.1" date="1318370400">- Add patch for CVE-2011-1091 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.2" date="1318370401">- Add patch for CVE-2011-3594 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.1" date="1318456800">- I messed up the release tag.  Fix it to use the proper form.</changelog>
</package>
<package pkgid="669d57f13acb5e5b92011d7237406991cd26e768" name="pidgin" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.2" date="1323727200">- Add patch for CVE-2011-4601 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.3" date="1323727201">- Add patch for CVE-2011-4602 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.4" date="1323727202">- Add patch for CVE-2011-4603 (RH bug #766450).</changelog>
</package>
<package pkgid="d55f0981a209d6f6775446322ad4cb8e1093c8d6" name="pidgin-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="11.el5.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.2" date="1341439200">- Add patch for CVE-2012-2318 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.3" date="1341439201">- Add patch for CVE-2012-3374 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.4" date="1341871200">- Add patch for CVE-2011-2485 (RH bug #837559).</changelog>
</package>
<package pkgid="2b6790a666e36aefaa4183ef298cc3b15dace66f" name="pidgin-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="17.el5_9.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-16.el5" date="1361570400">- Add patch for CVE-2013-0273 (RH bug #910651).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-17.el5" date="1361570401">- Add patch for CVE-2013-0274 (RH bug #910651).</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 2.6.6-17.el5_9.1" date="1362434400">- Fix spec file for disttag</changelog>
</package>
<package pkgid="facb6190da58778fee93dbdaf046f3bb5f3d9c3b" name="pidgin-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="32.el5"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-30.el5" date="1391040000">- Add patch for CVE-2013-6490 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-31.el5" date="1391040001">- Add patch for CVE-2014-0020 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-32.el5" date="1391472000">- Fix regression in CVE-2013-6483.</changelog>
</package>
<package pkgid="331f2d265f39f4d88403d16463e1afea8a9ec8d5" name="pidgin-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.1" date="1318370400">- Add patch for CVE-2011-1091 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.2" date="1318370401">- Add patch for CVE-2011-3594 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.1" date="1318456800">- I messed up the release tag.  Fix it to use the proper form.</changelog>
</package>
<package pkgid="0983368061484c3d5f05d29a355b381a490e3c11" name="pidgin-devel" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.2" date="1323727200">- Add patch for CVE-2011-4601 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.3" date="1323727201">- Add patch for CVE-2011-4602 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.4" date="1323727202">- Add patch for CVE-2011-4603 (RH bug #766450).</changelog>
</package>
<package pkgid="baf3795c78af2eda3f1e993dff61a30d8061fbd2" name="pidgin-perl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="11.el5.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.2" date="1341439200">- Add patch for CVE-2012-2318 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.3" date="1341439201">- Add patch for CVE-2012-3374 (RH bug #837560).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-11.el5.4" date="1341871200">- Add patch for CVE-2011-2485 (RH bug #837559).</changelog>
</package>
<package pkgid="720448a7ac917f2ea3bfa7cf0c4c580e081b2404" name="pidgin-perl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="17.el5_9.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-16.el5" date="1361570400">- Add patch for CVE-2013-0273 (RH bug #910651).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-17.el5" date="1361570401">- Add patch for CVE-2013-0274 (RH bug #910651).</changelog>
  <changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; 2.6.6-17.el5_9.1" date="1362434400">- Fix spec file for disttag</changelog>
</package>
<package pkgid="ac3e0e94839de4e9915822435d3fc0f9993d1465" name="pidgin-perl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="32.el5"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-30.el5" date="1391040000">- Add patch for CVE-2013-6490 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-31.el5" date="1391040001">- Add patch for CVE-2014-0020 (RH bug #1058239).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-32.el5" date="1391472000">- Fix regression in CVE-2013-6483.</changelog>
</package>
<package pkgid="c25f48ccdb1c2df4f954c889ba26bb0dd3eb2559" name="pidgin-perl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.1"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.1" date="1318370400">- Add patch for CVE-2011-1091 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.2" date="1318370401">- Add patch for CVE-2011-3594 (RH bug #743796).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.1" date="1318456800">- I messed up the release tag.  Fix it to use the proper form.</changelog>
</package>
<package pkgid="58662eec4de2f3b933544d514fd209b21a9bca38" name="pidgin-perl" arch="i386">
  <version epoch="0" ver="2.6.6" rel="5.el5_7.4"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.2" date="1323727200">- Add patch for CVE-2011-4601 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.3" date="1323727201">- Add patch for CVE-2011-4602 (RH bug #766450).</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.6.6-5.el5_7.4" date="1323727202">- Add patch for CVE-2011-4603 (RH bug #766450).</changelog>
</package>
<package pkgid="fd6ee2e278f8b383f43c9bdffde24c1d4b4a14ac" name="piranha" arch="i386">
  <version epoch="0" ver="0.8.4" rel="26.el5_10.1"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; 0.8.4-25" date="1341878400">- Resolves: #739223 - ipvsadm errors should not be fatal
- Resolves: #786364 - reread config can cause lvsd to segfault</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; 0.8.4-26" date="1360281600">- Resolves: #886361 - add SIGCHLD handler to pulse for lvs mode</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; 0.8.4-26.1" date="1391731200">- Resolves: #1061903 - require authentication for all HTTP methods</changelog>
</package>
<package pkgid="9ef04d14045e9e0399399fe361c66f9a3973053f" name="pixman" arch="i386">
  <version epoch="0" ver="0.22.0" rel="2.2.el5_10"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.22.0-2" date="1309305600">- Resolves: #718810
- RHEL5 packaging</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; - 0.22.0-2.1" date="1387411200">- Patch for CVE-2013-6425 (#1043757)</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; - 0.22.0-2.2" date="1387411201">- Correct changelog</changelog>
</package>
<package pkgid="bebed625cea6eef5061478960993e3ae4a638b0c" name="pixman-devel" arch="i386">
  <version epoch="0" ver="0.22.0" rel="2.2.el5_10"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.22.0-2" date="1309305600">- Resolves: #718810
- RHEL5 packaging</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; - 0.22.0-2.1" date="1387411200">- Patch for CVE-2013-6425 (#1043757)</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; - 0.22.0-2.2" date="1387411201">- Correct changelog</changelog>
</package>
<package pkgid="e0ecf62a58397ad4a53cf95c06d4de6de49298a8" name="popt" arch="i386">
  <version epoch="0" ver="1.10.2.3" rel="22.el5_7.2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22" date="1289944800">- accept windows cr/lf line endings in gpg keys (#530212)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22.1" date="1317333600">- fix CVE-2011-3378 (#742156)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-22.2" date="1317420000">- fix thinko in the CVE backport</changelog>
</package>
<package pkgid="3e6d1908eb1d9f0ca828505747752cbfc8fee387" name="popt" arch="i386">
  <version epoch="0" ver="1.10.2.3" rel="28.el5_8"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-26" date="1320098400">- Add support for XZ-compressed sources and patches to rpmbuild (#620674)
- Avoid unnecessary assert-death when closing NULL fd (#573043)
- Add scriptlet error notification callbacks (#533831)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-27" date="1323295200">- Revert fix for #740291, too many packages rely on the broken behavior</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-28" date="1330380000">- Proper region tag validation on package/header read (CVE-2012-0060)
- Double-check region size against header size (CVE-2012-0061)
- Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)</changelog>
</package>
<package pkgid="9afb665472c78c939b4fb4a616f30594784f365f" name="popt" arch="i386">
  <version epoch="0" ver="1.10.2.3" rel="36.el5_11"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-34" date="1366848000">- Fix segfault on rpmdb addition when header unload fails (#706935)
- Fix segfault on invalid OpenPGP packet (#743203)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-35" date="1415923200">- Fix race condidition where unchecked data is exposed in the file system
  (CVE-2013-6435)(#1163057)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-36" date="1416355200">- Fix warning when applying the patch for #1163057</changelog>
</package>
<package pkgid="8eacc3dc7f799d105a1811a657bf43d8a54d4255" name="postfix" arch="i386">
  <version epoch="2" ver="2.3.3" rel="2.3.el5_6"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2:2.3.3-2.1" date="1218492000">- fixed postfix privilege problem with symlinks in the mail spool directory
  (CVE-2008-2936)
  Resolves: rhbz#456717</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2:2.3.3-2.2" date="1299794400">- fix CVE-2011-0411 (#683387)
- fix CVE-2008-2937 (#683387)
- defuzzification of patches</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2:2.3.3-2.3" date="1305237600">- fix CVE-2011-1720 (#704134)
  Resolves: rhbz#704134</changelog>
</package>
<package pkgid="429c19a3f27c173eb2df512520c90090dfff6055" name="postfix-pflogsumm" arch="i386">
  <version epoch="2" ver="2.3.3" rel="2.3.el5_6"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2:2.3.3-2.1" date="1218492000">- fixed postfix privilege problem with symlinks in the mail spool directory
  (CVE-2008-2936)
  Resolves: rhbz#456717</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2:2.3.3-2.2" date="1299794400">- fix CVE-2011-0411 (#683387)
- fix CVE-2008-2937 (#683387)
- defuzzification of patches</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2:2.3.3-2.3" date="1305237600">- fix CVE-2011-1720 (#704134)
  Resolves: rhbz#704134</changelog>
</package>
<package pkgid="fdf0c5bea600f22fe97cd22a3ccb7c8353059ee6" name="postgresql" arch="i386">
  <version epoch="0" ver="8.1.23" rel="1.el5_7.2"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.22-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.1.22, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  including the fix for CVE-2010-3433
Resolves: #639931</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.1.23, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  This is the last upstream release in the 8.1.x series.
- Ensure we don't package any .gitignore files from the source tarball
- Back-port upstream fix for CVE-2010-4015
Resolves: #672632</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_7.2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740737</changelog>
</package>
<package pkgid="1cebbb1be63d7ed983a359e1c1298dcd2b549b35" name="postgresql" arch="i386">
  <version epoch="0" ver="8.1.23" rel="10.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346112000">- Back-port upstream fix for CVE-2012-3488
Resolves: #852016</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-9" date="1392940800">- fix #1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064,
  CVE-2014-0065
- better incorporate strlcpy function (upstream git diff c92f7e..062421)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-10" date="1393459200">- related #1065840: CVE-2014-0062</changelog>
</package>
<package pkgid="b5e9749b8892cf74cb5e8f471289530ed9d40038" name="postgresql" arch="i386">
  <version epoch="0" ver="8.1.23" rel="4.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740738</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
</package>
<package pkgid="f13ff2e7ced2ca89151789b7bd949b38776f6150" name="postgresql" arch="i386">
  <version epoch="0" ver="8.1.23" rel="5.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
</package>
<package pkgid="f0540af0b6c8caab4a30f70c0723eea580e7b3c1" name="postgresql" arch="i386">
  <version epoch="0" ver="8.1.23" rel="6.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346104800">- Back-port upstream fix for CVE-2012-3488
Resolves: #852015</changelog>
</package>
<package pkgid="79eedd6954919f5349e22547ffa3dd83c12d1dc7" name="postgresql-contrib" arch="i386">
  <version epoch="0" ver="8.1.23" rel="1.el5_7.2"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.22-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.1.22, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  including the fix for CVE-2010-3433
Resolves: #639931</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.1.23, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  This is the last upstream release in the 8.1.x series.
- Ensure we don't package any .gitignore files from the source tarball
- Back-port upstream fix for CVE-2010-4015
Resolves: #672632</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_7.2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740737</changelog>
</package>
<package pkgid="f7cf194e92dfef830ffc86c5a09d6d923d24ab54" name="postgresql-contrib" arch="i386">
  <version epoch="0" ver="8.1.23" rel="10.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346112000">- Back-port upstream fix for CVE-2012-3488
Resolves: #852016</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-9" date="1392940800">- fix #1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064,
  CVE-2014-0065
- better incorporate strlcpy function (upstream git diff c92f7e..062421)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-10" date="1393459200">- related #1065840: CVE-2014-0062</changelog>
</package>
<package pkgid="b59a9ccad0920e84a0efecd07f74346c606beaab" name="postgresql-contrib" arch="i386">
  <version epoch="0" ver="8.1.23" rel="4.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740738</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
</package>
<package pkgid="860b356005e700bd0f85b21699ee37b6e3fbfe30" name="postgresql-contrib" arch="i386">
  <version epoch="0" ver="8.1.23" rel="5.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
</package>
<package pkgid="c832398f8a7f0c2617a77f310c4d9a27211c07c2" name="postgresql-contrib" arch="i386">
  <version epoch="0" ver="8.1.23" rel="6.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346104800">- Back-port upstream fix for CVE-2012-3488
Resolves: #852015</changelog>
</package>
<package pkgid="cee41d6e7f5740883c0c7f8a47015d16825805b1" name="postgresql-devel" arch="i386">
  <version epoch="0" ver="8.1.23" rel="1.el5_7.2"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.22-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.1.22, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  including the fix for CVE-2010-3433
Resolves: #639931</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.1.23, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  This is the last upstream release in the 8.1.x series.
- Ensure we don't package any .gitignore files from the source tarball
- Back-port upstream fix for CVE-2010-4015
Resolves: #672632</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_7.2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740737</changelog>
</package>
<package pkgid="04b2a837800ccf06e792542510139781efdf6b2d" name="postgresql-devel" arch="i386">
  <version epoch="0" ver="8.1.23" rel="10.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346112000">- Back-port upstream fix for CVE-2012-3488
Resolves: #852016</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-9" date="1392940800">- fix #1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064,
  CVE-2014-0065
- better incorporate strlcpy function (upstream git diff c92f7e..062421)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-10" date="1393459200">- related #1065840: CVE-2014-0062</changelog>
</package>
<package pkgid="870d60e6c1e8566b65cfd32e378b4c61e3a3c3f6" name="postgresql-devel" arch="i386">
  <version epoch="0" ver="8.1.23" rel="4.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740738</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
</package>
<package pkgid="66984a52c16147edad94e4cba7638032c58772aa" name="postgresql-devel" arch="i386">
  <version epoch="0" ver="8.1.23" rel="5.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
</package>
<package pkgid="990bac06cdb3df90edaad28bee4d07da314e7440" name="postgresql-devel" arch="i386">
  <version epoch="0" ver="8.1.23" rel="6.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346104800">- Back-port upstream fix for CVE-2012-3488
Resolves: #852015</changelog>
</package>
<package pkgid="6b7ee93a0649f71a3c8b675b89c4a71f4614287e" name="postgresql-docs" arch="i386">
  <version epoch="0" ver="8.1.23" rel="1.el5_7.2"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.22-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.1.22, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  including the fix for CVE-2010-3433
Resolves: #639931</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.1.23, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  This is the last upstream release in the 8.1.x series.
- Ensure we don't package any .gitignore files from the source tarball
- Back-port upstream fix for CVE-2010-4015
Resolves: #672632</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_7.2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740737</changelog>
</package>
<package pkgid="ad1de5db598243cd159eb3e17c9d51854caadde9" name="postgresql-docs" arch="i386">
  <version epoch="0" ver="8.1.23" rel="10.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346112000">- Back-port upstream fix for CVE-2012-3488
Resolves: #852016</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-9" date="1392940800">- fix #1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064,
  CVE-2014-0065
- better incorporate strlcpy function (upstream git diff c92f7e..062421)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-10" date="1393459200">- related #1065840: CVE-2014-0062</changelog>
</package>
<package pkgid="67823d6422e185763e353b2254b34df3f2977a3a" name="postgresql-docs" arch="i386">
  <version epoch="0" ver="8.1.23" rel="4.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740738</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
</package>
<package pkgid="4ae162cece96b8405bf9e33aa0a820b706ee0be0" name="postgresql-docs" arch="i386">
  <version epoch="0" ver="8.1.23" rel="5.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
</package>
<package pkgid="1a5d2959c2f6942f06425bedf385ddf5fe2c49cb" name="postgresql-docs" arch="i386">
  <version epoch="0" ver="8.1.23" rel="6.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346104800">- Back-port upstream fix for CVE-2012-3488
Resolves: #852015</changelog>
</package>
<package pkgid="6d9ca9e7ea2c4a7635dbba53cae43b28dd964af6" name="postgresql-libs" arch="i386">
  <version epoch="0" ver="8.1.23" rel="1.el5_7.2"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.22-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.1.22, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  including the fix for CVE-2010-3433
Resolves: #639931</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.1.23, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  This is the last upstream release in the 8.1.x series.
- Ensure we don't package any .gitignore files from the source tarball
- Back-port upstream fix for CVE-2010-4015
Resolves: #672632</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_7.2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740737</changelog>
</package>
<package pkgid="469aa2fcd680a3c6e7c4e1a150e0ed7ab4bc0c81" name="postgresql-libs" arch="i386">
  <version epoch="0" ver="8.1.23" rel="10.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346112000">- Back-port upstream fix for CVE-2012-3488
Resolves: #852016</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-9" date="1392940800">- fix #1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064,
  CVE-2014-0065
- better incorporate strlcpy function (upstream git diff c92f7e..062421)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-10" date="1393459200">- related #1065840: CVE-2014-0062</changelog>
</package>
<package pkgid="39f1b1c92d4caba80f6a836c998b656dda0a5acc" name="postgresql-libs" arch="i386">
  <version epoch="0" ver="8.1.23" rel="4.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740738</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
</package>
<package pkgid="6951d9cf480408932e87fdc3a6ffcdf5af5328b4" name="postgresql-libs" arch="i386">
  <version epoch="0" ver="8.1.23" rel="5.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
</package>
<package pkgid="1f2004bf8a970bffb749374d3e9a2b0cb056e525" name="postgresql-libs" arch="i386">
  <version epoch="0" ver="8.1.23" rel="6.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346104800">- Back-port upstream fix for CVE-2012-3488
Resolves: #852015</changelog>
</package>
<package pkgid="945d6792baaddf1370aa67b1b72bfdb9e5450b99" name="postgresql-pl" arch="i386">
  <version epoch="0" ver="8.1.23" rel="1.el5_7.2"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.22-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.1.22, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  including the fix for CVE-2010-3433
Resolves: #639931</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.1.23, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  This is the last upstream release in the 8.1.x series.
- Ensure we don't package any .gitignore files from the source tarball
- Back-port upstream fix for CVE-2010-4015
Resolves: #672632</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_7.2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740737</changelog>
</package>
<package pkgid="99fe337a47bcf4f9e3dbfcc45163415c86c0a46d" name="postgresql-pl" arch="i386">
  <version epoch="0" ver="8.1.23" rel="10.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346112000">- Back-port upstream fix for CVE-2012-3488
Resolves: #852016</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-9" date="1392940800">- fix #1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064,
  CVE-2014-0065
- better incorporate strlcpy function (upstream git diff c92f7e..062421)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-10" date="1393459200">- related #1065840: CVE-2014-0062</changelog>
</package>
<package pkgid="7d4b9a90adf9ee3cb2e77583201be45d91b0c89c" name="postgresql-pl" arch="i386">
  <version epoch="0" ver="8.1.23" rel="4.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740738</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
</package>
<package pkgid="5ef2d6295619f50f37df93fc152161faca572181" name="postgresql-pl" arch="i386">
  <version epoch="0" ver="8.1.23" rel="5.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
</package>
<package pkgid="9ff725b536ac06880cedd6e1e7365ae5e00ee001" name="postgresql-pl" arch="i386">
  <version epoch="0" ver="8.1.23" rel="6.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346104800">- Back-port upstream fix for CVE-2012-3488
Resolves: #852015</changelog>
</package>
<package pkgid="abfc7aefc484b77aa08f69357924fabb6e249a36" name="postgresql-python" arch="i386">
  <version epoch="0" ver="8.1.23" rel="1.el5_7.2"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.22-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.1.22, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  including the fix for CVE-2010-3433
Resolves: #639931</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.1.23, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  This is the last upstream release in the 8.1.x series.
- Ensure we don't package any .gitignore files from the source tarball
- Back-port upstream fix for CVE-2010-4015
Resolves: #672632</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_7.2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740737</changelog>
</package>
<package pkgid="98a1e92279e4a9295e5d126aea2362cc5a178f64" name="postgresql-python" arch="i386">
  <version epoch="0" ver="8.1.23" rel="10.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346112000">- Back-port upstream fix for CVE-2012-3488
Resolves: #852016</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-9" date="1392940800">- fix #1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064,
  CVE-2014-0065
- better incorporate strlcpy function (upstream git diff c92f7e..062421)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-10" date="1393459200">- related #1065840: CVE-2014-0062</changelog>
</package>
<package pkgid="9a0921fc2a00aac071381edbdd2ab1726b539839" name="postgresql-python" arch="i386">
  <version epoch="0" ver="8.1.23" rel="4.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740738</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
</package>
<package pkgid="603c6193087b60ea6d67e7a119d389067c731ab7" name="postgresql-python" arch="i386">
  <version epoch="0" ver="8.1.23" rel="5.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
</package>
<package pkgid="c4e2e79eb208ad3e89c2f01675cd725a4d9d2a30" name="postgresql-python" arch="i386">
  <version epoch="0" ver="8.1.23" rel="6.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346104800">- Back-port upstream fix for CVE-2012-3488
Resolves: #852015</changelog>
</package>
<package pkgid="431b8274522d5a2f025b9b67a5ae7ba8caab2d3c" name="postgresql-server" arch="i386">
  <version epoch="0" ver="8.1.23" rel="1.el5_7.2"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.22-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.1.22, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  including the fix for CVE-2010-3433
Resolves: #639931</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.1.23, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  This is the last upstream release in the 8.1.x series.
- Ensure we don't package any .gitignore files from the source tarball
- Back-port upstream fix for CVE-2010-4015
Resolves: #672632</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_7.2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740737</changelog>
</package>
<package pkgid="d6faab8d7a4d361615b8ea60205e1a92eeac4007" name="postgresql-server" arch="i386">
  <version epoch="0" ver="8.1.23" rel="10.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346112000">- Back-port upstream fix for CVE-2012-3488
Resolves: #852016</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-9" date="1392940800">- fix #1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064,
  CVE-2014-0065
- better incorporate strlcpy function (upstream git diff c92f7e..062421)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-10" date="1393459200">- related #1065840: CVE-2014-0062</changelog>
</package>
<package pkgid="68d203932362a40bbf807329f0d296774aa81261" name="postgresql-server" arch="i386">
  <version epoch="0" ver="8.1.23" rel="4.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740738</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
</package>
<package pkgid="73bb3ac482c547ecaeb3484741da69b7f53e0fae" name="postgresql-server" arch="i386">
  <version epoch="0" ver="8.1.23" rel="5.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
</package>
<package pkgid="cc391ca5043bcb9d4b0d33811d5768f8ae914a2c" name="postgresql-server" arch="i386">
  <version epoch="0" ver="8.1.23" rel="6.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346104800">- Back-port upstream fix for CVE-2012-3488
Resolves: #852015</changelog>
</package>
<package pkgid="8280811d3ec38a18610adb92f12fdc136496cebc" name="postgresql-tcl" arch="i386">
  <version epoch="0" ver="8.1.23" rel="1.el5_7.2"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.22-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.1.22, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  including the fix for CVE-2010-3433
Resolves: #639931</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.1.23, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  This is the last upstream release in the 8.1.x series.
- Ensure we don't package any .gitignore files from the source tarball
- Back-port upstream fix for CVE-2010-4015
Resolves: #672632</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_7.2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740737</changelog>
</package>
<package pkgid="896e7c9687643fc0b84687f1ba155d9a52fc90e1" name="postgresql-tcl" arch="i386">
  <version epoch="0" ver="8.1.23" rel="10.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346112000">- Back-port upstream fix for CVE-2012-3488
Resolves: #852016</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-9" date="1392940800">- fix #1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064,
  CVE-2014-0065
- better incorporate strlcpy function (upstream git diff c92f7e..062421)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-10" date="1393459200">- related #1065840: CVE-2014-0062</changelog>
</package>
<package pkgid="650a99311affc3f39776f331d5572b23148d8cd2" name="postgresql-tcl" arch="i386">
  <version epoch="0" ver="8.1.23" rel="4.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740738</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
</package>
<package pkgid="5091ee9475b59151f2c1e27a5af6a575701ba22a" name="postgresql-tcl" arch="i386">
  <version epoch="0" ver="8.1.23" rel="5.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
</package>
<package pkgid="de78199ad6ef6c39340442152099c7fb29ac5084" name="postgresql-tcl" arch="i386">
  <version epoch="0" ver="8.1.23" rel="6.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346104800">- Back-port upstream fix for CVE-2012-3488
Resolves: #852015</changelog>
</package>
<package pkgid="a034cf2c84cfd74843cab699b36253a354f98c12" name="postgresql-test" arch="i386">
  <version epoch="0" ver="8.1.23" rel="1.el5_7.2"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.22-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.1.22, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  including the fix for CVE-2010-3433
Resolves: #639931</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.1.23, for various fixes described at
  http://www.postgresql.org/docs/8.1/static/release.html
  This is the last upstream release in the 8.1.x series.
- Ensure we don't package any .gitignore files from the source tarball
- Back-port upstream fix for CVE-2010-4015
Resolves: #672632</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-1.el5_7.2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740737</changelog>
</package>
<package pkgid="c6e1851c456f5d95be35c6da1ebed91bda67b4b9" name="postgresql-test" arch="i386">
  <version epoch="0" ver="8.1.23" rel="10.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346112000">- Back-port upstream fix for CVE-2012-3488
Resolves: #852016</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-9" date="1392940800">- fix #1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064,
  CVE-2014-0065
- better incorporate strlcpy function (upstream git diff c92f7e..062421)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.1.23-10" date="1393459200">- related #1065840: CVE-2014-0062</changelog>
</package>
<package pkgid="82601621afc02b99d6a98c5b850976ee8c2f81d2" name="postgresql-test" arch="i386">
  <version epoch="0" ver="8.1.23" rel="4.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-2" date="1317160800">- Back-port upstream fix for CVE-2011-2483
Resolves: #740738</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
</package>
<package pkgid="ecd600b1f4b3d0467dd9e88709e7c1f606a32e6a" name="postgresql-test" arch="i386">
  <version epoch="0" ver="8.1.23" rel="5.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-3" date="1319666400">- Back-port upstream fix for unregistering OpenSSL callbacks at close
Resolves: #728828</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
</package>
<package pkgid="cdb5263ddd316830d533ce149e57513952c682bd" name="postgresql-test" arch="i386">
  <version epoch="0" ver="8.1.23" rel="6.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-4" date="1334268000">- Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868
Resolves: #812070</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-5" date="1339538400">- Back-port upstream fix for CVE-2012-2143
Resolves: #830721</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.1.23-6" date="1346104800">- Back-port upstream fix for CVE-2012-3488
Resolves: #852015</changelog>
</package>
<package pkgid="27b481a65091db4f57da52ab216b4c6a7a55a4e8" name="postgresql84" arch="i386">
  <version epoch="0" ver="8.4.11" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672637
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740740</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
</package>
<package pkgid="89c3c6f2dd7ed0758b6a84c7820f7e1318df93b0" name="postgresql84" arch="i386">
  <version epoch="0" ver="8.4.12" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
</package>
<package pkgid="5beed3027f2cf89631cc3a572addb54a971679fc" name="postgresql84" arch="i386">
  <version epoch="0" ver="8.4.13" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346104800">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852018</changelog>
</package>
<package pkgid="f0a703b61f2630bd678806a2679065dd14e4d3ae" name="postgresql84" arch="i386">
  <version epoch="0" ver="8.4.18" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339632000">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830724</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
</package>
<package pkgid="3e7da3686b7ac27e89412b27431d70e23a877d9a" name="postgresql84" arch="i386">
  <version epoch="0" ver="8.4.20" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-1" date="1392768000">- Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-20.html</changelog>
</package>
<package pkgid="bfe7d3ab3128ef2f3c4ce5748b6bf60b66e8d154" name="postgresql84" arch="i386">
  <version epoch="0" ver="8.4.9" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.5-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.4.5, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
  including the fix for CVE-2010-3433
Resolves: #639933</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672636
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1.el5_7.1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740739</changelog>
</package>
<package pkgid="7d456a01afaf8893aa54c7a253274403c9b6654d" name="postgresql84-contrib" arch="i386">
  <version epoch="0" ver="8.4.11" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672637
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740740</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
</package>
<package pkgid="a57ca1f3393fef5a1ee9a4500136166f2e7b7268" name="postgresql84-contrib" arch="i386">
  <version epoch="0" ver="8.4.12" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
</package>
<package pkgid="bb843317592e399a7ca33af5bd2b835b578010ff" name="postgresql84-contrib" arch="i386">
  <version epoch="0" ver="8.4.13" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346104800">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852018</changelog>
</package>
<package pkgid="e16762a96f853392100f1fb5f3bf5b573819d87b" name="postgresql84-contrib" arch="i386">
  <version epoch="0" ver="8.4.18" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339632000">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830724</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
</package>
<package pkgid="e8d32ae5ddd273039b2c7ae8988f6bfe1ae5a45c" name="postgresql84-contrib" arch="i386">
  <version epoch="0" ver="8.4.20" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-1" date="1392768000">- Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-20.html</changelog>
</package>
<package pkgid="6f63c7e3069d5da6be2d385922665bda21fa017d" name="postgresql84-contrib" arch="i386">
  <version epoch="0" ver="8.4.9" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.5-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.4.5, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
  including the fix for CVE-2010-3433
Resolves: #639933</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672636
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1.el5_7.1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740739</changelog>
</package>
<package pkgid="cd511c85560d18588496e64093aa4f5e4cba39ec" name="postgresql84-devel" arch="i386">
  <version epoch="0" ver="8.4.11" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672637
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740740</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
</package>
<package pkgid="58512bd9cd16f692416c43d02105cdaae7ba6632" name="postgresql84-devel" arch="i386">
  <version epoch="0" ver="8.4.12" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
</package>
<package pkgid="9576da3fb94c2633b15a641c99799da487663e79" name="postgresql84-devel" arch="i386">
  <version epoch="0" ver="8.4.13" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346104800">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852018</changelog>
</package>
<package pkgid="7f8581ddfc574e78b35e0a26bb7f831c6e9c38e5" name="postgresql84-devel" arch="i386">
  <version epoch="0" ver="8.4.18" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339632000">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830724</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
</package>
<package pkgid="bd9f30adb97a92b2f8752cd025af4306f98064a9" name="postgresql84-devel" arch="i386">
  <version epoch="0" ver="8.4.20" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-1" date="1392768000">- Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-20.html</changelog>
</package>
<package pkgid="c3f094eb6a932674b48c1e0c4c1c13edd25f5ad6" name="postgresql84-devel" arch="i386">
  <version epoch="0" ver="8.4.9" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.5-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.4.5, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
  including the fix for CVE-2010-3433
Resolves: #639933</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672636
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1.el5_7.1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740739</changelog>
</package>
<package pkgid="c39438e2596d08df6e7d0ed21abca1a296b57c30" name="postgresql84-docs" arch="i386">
  <version epoch="0" ver="8.4.11" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672637
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740740</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
</package>
<package pkgid="08b4dc539474752ef43c63939ce13f76cc3492e5" name="postgresql84-docs" arch="i386">
  <version epoch="0" ver="8.4.12" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
</package>
<package pkgid="12cbfc9b876a2b0f77644cbc07961232abc25903" name="postgresql84-docs" arch="i386">
  <version epoch="0" ver="8.4.13" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346104800">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852018</changelog>
</package>
<package pkgid="46f7de8f38e38dee1bd187a39d642f6d8b0b6fd9" name="postgresql84-docs" arch="i386">
  <version epoch="0" ver="8.4.18" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339632000">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830724</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
</package>
<package pkgid="bfc1e09ec4e6910ee845b114d0e7072216ee33b7" name="postgresql84-docs" arch="i386">
  <version epoch="0" ver="8.4.20" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-1" date="1392768000">- Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-20.html</changelog>
</package>
<package pkgid="b46df3488139df31f35936db81551822632aa0ad" name="postgresql84-docs" arch="i386">
  <version epoch="0" ver="8.4.9" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.5-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.4.5, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
  including the fix for CVE-2010-3433
Resolves: #639933</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672636
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1.el5_7.1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740739</changelog>
</package>
<package pkgid="91dd02d94665d404460ac090449b6109f1971157" name="postgresql84-libs" arch="i386">
  <version epoch="0" ver="8.4.11" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672637
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740740</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
</package>
<package pkgid="ea79c0ebe20e7c9c3d6e6da5df3175b4b521bb8b" name="postgresql84-libs" arch="i386">
  <version epoch="0" ver="8.4.12" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
</package>
<package pkgid="95c428fb0b25de540772272890f50199bb495c9a" name="postgresql84-libs" arch="i386">
  <version epoch="0" ver="8.4.13" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346104800">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852018</changelog>
</package>
<package pkgid="ebcf1a07fd37bc356f0f939598dcbe4291ac583b" name="postgresql84-libs" arch="i386">
  <version epoch="0" ver="8.4.18" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339632000">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830724</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
</package>
<package pkgid="94d611e5496b884b96137c1f548e28b5afcf10fb" name="postgresql84-libs" arch="i386">
  <version epoch="0" ver="8.4.20" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-1" date="1392768000">- Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-20.html</changelog>
</package>
<package pkgid="1c848c303a697bcad9d05be79ab037a97b75f23b" name="postgresql84-libs" arch="i386">
  <version epoch="0" ver="8.4.9" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.5-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.4.5, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
  including the fix for CVE-2010-3433
Resolves: #639933</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672636
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1.el5_7.1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740739</changelog>
</package>
<package pkgid="3a606964f2e166fe534402641730ad4599124bb9" name="postgresql84-plperl" arch="i386">
  <version epoch="0" ver="8.4.11" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672637
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740740</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
</package>
<package pkgid="6f186008d58c3f42d414034f4fe1ff214a292969" name="postgresql84-plperl" arch="i386">
  <version epoch="0" ver="8.4.12" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
</package>
<package pkgid="a885a1a8bb62a1da952f4e4506c1d72cecfa6ef8" name="postgresql84-plperl" arch="i386">
  <version epoch="0" ver="8.4.13" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346104800">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852018</changelog>
</package>
<package pkgid="b5ab1a08bf3dd41fadb2a3835d7652185a712961" name="postgresql84-plperl" arch="i386">
  <version epoch="0" ver="8.4.18" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339632000">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830724</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
</package>
<package pkgid="5aa22b04a1c3789de4e286e847f8d8d77c28bf73" name="postgresql84-plperl" arch="i386">
  <version epoch="0" ver="8.4.20" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-1" date="1392768000">- Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-20.html</changelog>
</package>
<package pkgid="530d7de45043823e300f69d3929e55d211b2dc67" name="postgresql84-plperl" arch="i386">
  <version epoch="0" ver="8.4.9" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.5-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.4.5, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
  including the fix for CVE-2010-3433
Resolves: #639933</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672636
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1.el5_7.1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740739</changelog>
</package>
<package pkgid="cb52fe952162b761f4128d97121d760f57f22651" name="postgresql84-plpython" arch="i386">
  <version epoch="0" ver="8.4.11" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672637
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740740</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
</package>
<package pkgid="ffc0059bcd6c2394bdc14bfa5561886cebb4cd0d" name="postgresql84-plpython" arch="i386">
  <version epoch="0" ver="8.4.12" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
</package>
<package pkgid="91789ac3842045a8aee5b9355bf11b26ca3bb0f9" name="postgresql84-plpython" arch="i386">
  <version epoch="0" ver="8.4.13" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346104800">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852018</changelog>
</package>
<package pkgid="a83d94bc15c1a809b7178f4334d510e1cce8b506" name="postgresql84-plpython" arch="i386">
  <version epoch="0" ver="8.4.18" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339632000">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830724</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
</package>
<package pkgid="493ec26b1b33a904d916f9961fb3b1422a8f5077" name="postgresql84-plpython" arch="i386">
  <version epoch="0" ver="8.4.20" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-1" date="1392768000">- Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-20.html</changelog>
</package>
<package pkgid="198d70fad48d065c4436713ac58fa9e7d4be177b" name="postgresql84-plpython" arch="i386">
  <version epoch="0" ver="8.4.9" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.5-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.4.5, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
  including the fix for CVE-2010-3433
Resolves: #639933</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672636
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1.el5_7.1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740739</changelog>
</package>
<package pkgid="5acc05a55c84c94744ea83675ea9b4eca3c21ee6" name="postgresql84-pltcl" arch="i386">
  <version epoch="0" ver="8.4.11" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672637
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740740</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
</package>
<package pkgid="b3ea70c058fa6dbc366e14453979a0def4ac7118" name="postgresql84-pltcl" arch="i386">
  <version epoch="0" ver="8.4.12" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
</package>
<package pkgid="4e4bd2e022f1c2a480034d03322ba2db94051075" name="postgresql84-pltcl" arch="i386">
  <version epoch="0" ver="8.4.13" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346104800">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852018</changelog>
</package>
<package pkgid="58717aa37bab7d959db49497c06b9b0ed40b9b1d" name="postgresql84-pltcl" arch="i386">
  <version epoch="0" ver="8.4.18" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339632000">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830724</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
</package>
<package pkgid="790b7dbe6ee3cea7ba8204ab8a8174a0eeffa8be" name="postgresql84-pltcl" arch="i386">
  <version epoch="0" ver="8.4.20" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-1" date="1392768000">- Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-20.html</changelog>
</package>
<package pkgid="bcd474b7cc2f0cbcdf9155cf244132c6b79b3486" name="postgresql84-pltcl" arch="i386">
  <version epoch="0" ver="8.4.9" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.5-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.4.5, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
  including the fix for CVE-2010-3433
Resolves: #639933</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672636
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1.el5_7.1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740739</changelog>
</package>
<package pkgid="d14b6da73e9943ba41cc8826988a5f82461cc217" name="postgresql84-python" arch="i386">
  <version epoch="0" ver="8.4.11" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672637
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740740</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
</package>
<package pkgid="1aaa507c906a8d31a3c11ee646bc3b7660e429bd" name="postgresql84-python" arch="i386">
  <version epoch="0" ver="8.4.12" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
</package>
<package pkgid="cc3be056d22ffafc6866db6fefcd0cbf1e24b89b" name="postgresql84-python" arch="i386">
  <version epoch="0" ver="8.4.13" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346104800">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852018</changelog>
</package>
<package pkgid="07c7d724c12351ffee25071a93b32925c35dcd1c" name="postgresql84-python" arch="i386">
  <version epoch="0" ver="8.4.18" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339632000">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830724</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
</package>
<package pkgid="8c5cb12c4b2a5c356eb7dd01b61b7e9dbebf8fdd" name="postgresql84-python" arch="i386">
  <version epoch="0" ver="8.4.20" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-1" date="1392768000">- Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-20.html</changelog>
</package>
<package pkgid="29ece6817d768ca56e4ce957749da16007d8f21b" name="postgresql84-python" arch="i386">
  <version epoch="0" ver="8.4.9" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.5-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.4.5, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
  including the fix for CVE-2010-3433
Resolves: #639933</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672636
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1.el5_7.1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740739</changelog>
</package>
<package pkgid="999a1b9dfb1425194be94dc50d63b2f7d3dc974d" name="postgresql84-server" arch="i386">
  <version epoch="0" ver="8.4.11" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672637
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740740</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
</package>
<package pkgid="702b75353c5b979855e4681e1c95351df555f251" name="postgresql84-server" arch="i386">
  <version epoch="0" ver="8.4.12" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
</package>
<package pkgid="64fc6c210b7c79c7a9acb1fba60dab11aa1709cf" name="postgresql84-server" arch="i386">
  <version epoch="0" ver="8.4.13" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346104800">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852018</changelog>
</package>
<package pkgid="a6f574aa36f8efaac684fb4155ecfd4b9c7984e4" name="postgresql84-server" arch="i386">
  <version epoch="0" ver="8.4.18" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339632000">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830724</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
</package>
<package pkgid="bf222791a0838f2d9a885feaa05504694d78e2ea" name="postgresql84-server" arch="i386">
  <version epoch="0" ver="8.4.20" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-1" date="1392768000">- Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-20.html</changelog>
</package>
<package pkgid="4ebe59dec7d0133fd0d12973e5fa8c2f22f367d1" name="postgresql84-server" arch="i386">
  <version epoch="0" ver="8.4.9" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.5-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.4.5, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
  including the fix for CVE-2010-3433
Resolves: #639933</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672636
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1.el5_7.1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740739</changelog>
</package>
<package pkgid="44886c8d9a5ddedbafcda59b7d77e1dfdaacf374" name="postgresql84-tcl" arch="i386">
  <version epoch="0" ver="8.4.11" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672637
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740740</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
</package>
<package pkgid="e9ac01b881498efe1cf17c3d19eb4a378c05399b" name="postgresql84-tcl" arch="i386">
  <version epoch="0" ver="8.4.12" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
</package>
<package pkgid="b95efe9febe7e21b5b4683401031b2b2902215c0" name="postgresql84-tcl" arch="i386">
  <version epoch="0" ver="8.4.13" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346104800">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852018</changelog>
</package>
<package pkgid="38f11f65cfacecde227e5aa91a34b94550a7d452" name="postgresql84-tcl" arch="i386">
  <version epoch="0" ver="8.4.18" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339632000">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830724</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
</package>
<package pkgid="dca4dd5591d457b12eb3a69b9625bf038a53b759" name="postgresql84-tcl" arch="i386">
  <version epoch="0" ver="8.4.20" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-1" date="1392768000">- Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-20.html</changelog>
</package>
<package pkgid="11a72622ded05352e073ffeaa03df5db519321e0" name="postgresql84-tcl" arch="i386">
  <version epoch="0" ver="8.4.9" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.5-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.4.5, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
  including the fix for CVE-2010-3433
Resolves: #639933</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672636
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1.el5_7.1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740739</changelog>
</package>
<package pkgid="7f54de9ed509e23c2399508fde8ddf110c2b6de0" name="postgresql84-test" arch="i386">
  <version epoch="0" ver="8.4.11" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672637
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740740</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
</package>
<package pkgid="2d288cc78f5b565369c67e42a75fb323c33be9c2" name="postgresql84-test" arch="i386">
  <version epoch="0" ver="8.4.12" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-1" date="1334268000">- Update to PostgreSQL 8.4.11, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
  including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
Resolves: #812077</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
</package>
<package pkgid="3dac55464429be57be98688ee75c6f62441e17f9" name="postgresql84-test" arch="i386">
  <version epoch="0" ver="8.4.13" rel="1.el5_8"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.11-2" date="1339538400">- Add patches for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339624800">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830723</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346104800">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852018</changelog>
</package>
<package pkgid="1fd13f37612e367a13c979b82047625118d53969" name="postgresql84-test" arch="i386">
  <version epoch="0" ver="8.4.18" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.12-1" date="1339632000">- Update to PostgreSQL 8.4.12, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
  including the fixes for CVE-2012-2143, CVE-2012-2655
Resolves: #830724</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
</package>
<package pkgid="8329eb9511873f3168bbe4545a4c0d34933f909a" name="postgresql84-test" arch="i386">
  <version epoch="0" ver="8.4.20" rel="1.el5_10"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346112000">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852019</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 8.4.18-1" date="1381795200">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-1" date="1392768000">- Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-20.html</changelog>
</package>
<package pkgid="22134357e41c1dabb62c830a6441d97f83d31703" name="postgresql84-test" arch="i386">
  <version epoch="0" ver="8.4.9" rel="1.el5_7.1"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.5-1.el5_5.1" date="1286229600">- Update to PostgreSQL 8.4.5, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
  including the fix for CVE-2010-3433
Resolves: #639933</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.7-1.el5_6.1" date="1296252000">- Update to PostgreSQL 8.4.7, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  including the fix for CVE-2010-4015
Resolves: #672636
- Ensure we don't package any .gitignore files from the source tarball</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.9-1.el5_7.1" date="1317160800">- Update to PostgreSQL 8.4.9, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
  including the fix for CVE-2011-2483
Resolves: #740739</changelog>
</package>
<package pkgid="baf473555449c6c95e64104a7fbdb78db60d2d42" name="procmail" arch="i386">
  <version epoch="0" ver="3.22" rel="17.1.2"/>
  <changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 3.22-17.1" date="1152748800">- rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-17.1.1" date="1409875200">- Fixed buffer overflow in formail
  Resolves: CVE-2014-3618</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-17.1.2" date="1409961600">- Rebuilt with -fno-strict-aliasing
  Related: CVE-2014-3618</changelog>
</package>
<package pkgid="6af52a1c5f7880914b06d301c652ddb44766ed4f" name="python" arch="i386">
  <version epoch="0" ver="2.4.3" rel="46.el5_8.2"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46" date="1324504800">- add alias "en_IN" -&gt; "en_IN.ISO8859-1" to locale (patch 213)
Resolves: rhbz#708292</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46.el5_8.1" date="1332972000">- distutils.commands.register: create ~/.pypirc securely
Resolves: CVE-2011-4944
- send encoding in SimpleHTTPServer.list_directory to protect IE7 against
potential XSS attacks
Resolves: CVE-2011-4940
- oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
variable, to provide an opt-in way to protect against denial of service
attacks due to hash collisions within the dict and set types
Resolves: CVE-2012-1150</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46.el5_8.2" date="1335823200">- if hash randomization is enabled, also enable it within pyexpat
Resolves: CVE-2012-0876</changelog>
</package>
<package pkgid="4077e9cc094478d77db501c59239aafab5c24332" name="python-devel" arch="i386">
  <version epoch="0" ver="2.4.3" rel="46.el5_8.2"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46" date="1324504800">- add alias "en_IN" -&gt; "en_IN.ISO8859-1" to locale (patch 213)
Resolves: rhbz#708292</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46.el5_8.1" date="1332972000">- distutils.commands.register: create ~/.pypirc securely
Resolves: CVE-2011-4944
- send encoding in SimpleHTTPServer.list_directory to protect IE7 against
potential XSS attacks
Resolves: CVE-2011-4940
- oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
variable, to provide an opt-in way to protect against denial of service
attacks due to hash collisions within the dict and set types
Resolves: CVE-2012-1150</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46.el5_8.2" date="1335823200">- if hash randomization is enabled, also enable it within pyexpat
Resolves: CVE-2012-0876</changelog>
</package>
<package pkgid="e8e3918f786807f57d046fb64a97a8ed972bd6d4" name="python-libs" arch="i386">
  <version epoch="0" ver="2.4.3" rel="46.el5_8.2"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46" date="1324504800">- add alias "en_IN" -&gt; "en_IN.ISO8859-1" to locale (patch 213)
Resolves: rhbz#708292</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46.el5_8.1" date="1332972000">- distutils.commands.register: create ~/.pypirc securely
Resolves: CVE-2011-4944
- send encoding in SimpleHTTPServer.list_directory to protect IE7 against
potential XSS attacks
Resolves: CVE-2011-4940
- oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
variable, to provide an opt-in way to protect against denial of service
attacks due to hash collisions within the dict and set types
Resolves: CVE-2012-1150</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46.el5_8.2" date="1335823200">- if hash randomization is enabled, also enable it within pyexpat
Resolves: CVE-2012-0876</changelog>
</package>
<package pkgid="7d9b4f82f2d22192cd5a55aec12768a4a01e78f7" name="python-tools" arch="i386">
  <version epoch="0" ver="2.4.3" rel="46.el5_8.2"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46" date="1324504800">- add alias "en_IN" -&gt; "en_IN.ISO8859-1" to locale (patch 213)
Resolves: rhbz#708292</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46.el5_8.1" date="1332972000">- distutils.commands.register: create ~/.pypirc securely
Resolves: CVE-2011-4944
- send encoding in SimpleHTTPServer.list_directory to protect IE7 against
potential XSS attacks
Resolves: CVE-2011-4940
- oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
variable, to provide an opt-in way to protect against denial of service
attacks due to hash collisions within the dict and set types
Resolves: CVE-2012-1150</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46.el5_8.2" date="1335823200">- if hash randomization is enabled, also enable it within pyexpat
Resolves: CVE-2012-0876</changelog>
</package>
<package pkgid="55e5a3b600ac6bc9e18df851d63c965d46bf2cdc" name="qt4" arch="i386">
  <version epoch="0" ver="4.2.1" rel="1.el5_7.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.1.4-12" date="1160085600">- rebuilt for unwind info generation, broken in gcc-4.1.1-21</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.2.1-1" date="1161640800">- update to 4.2.1</changelog>
  <changelog author="Jaroslav Reznik &lt;jreznik@redhat.com&gt; - 4.2.1-1.1" date="1316037600">- Resolves: #737815, qt/harfbuzz buffer overflow, CVE-2011-3193
- Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242</changelog>
</package>
<package pkgid="2b0f2d46e5d8cf3ee3c62f09733075c9c3a84bc5" name="qt4-devel" arch="i386">
  <version epoch="0" ver="4.2.1" rel="1.el5_7.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.1.4-12" date="1160085600">- rebuilt for unwind info generation, broken in gcc-4.1.1-21</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.2.1-1" date="1161640800">- update to 4.2.1</changelog>
  <changelog author="Jaroslav Reznik &lt;jreznik@redhat.com&gt; - 4.2.1-1.1" date="1316037600">- Resolves: #737815, qt/harfbuzz buffer overflow, CVE-2011-3193
- Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242</changelog>
</package>
<package pkgid="99e2326182ff9ca00058ad446c5d5b11cec8fb20" name="qt4-doc" arch="i386">
  <version epoch="0" ver="4.2.1" rel="1.el5_7.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.1.4-12" date="1160085600">- rebuilt for unwind info generation, broken in gcc-4.1.1-21</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.2.1-1" date="1161640800">- update to 4.2.1</changelog>
  <changelog author="Jaroslav Reznik &lt;jreznik@redhat.com&gt; - 4.2.1-1.1" date="1316037600">- Resolves: #737815, qt/harfbuzz buffer overflow, CVE-2011-3193
- Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242</changelog>
</package>
<package pkgid="1eaf897af58f588f73091cb222c7680edfe9fea8" name="qt4-mysql" arch="i386">
  <version epoch="0" ver="4.2.1" rel="1.el5_7.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.1.4-12" date="1160085600">- rebuilt for unwind info generation, broken in gcc-4.1.1-21</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.2.1-1" date="1161640800">- update to 4.2.1</changelog>
  <changelog author="Jaroslav Reznik &lt;jreznik@redhat.com&gt; - 4.2.1-1.1" date="1316037600">- Resolves: #737815, qt/harfbuzz buffer overflow, CVE-2011-3193
- Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242</changelog>
</package>
<package pkgid="4a17bdef0644053106793ce51c490b8f41cb3f5e" name="qt4-odbc" arch="i386">
  <version epoch="0" ver="4.2.1" rel="1.el5_7.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.1.4-12" date="1160085600">- rebuilt for unwind info generation, broken in gcc-4.1.1-21</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.2.1-1" date="1161640800">- update to 4.2.1</changelog>
  <changelog author="Jaroslav Reznik &lt;jreznik@redhat.com&gt; - 4.2.1-1.1" date="1316037600">- Resolves: #737815, qt/harfbuzz buffer overflow, CVE-2011-3193
- Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242</changelog>
</package>
<package pkgid="bade0196917151a22837fe2da90c19b7ba869d6a" name="qt4-postgresql" arch="i386">
  <version epoch="0" ver="4.2.1" rel="1.el5_7.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.1.4-12" date="1160085600">- rebuilt for unwind info generation, broken in gcc-4.1.1-21</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.2.1-1" date="1161640800">- update to 4.2.1</changelog>
  <changelog author="Jaroslav Reznik &lt;jreznik@redhat.com&gt; - 4.2.1-1.1" date="1316037600">- Resolves: #737815, qt/harfbuzz buffer overflow, CVE-2011-3193
- Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242</changelog>
</package>
<package pkgid="88b2db5c2fe9e2af41903611277e4cbb09740eb5" name="qt4-sqlite" arch="i386">
  <version epoch="0" ver="4.2.1" rel="1.el5_7.1"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.1.4-12" date="1160085600">- rebuilt for unwind info generation, broken in gcc-4.1.1-21</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; 4.2.1-1" date="1161640800">- update to 4.2.1</changelog>
  <changelog author="Jaroslav Reznik &lt;jreznik@redhat.com&gt; - 4.2.1-1.1" date="1316037600">- Resolves: #737815, qt/harfbuzz buffer overflow, CVE-2011-3193
- Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242</changelog>
</package>
<package pkgid="aad89037ab9d0a9992d2b2b9c8f22df133fe29be" name="quagga" arch="i386">
  <version epoch="0" ver="0.98.6" rel="7.el5_8.1"/>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 0.98.6-6" date="1269554400">- Resolves: #528583 - Missing declarations cause zebra to segfault</changelog>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 0.98.6-7" date="1285884000">- Resolves: #638628 - CVE-2007-4826 CVE-2010-2948 quagga: various flaws</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.98.6-7.1" date="1344895200">- fix CVE-2011-3323
- fix CVE-2011-3324
- fix CVE-2011-3325
- fix CVE-2011-3326
- fix CVE-2011-3327
- fix CVE-2012-0249
- fix CVE-2010-1674</changelog>
</package>
<package pkgid="6e9baf6228d405d502f29281c5452e2b8e675cf6" name="quagga-contrib" arch="i386">
  <version epoch="0" ver="0.98.6" rel="7.el5_8.1"/>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 0.98.6-6" date="1269554400">- Resolves: #528583 - Missing declarations cause zebra to segfault</changelog>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 0.98.6-7" date="1285884000">- Resolves: #638628 - CVE-2007-4826 CVE-2010-2948 quagga: various flaws</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.98.6-7.1" date="1344895200">- fix CVE-2011-3323
- fix CVE-2011-3324
- fix CVE-2011-3325
- fix CVE-2011-3326
- fix CVE-2011-3327
- fix CVE-2012-0249
- fix CVE-2010-1674</changelog>
</package>
<package pkgid="fe55812c8b30b0c6b695c8704c5a3fef8de527e0" name="quagga-devel" arch="i386">
  <version epoch="0" ver="0.98.6" rel="7.el5_8.1"/>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 0.98.6-6" date="1269554400">- Resolves: #528583 - Missing declarations cause zebra to segfault</changelog>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 0.98.6-7" date="1285884000">- Resolves: #638628 - CVE-2007-4826 CVE-2010-2948 quagga: various flaws</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.98.6-7.1" date="1344895200">- fix CVE-2011-3323
- fix CVE-2011-3324
- fix CVE-2011-3325
- fix CVE-2011-3326
- fix CVE-2011-3327
- fix CVE-2012-0249
- fix CVE-2010-1674</changelog>
</package>
<package pkgid="759a05031bc0258367babdaf7be6b01d5a60de08" name="quota" arch="i386">
  <version epoch="1" ver="3.13" rel="8.el5"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1:3.13-6" date="1336687200">- Do not use real domains in warnquota example (Resolves: #680429)
- Use /proc/mounts for mountpoint scanning (Resolves: #689822)
- Use rq_bsize to convert quotas transferred by RPC (bug #667360)
- Make RPC block factor dynamic (bug #667360)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1:3.13-7" date="1339711200">- Fix parsing numeric arguments of setquota (Resolves: #831520)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1:3.13-8" date="1343772000">- Fix CVE-2012-3417 (incorrect use of tcp_wrappers) (Resolves: #841448)</changelog>
</package>
<package pkgid="eb5215cc304cbd893854c5b388432fa7895effd9" name="rgmanager" arch="i386">
  <version epoch="0" ver="2.0.52" rel="21.el5"/>
  <changelog author="Lon Hohberger &lt;lhh@redhat.com&gt; - 2.0.52-19" date="1303941600">- Fix changelog format
- rgmanager: Fix reference count handling
  (fix_reference_count_handling.patch)
  Resolves: rhbz#692771</changelog>
  <changelog author="Lon Hohberger &lt;lhh@redhat.com&gt; - 2.0.52-20" date="1308002400">- resource-agents: Improve LD_LIBRARY_PATH handling by SAP*
  (resource_agents_improve_ld_library_path_handling_by_sap*.patch)
  Resolves: rhbz#710637</changelog>
  <changelog author="Lon Hohberger &lt;lhh@redhat.com&gt; - 2.0.52-21" date="1308952800">- rgmanager: Fix bad passing of SFL_FAILURE up
  (fix_bad_passing_of_sfl_failure_up.patch)
  Resolves: rhbz#711521</changelog>
</package>
<package pkgid="585d4671009bd949d7cdd5cf3a370e31348e9355" name="ricci" arch="i386">
  <version epoch="0" ver="0.12.2" rel="51.el5"/>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; 0.12.2-44" date="1323900000">- Fix bz577019 (CVE-2010-1104 zope: XSS on error page)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.12.2-45" date="1325800800">- Fix bz751359 (Add luci support for fence_ipmilan's -L option)</changelog>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; 0.12.2-51" date="1326319200">- Fix bz711494 (CVE-2011-1948 plone: reflected XSS vulnerability)
- Fix bz771920 (CVE-2011-4924 Zope: Incomplete upstream patch for CVE-2010-1104/bz577019)</changelog>
</package>
<package pkgid="ab5019d3880ff568f2f534d14500df5bad54cb02" name="ricci" arch="i386">
  <version epoch="0" ver="0.12.2" rel="64.el5"/>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; 0.12.2-59" date="1343772000">- Fix bz835649 (luci uninstall will leave /var/lib/luci/var/pts and /usr/lib*/luci/zope/var/pts behind)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.12.2-60" date="1344981600">- Improvements for bz832185 (Luci cannot configure the "identity_file" attribute for fence_ilo_mp)
- Improvements for bz822633 (Add luci support for nfsrestart)</changelog>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; 0.12.2-64" date="1346191200">- Improvements for bz786372 (Better protect luci's authentication cookie)
- Improvements for bz607179 (Improper handling of session timeouts)</changelog>
</package>
<package pkgid="4f946952cb5ea46715db6ae8a34d4404ea046425" name="ricci" arch="i386">
  <version epoch="0" ver="0.12.2" rel="81.el5"/>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; - 0.12.2-78" date="1397779200">- luci: reflect startup_wait parameter added in postgres-8 RA
  Resolves: rhbz#1065263
- luci: Multiple information leak flaws in various luci site extensions
  Resolves: rhbz#1076148</changelog>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; - 0.12.2-79" date="1397779201">- luci: drop unsuccessful monkey patch application wrt. Plone 20121106 advisory
  Related: rhbz#956861</changelog>
  <changelog author="Jan Pokorny &lt;jpokorny@redhat.com&gt; - 0.12.2-81" date="1398470400">- luci: prevent non-admin user from unauthorized executive access
  Resolves: rhbz#1089310</changelog>
</package>
<package pkgid="ea29d8a24c1c363022cd4c4d35cddbb3c1d2f6f5" name="rpm" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="22.el5_7.2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22" date="1289944800">- accept windows cr/lf line endings in gpg keys (#530212)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22.1" date="1317333600">- fix CVE-2011-3378 (#742156)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-22.2" date="1317420000">- fix thinko in the CVE backport</changelog>
</package>
<package pkgid="d7c202356e00809e5c5330a556a40c3f553d681c" name="rpm" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="28.el5_8"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-26" date="1320098400">- Add support for XZ-compressed sources and patches to rpmbuild (#620674)
- Avoid unnecessary assert-death when closing NULL fd (#573043)
- Add scriptlet error notification callbacks (#533831)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-27" date="1323295200">- Revert fix for #740291, too many packages rely on the broken behavior</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-28" date="1330380000">- Proper region tag validation on package/header read (CVE-2012-0060)
- Double-check region size against header size (CVE-2012-0061)
- Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)</changelog>
</package>
<package pkgid="6b65d49189c036f9177660ae3958beb2595271b0" name="rpm" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="36.el5_11"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-34" date="1366848000">- Fix segfault on rpmdb addition when header unload fails (#706935)
- Fix segfault on invalid OpenPGP packet (#743203)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-35" date="1415923200">- Fix race condidition where unchecked data is exposed in the file system
  (CVE-2013-6435)(#1163057)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-36" date="1416355200">- Fix warning when applying the patch for #1163057</changelog>
</package>
<package pkgid="dd3b2518474f838e3576f5c4ee29594924e45519" name="rpm-apidocs" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="22.el5_7.2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22" date="1289944800">- accept windows cr/lf line endings in gpg keys (#530212)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22.1" date="1317333600">- fix CVE-2011-3378 (#742156)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-22.2" date="1317420000">- fix thinko in the CVE backport</changelog>
</package>
<package pkgid="7b9eb596ccb39372322a34e1d45f8ce12ce975ea" name="rpm-apidocs" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="28.el5_8"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-26" date="1320098400">- Add support for XZ-compressed sources and patches to rpmbuild (#620674)
- Avoid unnecessary assert-death when closing NULL fd (#573043)
- Add scriptlet error notification callbacks (#533831)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-27" date="1323295200">- Revert fix for #740291, too many packages rely on the broken behavior</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-28" date="1330380000">- Proper region tag validation on package/header read (CVE-2012-0060)
- Double-check region size against header size (CVE-2012-0061)
- Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)</changelog>
</package>
<package pkgid="a581eeaba7530665ec4bc594c4ed1fe32caaa9f3" name="rpm-apidocs" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="36.el5_11"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-34" date="1366848000">- Fix segfault on rpmdb addition when header unload fails (#706935)
- Fix segfault on invalid OpenPGP packet (#743203)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-35" date="1415923200">- Fix race condidition where unchecked data is exposed in the file system
  (CVE-2013-6435)(#1163057)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-36" date="1416355200">- Fix warning when applying the patch for #1163057</changelog>
</package>
<package pkgid="cabbbb955dcff56a290796a18790638d74eb81ea" name="rpm-build" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="22.el5_7.2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22" date="1289944800">- accept windows cr/lf line endings in gpg keys (#530212)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22.1" date="1317333600">- fix CVE-2011-3378 (#742156)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-22.2" date="1317420000">- fix thinko in the CVE backport</changelog>
</package>
<package pkgid="2bf90681f29ba3fb3a3fa10e0f45bf5287af03db" name="rpm-build" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="28.el5_8"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-26" date="1320098400">- Add support for XZ-compressed sources and patches to rpmbuild (#620674)
- Avoid unnecessary assert-death when closing NULL fd (#573043)
- Add scriptlet error notification callbacks (#533831)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-27" date="1323295200">- Revert fix for #740291, too many packages rely on the broken behavior</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-28" date="1330380000">- Proper region tag validation on package/header read (CVE-2012-0060)
- Double-check region size against header size (CVE-2012-0061)
- Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)</changelog>
</package>
<package pkgid="c04c7a7fb3f4e46d12b45f28a7ad88c2b692927b" name="rpm-build" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="36.el5_11"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-34" date="1366848000">- Fix segfault on rpmdb addition when header unload fails (#706935)
- Fix segfault on invalid OpenPGP packet (#743203)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-35" date="1415923200">- Fix race condidition where unchecked data is exposed in the file system
  (CVE-2013-6435)(#1163057)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-36" date="1416355200">- Fix warning when applying the patch for #1163057</changelog>
</package>
<package pkgid="0fbd24f09c2639ecc13d8da7a33cf741012e4bd3" name="rpm-devel" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="22.el5_7.2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22" date="1289944800">- accept windows cr/lf line endings in gpg keys (#530212)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22.1" date="1317333600">- fix CVE-2011-3378 (#742156)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-22.2" date="1317420000">- fix thinko in the CVE backport</changelog>
</package>
<package pkgid="d2d7444e10ebf1f6802df46ca9385088e90bad78" name="rpm-devel" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="28.el5_8"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-26" date="1320098400">- Add support for XZ-compressed sources and patches to rpmbuild (#620674)
- Avoid unnecessary assert-death when closing NULL fd (#573043)
- Add scriptlet error notification callbacks (#533831)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-27" date="1323295200">- Revert fix for #740291, too many packages rely on the broken behavior</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-28" date="1330380000">- Proper region tag validation on package/header read (CVE-2012-0060)
- Double-check region size against header size (CVE-2012-0061)
- Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)</changelog>
</package>
<package pkgid="e8e3623a1164b074aad4ea105bdff96fd5496ede" name="rpm-devel" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="36.el5_11"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-34" date="1366848000">- Fix segfault on rpmdb addition when header unload fails (#706935)
- Fix segfault on invalid OpenPGP packet (#743203)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-35" date="1415923200">- Fix race condidition where unchecked data is exposed in the file system
  (CVE-2013-6435)(#1163057)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-36" date="1416355200">- Fix warning when applying the patch for #1163057</changelog>
</package>
<package pkgid="2aaafe07021a0e838e2ffa552ef932acd5f4b14e" name="rpm-libs" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="22.el5_7.2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22" date="1289944800">- accept windows cr/lf line endings in gpg keys (#530212)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22.1" date="1317333600">- fix CVE-2011-3378 (#742156)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-22.2" date="1317420000">- fix thinko in the CVE backport</changelog>
</package>
<package pkgid="ca0616ab95069d9fff3adaab034ac6bf1beabc30" name="rpm-libs" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="28.el5_8"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-26" date="1320098400">- Add support for XZ-compressed sources and patches to rpmbuild (#620674)
- Avoid unnecessary assert-death when closing NULL fd (#573043)
- Add scriptlet error notification callbacks (#533831)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-27" date="1323295200">- Revert fix for #740291, too many packages rely on the broken behavior</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-28" date="1330380000">- Proper region tag validation on package/header read (CVE-2012-0060)
- Double-check region size against header size (CVE-2012-0061)
- Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)</changelog>
</package>
<package pkgid="91b8e222f468135036c232e2510b53edbb2f0443" name="rpm-libs" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="36.el5_11"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-34" date="1366848000">- Fix segfault on rpmdb addition when header unload fails (#706935)
- Fix segfault on invalid OpenPGP packet (#743203)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-35" date="1415923200">- Fix race condidition where unchecked data is exposed in the file system
  (CVE-2013-6435)(#1163057)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-36" date="1416355200">- Fix warning when applying the patch for #1163057</changelog>
</package>
<package pkgid="5d65105d9d2e5adc75885a435fbec21ac63c8196" name="rpm-python" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="22.el5_7.2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22" date="1289944800">- accept windows cr/lf line endings in gpg keys (#530212)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.4.2.3-22.1" date="1317333600">- fix CVE-2011-3378 (#742156)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-22.2" date="1317420000">- fix thinko in the CVE backport</changelog>
</package>
<package pkgid="c38655372c83bc1faa0d382abd2fb9b98be554f4" name="rpm-python" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="28.el5_8"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-26" date="1320098400">- Add support for XZ-compressed sources and patches to rpmbuild (#620674)
- Avoid unnecessary assert-death when closing NULL fd (#573043)
- Add scriptlet error notification callbacks (#533831)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-27" date="1323295200">- Revert fix for #740291, too many packages rely on the broken behavior</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-28" date="1330380000">- Proper region tag validation on package/header read (CVE-2012-0060)
- Double-check region size against header size (CVE-2012-0061)
- Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)</changelog>
</package>
<package pkgid="3bf665ea52f3a62b6b7da159a3595fc703d61f18" name="rpm-python" arch="i386">
  <version epoch="0" ver="4.4.2.3" rel="36.el5_11"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.4.2.3-34" date="1366848000">- Fix segfault on rpmdb addition when header unload fails (#706935)
- Fix segfault on invalid OpenPGP packet (#743203)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-35" date="1415923200">- Fix race condidition where unchecked data is exposed in the file system
  (CVE-2013-6435)(#1163057)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.8.0-36" date="1416355200">- Fix warning when applying the patch for #1163057</changelog>
</package>
<package pkgid="5fd15ab2d103df9a3acc8a579284c2973d19ed1b" name="rsync" arch="i386">
  <version epoch="0" ver="3.0.6" rel="4.el5"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 3.0.6-2" date="1297116000">- Remove BuildRequires dependency on popt-devel, until the package
  is being shipped with RHEL-5 (resolve build issues)</changelog>
  <changelog author="Vojtech Vitek &lt;vvitek@redhat.com&gt; - 3.0.6-3" date="1300744800">- Add upstream patch to fix CVE-2011-1097 - Incremental file-list
  corruption due to temporary file_extra_cnt increments
  Resolves: #688923</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3.0.6-4" date="1306965600">- fix #700450 - free parsed hostnames
- fix #575022 - set TZ variable after chroot</changelog>
</package>
<package pkgid="5b5cb8d10385abf1b424cfb1c3e74a2c389cb1ba" name="rsync" arch="i386">
  <version epoch="0" ver="3.0.6" rel="4.el5_7.1"/>
  <changelog author="Vojtech Vitek &lt;vvitek@redhat.com&gt; - 3.0.6-3" date="1300744800">- Add upstream patch to fix CVE-2011-1097 - Incremental file-list
  corruption due to temporary file_extra_cnt increments
  Resolves: #688923</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3.0.6-4" date="1306965600">- fix #700450 - free parsed hostnames
- fix #575022 - set TZ variable after chroot</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3.0.6-4.1" date="1311804000">- fix #726060 - fixed free-hostnames patch</changelog>
</package>
<package pkgid="ce241a7510536ee3c249b87ce6b6d1454777920f" name="rsyslog5" arch="i386">
  <version epoch="0" ver="5.8.12" rel="5.el5_11"/>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 5.8.12-3" date="1343260800">- squash old changelog history related to rsyslog v3
  Resolves: #820396</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.12-4" date="1348444800">- add 'conflicts' on incompatible version of selinux-policy
  Resolves: #820396</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.12-5" date="1412985600">- fix CVE-2014-3634
  resolves: #1149158</changelog>
</package>
<package pkgid="d7be833620f3ee7d08f4abfabb4baab8044cb4c4" name="rsyslog5-gnutls" arch="i386">
  <version epoch="0" ver="5.8.12" rel="5.el5_11"/>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 5.8.12-3" date="1343260800">- squash old changelog history related to rsyslog v3
  Resolves: #820396</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.12-4" date="1348444800">- add 'conflicts' on incompatible version of selinux-policy
  Resolves: #820396</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.12-5" date="1412985600">- fix CVE-2014-3634
  resolves: #1149158</changelog>
</package>
<package pkgid="52d7d3786a4f0c43c0094173b98082997235d3be" name="rsyslog5-gssapi" arch="i386">
  <version epoch="0" ver="5.8.12" rel="5.el5_11"/>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 5.8.12-3" date="1343260800">- squash old changelog history related to rsyslog v3
  Resolves: #820396</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.12-4" date="1348444800">- add 'conflicts' on incompatible version of selinux-policy
  Resolves: #820396</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.12-5" date="1412985600">- fix CVE-2014-3634
  resolves: #1149158</changelog>
</package>
<package pkgid="2ee309dadb65cc3e90885aa22f2fc84ce034d528" name="rsyslog5-mysql" arch="i386">
  <version epoch="0" ver="5.8.12" rel="5.el5_11"/>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 5.8.12-3" date="1343260800">- squash old changelog history related to rsyslog v3
  Resolves: #820396</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.12-4" date="1348444800">- add 'conflicts' on incompatible version of selinux-policy
  Resolves: #820396</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.12-5" date="1412985600">- fix CVE-2014-3634
  resolves: #1149158</changelog>
</package>
<package pkgid="bcc0fc4f4a916af5bc3a1a835fd2d9f5ec240dbb" name="rsyslog5-pgsql" arch="i386">
  <version epoch="0" ver="5.8.12" rel="5.el5_11"/>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 5.8.12-3" date="1343260800">- squash old changelog history related to rsyslog v3
  Resolves: #820396</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.12-4" date="1348444800">- add 'conflicts' on incompatible version of selinux-policy
  Resolves: #820396</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.12-5" date="1412985600">- fix CVE-2014-3634
  resolves: #1149158</changelog>
</package>
<package pkgid="0778d2006737df33451302da361fa86a786c15b9" name="rsyslog5-snmp" arch="i386">
  <version epoch="0" ver="5.8.12" rel="5.el5_11"/>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 5.8.12-3" date="1343260800">- squash old changelog history related to rsyslog v3
  Resolves: #820396</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.12-4" date="1348444800">- add 'conflicts' on incompatible version of selinux-policy
  Resolves: #820396</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.12-5" date="1412985600">- fix CVE-2014-3634
  resolves: #1149158</changelog>
</package>
<package pkgid="7ec0aea6778bc0ebc9e248e07c9880d1edf9ac88" name="ruby" arch="i386">
  <version epoch="0" ver="1.8.5" rel="19.el5_6.1"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_3.7" date="1245276000">- security fixes. (#505087)
- CVE-2007-1558: APOP password disclosure vulnerability.
- CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
- CVE-2009-1904: DoS vulnerability in BigDecimal.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_4.8" date="1260568800">- Fix a regression of the fix in BigDecimal that suppress the zero after
  the decimal point in Float. (#546245)</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-19.el5_6.1" date="1304373600">- Address CVE-2011-1004 "Symlink race condition by removing directory trees in
  fileutils module"
  * ruby-1.8.7-CVE-2011-1004.patch
- Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
  * ruby-1.8.7-CVE-2011-1005.patch
- Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
  * ruby-1.8.7-CVE-2011-0188.patch
- Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
  * ruby-1.8.7-CVE-2010-0541.patch
- Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
  * ruby-1.8.6-CVE-2009-4492.patch
- Resolves: rhbz#709957</changelog>
</package>
<package pkgid="5df32b71a7c9cd9cba3f7e68e07e3947c2e5c147" name="ruby" arch="i386">
  <version epoch="0" ver="1.8.5" rel="22.el5_7.1"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-20.1" date="1324591200">- Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
  attacks (oCERT-2011-003)"
  * ruby-1.8.7-CVE-2011-4815.patch
  - Resolves: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-21.1" date="1325541600">- Revert accidential move of tcl/tk libraries.
  - Related: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-22.1" date="1326837600">- Properly initialize the random number generator when forking new process
  * ruby-1.8.7-CVE-2011-3009.patch
  - Related: rhbz#768829</changelog>
</package>
<package pkgid="c700a266a0bc3bfcc0671210cf51a3f13d28d47d" name="ruby" arch="i386">
  <version epoch="0" ver="1.8.5" rel="27.el5"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-25" date="1340402400">- Resolve buffer overflow causing gem installation issues.
  * ruby-1.8.7-syck-avoid-buffer-overflow.patch
  - Resolves: rhbz#834381</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-26" date="1350597600">- $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
  * ruby-1.8.7-p371-CVE-2012-4481.patch
  - Resolves: rhbz#867750
- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-rb_open_file-should-check-NUL-in-path.patch
  - Resolves: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
</package>
<package pkgid="82ca31119d65f3808ed2b58170328a140d312646" name="ruby" arch="i386">
  <version epoch="0" ver="1.8.5" rel="29.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-28" date="1361916000">- Addresses entity expansion DoS vulnerability in REXML.
  * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
- Resolves: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
</package>
<package pkgid="23ee1aaff2dbb8a2f64aa35256af421bd6d8488b" name="ruby" arch="i386">
  <version epoch="0" ver="1.8.5" rel="31.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-30" date="1372456800">- hostname check bypassing vulnerability in SSL client.
  * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
  - Resolves: rhbz#979297</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-31" date="1373320800">- Fix regression introduced by CVE-2013-4073
  https://bugs.ruby-lang.org/issues/8575
  * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
  - Related: rhbz#979297</changelog>
</package>
<package pkgid="94de64fce8e85da8e447160ba2c814fafea8f9ec" name="ruby-devel" arch="i386">
  <version epoch="0" ver="1.8.5" rel="19.el5_6.1"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_3.7" date="1245276000">- security fixes. (#505087)
- CVE-2007-1558: APOP password disclosure vulnerability.
- CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
- CVE-2009-1904: DoS vulnerability in BigDecimal.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_4.8" date="1260568800">- Fix a regression of the fix in BigDecimal that suppress the zero after
  the decimal point in Float. (#546245)</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-19.el5_6.1" date="1304373600">- Address CVE-2011-1004 "Symlink race condition by removing directory trees in
  fileutils module"
  * ruby-1.8.7-CVE-2011-1004.patch
- Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
  * ruby-1.8.7-CVE-2011-1005.patch
- Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
  * ruby-1.8.7-CVE-2011-0188.patch
- Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
  * ruby-1.8.7-CVE-2010-0541.patch
- Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
  * ruby-1.8.6-CVE-2009-4492.patch
- Resolves: rhbz#709957</changelog>
</package>
<package pkgid="7857299e4bc315a6bb1492daceda94e7df6ee7d9" name="ruby-devel" arch="i386">
  <version epoch="0" ver="1.8.5" rel="22.el5_7.1"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-20.1" date="1324591200">- Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
  attacks (oCERT-2011-003)"
  * ruby-1.8.7-CVE-2011-4815.patch
  - Resolves: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-21.1" date="1325541600">- Revert accidential move of tcl/tk libraries.
  - Related: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-22.1" date="1326837600">- Properly initialize the random number generator when forking new process
  * ruby-1.8.7-CVE-2011-3009.patch
  - Related: rhbz#768829</changelog>
</package>
<package pkgid="20ee06fb043743def575d293cfe5f6017573889d" name="ruby-devel" arch="i386">
  <version epoch="0" ver="1.8.5" rel="27.el5"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-25" date="1340402400">- Resolve buffer overflow causing gem installation issues.
  * ruby-1.8.7-syck-avoid-buffer-overflow.patch
  - Resolves: rhbz#834381</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-26" date="1350597600">- $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
  * ruby-1.8.7-p371-CVE-2012-4481.patch
  - Resolves: rhbz#867750
- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-rb_open_file-should-check-NUL-in-path.patch
  - Resolves: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
</package>
<package pkgid="aa562d47a4cd8684a224fefe1ab65718b2ef787c" name="ruby-devel" arch="i386">
  <version epoch="0" ver="1.8.5" rel="29.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-28" date="1361916000">- Addresses entity expansion DoS vulnerability in REXML.
  * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
- Resolves: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
</package>
<package pkgid="ef2cb5c854470d6d83b3e20ec35a06b98e53efaa" name="ruby-devel" arch="i386">
  <version epoch="0" ver="1.8.5" rel="31.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-30" date="1372456800">- hostname check bypassing vulnerability in SSL client.
  * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
  - Resolves: rhbz#979297</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-31" date="1373320800">- Fix regression introduced by CVE-2013-4073
  https://bugs.ruby-lang.org/issues/8575
  * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
  - Related: rhbz#979297</changelog>
</package>
<package pkgid="b909371c049385d0454d4027c3923ea769fe4f4f" name="ruby-docs" arch="i386">
  <version epoch="0" ver="1.8.5" rel="19.el5_6.1"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_3.7" date="1245276000">- security fixes. (#505087)
- CVE-2007-1558: APOP password disclosure vulnerability.
- CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
- CVE-2009-1904: DoS vulnerability in BigDecimal.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_4.8" date="1260568800">- Fix a regression of the fix in BigDecimal that suppress the zero after
  the decimal point in Float. (#546245)</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-19.el5_6.1" date="1304373600">- Address CVE-2011-1004 "Symlink race condition by removing directory trees in
  fileutils module"
  * ruby-1.8.7-CVE-2011-1004.patch
- Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
  * ruby-1.8.7-CVE-2011-1005.patch
- Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
  * ruby-1.8.7-CVE-2011-0188.patch
- Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
  * ruby-1.8.7-CVE-2010-0541.patch
- Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
  * ruby-1.8.6-CVE-2009-4492.patch
- Resolves: rhbz#709957</changelog>
</package>
<package pkgid="800032734acda0f44ae7a11597c064c3888fbd92" name="ruby-docs" arch="i386">
  <version epoch="0" ver="1.8.5" rel="22.el5_7.1"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-20.1" date="1324591200">- Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
  attacks (oCERT-2011-003)"
  * ruby-1.8.7-CVE-2011-4815.patch
  - Resolves: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-21.1" date="1325541600">- Revert accidential move of tcl/tk libraries.
  - Related: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-22.1" date="1326837600">- Properly initialize the random number generator when forking new process
  * ruby-1.8.7-CVE-2011-3009.patch
  - Related: rhbz#768829</changelog>
</package>
<package pkgid="6de0e35151a9f18ab1022fc1c0aa08d8db5b3eab" name="ruby-docs" arch="i386">
  <version epoch="0" ver="1.8.5" rel="27.el5"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-25" date="1340402400">- Resolve buffer overflow causing gem installation issues.
  * ruby-1.8.7-syck-avoid-buffer-overflow.patch
  - Resolves: rhbz#834381</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-26" date="1350597600">- $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
  * ruby-1.8.7-p371-CVE-2012-4481.patch
  - Resolves: rhbz#867750
- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-rb_open_file-should-check-NUL-in-path.patch
  - Resolves: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
</package>
<package pkgid="8c4736360cd859085f465196fe5f58f04312f3b1" name="ruby-docs" arch="i386">
  <version epoch="0" ver="1.8.5" rel="29.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-28" date="1361916000">- Addresses entity expansion DoS vulnerability in REXML.
  * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
- Resolves: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
</package>
<package pkgid="89b1ba8aae56e820445287e81c991510fda5b54b" name="ruby-docs" arch="i386">
  <version epoch="0" ver="1.8.5" rel="31.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-30" date="1372456800">- hostname check bypassing vulnerability in SSL client.
  * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
  - Resolves: rhbz#979297</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-31" date="1373320800">- Fix regression introduced by CVE-2013-4073
  https://bugs.ruby-lang.org/issues/8575
  * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
  - Related: rhbz#979297</changelog>
</package>
<package pkgid="570c5a45e13b068f4b48dcafcb979864660532c3" name="ruby-irb" arch="i386">
  <version epoch="0" ver="1.8.5" rel="19.el5_6.1"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_3.7" date="1245276000">- security fixes. (#505087)
- CVE-2007-1558: APOP password disclosure vulnerability.
- CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
- CVE-2009-1904: DoS vulnerability in BigDecimal.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_4.8" date="1260568800">- Fix a regression of the fix in BigDecimal that suppress the zero after
  the decimal point in Float. (#546245)</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-19.el5_6.1" date="1304373600">- Address CVE-2011-1004 "Symlink race condition by removing directory trees in
  fileutils module"
  * ruby-1.8.7-CVE-2011-1004.patch
- Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
  * ruby-1.8.7-CVE-2011-1005.patch
- Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
  * ruby-1.8.7-CVE-2011-0188.patch
- Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
  * ruby-1.8.7-CVE-2010-0541.patch
- Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
  * ruby-1.8.6-CVE-2009-4492.patch
- Resolves: rhbz#709957</changelog>
</package>
<package pkgid="5257da6b542f916565d1d58e414d56382a01a8f8" name="ruby-irb" arch="i386">
  <version epoch="0" ver="1.8.5" rel="22.el5_7.1"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-20.1" date="1324591200">- Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
  attacks (oCERT-2011-003)"
  * ruby-1.8.7-CVE-2011-4815.patch
  - Resolves: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-21.1" date="1325541600">- Revert accidential move of tcl/tk libraries.
  - Related: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-22.1" date="1326837600">- Properly initialize the random number generator when forking new process
  * ruby-1.8.7-CVE-2011-3009.patch
  - Related: rhbz#768829</changelog>
</package>
<package pkgid="22b1d49aae4cafa95de40edd5370f65ccf0ae118" name="ruby-irb" arch="i386">
  <version epoch="0" ver="1.8.5" rel="27.el5"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-25" date="1340402400">- Resolve buffer overflow causing gem installation issues.
  * ruby-1.8.7-syck-avoid-buffer-overflow.patch
  - Resolves: rhbz#834381</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-26" date="1350597600">- $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
  * ruby-1.8.7-p371-CVE-2012-4481.patch
  - Resolves: rhbz#867750
- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-rb_open_file-should-check-NUL-in-path.patch
  - Resolves: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
</package>
<package pkgid="b221f86d0cd6940e5d8334993f3feebdf931536b" name="ruby-irb" arch="i386">
  <version epoch="0" ver="1.8.5" rel="29.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-28" date="1361916000">- Addresses entity expansion DoS vulnerability in REXML.
  * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
- Resolves: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
</package>
<package pkgid="6e73326c632927268abb4bcdab89c70ed921c237" name="ruby-irb" arch="i386">
  <version epoch="0" ver="1.8.5" rel="31.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-30" date="1372456800">- hostname check bypassing vulnerability in SSL client.
  * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
  - Resolves: rhbz#979297</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-31" date="1373320800">- Fix regression introduced by CVE-2013-4073
  https://bugs.ruby-lang.org/issues/8575
  * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
  - Related: rhbz#979297</changelog>
</package>
<package pkgid="0a165258955f5206be8ed47b3d0e9b44dccb6b9b" name="ruby-libs" arch="i386">
  <version epoch="0" ver="1.8.5" rel="19.el5_6.1"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_3.7" date="1245276000">- security fixes. (#505087)
- CVE-2007-1558: APOP password disclosure vulnerability.
- CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
- CVE-2009-1904: DoS vulnerability in BigDecimal.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_4.8" date="1260568800">- Fix a regression of the fix in BigDecimal that suppress the zero after
  the decimal point in Float. (#546245)</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-19.el5_6.1" date="1304373600">- Address CVE-2011-1004 "Symlink race condition by removing directory trees in
  fileutils module"
  * ruby-1.8.7-CVE-2011-1004.patch
- Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
  * ruby-1.8.7-CVE-2011-1005.patch
- Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
  * ruby-1.8.7-CVE-2011-0188.patch
- Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
  * ruby-1.8.7-CVE-2010-0541.patch
- Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
  * ruby-1.8.6-CVE-2009-4492.patch
- Resolves: rhbz#709957</changelog>
</package>
<package pkgid="f26ccc511f301858b08fa753eac540fe06181ee2" name="ruby-libs" arch="i386">
  <version epoch="0" ver="1.8.5" rel="22.el5_7.1"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-20.1" date="1324591200">- Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
  attacks (oCERT-2011-003)"
  * ruby-1.8.7-CVE-2011-4815.patch
  - Resolves: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-21.1" date="1325541600">- Revert accidential move of tcl/tk libraries.
  - Related: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-22.1" date="1326837600">- Properly initialize the random number generator when forking new process
  * ruby-1.8.7-CVE-2011-3009.patch
  - Related: rhbz#768829</changelog>
</package>
<package pkgid="4014965037d0fad91c06f25e2f5007a0fdcba61e" name="ruby-libs" arch="i386">
  <version epoch="0" ver="1.8.5" rel="27.el5"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-25" date="1340402400">- Resolve buffer overflow causing gem installation issues.
  * ruby-1.8.7-syck-avoid-buffer-overflow.patch
  - Resolves: rhbz#834381</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-26" date="1350597600">- $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
  * ruby-1.8.7-p371-CVE-2012-4481.patch
  - Resolves: rhbz#867750
- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-rb_open_file-should-check-NUL-in-path.patch
  - Resolves: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
</package>
<package pkgid="f6d2fb153553499026f2fef98a61e5e165a92ec0" name="ruby-libs" arch="i386">
  <version epoch="0" ver="1.8.5" rel="29.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-28" date="1361916000">- Addresses entity expansion DoS vulnerability in REXML.
  * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
- Resolves: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
</package>
<package pkgid="5190ced8789222988c05d5ab25951450b98c1e37" name="ruby-libs" arch="i386">
  <version epoch="0" ver="1.8.5" rel="31.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-30" date="1372456800">- hostname check bypassing vulnerability in SSL client.
  * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
  - Resolves: rhbz#979297</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-31" date="1373320800">- Fix regression introduced by CVE-2013-4073
  https://bugs.ruby-lang.org/issues/8575
  * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
  - Related: rhbz#979297</changelog>
</package>
<package pkgid="b4d688e321dced89949776fc0981e4dad2882494" name="ruby-mode" arch="i386">
  <version epoch="0" ver="1.8.5" rel="19.el5_6.1"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_3.7" date="1245276000">- security fixes. (#505087)
- CVE-2007-1558: APOP password disclosure vulnerability.
- CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
- CVE-2009-1904: DoS vulnerability in BigDecimal.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_4.8" date="1260568800">- Fix a regression of the fix in BigDecimal that suppress the zero after
  the decimal point in Float. (#546245)</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-19.el5_6.1" date="1304373600">- Address CVE-2011-1004 "Symlink race condition by removing directory trees in
  fileutils module"
  * ruby-1.8.7-CVE-2011-1004.patch
- Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
  * ruby-1.8.7-CVE-2011-1005.patch
- Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
  * ruby-1.8.7-CVE-2011-0188.patch
- Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
  * ruby-1.8.7-CVE-2010-0541.patch
- Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
  * ruby-1.8.6-CVE-2009-4492.patch
- Resolves: rhbz#709957</changelog>
</package>
<package pkgid="db98618af8f24fef8b30f09f32291efd58184b47" name="ruby-mode" arch="i386">
  <version epoch="0" ver="1.8.5" rel="22.el5_7.1"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-20.1" date="1324591200">- Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
  attacks (oCERT-2011-003)"
  * ruby-1.8.7-CVE-2011-4815.patch
  - Resolves: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-21.1" date="1325541600">- Revert accidential move of tcl/tk libraries.
  - Related: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-22.1" date="1326837600">- Properly initialize the random number generator when forking new process
  * ruby-1.8.7-CVE-2011-3009.patch
  - Related: rhbz#768829</changelog>
</package>
<package pkgid="9ebc8a5d9ca71eaf0cc0387746424416a6df4acf" name="ruby-mode" arch="i386">
  <version epoch="0" ver="1.8.5" rel="27.el5"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-25" date="1340402400">- Resolve buffer overflow causing gem installation issues.
  * ruby-1.8.7-syck-avoid-buffer-overflow.patch
  - Resolves: rhbz#834381</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-26" date="1350597600">- $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
  * ruby-1.8.7-p371-CVE-2012-4481.patch
  - Resolves: rhbz#867750
- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-rb_open_file-should-check-NUL-in-path.patch
  - Resolves: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
</package>
<package pkgid="584435382bbb57e3ec469a872adc831b0bcc0b2b" name="ruby-mode" arch="i386">
  <version epoch="0" ver="1.8.5" rel="29.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-28" date="1361916000">- Addresses entity expansion DoS vulnerability in REXML.
  * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
- Resolves: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
</package>
<package pkgid="1f68924472b729cc5e3404658a994de03a1c3f6d" name="ruby-mode" arch="i386">
  <version epoch="0" ver="1.8.5" rel="31.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-30" date="1372456800">- hostname check bypassing vulnerability in SSL client.
  * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
  - Resolves: rhbz#979297</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-31" date="1373320800">- Fix regression introduced by CVE-2013-4073
  https://bugs.ruby-lang.org/issues/8575
  * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
  - Related: rhbz#979297</changelog>
</package>
<package pkgid="a03965c237b40008a2a7a129b8a7218b506eaaa0" name="ruby-rdoc" arch="i386">
  <version epoch="0" ver="1.8.5" rel="19.el5_6.1"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_3.7" date="1245276000">- security fixes. (#505087)
- CVE-2007-1558: APOP password disclosure vulnerability.
- CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
- CVE-2009-1904: DoS vulnerability in BigDecimal.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_4.8" date="1260568800">- Fix a regression of the fix in BigDecimal that suppress the zero after
  the decimal point in Float. (#546245)</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-19.el5_6.1" date="1304373600">- Address CVE-2011-1004 "Symlink race condition by removing directory trees in
  fileutils module"
  * ruby-1.8.7-CVE-2011-1004.patch
- Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
  * ruby-1.8.7-CVE-2011-1005.patch
- Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
  * ruby-1.8.7-CVE-2011-0188.patch
- Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
  * ruby-1.8.7-CVE-2010-0541.patch
- Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
  * ruby-1.8.6-CVE-2009-4492.patch
- Resolves: rhbz#709957</changelog>
</package>
<package pkgid="9fdba7e94c784f560d3f34cd174186461728dee4" name="ruby-rdoc" arch="i386">
  <version epoch="0" ver="1.8.5" rel="22.el5_7.1"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-20.1" date="1324591200">- Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
  attacks (oCERT-2011-003)"
  * ruby-1.8.7-CVE-2011-4815.patch
  - Resolves: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-21.1" date="1325541600">- Revert accidential move of tcl/tk libraries.
  - Related: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-22.1" date="1326837600">- Properly initialize the random number generator when forking new process
  * ruby-1.8.7-CVE-2011-3009.patch
  - Related: rhbz#768829</changelog>
</package>
<package pkgid="dc894fd2085f963bf61851693abb269d339456cc" name="ruby-rdoc" arch="i386">
  <version epoch="0" ver="1.8.5" rel="27.el5"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-25" date="1340402400">- Resolve buffer overflow causing gem installation issues.
  * ruby-1.8.7-syck-avoid-buffer-overflow.patch
  - Resolves: rhbz#834381</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-26" date="1350597600">- $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
  * ruby-1.8.7-p371-CVE-2012-4481.patch
  - Resolves: rhbz#867750
- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-rb_open_file-should-check-NUL-in-path.patch
  - Resolves: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
</package>
<package pkgid="8c8ef482ea5f7de05de12ce4ad5a0702afe51149" name="ruby-rdoc" arch="i386">
  <version epoch="0" ver="1.8.5" rel="29.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-28" date="1361916000">- Addresses entity expansion DoS vulnerability in REXML.
  * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
- Resolves: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
</package>
<package pkgid="239add2bc422b0e8189a507b1c4a1ae2599965fc" name="ruby-rdoc" arch="i386">
  <version epoch="0" ver="1.8.5" rel="31.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-30" date="1372456800">- hostname check bypassing vulnerability in SSL client.
  * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
  - Resolves: rhbz#979297</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-31" date="1373320800">- Fix regression introduced by CVE-2013-4073
  https://bugs.ruby-lang.org/issues/8575
  * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
  - Related: rhbz#979297</changelog>
</package>
<package pkgid="b4214ff5297a8b5657046ea041701ae3d1296054" name="ruby-ri" arch="i386">
  <version epoch="0" ver="1.8.5" rel="19.el5_6.1"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_3.7" date="1245276000">- security fixes. (#505087)
- CVE-2007-1558: APOP password disclosure vulnerability.
- CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
- CVE-2009-1904: DoS vulnerability in BigDecimal.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_4.8" date="1260568800">- Fix a regression of the fix in BigDecimal that suppress the zero after
  the decimal point in Float. (#546245)</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-19.el5_6.1" date="1304373600">- Address CVE-2011-1004 "Symlink race condition by removing directory trees in
  fileutils module"
  * ruby-1.8.7-CVE-2011-1004.patch
- Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
  * ruby-1.8.7-CVE-2011-1005.patch
- Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
  * ruby-1.8.7-CVE-2011-0188.patch
- Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
  * ruby-1.8.7-CVE-2010-0541.patch
- Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
  * ruby-1.8.6-CVE-2009-4492.patch
- Resolves: rhbz#709957</changelog>
</package>
<package pkgid="5cbe130b1cc05e15e5809d07567f1fe24a676fa2" name="ruby-ri" arch="i386">
  <version epoch="0" ver="1.8.5" rel="22.el5_7.1"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-20.1" date="1324591200">- Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
  attacks (oCERT-2011-003)"
  * ruby-1.8.7-CVE-2011-4815.patch
  - Resolves: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-21.1" date="1325541600">- Revert accidential move of tcl/tk libraries.
  - Related: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-22.1" date="1326837600">- Properly initialize the random number generator when forking new process
  * ruby-1.8.7-CVE-2011-3009.patch
  - Related: rhbz#768829</changelog>
</package>
<package pkgid="8b4ad8508ac5c706ee5b893a5ec689e3d2274339" name="ruby-ri" arch="i386">
  <version epoch="0" ver="1.8.5" rel="27.el5"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-25" date="1340402400">- Resolve buffer overflow causing gem installation issues.
  * ruby-1.8.7-syck-avoid-buffer-overflow.patch
  - Resolves: rhbz#834381</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-26" date="1350597600">- $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
  * ruby-1.8.7-p371-CVE-2012-4481.patch
  - Resolves: rhbz#867750
- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-rb_open_file-should-check-NUL-in-path.patch
  - Resolves: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
</package>
<package pkgid="34aee2083a2b20bf02bf15a87648c451f8946a7d" name="ruby-ri" arch="i386">
  <version epoch="0" ver="1.8.5" rel="29.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-28" date="1361916000">- Addresses entity expansion DoS vulnerability in REXML.
  * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
- Resolves: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
</package>
<package pkgid="c4787203e615fe6e5c19dd3e964b2440ba80adfd" name="ruby-ri" arch="i386">
  <version epoch="0" ver="1.8.5" rel="31.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-30" date="1372456800">- hostname check bypassing vulnerability in SSL client.
  * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
  - Resolves: rhbz#979297</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-31" date="1373320800">- Fix regression introduced by CVE-2013-4073
  https://bugs.ruby-lang.org/issues/8575
  * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
  - Related: rhbz#979297</changelog>
</package>
<package pkgid="96e73bf267dc1dcbbf9265501edfe2ee55335b7b" name="ruby-tcltk" arch="i386">
  <version epoch="0" ver="1.8.5" rel="19.el5_6.1"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_3.7" date="1245276000">- security fixes. (#505087)
- CVE-2007-1558: APOP password disclosure vulnerability.
- CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
- CVE-2009-1904: DoS vulnerability in BigDecimal.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.8.5-5.el5_4.8" date="1260568800">- Fix a regression of the fix in BigDecimal that suppress the zero after
  the decimal point in Float. (#546245)</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-19.el5_6.1" date="1304373600">- Address CVE-2011-1004 "Symlink race condition by removing directory trees in
  fileutils module"
  * ruby-1.8.7-CVE-2011-1004.patch
- Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
  * ruby-1.8.7-CVE-2011-1005.patch
- Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
  * ruby-1.8.7-CVE-2011-0188.patch
- Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
  * ruby-1.8.7-CVE-2010-0541.patch
- Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
  * ruby-1.8.6-CVE-2009-4492.patch
- Resolves: rhbz#709957</changelog>
</package>
<package pkgid="ea3db1c308c6d402b5b9f39d1b4e521ad85b75d7" name="ruby-tcltk" arch="i386">
  <version epoch="0" ver="1.8.5" rel="22.el5_7.1"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-20.1" date="1324591200">- Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
  attacks (oCERT-2011-003)"
  * ruby-1.8.7-CVE-2011-4815.patch
  - Resolves: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-21.1" date="1325541600">- Revert accidential move of tcl/tk libraries.
  - Related: rhbz#768829</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-22.1" date="1326837600">- Properly initialize the random number generator when forking new process
  * ruby-1.8.7-CVE-2011-3009.patch
  - Related: rhbz#768829</changelog>
</package>
<package pkgid="4386143eed677f2c7d9b2b4eac8df7bc3fba1454" name="ruby-tcltk" arch="i386">
  <version epoch="0" ver="1.8.5" rel="27.el5"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-25" date="1340402400">- Resolve buffer overflow causing gem installation issues.
  * ruby-1.8.7-syck-avoid-buffer-overflow.patch
  - Resolves: rhbz#834381</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-26" date="1350597600">- $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
  * ruby-1.8.7-p371-CVE-2012-4481.patch
  - Resolves: rhbz#867750
- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-rb_open_file-should-check-NUL-in-path.patch
  - Resolves: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
</package>
<package pkgid="c9265613007173387595aa2ffe789da7644a14ec" name="ruby-tcltk" arch="i386">
  <version epoch="0" ver="1.8.5" rel="29.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-27" date="1351202400">- unintentional file creation caused by inserting an illegal NUL character
  * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
  - Related: rhbz#867750</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-28" date="1361916000">- Addresses entity expansion DoS vulnerability in REXML.
  * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
- Resolves: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
</package>
<package pkgid="2ce5518955c5b253f401a48e81959c8e6fa6c796" name="ruby-tcltk" arch="i386">
  <version epoch="0" ver="1.8.5" rel="31.el5_9"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-29" date="1362088800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-30" date="1372456800">- hostname check bypassing vulnerability in SSL client.
  * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
  - Resolves: rhbz#979297</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.5-31" date="1373320800">- Fix regression introduced by CVE-2013-4073
  https://bugs.ruby-lang.org/issues/8575
  * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
  - Related: rhbz#979297</changelog>
</package>
<package pkgid="ea01cf359685aa64444476f1a4cee3190cbc3ae4" name="samba" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.29.el5_7.4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.29.el5.2" date="1298066400">- Security Release, fixes CVE-2011-0719
- resolves: #678330</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.0.33-3.29.el5.3" date="1311631200">- Security Release, fixes CVE-2010-0547, CVE-2010-0787, CVE-2011-2694,
  CVE-2011-2522, CVE-2011-1678
- resolves: #722552</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.0.33-3.29.el5.4" date="1311976800">- Security Release, Add fix also for CVE-2011-2724
- related: #722552</changelog>
</package>
<package pkgid="d9ced162cac90c41ed1cd4473f91e8e4ff560c84" name="samba" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.38.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.36.el5" date="1326837600">- Security Release, fixes CVE-2010-0926
- resolves: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.37.el5" date="1327010400">- Regenerate manpage for "wide links" and "unix extensions" sections
- related: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329861600">- Security release, fixes CVE-2012-0870
- resolves: #795718</changelog>
</package>
<package pkgid="8702465bde6682cfb8c7f4207b24e63422f8f621" name="samba" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.39.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.37.el5" date="1327010400">- Regenerate manpage for "wide links" and "unix extensions" sections
- related: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329861600">- Security release, fixes CVE-2012-0870
- resolves: #795718</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804638</changelog>
</package>
<package pkgid="488579b012d5bc9bda868c56aed0ecb621a99ddf" name="samba" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.40.el5_10"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329868800">- Security release, fixes CVE-2012-0870
- resolves: #795719</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332288000">- Security Release, fixes CVE-2012-1182
- resolves: #804639</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; 3.0.33-3.40.el5" date="1394236800">- Security Release, fixes CVE-2013-0213 and CVE-2013-4124
- resolves: #1073350</changelog>
</package>
<package pkgid="3390f6846298eae85a0ff2be84b7ede940afdd89" name="samba" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.41.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332288000">- Security Release, fixes CVE-2012-1182
- resolves: #804639</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; 3.0.33-3.40.el5" date="1394236800">- Security Release, fixes CVE-2013-0213 and CVE-2013-4124
- resolves: #1073351</changelog>
  <changelog author="- Simo Sorce &lt;simo@redhat.com&gt; 3.0.33-3.41.el5" date="1460419200">- Security Release "BadLock"
- resolves: CVE-2016-2110
- resolves: CVE-2016-2111</changelog>
</package>
<package pkgid="48d5407f23f4df248971807b65ae0b715524e442" name="samba-client" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.29.el5_7.4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.29.el5.2" date="1298066400">- Security Release, fixes CVE-2011-0719
- resolves: #678330</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.0.33-3.29.el5.3" date="1311631200">- Security Release, fixes CVE-2010-0547, CVE-2010-0787, CVE-2011-2694,
  CVE-2011-2522, CVE-2011-1678
- resolves: #722552</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.0.33-3.29.el5.4" date="1311976800">- Security Release, Add fix also for CVE-2011-2724
- related: #722552</changelog>
</package>
<package pkgid="9374e76380f9822a7b5ef1da0c83a052c5f1bf01" name="samba-client" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.38.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.36.el5" date="1326837600">- Security Release, fixes CVE-2010-0926
- resolves: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.37.el5" date="1327010400">- Regenerate manpage for "wide links" and "unix extensions" sections
- related: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329861600">- Security release, fixes CVE-2012-0870
- resolves: #795718</changelog>
</package>
<package pkgid="e00bf446b6d5fd4e26d3db9c3f551a9bd752946f" name="samba-client" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.39.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.37.el5" date="1327010400">- Regenerate manpage for "wide links" and "unix extensions" sections
- related: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329861600">- Security release, fixes CVE-2012-0870
- resolves: #795718</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804638</changelog>
</package>
<package pkgid="91b388b182bffea0d4661b395b1b6c4670cad591" name="samba-client" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.40.el5_10"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329868800">- Security release, fixes CVE-2012-0870
- resolves: #795719</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332288000">- Security Release, fixes CVE-2012-1182
- resolves: #804639</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; 3.0.33-3.40.el5" date="1394236800">- Security Release, fixes CVE-2013-0213 and CVE-2013-4124
- resolves: #1073350</changelog>
</package>
<package pkgid="0d43f36ba6f774e091958d393f875b70addc12c8" name="samba-client" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.41.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332288000">- Security Release, fixes CVE-2012-1182
- resolves: #804639</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; 3.0.33-3.40.el5" date="1394236800">- Security Release, fixes CVE-2013-0213 and CVE-2013-4124
- resolves: #1073351</changelog>
  <changelog author="- Simo Sorce &lt;simo@redhat.com&gt; 3.0.33-3.41.el5" date="1460419200">- Security Release "BadLock"
- resolves: CVE-2016-2110
- resolves: CVE-2016-2111</changelog>
</package>
<package pkgid="7a832931917d293bc24979a236eeecfbb73b430a" name="samba-common" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.29.el5_7.4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.29.el5.2" date="1298066400">- Security Release, fixes CVE-2011-0719
- resolves: #678330</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.0.33-3.29.el5.3" date="1311631200">- Security Release, fixes CVE-2010-0547, CVE-2010-0787, CVE-2011-2694,
  CVE-2011-2522, CVE-2011-1678
- resolves: #722552</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.0.33-3.29.el5.4" date="1311976800">- Security Release, Add fix also for CVE-2011-2724
- related: #722552</changelog>
</package>
<package pkgid="938eb11937bb099f64dad01c9603d37599ea0468" name="samba-common" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.38.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.36.el5" date="1326837600">- Security Release, fixes CVE-2010-0926
- resolves: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.37.el5" date="1327010400">- Regenerate manpage for "wide links" and "unix extensions" sections
- related: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329861600">- Security release, fixes CVE-2012-0870
- resolves: #795718</changelog>
</package>
<package pkgid="7a3a470a2ba400048bd6ef27915c1b49ad3fcc52" name="samba-common" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.39.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.37.el5" date="1327010400">- Regenerate manpage for "wide links" and "unix extensions" sections
- related: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329861600">- Security release, fixes CVE-2012-0870
- resolves: #795718</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804638</changelog>
</package>
<package pkgid="504615361eef1a6f873fb6e921fae4a91c1662b6" name="samba-common" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.40.el5_10"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329868800">- Security release, fixes CVE-2012-0870
- resolves: #795719</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332288000">- Security Release, fixes CVE-2012-1182
- resolves: #804639</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; 3.0.33-3.40.el5" date="1394236800">- Security Release, fixes CVE-2013-0213 and CVE-2013-4124
- resolves: #1073350</changelog>
</package>
<package pkgid="2d210f5711de945c58ecc51ffe8104cf9689a8f0" name="samba-common" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.41.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332288000">- Security Release, fixes CVE-2012-1182
- resolves: #804639</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; 3.0.33-3.40.el5" date="1394236800">- Security Release, fixes CVE-2013-0213 and CVE-2013-4124
- resolves: #1073351</changelog>
  <changelog author="- Simo Sorce &lt;simo@redhat.com&gt; 3.0.33-3.41.el5" date="1460419200">- Security Release "BadLock"
- resolves: CVE-2016-2110
- resolves: CVE-2016-2111</changelog>
</package>
<package pkgid="a9157625427ba906b3dc4cbe45575cf6b43acb8e" name="samba-swat" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.29.el5_7.4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.29.el5.2" date="1298066400">- Security Release, fixes CVE-2011-0719
- resolves: #678330</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.0.33-3.29.el5.3" date="1311631200">- Security Release, fixes CVE-2010-0547, CVE-2010-0787, CVE-2011-2694,
  CVE-2011-2522, CVE-2011-1678
- resolves: #722552</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.0.33-3.29.el5.4" date="1311976800">- Security Release, Add fix also for CVE-2011-2724
- related: #722552</changelog>
</package>
<package pkgid="315c0794aa0e625c33a2b35defbcdbf541402097" name="samba-swat" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.38.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.36.el5" date="1326837600">- Security Release, fixes CVE-2010-0926
- resolves: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.37.el5" date="1327010400">- Regenerate manpage for "wide links" and "unix extensions" sections
- related: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329861600">- Security release, fixes CVE-2012-0870
- resolves: #795718</changelog>
</package>
<package pkgid="854074a590cbd7a5091cea68d553b72d74ca89c4" name="samba-swat" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.39.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.37.el5" date="1327010400">- Regenerate manpage for "wide links" and "unix extensions" sections
- related: #722553</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329861600">- Security release, fixes CVE-2012-0870
- resolves: #795718</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804638</changelog>
</package>
<package pkgid="d6ad9e628241ba09c70e13711d18e9ef825f04f0" name="samba-swat" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.40.el5_10"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.38.el5" date="1329868800">- Security release, fixes CVE-2012-0870
- resolves: #795719</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332288000">- Security Release, fixes CVE-2012-1182
- resolves: #804639</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; 3.0.33-3.40.el5" date="1394236800">- Security Release, fixes CVE-2013-0213 and CVE-2013-4124
- resolves: #1073350</changelog>
</package>
<package pkgid="f77e5598844aa2a2e80f8aba9694ad0b606e50c0" name="samba-swat" arch="i386">
  <version epoch="0" ver="3.0.33" rel="3.41.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; 3.0.33-3.39.el5" date="1332288000">- Security Release, fixes CVE-2012-1182
- resolves: #804639</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; 3.0.33-3.40.el5" date="1394236800">- Security Release, fixes CVE-2013-0213 and CVE-2013-4124
- resolves: #1073351</changelog>
  <changelog author="- Simo Sorce &lt;simo@redhat.com&gt; 3.0.33-3.41.el5" date="1460419200">- Security Release "BadLock"
- resolves: CVE-2016-2110
- resolves: CVE-2016-2111</changelog>
</package>
<package pkgid="1e18ec03ecf96747e15203ee4578fb4888928565" name="samba3x" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.108.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.106" date="1325628000">- Document -k option in the 'net' manpage
- resolves: #771375</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
</package>
<package pkgid="57e7393f4a26ca61fd9129248f8728a2f98e9c94" name="samba3x" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.109.el5_8"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.109" date="1335391200">- Security Release, fixes CVE-2012-2111
- resolves: #815686</changelog>
</package>
<package pkgid="de2a09ba0dbcc3b65bb291ba524a4b8abb33ba8b" name="samba3x" arch="i386">
  <version epoch="0" ver="3.5.4" rel="0.83.el5_7.2"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.4-0.83" date="1309384800">- Fix support for old samba 3.0 domain controllers
- resolves: #716961</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.1" date="1311631200">- Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678
- resolves: #722555</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.2" date="1311976800">- Security Release, add fix for CVE-2011-2724
- related: #722555</changelog>
</package>
<package pkgid="a9f3fccc70b416d81f3a67713f3dca9926812d77" name="samba3x" arch="i386">
  <version epoch="0" ver="3.6.23" rel="12.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-10" date="1460160000">- resolves: #1322685 - Fix CVE-2015-5370
- resolves: #1322685 - Fix CVE-2016-2110
- resolves: #1322685 - Fix CVE-2016-2111
- resolves: #1322685 - Fix CVE-2016-2112
- resolves: #1322685 - Fix CVE-2016-2115
- resolves: #1322685 - Fix CVE-2016-2118 (Known as Badlock)</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-11" date="1460419200">- related: #1322685 - Update CVE patchset</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-12" date="1460505600">- related: #1322685 - Update CVE patchset</changelog>
</package>
<package pkgid="f5a84d2cbcf45b982bac21f7a7796b35b91363fc" name="samba3x" arch="i386">
  <version epoch="0" ver="3.6.23" rel="9.el5_11"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-7" date="1408665600">- resolves: #1132425 - Fix dropbox share.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-8" date="1423785600">- resolves: #1191608 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-9" date="1424131200">- related: #1191608 - Update patchset for CVE-2015-0240.</changelog>
</package>
<package pkgid="a2ce664fa34ab74fcab168589583b98987856c4b" name="samba3x" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.136.el5"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.134" date="1371513600">- Check for system libtevent and require version 0.9.18.
- Use tevent epoll backend in winbind.
- resolves: #869295</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.135" date="1373414400">- Fix PIDL parsing with newer versions of gcc.
- Fix dereferencing a unique pointer in the WKSSVC server.
- resolves: #982484</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
</package>
<package pkgid="69b5f6144227db6885ac100f2edb744ce830dd38" name="samba3x" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.138.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
</package>
<package pkgid="281061e4cf0171f361feaa2b8a839cf680513a5b" name="samba3x" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.139.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
</package>
<package pkgid="3bd8f4e3878d395188e56699064342bfaaf8559e" name="samba3x" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.140.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.6-0.140" date="1402531200">- resolves: #1112150 - CVE-2014-0244: DoS in nmbd.
- resolves: #1112150 - CVE-2014-3493: DoS in smbd with unicode path names.</changelog>
</package>
<package pkgid="80072f55bcb7084ed1ea15cfd5f4c010d9ef276e" name="samba3x-client" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.108.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.106" date="1325628000">- Document -k option in the 'net' manpage
- resolves: #771375</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
</package>
<package pkgid="0059f2980c849e53adcd9859e7539671e813d18d" name="samba3x-client" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.109.el5_8"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.109" date="1335391200">- Security Release, fixes CVE-2012-2111
- resolves: #815686</changelog>
</package>
<package pkgid="046254ad30a59fd675494597c96a87f0a8114f13" name="samba3x-client" arch="i386">
  <version epoch="0" ver="3.5.4" rel="0.83.el5_7.2"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.4-0.83" date="1309384800">- Fix support for old samba 3.0 domain controllers
- resolves: #716961</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.1" date="1311631200">- Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678
- resolves: #722555</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.2" date="1311976800">- Security Release, add fix for CVE-2011-2724
- related: #722555</changelog>
</package>
<package pkgid="99817317d0d816ac4a82392f51ba78428bb3d8e2" name="samba3x-client" arch="i386">
  <version epoch="0" ver="3.6.23" rel="12.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-10" date="1460160000">- resolves: #1322685 - Fix CVE-2015-5370
- resolves: #1322685 - Fix CVE-2016-2110
- resolves: #1322685 - Fix CVE-2016-2111
- resolves: #1322685 - Fix CVE-2016-2112
- resolves: #1322685 - Fix CVE-2016-2115
- resolves: #1322685 - Fix CVE-2016-2118 (Known as Badlock)</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-11" date="1460419200">- related: #1322685 - Update CVE patchset</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-12" date="1460505600">- related: #1322685 - Update CVE patchset</changelog>
</package>
<package pkgid="d4c7f67df0e6babb996821870b8f30c9f858cf20" name="samba3x-client" arch="i386">
  <version epoch="0" ver="3.6.23" rel="9.el5_11"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-7" date="1408665600">- resolves: #1132425 - Fix dropbox share.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-8" date="1423785600">- resolves: #1191608 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-9" date="1424131200">- related: #1191608 - Update patchset for CVE-2015-0240.</changelog>
</package>
<package pkgid="63c2e98a458e2c24362b284c15cbc5283f92dec9" name="samba3x-client" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.136.el5"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.134" date="1371513600">- Check for system libtevent and require version 0.9.18.
- Use tevent epoll backend in winbind.
- resolves: #869295</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.135" date="1373414400">- Fix PIDL parsing with newer versions of gcc.
- Fix dereferencing a unique pointer in the WKSSVC server.
- resolves: #982484</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
</package>
<package pkgid="844b908654c292451eac80562ce6df988e8d66d5" name="samba3x-client" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.138.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
</package>
<package pkgid="acb8f1743411131b750f3dd7dd9fdb02f4c44229" name="samba3x-client" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.139.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
</package>
<package pkgid="21bc4338b153d7ce32af88078c37ad518d74b0d4" name="samba3x-client" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.140.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.6-0.140" date="1402531200">- resolves: #1112150 - CVE-2014-0244: DoS in nmbd.
- resolves: #1112150 - CVE-2014-3493: DoS in smbd with unicode path names.</changelog>
</package>
<package pkgid="74782452be333c476d1e734283a274620a09c375" name="samba3x-common" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.108.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.106" date="1325628000">- Document -k option in the 'net' manpage
- resolves: #771375</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
</package>
<package pkgid="6a566483966345e4a45f9b1294ab01553ca2cb17" name="samba3x-common" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.109.el5_8"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.109" date="1335391200">- Security Release, fixes CVE-2012-2111
- resolves: #815686</changelog>
</package>
<package pkgid="75a19561219908446c4fae6bcb67e5179f9951e5" name="samba3x-common" arch="i386">
  <version epoch="0" ver="3.5.4" rel="0.83.el5_7.2"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.4-0.83" date="1309384800">- Fix support for old samba 3.0 domain controllers
- resolves: #716961</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.1" date="1311631200">- Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678
- resolves: #722555</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.2" date="1311976800">- Security Release, add fix for CVE-2011-2724
- related: #722555</changelog>
</package>
<package pkgid="4cb875a9e641ba5aad740b84d81589e22fc173a6" name="samba3x-common" arch="i386">
  <version epoch="0" ver="3.6.23" rel="12.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-10" date="1460160000">- resolves: #1322685 - Fix CVE-2015-5370
- resolves: #1322685 - Fix CVE-2016-2110
- resolves: #1322685 - Fix CVE-2016-2111
- resolves: #1322685 - Fix CVE-2016-2112
- resolves: #1322685 - Fix CVE-2016-2115
- resolves: #1322685 - Fix CVE-2016-2118 (Known as Badlock)</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-11" date="1460419200">- related: #1322685 - Update CVE patchset</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-12" date="1460505600">- related: #1322685 - Update CVE patchset</changelog>
</package>
<package pkgid="6c6cc3099e703aa9cddcfdc04f64d17f42caa930" name="samba3x-common" arch="i386">
  <version epoch="0" ver="3.6.23" rel="9.el5_11"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-7" date="1408665600">- resolves: #1132425 - Fix dropbox share.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-8" date="1423785600">- resolves: #1191608 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-9" date="1424131200">- related: #1191608 - Update patchset for CVE-2015-0240.</changelog>
</package>
<package pkgid="d545a90de54cd3bd279f901f654875177e2ec07e" name="samba3x-common" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.136.el5"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.134" date="1371513600">- Check for system libtevent and require version 0.9.18.
- Use tevent epoll backend in winbind.
- resolves: #869295</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.135" date="1373414400">- Fix PIDL parsing with newer versions of gcc.
- Fix dereferencing a unique pointer in the WKSSVC server.
- resolves: #982484</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
</package>
<package pkgid="e31fc8d0c220999993c27da56bf2fc554bfc101c" name="samba3x-common" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.138.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
</package>
<package pkgid="ee4f2e66a43435e584d470a00d675a6ea9fbfeab" name="samba3x-common" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.139.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
</package>
<package pkgid="0d11a5c51644e0bd2c84c65a1bc1685a805ee38d" name="samba3x-common" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.140.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.6-0.140" date="1402531200">- resolves: #1112150 - CVE-2014-0244: DoS in nmbd.
- resolves: #1112150 - CVE-2014-3493: DoS in smbd with unicode path names.</changelog>
</package>
<package pkgid="a964ce3369c5e4aa91fc0b654b70fbc395ac3263" name="samba3x-doc" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.108.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.106" date="1325628000">- Document -k option in the 'net' manpage
- resolves: #771375</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
</package>
<package pkgid="2eb59cab4e863e7f79a72a7f8b0d90ded4fcbee3" name="samba3x-doc" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.109.el5_8"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.109" date="1335391200">- Security Release, fixes CVE-2012-2111
- resolves: #815686</changelog>
</package>
<package pkgid="20579e4a2a076cd4b563db68c55e0fec5ee0e39e" name="samba3x-doc" arch="i386">
  <version epoch="0" ver="3.5.4" rel="0.83.el5_7.2"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.4-0.83" date="1309384800">- Fix support for old samba 3.0 domain controllers
- resolves: #716961</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.1" date="1311631200">- Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678
- resolves: #722555</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.2" date="1311976800">- Security Release, add fix for CVE-2011-2724
- related: #722555</changelog>
</package>
<package pkgid="98668d2374972f5353c3feaae6e0b94648de6aa0" name="samba3x-doc" arch="i386">
  <version epoch="0" ver="3.6.23" rel="12.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-10" date="1460160000">- resolves: #1322685 - Fix CVE-2015-5370
- resolves: #1322685 - Fix CVE-2016-2110
- resolves: #1322685 - Fix CVE-2016-2111
- resolves: #1322685 - Fix CVE-2016-2112
- resolves: #1322685 - Fix CVE-2016-2115
- resolves: #1322685 - Fix CVE-2016-2118 (Known as Badlock)</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-11" date="1460419200">- related: #1322685 - Update CVE patchset</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-12" date="1460505600">- related: #1322685 - Update CVE patchset</changelog>
</package>
<package pkgid="565b52bde9b57c48f22b77313868ee2a7011dc83" name="samba3x-doc" arch="i386">
  <version epoch="0" ver="3.6.23" rel="9.el5_11"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-7" date="1408665600">- resolves: #1132425 - Fix dropbox share.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-8" date="1423785600">- resolves: #1191608 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-9" date="1424131200">- related: #1191608 - Update patchset for CVE-2015-0240.</changelog>
</package>
<package pkgid="68aaf2ccd9f0d02c2100cc32e46d4c1b6b3184e8" name="samba3x-doc" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.136.el5"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.134" date="1371513600">- Check for system libtevent and require version 0.9.18.
- Use tevent epoll backend in winbind.
- resolves: #869295</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.135" date="1373414400">- Fix PIDL parsing with newer versions of gcc.
- Fix dereferencing a unique pointer in the WKSSVC server.
- resolves: #982484</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
</package>
<package pkgid="2214d00732f30bfdd0ec483fe162c5c483de21d7" name="samba3x-doc" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.138.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
</package>
<package pkgid="4c0ebf78e326215d9066fa8d153917e85ae5bb65" name="samba3x-doc" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.139.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
</package>
<package pkgid="a189afb3bc050739b21763ee6c704d07e4abb39b" name="samba3x-doc" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.140.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.6-0.140" date="1402531200">- resolves: #1112150 - CVE-2014-0244: DoS in nmbd.
- resolves: #1112150 - CVE-2014-3493: DoS in smbd with unicode path names.</changelog>
</package>
<package pkgid="de5df78f9cf6e6f22399efd3ac776cfe46981c06" name="samba3x-domainjoin-gui" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.108.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.106" date="1325628000">- Document -k option in the 'net' manpage
- resolves: #771375</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
</package>
<package pkgid="ea57862545e18feb17d5c2902a97983d48f82223" name="samba3x-domainjoin-gui" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.109.el5_8"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.109" date="1335391200">- Security Release, fixes CVE-2012-2111
- resolves: #815686</changelog>
</package>
<package pkgid="5c6dc417ed6c1d6177c18caf7ac2d9fae095607e" name="samba3x-domainjoin-gui" arch="i386">
  <version epoch="0" ver="3.5.4" rel="0.83.el5_7.2"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.4-0.83" date="1309384800">- Fix support for old samba 3.0 domain controllers
- resolves: #716961</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.1" date="1311631200">- Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678
- resolves: #722555</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.2" date="1311976800">- Security Release, add fix for CVE-2011-2724
- related: #722555</changelog>
</package>
<package pkgid="debfda24d70cb206c2efe194a7a2937dfa9f5f77" name="samba3x-domainjoin-gui" arch="i386">
  <version epoch="0" ver="3.6.23" rel="12.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-10" date="1460160000">- resolves: #1322685 - Fix CVE-2015-5370
- resolves: #1322685 - Fix CVE-2016-2110
- resolves: #1322685 - Fix CVE-2016-2111
- resolves: #1322685 - Fix CVE-2016-2112
- resolves: #1322685 - Fix CVE-2016-2115
- resolves: #1322685 - Fix CVE-2016-2118 (Known as Badlock)</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-11" date="1460419200">- related: #1322685 - Update CVE patchset</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-12" date="1460505600">- related: #1322685 - Update CVE patchset</changelog>
</package>
<package pkgid="a48e382246d5d4c906fc60c09d8d5914314f79bd" name="samba3x-domainjoin-gui" arch="i386">
  <version epoch="0" ver="3.6.23" rel="9.el5_11"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-7" date="1408665600">- resolves: #1132425 - Fix dropbox share.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-8" date="1423785600">- resolves: #1191608 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-9" date="1424131200">- related: #1191608 - Update patchset for CVE-2015-0240.</changelog>
</package>
<package pkgid="e5e1bb6b46e235e920df85ae32ff58777f37e06e" name="samba3x-domainjoin-gui" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.136.el5"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.134" date="1371513600">- Check for system libtevent and require version 0.9.18.
- Use tevent epoll backend in winbind.
- resolves: #869295</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.135" date="1373414400">- Fix PIDL parsing with newer versions of gcc.
- Fix dereferencing a unique pointer in the WKSSVC server.
- resolves: #982484</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
</package>
<package pkgid="2c5b6ab7315d9fc0ef8e0d4de680d428be436f9f" name="samba3x-domainjoin-gui" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.138.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
</package>
<package pkgid="67db99a105ac490f6adfd09a017a777cd1b4a218" name="samba3x-domainjoin-gui" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.139.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
</package>
<package pkgid="fb7d83afd8602b8f8d61728c114f2494f93d56b8" name="samba3x-domainjoin-gui" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.140.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.6-0.140" date="1402531200">- resolves: #1112150 - CVE-2014-0244: DoS in nmbd.
- resolves: #1112150 - CVE-2014-3493: DoS in smbd with unicode path names.</changelog>
</package>
<package pkgid="1e71cdd80fe0102a3725a1f4b5d646f9c81b8775" name="samba3x-swat" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.108.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.106" date="1325628000">- Document -k option in the 'net' manpage
- resolves: #771375</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
</package>
<package pkgid="af130eb16164bfd0d1c2fcdc87e9f1a8ed0c47c3" name="samba3x-swat" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.109.el5_8"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.109" date="1335391200">- Security Release, fixes CVE-2012-2111
- resolves: #815686</changelog>
</package>
<package pkgid="d9c965c6fc51c1cd11dfac907217773751d76943" name="samba3x-swat" arch="i386">
  <version epoch="0" ver="3.5.4" rel="0.83.el5_7.2"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.4-0.83" date="1309384800">- Fix support for old samba 3.0 domain controllers
- resolves: #716961</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.1" date="1311631200">- Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678
- resolves: #722555</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.2" date="1311976800">- Security Release, add fix for CVE-2011-2724
- related: #722555</changelog>
</package>
<package pkgid="8619a965414cbe1f7ce48a12dffc289d18df5b10" name="samba3x-swat" arch="i386">
  <version epoch="0" ver="3.6.23" rel="12.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-10" date="1460160000">- resolves: #1322685 - Fix CVE-2015-5370
- resolves: #1322685 - Fix CVE-2016-2110
- resolves: #1322685 - Fix CVE-2016-2111
- resolves: #1322685 - Fix CVE-2016-2112
- resolves: #1322685 - Fix CVE-2016-2115
- resolves: #1322685 - Fix CVE-2016-2118 (Known as Badlock)</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-11" date="1460419200">- related: #1322685 - Update CVE patchset</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-12" date="1460505600">- related: #1322685 - Update CVE patchset</changelog>
</package>
<package pkgid="db00727792bf6940c6da35e47bdbb7c5568d7808" name="samba3x-swat" arch="i386">
  <version epoch="0" ver="3.6.23" rel="9.el5_11"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-7" date="1408665600">- resolves: #1132425 - Fix dropbox share.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-8" date="1423785600">- resolves: #1191608 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-9" date="1424131200">- related: #1191608 - Update patchset for CVE-2015-0240.</changelog>
</package>
<package pkgid="437d7f1174b3242fc2d0a75131ff246c6e68ba3f" name="samba3x-swat" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.136.el5"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.134" date="1371513600">- Check for system libtevent and require version 0.9.18.
- Use tevent epoll backend in winbind.
- resolves: #869295</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.135" date="1373414400">- Fix PIDL parsing with newer versions of gcc.
- Fix dereferencing a unique pointer in the WKSSVC server.
- resolves: #982484</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
</package>
<package pkgid="5dfa1d1845e4f1416007c5006110cca8e7c683ac" name="samba3x-swat" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.138.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
</package>
<package pkgid="2e1bf2dc3adfedac72cdf2c35a8c8cdabd331a92" name="samba3x-swat" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.139.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
</package>
<package pkgid="7997e5605618ebfa70b2677519df99f595ce6f34" name="samba3x-swat" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.140.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.6-0.140" date="1402531200">- resolves: #1112150 - CVE-2014-0244: DoS in nmbd.
- resolves: #1112150 - CVE-2014-3493: DoS in smbd with unicode path names.</changelog>
</package>
<package pkgid="52b5f4d97f8dca1127b3f50c477363d8638c77b7" name="samba3x-winbind" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.108.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.106" date="1325628000">- Document -k option in the 'net' manpage
- resolves: #771375</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
</package>
<package pkgid="770217980d588bd74693da27f5a0c65be3434d67" name="samba3x-winbind" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.109.el5_8"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.109" date="1335391200">- Security Release, fixes CVE-2012-2111
- resolves: #815686</changelog>
</package>
<package pkgid="5042c9211f8e5726da7a6d4f8a476ba0ab50579b" name="samba3x-winbind" arch="i386">
  <version epoch="0" ver="3.5.4" rel="0.83.el5_7.2"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.4-0.83" date="1309384800">- Fix support for old samba 3.0 domain controllers
- resolves: #716961</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.1" date="1311631200">- Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678
- resolves: #722555</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.2" date="1311976800">- Security Release, add fix for CVE-2011-2724
- related: #722555</changelog>
</package>
<package pkgid="251f80ef69b13a4e399f6cd872ebfff9541ccd7a" name="samba3x-winbind" arch="i386">
  <version epoch="0" ver="3.6.23" rel="12.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-10" date="1460160000">- resolves: #1322685 - Fix CVE-2015-5370
- resolves: #1322685 - Fix CVE-2016-2110
- resolves: #1322685 - Fix CVE-2016-2111
- resolves: #1322685 - Fix CVE-2016-2112
- resolves: #1322685 - Fix CVE-2016-2115
- resolves: #1322685 - Fix CVE-2016-2118 (Known as Badlock)</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-11" date="1460419200">- related: #1322685 - Update CVE patchset</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-12" date="1460505600">- related: #1322685 - Update CVE patchset</changelog>
</package>
<package pkgid="c96375a6191d18eda0b127c3d44cb44c288e4ce2" name="samba3x-winbind" arch="i386">
  <version epoch="0" ver="3.6.23" rel="9.el5_11"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-7" date="1408665600">- resolves: #1132425 - Fix dropbox share.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-8" date="1423785600">- resolves: #1191608 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-9" date="1424131200">- related: #1191608 - Update patchset for CVE-2015-0240.</changelog>
</package>
<package pkgid="9b05329cd0cf9451d8d2cef8bc0f02608a554bdc" name="samba3x-winbind" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.136.el5"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.134" date="1371513600">- Check for system libtevent and require version 0.9.18.
- Use tevent epoll backend in winbind.
- resolves: #869295</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.135" date="1373414400">- Fix PIDL parsing with newer versions of gcc.
- Fix dereferencing a unique pointer in the WKSSVC server.
- resolves: #982484</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
</package>
<package pkgid="3d5ba9f7e9cfd8ea7d52d44c576e3c9ae7942c12" name="samba3x-winbind" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.138.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
</package>
<package pkgid="0a02a69427953cd70ca63c3ebfa00649e6eb75b3" name="samba3x-winbind" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.139.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
</package>
<package pkgid="2b8f13002c8ca695e689d6c3ef7b76dc77eb22fc" name="samba3x-winbind" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.140.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.6-0.140" date="1402531200">- resolves: #1112150 - CVE-2014-0244: DoS in nmbd.
- resolves: #1112150 - CVE-2014-3493: DoS in smbd with unicode path names.</changelog>
</package>
<package pkgid="0b6ec232e57eb932cee45e3d17d9f55469d3e4be" name="samba3x-winbind-devel" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.108.el5_8"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.106" date="1325628000">- Document -k option in the 'net' manpage
- resolves: #771375</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
</package>
<package pkgid="a74e9c69c886db19e057fc020a79aadc73ea792c" name="samba3x-winbind-devel" arch="i386">
  <version epoch="0" ver="3.5.10" rel="0.109.el5_8"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.5.10-0.107" date="1325800800">- Fix possible segfault in winbind getpwent patch.
- related: #753828</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.108" date="1332280800">- Security Release, fixes CVE-2012-1182
- resolves: #804650</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.10-0.109" date="1335391200">- Security Release, fixes CVE-2012-2111
- resolves: #815686</changelog>
</package>
<package pkgid="442f548a226d7998d9842c8b4329f1611d67215c" name="samba3x-winbind-devel" arch="i386">
  <version epoch="0" ver="3.5.4" rel="0.83.el5_7.2"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.5.4-0.83" date="1309384800">- Fix support for old samba 3.0 domain controllers
- resolves: #716961</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.1" date="1311631200">- Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678
- resolves: #722555</changelog>
  <changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; 3.5.4-0.83.2" date="1311976800">- Security Release, add fix for CVE-2011-2724
- related: #722555</changelog>
</package>
<package pkgid="57900a4deb381b4a0b8eb06c8ea1ca6fe47ad4bd" name="samba3x-winbind-devel" arch="i386">
  <version epoch="0" ver="3.6.23" rel="12.el5_11"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-10" date="1460160000">- resolves: #1322685 - Fix CVE-2015-5370
- resolves: #1322685 - Fix CVE-2016-2110
- resolves: #1322685 - Fix CVE-2016-2111
- resolves: #1322685 - Fix CVE-2016-2112
- resolves: #1322685 - Fix CVE-2016-2115
- resolves: #1322685 - Fix CVE-2016-2118 (Known as Badlock)</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-11" date="1460419200">- related: #1322685 - Update CVE patchset</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.23-12" date="1460505600">- related: #1322685 - Update CVE patchset</changelog>
</package>
<package pkgid="22427be0a8dc64c8a7302ea8edaa351ae952cf97" name="samba3x-winbind-devel" arch="i386">
  <version epoch="0" ver="3.6.23" rel="9.el5_11"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-7" date="1408665600">- resolves: #1132425 - Fix dropbox share.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-8" date="1423785600">- resolves: #1191608 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-9" date="1424131200">- related: #1191608 - Update patchset for CVE-2015-0240.</changelog>
</package>
<package pkgid="f4b944836275050e61d2b6f1f8ffd9dc56612432" name="samba3x-winbind-devel" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.136.el5"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.134" date="1371513600">- Check for system libtevent and require version 0.9.18.
- Use tevent epoll backend in winbind.
- resolves: #869295</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.135" date="1373414400">- Fix PIDL parsing with newer versions of gcc.
- Fix dereferencing a unique pointer in the WKSSVC server.
- resolves: #982484</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
</package>
<package pkgid="66bd7a6c5dfe4027b0fe0a032f8e2eefd4c836e3" name="samba3x-winbind-devel" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.138.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.136" date="1375833600">- resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                      an EA list</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
</package>
<package pkgid="4904608d70e92507c3f5aae098faeaf6c08a38f9" name="samba3x-winbind-devel" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.139.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.137" date="1383955200">- resolves: #1028088 - CVE-2013-4475.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
</package>
<package pkgid="ff55e9bc4d8a6421cc0b4bef3de55c89d3dc1f7e" name="samba3x-winbind-devel" arch="i386">
  <version epoch="0" ver="3.6.6" rel="0.140.el5_10"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.138" date="1385424000">- resolves: #1018035 - CVE-2013-4408.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.6-0.139" date="1394236800">- resolves: #1073357 - CVE-2012-6150.
- resolves: #1073357 - CVE-2013-4496.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.6-0.140" date="1402531200">- resolves: #1112150 - CVE-2014-0244: DoS in nmbd.
- resolves: #1112150 - CVE-2014-3493: DoS in smbd with unicode path names.</changelog>
</package>
<package pkgid="c648913d6345d1c8cb404e76d384f218ce3d365b" name="scl-utils" arch="i386">
  <version epoch="0" ver="20120927" rel="8.el5"/>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-6" date="1367280000">- avoid using freed variable if script execution fails (#957765)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-7" date="1367280001">- use absolute path when calling scl_enabled (#957752)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-8" date="1368835200">- run enable scriptlet only if the collection is not enabled (#964056)</changelog>
</package>
<package pkgid="daf15555df52f59baf90123a338e894161ca9706" name="scl-utils-build" arch="i386">
  <version epoch="0" ver="20120927" rel="8.el5"/>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-6" date="1367280000">- avoid using freed variable if script execution fails (#957765)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-7" date="1367280001">- use absolute path when calling scl_enabled (#957752)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-8" date="1368835200">- run enable scriptlet only if the collection is not enabled (#964056)</changelog>
</package>
<package pkgid="1b30c99300a15b667f5929465da902864b8ffc79" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="316.el5"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-314" date="1308693600">- Make mdadm_t domain MLS trusted for reading/writing to files at all levels</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-315" date="1308780000">- Add label for HOME/.k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316" date="1308952800">- Allow rlogind to read .k5login</changelog>
</package>
<package pkgid="0f56f9b53a017f6d6603d94960769d87f2b5773e" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="316.el5_7.1"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-315" date="1308780000">- Add label for HOME/.k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316" date="1308952800">- Allow rlogind to read .k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316.el5_7.1" date="1328047200">- Make ssh_keygen domain as unconfined
Resolves:#784782</changelog>
</package>
<package pkgid="889d9b5d83583dd8cb35aad914b84ceaa3db3a7b" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="316.el5"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-314" date="1308693600">- Make mdadm_t domain MLS trusted for reading/writing to files at all levels</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-315" date="1308780000">- Add label for HOME/.k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316" date="1308952800">- Allow rlogind to read .k5login</changelog>
</package>
<package pkgid="e4a6804622b76f6bb34fce84bb70e905751c6104" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="316.el5_7.1"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-315" date="1308780000">- Add label for HOME/.k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316" date="1308952800">- Allow rlogind to read .k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316.el5_7.1" date="1328047200">- Make ssh_keygen domain as unconfined
Resolves:#784782</changelog>
</package>
<package pkgid="1853b19e3e6001f0190f964f28f77ccee154a5b7" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="316.el5"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-314" date="1308693600">- Make mdadm_t domain MLS trusted for reading/writing to files at all levels</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-315" date="1308780000">- Add label for HOME/.k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316" date="1308952800">- Allow rlogind to read .k5login</changelog>
</package>
<package pkgid="afa37ecdb6a403d9a3073db00741ae493da6a556" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="316.el5_7.1"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-315" date="1308780000">- Add label for HOME/.k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316" date="1308952800">- Allow rlogind to read .k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316.el5_7.1" date="1328047200">- Make ssh_keygen domain as unconfined
Resolves:#784782</changelog>
</package>
<package pkgid="779fcb1a0242659f1c8b44c0e728f5d623040bea" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="316.el5"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-314" date="1308693600">- Make mdadm_t domain MLS trusted for reading/writing to files at all levels</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-315" date="1308780000">- Add label for HOME/.k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316" date="1308952800">- Allow rlogind to read .k5login</changelog>
</package>
<package pkgid="34a358a9db69ac16c7fc4dc4617e37e05fbc1dba" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="316.el5_7.1"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-315" date="1308780000">- Add label for HOME/.k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316" date="1308952800">- Allow rlogind to read .k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316.el5_7.1" date="1328047200">- Make ssh_keygen domain as unconfined
Resolves:#784782</changelog>
</package>
<package pkgid="70f27e01d3e2c0ce7fe8fd376c077e33f8c1cf9d" name="selinux-policy-strict" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="316.el5"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-314" date="1308693600">- Make mdadm_t domain MLS trusted for reading/writing to files at all levels</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-315" date="1308780000">- Add label for HOME/.k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316" date="1308952800">- Allow rlogind to read .k5login</changelog>
</package>
<package pkgid="b5f779d0782aa6cc606e6a182cdfa05f6f81c0a9" name="selinux-policy-strict" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="316.el5_7.1"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-315" date="1308780000">- Add label for HOME/.k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316" date="1308952800">- Allow rlogind to read .k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316.el5_7.1" date="1328047200">- Make ssh_keygen domain as unconfined
Resolves:#784782</changelog>
</package>
<package pkgid="6a0b892934f5c3865fe529229b68824f5f811f44" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="316.el5"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-314" date="1308693600">- Make mdadm_t domain MLS trusted for reading/writing to files at all levels</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-315" date="1308780000">- Add label for HOME/.k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316" date="1308952800">- Allow rlogind to read .k5login</changelog>
</package>
<package pkgid="b23914467cbe7299369c8756b6c877dce67a24d4" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="316.el5_7.1"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-315" date="1308780000">- Add label for HOME/.k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316" date="1308952800">- Allow rlogind to read .k5login</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 2.4.6-316.el5_7.1" date="1328047200">- Make ssh_keygen domain as unconfined
Resolves:#784782</changelog>
</package>
<package pkgid="2ef4dee87d98b21cee7e4cb8be32f3176aec5dc9" name="setroubleshoot" arch="noarch">
  <version epoch="0" ver="2.0.5" rel="7.el5_11"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2.0.5-5" date="1221004800">- Change to start after messagebus
Resolves: #501366</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; - 2.0.5-6" date="1328832000">- Fixup for memory leaks
Resolves:#523966</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.0.5-7" date="1427155200">- Fix get_rpm_nvr_*_temporary functions
Resolves:#1203352</changelog>
</package>
<package pkgid="4c0f496d7613c43a686e27447aef40bd16b581c2" name="setroubleshoot-server" arch="noarch">
  <version epoch="0" ver="2.0.5" rel="7.el5_11"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2.0.5-5" date="1221004800">- Change to start after messagebus
Resolves: #501366</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; - 2.0.5-6" date="1328832000">- Fixup for memory leaks
Resolves:#523966</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.0.5-7" date="1427155200">- Fix get_rpm_nvr_*_temporary functions
Resolves:#1203352</changelog>
</package>
<package pkgid="973e698bd3097f9dbf99c7c0eb316174625a8cd6" name="shadow-utils" arch="i386">
  <version epoch="2" ver="4.0.17" rel="21.el5"/>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 2:4.0.17-19" date="1301004000">- fix sequence of arg. parsing and execution in faillog
- fix ACL support
- do not alter UIDs over 2147483647 in pwconv and pwunconv
  Resolves: #619150, #673091, #681020</changelog>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 2:4.0.17-20" date="1318629600">- prevent faillog to grow after setmax operation(-m)
- man page adjustments
- make useradd delete lock files on failure
  Resolves: #670364, #688892, #715214, #709605</changelog>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 2:4.0.17-21" date="1340143200">- pwconv/grpconv skipped 2nd of consecutive failures 
  Resolves: #787736</changelog>
</package>
<package pkgid="e2a1c5bb8c955ed2ad2763f43097b95fc19af66b" name="sl-release" arch="i386">
  <version epoch="0" ver="5.6" rel="2"/>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.5-0.1.rolling" date="1270677600">- Updated out of date bookmarks
- Moved everything to 55
- Changed sources to be 5rolling instead</changelog>
  <changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; - 5.6-1" date="1307484000">- Changed sources to point to 56</changelog>
  <changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; - 5.6-2" date="1331676000">- Updated firefox trigger for the new bookmark location</changelog>
</package>
<package pkgid="2b3e8c21b73a55c66c1146326159d988628d631c" name="sos" arch="noarch">
  <version epoch="0" ver="1.7" rel="9.62.el5"/>
  <changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; - 1.7-9.60" date="1323208800">- Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin
  Resolves: bz726421
- Update MRG grid plugin to collect additional logs and configuration
  Resolves: bz641020</changelog>
  <changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; - 1.7-9.61" date="1323295200">- Make single threaded operation default and add --multithread to override
  Resolves: bz708346
- Support multiple possible locations of VRTSexplorer script
  Resolves: bz565996
- Collect wallaby dump and inventory information in mrggrid plugin
  Resolves: bz641020</changelog>
  <changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; - 1.7-9.62" date="1325800800">- Always log plugin exceptions that are not raised to the interpreter
  Resolves: bz717480
- Ensure relative symlink targets are correctly handled when copying
  Resolves: bz717962
- Correctly handle libxml2 parser exceptions when reading cluster.conf
  Resolves: bz750573
- Update Red Hat Certificate System plugin for current versions
  Resolves: bz627416</changelog>
</package>
<package pkgid="1ff7d0616d7d8dc1ae84dac021599e603280010c" name="sos" arch="noarch">
  <version epoch="0" ver="1.7" rel="9.62.el5_9.1"/>
  <changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; - 1.7-9.62" date="1325800800">- Always log plugin exceptions that are not raised to the interpreter
  Resolves: bz717480
- Ensure relative symlink targets are correctly handled when copying
  Resolves: bz717962
- Correctly handle libxml2 parser exceptions when reading cluster.conf
  Resolves: bz750573
- Update Red Hat Certificate System plugin for current versions
  Resolves: bz627416</changelog>
  <changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; - 1.7-9.62.el5_9" date="1371592800">- Elide passwords in anaconda-ks.cfg and yum.repos.d
  Resolves: bz965807</changelog>
  <changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; - 1.7-9.62.el5_9.1" date="1374530400">- Remove anaconda-ks.cfg collection from general plug-in
  Resolves: bz965807</changelog>
</package>
<package pkgid="0a5e17142a769f5a928dbece45b6d769b90b1f56" name="squid" arch="i386">
  <version epoch="7" ver="2.6.STABLE21" rel="7.el5_10"/>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; 7:2.6.STABLE21-5" date="1260835200">- Resolves: #538738 - improved patch</changelog>
  <changelog author="Jiri Skala &lt;jskala@redhat.com&gt; 7:2.6.STABLE21-6" date="1265846400">- Resolves: #561828 - CVE-2009-2855 CVE-2010-0308 squid various flaws [rhel-5.5]</changelog>
  <changelog author="Michal Luscon &lt;mluscon@redhat.com&gt; 7:2.6.STABLE21-7" date="1409616000">- Resolves: #1134976 - CVE-2013-4115 buffer overflow when processing overly long DNS names
- Resolves: #1134976 - CVE-2014-3609 assertion failure in header processing</changelog>
</package>
<package pkgid="6e001f6652f68487eeaa1910299a701d00871d4f" name="squirrelmail" arch="noarch">
  <version epoch="0" ver="1.4.8" rel="21.el5"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.4.8-19" date="1340229600">- patch for CVE-2010-2813 modified wrong file (#808598)
- correct requirement is mod_php not php (#789353)
- comply with RFC2822 line length limits (#745469)
- document that SELinux boolean httpd_can_sendmail needs to be 
  turned on (#745380)
- add support for big UIDs on 32bit machines (#450780)
- do not corrupt html attachments (#359791)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.4.8-20" date="1340661600">- fix header encoding issue (#241861)
- fix code producing warnings in the log (#475188)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.4.8-21" date="1341352800">- change charset for zh_CN and zh_TW to utf-8 (#508686)</changelog>
</package>
<package pkgid="9d4957dd216d95b289470a0c9fce56e0f073345d" name="squirrelmail" arch="noarch">
  <version epoch="0" ver="1.4.8" rel="5.el5_7.13"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.4.8-5.11" date="1316037600">- fix: CVE-2010-1637 : Port-scans via non-standard POP3 server ports in 
  Mail Fetch plugin
- fix: CVE-2010-2813 : DoS (disk space consumption) by random IMAP login 
  attempts with 8-bit characters in the password
- fix: CVE-2010-4554 : Prone to clickjacking attacks
- fix: CVE-2010-4555 : Multiple XSS flaws
- fix: CVE-2011-2023 : XSS in &lt;style&gt; tag handling
- fix: CVE-2011-2752 : CRLF injection vulnerability
- fix: CVE-2011-2753 : CSRF in the empty trash feature and in Index Order page</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.4.8-5.12" date="1318456800">- patch for CVE-2010-2813 was not complete</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.4.8-5.13" date="1328047200">- fix typo in CVE-20210-4555 patch</changelog>
</package>
<package pkgid="0bc02612d2d884acf1a77389bf2256edd2bd38b4" name="sssd" arch="i386">
  <version epoch="0" ver="1.5.1" rel="37.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.5.1-35" date="1306360800">- Resolves: rhbz#707340 - latest sssd fails if ldap_default_authtok_type is
-                         not mentioned
- Resolves: rhbz#707574 - SSSD's async resolver only tries the first
-                         nameserver in /etc/resolv.conf</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.5.1-36" date="1306879200">- Resolves: rhbz#709333 - sssd.$arch should require sssd-client.$arch</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.5.1-37" date="1307656800">- Reverts:  rhbz#680443 - Dynamic DNS update fails if multiple servers are
-                         given in ipa_server config option</changelog>
</package>
<package pkgid="fc23e58a87726d9da44522bd8ef9ed2dec444a56" name="sssd" arch="i386">
  <version epoch="0" ver="1.5.1" rel="58.el5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-56" date="1343944800">- Require libgssapiv2.so to pull in cyrus-sasl-gssapi
- Resolves: rhbz#786443</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-57" date="1345240800">- Process all groups from a single nesting level
- Resolves: rhbz#846664
- Backport the option to disable srchost processing
- Resolves: rhbz#841677</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-58" date="1345672800">- Initialize hbac_ctx to NULL
- Resolves: rhbz#850722</changelog>
</package>
<package pkgid="f3d1cfb94469ac667cd75e2711bd24a19c7dbe7b" name="sssd" arch="i386">
  <version epoch="0" ver="1.5.1" rel="70.el5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-68" date="1368748800">- Add a forgotten break in a switch statement
- Related: rhbz#886165 - sssd will stop functioning correctly if sssd_be
                         hangs for a while</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-69" date="1372204800">- Fix startup with a broken configuration
- Resolves: rhbz#974036 - sssd core process keeps running after backends quit</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-70" date="1372377600">- Fix IPA provider performance issue when storing large host groups
- Resolves: rhbz#979047 - sssd_be goes to 99% CPU and causes significant
                          login delays when client is under load</changelog>
</package>
<package pkgid="961964401777c7475929fbda42cbab71b48391e1" name="sssd-client" arch="i386">
  <version epoch="0" ver="1.5.1" rel="37.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.5.1-35" date="1306360800">- Resolves: rhbz#707340 - latest sssd fails if ldap_default_authtok_type is
-                         not mentioned
- Resolves: rhbz#707574 - SSSD's async resolver only tries the first
-                         nameserver in /etc/resolv.conf</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.5.1-36" date="1306879200">- Resolves: rhbz#709333 - sssd.$arch should require sssd-client.$arch</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.5.1-37" date="1307656800">- Reverts:  rhbz#680443 - Dynamic DNS update fails if multiple servers are
-                         given in ipa_server config option</changelog>
</package>
<package pkgid="f2440cb557d9f98001799d35cb8220f0730ffd8c" name="sssd-client" arch="i386">
  <version epoch="0" ver="1.5.1" rel="58.el5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-56" date="1343944800">- Require libgssapiv2.so to pull in cyrus-sasl-gssapi
- Resolves: rhbz#786443</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-57" date="1345240800">- Process all groups from a single nesting level
- Resolves: rhbz#846664
- Backport the option to disable srchost processing
- Resolves: rhbz#841677</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-58" date="1345672800">- Initialize hbac_ctx to NULL
- Resolves: rhbz#850722</changelog>
</package>
<package pkgid="808f379b3048e82e68d48aa00bc028890b7268c3" name="sssd-client" arch="i386">
  <version epoch="0" ver="1.5.1" rel="70.el5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-68" date="1368748800">- Add a forgotten break in a switch statement
- Related: rhbz#886165 - sssd will stop functioning correctly if sssd_be
                         hangs for a while</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-69" date="1372204800">- Fix startup with a broken configuration
- Resolves: rhbz#974036 - sssd core process keeps running after backends quit</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-70" date="1372377600">- Fix IPA provider performance issue when storing large host groups
- Resolves: rhbz#979047 - sssd_be goes to 99% CPU and causes significant
                          login delays when client is under load</changelog>
</package>
<package pkgid="9d548e1c3f45fbeacaf4b92a775d77d3fcdf5f68" name="sssd-tools" arch="i386">
  <version epoch="0" ver="1.5.1" rel="37.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.5.1-35" date="1306360800">- Resolves: rhbz#707340 - latest sssd fails if ldap_default_authtok_type is
-                         not mentioned
- Resolves: rhbz#707574 - SSSD's async resolver only tries the first
-                         nameserver in /etc/resolv.conf</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.5.1-36" date="1306879200">- Resolves: rhbz#709333 - sssd.$arch should require sssd-client.$arch</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.5.1-37" date="1307656800">- Reverts:  rhbz#680443 - Dynamic DNS update fails if multiple servers are
-                         given in ipa_server config option</changelog>
</package>
<package pkgid="8d958c555a51f384486b62a7d615d4b7889f8f25" name="sssd-tools" arch="i386">
  <version epoch="0" ver="1.5.1" rel="58.el5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-56" date="1343944800">- Require libgssapiv2.so to pull in cyrus-sasl-gssapi
- Resolves: rhbz#786443</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-57" date="1345240800">- Process all groups from a single nesting level
- Resolves: rhbz#846664
- Backport the option to disable srchost processing
- Resolves: rhbz#841677</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-58" date="1345672800">- Initialize hbac_ctx to NULL
- Resolves: rhbz#850722</changelog>
</package>
<package pkgid="90f08264af52f8d0fdbd4cd5494e4086283ebd1c" name="sssd-tools" arch="i386">
  <version epoch="0" ver="1.5.1" rel="70.el5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-68" date="1368748800">- Add a forgotten break in a switch statement
- Related: rhbz#886165 - sssd will stop functioning correctly if sssd_be
                         hangs for a while</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-69" date="1372204800">- Fix startup with a broken configuration
- Resolves: rhbz#974036 - sssd core process keeps running after backends quit</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.1-70" date="1372377600">- Fix IPA provider performance issue when storing large host groups
- Resolves: rhbz#979047 - sssd_be goes to 99% CPU and causes significant
                          login delays when client is under load</changelog>
</package>
<package pkgid="eab75bdb2ddcbefd6609c5d0198fbdcc95564529" name="struts" arch="i386">
  <version epoch="0" ver="1.2.9" rel="4jpp.8.el5_10"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.9-4jpp.4" date="1165276800">- Resolves: bz218303. Rewrote pre/preun/post/postun dependencies</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.9-4jpp.5" date="1168473600">- Resolves: bz218303. Added some pre requires that were missed.</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.9-4jpp.7" date="1399075200">- Resolves: rhbz#1092457
- CVE-2014-0114: Fixed ClassLoader manipulation vulnerability
- Added dist tag to release</changelog>
</package>
<package pkgid="3bac36d649a5444ebe08e6d2645241eb5a248409" name="struts-javadoc" arch="i386">
  <version epoch="0" ver="1.2.9" rel="4jpp.8.el5_10"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.9-4jpp.4" date="1165276800">- Resolves: bz218303. Rewrote pre/preun/post/postun dependencies</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.9-4jpp.5" date="1168473600">- Resolves: bz218303. Added some pre requires that were missed.</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.9-4jpp.7" date="1399075200">- Resolves: rhbz#1092457
- CVE-2014-0114: Fixed ClassLoader manipulation vulnerability
- Added dist tag to release</changelog>
</package>
<package pkgid="9f891388b25f15989ace6afda609d1521cf6de7d" name="struts-manual" arch="i386">
  <version epoch="0" ver="1.2.9" rel="4jpp.8.el5_10"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.9-4jpp.4" date="1165276800">- Resolves: bz218303. Rewrote pre/preun/post/postun dependencies</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.9-4jpp.5" date="1168473600">- Resolves: bz218303. Added some pre requires that were missed.</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.9-4jpp.7" date="1399075200">- Resolves: rhbz#1092457
- CVE-2014-0114: Fixed ClassLoader manipulation vulnerability
- Added dist tag to release</changelog>
</package>
<package pkgid="8e3e6427c15aea1fb9c0a05259db4a0e2b654546" name="struts-webapps-tomcat5" arch="i386">
  <version epoch="0" ver="1.2.9" rel="4jpp.8.el5_10"/>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.9-4jpp.4" date="1165276800">- Resolves: bz218303. Rewrote pre/preun/post/postun dependencies</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.9-4jpp.5" date="1168473600">- Resolves: bz218303. Added some pre requires that were missed.</changelog>
  <changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.9-4jpp.7" date="1399075200">- Resolves: rhbz#1092457
- CVE-2014-0114: Fixed ClassLoader manipulation vulnerability
- Added dist tag to release</changelog>
</package>
<package pkgid="6100ea3c23ec867b74710bb9f60cf53c10fcc284" name="subversion" arch="i386">
  <version epoch="0" ver="1.6.11" rel="11.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-9" date="1333144800">- add reintegrate merge parent dir access fixes (#691375)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-10" date="1334268000">- fix regression in reintegrate merge fixes (#691375)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-11" date="1365026400">- add security fixes for CVE-2013-1845, CVE-2013-1846, CVE-2013-1847,
  CVE-2013-1849 (#947369)</changelog>
</package>
<package pkgid="a232f84afe18fc6ca9eacde22d279ca4406375a4" name="subversion" arch="i386">
  <version epoch="0" ver="1.6.11" rel="12.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-10" date="1334275200">- fix regression in reintegrate merge fixes (#691375)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-11" date="1365033600">- add security fixes for CVE-2013-1845, CVE-2013-1846, CVE-2013-1847,
  CVE-2013-1849 (#947370)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-12" date="1392249600">- add security fixes for CVE-2013-1968, CVE-2013-2112, CVE-2014-0032</changelog>
</package>
<package pkgid="84ae9e8066710e7828552bb96d78884b545a6d89" name="subversion" arch="i386">
  <version epoch="0" ver="1.6.11" rel="7.el5_6.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.2" date="1299016800">- add security fix for CVE-2011-0715 (#681171)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.3" date="1299016801">- add fix for svnadmin hotcopy (#681522)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.4" date="1306879200">- add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 (#709218)</changelog>
</package>
<package pkgid="c8bb5e364c7e4143dbaf8aa0462097b275c00629" name="subversion-devel" arch="i386">
  <version epoch="0" ver="1.6.11" rel="11.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-9" date="1333144800">- add reintegrate merge parent dir access fixes (#691375)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-10" date="1334268000">- fix regression in reintegrate merge fixes (#691375)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-11" date="1365026400">- add security fixes for CVE-2013-1845, CVE-2013-1846, CVE-2013-1847,
  CVE-2013-1849 (#947369)</changelog>
</package>
<package pkgid="0288f2dada7eee1a1352888cf5ad360ce1f98d23" name="subversion-devel" arch="i386">
  <version epoch="0" ver="1.6.11" rel="12.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-10" date="1334275200">- fix regression in reintegrate merge fixes (#691375)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-11" date="1365033600">- add security fixes for CVE-2013-1845, CVE-2013-1846, CVE-2013-1847,
  CVE-2013-1849 (#947370)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-12" date="1392249600">- add security fixes for CVE-2013-1968, CVE-2013-2112, CVE-2014-0032</changelog>
</package>
<package pkgid="67e485887869b13423ce1a38257de0b68c03297c" name="subversion-devel" arch="i386">
  <version epoch="0" ver="1.6.11" rel="7.el5_6.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.2" date="1299016800">- add security fix for CVE-2011-0715 (#681171)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.3" date="1299016801">- add fix for svnadmin hotcopy (#681522)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.4" date="1306879200">- add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 (#709218)</changelog>
</package>
<package pkgid="9dff12ef715765c2caabef267c85be6de6b75cab" name="subversion-javahl" arch="i386">
  <version epoch="0" ver="1.6.11" rel="11.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-9" date="1333144800">- add reintegrate merge parent dir access fixes (#691375)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-10" date="1334268000">- fix regression in reintegrate merge fixes (#691375)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-11" date="1365026400">- add security fixes for CVE-2013-1845, CVE-2013-1846, CVE-2013-1847,
  CVE-2013-1849 (#947369)</changelog>
</package>
<package pkgid="8d5677c8af64b6a1ba3cd8d348781a39bac6d1f9" name="subversion-javahl" arch="i386">
  <version epoch="0" ver="1.6.11" rel="12.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-10" date="1334275200">- fix regression in reintegrate merge fixes (#691375)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-11" date="1365033600">- add security fixes for CVE-2013-1845, CVE-2013-1846, CVE-2013-1847,
  CVE-2013-1849 (#947370)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-12" date="1392249600">- add security fixes for CVE-2013-1968, CVE-2013-2112, CVE-2014-0032</changelog>
</package>
<package pkgid="4ffc31b5094f57b223939ddc71affc5cbc94d816" name="subversion-javahl" arch="i386">
  <version epoch="0" ver="1.6.11" rel="7.el5_6.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.2" date="1299016800">- add security fix for CVE-2011-0715 (#681171)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.3" date="1299016801">- add fix for svnadmin hotcopy (#681522)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.4" date="1306879200">- add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 (#709218)</changelog>
</package>
<package pkgid="f461334c881c11ddc4f52f2c1d40120d062df691" name="subversion-perl" arch="i386">
  <version epoch="0" ver="1.6.11" rel="11.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-9" date="1333144800">- add reintegrate merge parent dir access fixes (#691375)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-10" date="1334268000">- fix regression in reintegrate merge fixes (#691375)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-11" date="1365026400">- add security fixes for CVE-2013-1845, CVE-2013-1846, CVE-2013-1847,
  CVE-2013-1849 (#947369)</changelog>
</package>
<package pkgid="175c1599c4234fc36c8063d38c47a9de4513ec14" name="subversion-perl" arch="i386">
  <version epoch="0" ver="1.6.11" rel="12.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-10" date="1334275200">- fix regression in reintegrate merge fixes (#691375)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-11" date="1365033600">- add security fixes for CVE-2013-1845, CVE-2013-1846, CVE-2013-1847,
  CVE-2013-1849 (#947370)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-12" date="1392249600">- add security fixes for CVE-2013-1968, CVE-2013-2112, CVE-2014-0032</changelog>
</package>
<package pkgid="fdac755c32a598bf3328419d178d42745c9d72b2" name="subversion-perl" arch="i386">
  <version epoch="0" ver="1.6.11" rel="7.el5_6.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.2" date="1299016800">- add security fix for CVE-2011-0715 (#681171)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.3" date="1299016801">- add fix for svnadmin hotcopy (#681522)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.4" date="1306879200">- add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 (#709218)</changelog>
</package>
<package pkgid="ab833508f36294c46fc4909e5325ca160744f65b" name="subversion-ruby" arch="i386">
  <version epoch="0" ver="1.6.11" rel="11.el5_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-9" date="1333144800">- add reintegrate merge parent dir access fixes (#691375)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-10" date="1334268000">- fix regression in reintegrate merge fixes (#691375)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-11" date="1365026400">- add security fixes for CVE-2013-1845, CVE-2013-1846, CVE-2013-1847,
  CVE-2013-1849 (#947369)</changelog>
</package>
<package pkgid="c9b1674da0fba09f38ffdb55ad3a15b195295f09" name="subversion-ruby" arch="i386">
  <version epoch="0" ver="1.6.11" rel="12.el5_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-10" date="1334275200">- fix regression in reintegrate merge fixes (#691375)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-11" date="1365033600">- add security fixes for CVE-2013-1845, CVE-2013-1846, CVE-2013-1847,
  CVE-2013-1849 (#947370)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-12" date="1392249600">- add security fixes for CVE-2013-1968, CVE-2013-2112, CVE-2014-0032</changelog>
</package>
<package pkgid="54ef04eccdfce34f73bb410a52043cc53a7fd23c" name="subversion-ruby" arch="i386">
  <version epoch="0" ver="1.6.11" rel="7.el5_6.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.2" date="1299016800">- add security fix for CVE-2011-0715 (#681171)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.3" date="1299016801">- add fix for svnadmin hotcopy (#681522)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7.4" date="1306879200">- add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 (#709218)</changelog>
</package>
<package pkgid="5597b1493d52b7c4858b0a6b10fd8ef93f663112" name="sudo" arch="i386">
  <version epoch="0" ver="1.7.2p1" rel="13.el5"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-11" date="1319752800">- backported selinux support from 1.7.4p5 (#477185, #673157)
- fixed bug in Runas_Spec group matching (#627543)
- disable `sudo -l' output word wrapping if the output
  is piped (#697111)
- fixed overwriting of errno after execve failure (#673157)
- fixed segmentation fault (#673072)
- add a sudoers entry to the nsswitch.conf file
  on install (and delete it on uninstall) (#617061)
  Resolves: rhbz#697111
  Resolves: rhbz#673157
  Resolves: rhbz#673072
  Resolves: rhbz#627543
  Resolves: rhbz#617061
  Resolves: rhbz#477185</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-12" date="1322517600">- added patch for CVE-2011-0010
  Resolves: rhbz#757157</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-13" date="1322604000">- patch: parse ldap.conf more closely to nss_ldap
  Resolves: rhbz#750318</changelog>
</package>
<package pkgid="5896648f4c0b4ff0fe6fee4c8fbf7d4d5f0dc1c0" name="sudo" arch="i386">
  <version epoch="0" ver="1.7.2p1" rel="14.el5_8.2"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-14" date="1341007200">- added patch for CVE-2012-2337
  Resolves: rhbz#829766</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-14.1" date="1343772000">- don't remove the sudoers: line from nsswitch.conf on update
- use safe temporary file for nsswitch.conf
- call restorecon after modifying nsswitch.conf
- fixed command escaping
- patch: Use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK
  Resolves: rhbz#842759
  Resolves: rhbz#844420
  Resolves: rhbz#844419
  Resolves: rhbz#844418
  Resolves: rhbz#844443</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-14.2" date="1343858400">- added a workaround for a race condition in handling child processes 
  Resolves: rhbz#844978</changelog>
</package>
<package pkgid="91e54dba36b00aa573aae29f16e01f1260d25608" name="sudo" arch="i386">
  <version epoch="0" ver="1.7.2p1" rel="14.el5_8"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-12" date="1322517600">- added patch for CVE-2011-0010
  Resolves: rhbz#757157</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-13" date="1322604000">- patch: parse ldap.conf more closely to nss_ldap
  Resolves: rhbz#750318</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-14" date="1341007200">- added patch for CVE-2012-2337
  Resolves: rhbz#829766</changelog>
</package>
<package pkgid="bcb43d5f0772924821dca17dbf8e2b3095c7b2c4" name="sudo" arch="i386">
  <version epoch="0" ver="1.7.2p1" rel="28.el5"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-26" date="1369180800">- updated sudoers man-page to clarify the behavior of the user
  negation operator and the behavior of wildcard matching in command
  specifications
  Resolves: rhbz#846118
  Resolves: rhbz#856902</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-27" date="1369353600">- visudo: fixed incorrect warning and parse error regarding
  undefined aliases which were in fact defined
  Resolves: rhbz#849679
  Resolves: rhbz#905624</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-28" date="1370563200">- backported fixes for CVE-2013-1775 CVE-2013-1776 CVE-2013-2776 CVE-2013-2777
  Resolves: rhbz#968221</changelog>
</package>
<package pkgid="6282f3dafe947f6bc95c742c74c0d15c0066ef2d" name="sudo" arch="i386">
  <version epoch="0" ver="1.7.2p1" rel="29.el5_10"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-27" date="1369353600">- visudo: fixed incorrect warning and parse error regarding
  undefined aliases which were in fact defined
  Resolves: rhbz#849679
  Resolves: rhbz#905624</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-28" date="1370563200">- backported fixes for CVE-2013-1775 CVE-2013-1776 CVE-2013-2776 CVE-2013-2777
  Resolves: rhbz#968221</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.7.2p1-29" date="1393977600">- added patch for CVE-2014-0106: certain environment variables not
  sanitized when env_reset is disabled
  Resolves: rhbz#1072210</changelog>
</package>
<package pkgid="27864a533f69fd3f3ac8e141e15c3515a7fcda32" name="sysstat" arch="i386">
  <version epoch="0" ver="7.0.2" rel="11.el5"/>
  <changelog author="Ivana Hutarova Varekova &lt;varekova@redhat.com&gt; - 7.0.2-9" date="1306792800">- Related: #622557
  sar interrupt count goes backward</changelog>
  <changelog author="Ivana Hutarova Varekova &lt;varekova@redhat.com&gt; - 7.0.2-10" date="1309298400">- Resolves: #716959
  fix cve-2007-3852 - sysstat insecure temporary file usage</changelog>
  <changelog author="Ivana Hutarova Varekova &lt;varekova@redhat.com&gt; - 7.0.2-11" date="1309298401">- Related: #716959                                                                                                                                                                                             
  fix cve-2007-3852 - sysstat insecure temporary file usage</changelog>
</package>
<package pkgid="8d45fd879356ff18276c28792f6ffac8e5050f87" name="system-config-printer" arch="i386">
  <version epoch="0" ver="0.7.32.10" rel="1.el5_7.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.7.32.9-1" date="1218146400">- 0.7.32.9:
  - Fixed Forward button sensitivity when Back pressed (bug #217516).
  - Don't pre-select make and model when not discoverable
    (bug #217522).
  - Fixed typo in show_HTTP_Error (bug #217538).
  - Fixed hex digits list in percentDecode (bug #224140).
  - Driver existence check improvements (part of bug #227662).
  - Fixed traceback in driver existence check (part of bug #227662).
  - Driver existence check: give up if there are HTML entities
    (bug #227662).
  - Prevent username/password loss when applying changes
    (bug #227663).
  - Handle unknown job options (bug #227678).
  - Case-insensitive Device ID matching (part of bug #228506).
  - Preserve case in debug output (part of bug #228506).
  - Fixed logic for matching against Device ID (part of
    bug #228506).
  - Handle applying changes in the correct place (bug #229474).
  - Reconnect to CUPS when needed (bug #229861).
  - Delete button should not be sensitive for remote queues
    (bug #250387).
  - Fixed SMB browsing problem (bug #452853).
  - Fixed expandability of servers in the SMB browser (part of
    bug #452853).
  - Decrease minimum width of window (bug #229473).
  - Moved widgets around to avoid window being too wide (part of
    bug #229473).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.7.32.10-1" date="1228428000">- 0.7.32.10:
  - Don't call populateList() after saving printer, just update the
    printer we changed.  This prevents a GTK+ crash (bug #229474).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.7.32.10-1:.1" date="1313013600">- Applied patch to fix CVE-2011-2899 (bug #728348).</changelog>
</package>
<package pkgid="71141d17a5a64fcdc78bba2391c3e70ef35b59a6" name="system-config-printer-libs" arch="i386">
  <version epoch="0" ver="0.7.32.10" rel="1.el5_7.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.7.32.9-1" date="1218146400">- 0.7.32.9:
  - Fixed Forward button sensitivity when Back pressed (bug #217516).
  - Don't pre-select make and model when not discoverable
    (bug #217522).
  - Fixed typo in show_HTTP_Error (bug #217538).
  - Fixed hex digits list in percentDecode (bug #224140).
  - Driver existence check improvements (part of bug #227662).
  - Fixed traceback in driver existence check (part of bug #227662).
  - Driver existence check: give up if there are HTML entities
    (bug #227662).
  - Prevent username/password loss when applying changes
    (bug #227663).
  - Handle unknown job options (bug #227678).
  - Case-insensitive Device ID matching (part of bug #228506).
  - Preserve case in debug output (part of bug #228506).
  - Fixed logic for matching against Device ID (part of
    bug #228506).
  - Handle applying changes in the correct place (bug #229474).
  - Reconnect to CUPS when needed (bug #229861).
  - Delete button should not be sensitive for remote queues
    (bug #250387).
  - Fixed SMB browsing problem (bug #452853).
  - Fixed expandability of servers in the SMB browser (part of
    bug #452853).
  - Decrease minimum width of window (bug #229473).
  - Moved widgets around to avoid window being too wide (part of
    bug #229473).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.7.32.10-1" date="1228428000">- 0.7.32.10:
  - Don't call populateList() after saving printer, just update the
    printer we changed.  This prevents a GTK+ crash (bug #229474).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.7.32.10-1:.1" date="1313013600">- Applied patch to fix CVE-2011-2899 (bug #728348).</changelog>
</package>
<package pkgid="5cf1944827d841ec05854aaf1d97a0c1ec8f0176" name="systemtap" arch="i386">
  <version epoch="0" ver="1.3" rel="4.el5_6.1"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-3" date="1289340000">- rhbz648420.patch</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-4" date="1289858400">- CVE-2010-4170
- CVE-2010-4171</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-4.1" date="1305583200">- bz702687 (patch)</changelog>
</package>
<package pkgid="0594e4fe319a89f1139d212a8c1f7fccc7a5e72a" name="systemtap" arch="i386">
  <version epoch="0" ver="1.3" rel="9.el5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-7" date="1307052000">- bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-8" date="1307138400">- Improved bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-9" date="1310162400">- bz716489 (patch)</changelog>
</package>
<package pkgid="a58770dfcbac8f79657e96c1d03066676942ed0f" name="systemtap" arch="i386">
  <version epoch="0" ver="1.6" rel="7.el5_8"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.6-5" date="1322085600">- Backported fixes for rhbz756432, rhbz757118, rhbz757723, rhbz757802</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.6-6" date="1323122400">- Add missing commit for rhbz757802</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.6-7" date="1330034400">- CVE-2012-0875</changelog>
</package>
<package pkgid="146d5dc52d14a65a40693e9f9a03035f67d3d765" name="systemtap-client" arch="i386">
  <version epoch="0" ver="1.3" rel="4.el5_6.1"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-3" date="1289340000">- rhbz648420.patch</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-4" date="1289858400">- CVE-2010-4170
- CVE-2010-4171</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-4.1" date="1305583200">- bz702687 (patch)</changelog>
</package>
<package pkgid="718959c5a1ca487190543d84b94c1d927d3ca348" name="systemtap-client" arch="i386">
  <version epoch="0" ver="1.3" rel="9.el5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-7" date="1307052000">- bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-8" date="1307138400">- Improved bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-9" date="1310162400">- bz716489 (patch)</changelog>
</package>
<package pkgid="cdef65c7932d8cbb35a77caa70ac816e119d098d" name="systemtap-initscript" arch="i386">
  <version epoch="0" ver="1.3" rel="4.el5_6.1"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-3" date="1289340000">- rhbz648420.patch</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-4" date="1289858400">- CVE-2010-4170
- CVE-2010-4171</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-4.1" date="1305583200">- bz702687 (patch)</changelog>
</package>
<package pkgid="3b68bc1f985402fb98bb1916c5992b03206fdc63" name="systemtap-initscript" arch="i386">
  <version epoch="0" ver="1.3" rel="9.el5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-7" date="1307052000">- bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-8" date="1307138400">- Improved bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-9" date="1310162400">- bz716489 (patch)</changelog>
</package>
<package pkgid="bee938ea22ec6db7aa57cf4f9ce31260238fb955" name="systemtap-initscript" arch="i386">
  <version epoch="0" ver="1.6" rel="7.el5_8"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.6-5" date="1322085600">- Backported fixes for rhbz756432, rhbz757118, rhbz757723, rhbz757802</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.6-6" date="1323122400">- Add missing commit for rhbz757802</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.6-7" date="1330034400">- CVE-2012-0875</changelog>
</package>
<package pkgid="a37e1cfd577b3e943d1273ffdc525a7b566d0212" name="systemtap-runtime" arch="i386">
  <version epoch="0" ver="1.3" rel="4.el5_6.1"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-3" date="1289340000">- rhbz648420.patch</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-4" date="1289858400">- CVE-2010-4170
- CVE-2010-4171</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-4.1" date="1305583200">- bz702687 (patch)</changelog>
</package>
<package pkgid="60fc9e1533d9f9deceac98143bc00b5900d33a22" name="systemtap-runtime" arch="i386">
  <version epoch="0" ver="1.3" rel="9.el5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-7" date="1307052000">- bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-8" date="1307138400">- Improved bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-9" date="1310162400">- bz716489 (patch)</changelog>
</package>
<package pkgid="df078f2ba9ec14c83036ae0a9dbe603e9064af2d" name="systemtap-runtime" arch="i386">
  <version epoch="0" ver="1.6" rel="7.el5_8"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.6-5" date="1322085600">- Backported fixes for rhbz756432, rhbz757118, rhbz757723, rhbz757802</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.6-6" date="1323122400">- Add missing commit for rhbz757802</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.6-7" date="1330034400">- CVE-2012-0875</changelog>
</package>
<package pkgid="4b9e664a6aa757b7c503f7aff7680139e7d4c40b" name="systemtap-sdt-devel" arch="i386">
  <version epoch="0" ver="1.3" rel="4.el5_6.1"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-3" date="1289340000">- rhbz648420.patch</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-4" date="1289858400">- CVE-2010-4170
- CVE-2010-4171</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-4.1" date="1305583200">- bz702687 (patch)</changelog>
</package>
<package pkgid="d202c6fd9c69d3bd68983c94d7f9f599f9d1c4f7" name="systemtap-sdt-devel" arch="i386">
  <version epoch="0" ver="1.3" rel="9.el5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-7" date="1307052000">- bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-8" date="1307138400">- Improved bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-9" date="1310162400">- bz716489 (patch)</changelog>
</package>
<package pkgid="2aa20ccf9646731686e2d3737725edc806345b28" name="systemtap-sdt-devel" arch="i386">
  <version epoch="0" ver="1.6" rel="7.el5_8"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.6-5" date="1322085600">- Backported fixes for rhbz756432, rhbz757118, rhbz757723, rhbz757802</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.6-6" date="1323122400">- Add missing commit for rhbz757802</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.6-7" date="1330034400">- CVE-2012-0875</changelog>
</package>
<package pkgid="5d44a7add528a443ff200f0990b8042f1ec07159" name="systemtap-server" arch="i386">
  <version epoch="0" ver="1.3" rel="4.el5_6.1"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-3" date="1289340000">- rhbz648420.patch</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-4" date="1289858400">- CVE-2010-4170
- CVE-2010-4171</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-4.1" date="1305583200">- bz702687 (patch)</changelog>
</package>
<package pkgid="9bb608ae766fa8059f3e068df3868807940fbd33" name="systemtap-server" arch="i386">
  <version epoch="0" ver="1.3" rel="9.el5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-7" date="1307052000">- bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-8" date="1307138400">- Improved bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-9" date="1310162400">- bz716489 (patch)</changelog>
</package>
<package pkgid="962ea8da91962a4e8ce1512573c91a168c869bf9" name="systemtap-server" arch="i386">
  <version epoch="0" ver="1.6" rel="7.el5_8"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.6-5" date="1322085600">- Backported fixes for rhbz756432, rhbz757118, rhbz757723, rhbz757802</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.6-6" date="1323122400">- Add missing commit for rhbz757802</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.6-7" date="1330034400">- CVE-2012-0875</changelog>
</package>
<package pkgid="76e183213fbab4528c327292e70c510c15cb8ec9" name="systemtap-testsuite" arch="i386">
  <version epoch="0" ver="1.3" rel="4.el5_6.1"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-3" date="1289340000">- rhbz648420.patch</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.3-4" date="1289858400">- CVE-2010-4170
- CVE-2010-4171</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-4.1" date="1305583200">- bz702687 (patch)</changelog>
</package>
<package pkgid="d88c93cc671c0ef4c66dc49fc3aeee8d91572c28" name="systemtap-testsuite" arch="i386">
  <version epoch="0" ver="1.3" rel="9.el5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-7" date="1307052000">- bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-8" date="1307138400">- Improved bz699342 (patch)</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.3-9" date="1310162400">- bz716489 (patch)</changelog>
</package>
<package pkgid="98739508aac06da93005793c746d8c86db327c93" name="systemtap-testsuite" arch="i386">
  <version epoch="0" ver="1.6" rel="7.el5_8"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.6-5" date="1322085600">- Backported fixes for rhbz756432, rhbz757118, rhbz757723, rhbz757802</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 1.6-6" date="1323122400">- Add missing commit for rhbz757802</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 1.6-7" date="1330034400">- CVE-2012-0875</changelog>
</package>
<package pkgid="df4c58144ca89a273d21749b96801d439c387287" name="tcl" arch="i386">
  <version epoch="0" ver="8.4.13" rel="6.el5"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 8.4.13-4" date="1237932000">- fix paths for x86_64 architectures
- Resolves: rhbz#428254</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 8.4.13-5" date="1335823200">- Threaded / nonthreaded versions of tcl are now switchable through alternatives
  Resolves: rhbz#478961</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 8.4.13-6" date="1350597600">- Fixed infinite loop in regex NFA optimization code
  Resolves: CVE-2007-4772
- Fixed O(N^2) compile time (and huge memory requirements) for some regexps
  Resolves: CVE-2007-6067</changelog>
</package>
<package pkgid="cd02b7afb7801f7f5333b31a0efe730a497da33f" name="tcl-devel" arch="i386">
  <version epoch="0" ver="8.4.13" rel="6.el5"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 8.4.13-4" date="1237932000">- fix paths for x86_64 architectures
- Resolves: rhbz#428254</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 8.4.13-5" date="1335823200">- Threaded / nonthreaded versions of tcl are now switchable through alternatives
  Resolves: rhbz#478961</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 8.4.13-6" date="1350597600">- Fixed infinite loop in regex NFA optimization code
  Resolves: CVE-2007-4772
- Fixed O(N^2) compile time (and huge memory requirements) for some regexps
  Resolves: CVE-2007-6067</changelog>
</package>
<package pkgid="b84f024e287c5bf17e5c86bb1b6d01831057d220" name="tcl-html" arch="i386">
  <version epoch="0" ver="8.4.13" rel="6.el5"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 8.4.13-4" date="1237932000">- fix paths for x86_64 architectures
- Resolves: rhbz#428254</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 8.4.13-5" date="1335823200">- Threaded / nonthreaded versions of tcl are now switchable through alternatives
  Resolves: rhbz#478961</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 8.4.13-6" date="1350597600">- Fixed infinite loop in regex NFA optimization code
  Resolves: CVE-2007-4772
- Fixed O(N^2) compile time (and huge memory requirements) for some regexps
  Resolves: CVE-2007-6067</changelog>
</package>
<package pkgid="d1fe3f0288f82cb74dde2323722ff91cdfec860b" name="tdb-tools" arch="i386">
  <version epoch="0" ver="1.2.10" rel="1.el5"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.2.1-6" date="1302645600">- Resolves: rhbz#693785 - tdb_extend() can cause a memory-usage explosion if
-                         the size of its entries are very large</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.2.1-7" date="1334959200">- Resolves: rhbz#736112 - tdb-tools subpackage conflicts with samba</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.2.10-1" date="1341525600">- Rebase to version 1.2.10 to support new samba 3.6.6
- Resolves: rhbz#837865 - Rebase libtdb to version 1.2.10 in RHEL 5.9</changelog>
</package>
<package pkgid="6ae3806a930e6c11f65e28d20a73ddf4bfe6315c" name="tetex" arch="i386">
  <version epoch="0" ver="3.0" rel="33.15.el5_8.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.14" date="1326492000">- fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
  CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15" date="1326924000">- apply patch for CVE-2010-3702,3704 (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15.el5_9.1" date="1345500000">- more robust fix for CVE-2010-3702 (#773178)</changelog>
</package>
<package pkgid="221bb9a2d9413f0a79ae6ef6e373cd0a5bdc9de4" name="tetex-afm" arch="i386">
  <version epoch="0" ver="3.0" rel="33.15.el5_8.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.14" date="1326492000">- fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
  CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15" date="1326924000">- apply patch for CVE-2010-3702,3704 (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15.el5_9.1" date="1345500000">- more robust fix for CVE-2010-3702 (#773178)</changelog>
</package>
<package pkgid="720cdfebe29bec7764478597419b22fc06436220" name="tetex-doc" arch="i386">
  <version epoch="0" ver="3.0" rel="33.15.el5_8.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.14" date="1326492000">- fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
  CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15" date="1326924000">- apply patch for CVE-2010-3702,3704 (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15.el5_9.1" date="1345500000">- more robust fix for CVE-2010-3702 (#773178)</changelog>
</package>
<package pkgid="aeb9de6d03b5accbf211850b505f6e645ab6768a" name="tetex-dvips" arch="i386">
  <version epoch="0" ver="3.0" rel="33.15.el5_8.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.14" date="1326492000">- fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
  CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15" date="1326924000">- apply patch for CVE-2010-3702,3704 (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15.el5_9.1" date="1345500000">- more robust fix for CVE-2010-3702 (#773178)</changelog>
</package>
<package pkgid="e54fe7053768cc8968ce2e4abe86e0ef58b0e6e0" name="tetex-fonts" arch="i386">
  <version epoch="0" ver="3.0" rel="33.15.el5_8.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.14" date="1326492000">- fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
  CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15" date="1326924000">- apply patch for CVE-2010-3702,3704 (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15.el5_9.1" date="1345500000">- more robust fix for CVE-2010-3702 (#773178)</changelog>
</package>
<package pkgid="183f86f734727c107c74bcbb725c94c811d3b565" name="tetex-latex" arch="i386">
  <version epoch="0" ver="3.0" rel="33.15.el5_8.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.14" date="1326492000">- fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
  CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15" date="1326924000">- apply patch for CVE-2010-3702,3704 (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15.el5_9.1" date="1345500000">- more robust fix for CVE-2010-3702 (#773178)</changelog>
</package>
<package pkgid="de8a17f1eb6312da8e6b02f627a4a9de50cee7bb" name="tetex-xdvi" arch="i386">
  <version epoch="0" ver="3.0" rel="33.15.el5_8.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.14" date="1326492000">- fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
  CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15" date="1326924000">- apply patch for CVE-2010-3702,3704 (#773180)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 3.0-33.15.el5_9.1" date="1345500000">- more robust fix for CVE-2010-3702 (#773178)</changelog>
</package>
<package pkgid="60e7cd8136a68bc652def93ac3d06b279f518e89" name="thunderbird" arch="i386">
  <version epoch="0" ver="10.0.10" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349560800">- Update to 10.0.8 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-2" date="1350079200">- Added patches from 10.0.9 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.10-1" date="1351288800">- Update to 10.0.10 ESR</changelog>
</package>
<package pkgid="f51dba93c2db757441432469f4762ce747c33849" name="thunderbird" arch="i386">
  <version epoch="0" ver="10.0.11" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-2" date="1350079200">- Added patches from 10.0.9 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.10-1" date="1351288800">- Update to 10.0.10 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.11-1" date="1353103200">- Update to 10.0.11 ESR</changelog>
</package>
<package pkgid="06e6746147babf2f3143850fc31848c18094e317" name="thunderbird" arch="i386">
  <version epoch="0" ver="10.0.12" rel="3.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.10-1" date="1351288800">- Update to 10.0.10 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.11-1" date="1353103200">- Update to 10.0.11 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.12-3" date="1357336800">- Update to 10.0.12 ESR</changelog>
</package>
<package pkgid="a2b8a64904ec10bf75a5c5f28c34901f31cb90ad" name="thunderbird" arch="i386">
  <version epoch="0" ver="10.0.3" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.1-2" date="1328911200">- Update to 10.0.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.1-3" date="1329429600">- Fixed mozbz#727401</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.3-1" date="1331157600">- Update to 10.0.3 ESR</changelog>
</package>
<package pkgid="0e155c95e772b9791481c1d7b805b1352e7ade08" name="thunderbird" arch="i386">
  <version epoch="0" ver="10.0.4" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.1-3" date="1329429600">- Fixed mozbz#727401</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.3-1" date="1331157600">- Update to 10.0.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.4-1" date="1335132000">- Update to 10.0.4 ESR</changelog>
</package>
<package pkgid="c220229b0771b6a398abe1bbac3932e300b784f8" name="thunderbird" arch="i386">
  <version epoch="0" ver="10.0.5" rel="2.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.3-1" date="1331157600">- Update to 10.0.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.4-1" date="1335132000">- Update to 10.0.4 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.5-2" date="1338588000">- Update to 10.0.5 ESR</changelog>
</package>
<package pkgid="d766a15132193a626b3e17b1c12982fda26b7938" name="thunderbird" arch="i386">
  <version epoch="0" ver="10.0.6" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.4-1" date="1335132000">- Update to 10.0.4 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.5-2" date="1338588000">- Update to 10.0.5 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.6-1" date="1342303200">- Update to 10.0.6 ESR</changelog>
</package>
<package pkgid="9d79a395d284e394c30732a1f85afa8490054848" name="thunderbird" arch="i386">
  <version epoch="0" ver="10.0.7" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.5-2" date="1338588000">- Update to 10.0.5 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.6-1" date="1342303200">- Update to 10.0.6 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.7-1" date="1345932000">- Update to 10.0.7 ESR</changelog>
</package>
<package pkgid="f33b55e8793773542cfdfb286c61a5e68b18dcbb" name="thunderbird" arch="i386">
  <version epoch="0" ver="10.0.8" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.6-1" date="1342303200">- Update to 10.0.6 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.7-1" date="1345932000">- Update to 10.0.7 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349560800">- Update to 10.0.8 ESR</changelog>
</package>
<package pkgid="744ac86debb4b230fa5b997b630a3211cacf80e6" name="thunderbird" arch="i386">
  <version epoch="0" ver="10.0.8" rel="2.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.7-1" date="1345932000">- Update to 10.0.7 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349560800">- Update to 10.0.8 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-2" date="1350079200">- Added patches from 10.0.9 ESR</changelog>
</package>
<package pkgid="90752ca92c8f6ee2f19cdeef715c78ce80ff3b4b" name="thunderbird" arch="i386">
  <version epoch="0" ver="17.0.10" rel="1.el5_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.8-5" date="1375488000">- Update to 17.0.8 ESR
- Added strict aliasing patch (mozbz#821502)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.9-1" date="1379030400">- Update to 17.0.9 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.10-1" date="1383004800">- Update to 17.0.10 ESR</changelog>
</package>
<package pkgid="e79d4f5fbfb71ad9f8bac5bd5a76b9f449b4170a" name="thunderbird" arch="i386">
  <version epoch="0" ver="17.0.3" rel="1.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0-1" date="1353362400">- Update to 17.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-2" date="1358460000">- Update to 17.0.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361052000">- Update to 17.0.3 ESR</changelog>
</package>
<package pkgid="54d83a4ea77f0810ec3b12ed4222fe405403573d" name="thunderbird" arch="i386">
  <version epoch="0" ver="17.0.3" rel="2.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-2" date="1358460000">- Update to 17.0.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361052000">- Update to 17.0.3 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362693600">- Added fix for #848644</changelog>
</package>
<package pkgid="90bec856f3aa4fbfe7630a6b2fc12b73215914dc" name="thunderbird" arch="i386">
  <version epoch="0" ver="17.0.5" rel="1.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361052000">- Update to 17.0.3 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362693600">- Added fix for #848644</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364594400">- Update to 17.0.5 ESR</changelog>
</package>
<package pkgid="4ca7923b366916c9e486215d92eeae3874e81e1a" name="thunderbird" arch="i386">
  <version epoch="0" ver="17.0.6" rel="1.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362693600">- Added fix for #848644</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364594400">- Update to 17.0.5 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-1" date="1368223200">- Update to 17.0.6 ESR</changelog>
</package>
<package pkgid="cdfa375e9bdd30a7e11be8901e836859d6fb8eee" name="thunderbird" arch="i386">
  <version epoch="0" ver="17.0.7" rel="1.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364594400">- Update to 17.0.5 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-1" date="1368223200">- Update to 17.0.6 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.7-1" date="1371852000">- Update to 17.0.7 ESR</changelog>
</package>
<package pkgid="dc1f80ed288934b6c53146cba748915679637509" name="thunderbird" arch="i386">
  <version epoch="0" ver="17.0.8" rel="5.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-1" date="1368223200">- Update to 17.0.6 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.7-1" date="1371852000">- Update to 17.0.7 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.8-5" date="1375480800">- Update to 17.0.8 ESR
- Added strict aliasing patch (mozbz#821502)</changelog>
</package>
<package pkgid="b637d54a82e467a831bd7f83fc0dea1e5aa54634" name="thunderbird" arch="i386">
  <version epoch="0" ver="17.0.9" rel="1.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.7-1" date="1371859200">- Update to 17.0.7 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.8-5" date="1375488000">- Update to 17.0.8 ESR
- Added strict aliasing patch (mozbz#821502)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.9-1" date="1379030400">- Update to 17.0.9 ESR</changelog>
</package>
<package pkgid="e7ce20ad8c2361bb25f5f2cd952e16a5bb83f7c7" name="thunderbird" arch="i386">
  <version epoch="0" ver="2.0.0.24" rel="18.el5_6"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-16" date="1302213600">- Added fixes from 1.9.1.19</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-17" date="1303164000">- Added fixes for mozbz#645565 and mozbz#646460</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-18" date="1308088800">- Added fixes from 1.9.2.18</changelog>
</package>
<package pkgid="c5597487006802e2f360565b85ffa79cc5b20a41" name="thunderbird" arch="i386">
  <version epoch="0" ver="2.0.0.24" rel="21.el5"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-18" date="1308088800">- Added fixes from 1.9.2.18</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-20" date="1312495200">- Added fixes from 1.9.2.20</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-21" date="1313445600">- Disabled SVG support</changelog>
</package>
<package pkgid="67788d4e7cff81326629a932cb3fcd7762fc569c" name="thunderbird" arch="i386">
  <version epoch="0" ver="2.0.0.24" rel="24.el5"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-21" date="1313445600">- Disabled SVG support</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-23" date="1314741600">- Added fix for mozbz#682927</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-24" date="1314828000">- Udated fix for mozbz#682927</changelog>
</package>
<package pkgid="2d16fd01c7e024b9c0384612f7da9c5d725d0e52" name="thunderbird" arch="i386">
  <version epoch="0" ver="2.0.0.24" rel="25.el5"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-23" date="1314741600">- Added fix for mozbz#682927</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-24" date="1314828000">- Udated fix for mozbz#682927</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-25" date="1315000800">- Added fix for mozbz#683449 - Remove the exemptions 
  for the Staat der Nederlanden root</changelog>
</package>
<package pkgid="c4cbbc0b7cca708f40bc5e176059df0dedbea941" name="thunderbird" arch="i386">
  <version epoch="0" ver="2.0.0.24" rel="26.el5_7"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-24" date="1314828000">- Udated fix for mozbz#682927</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-25" date="1315000800">- Added fix for mozbz#683449 - Remove the exemptions 
  for the Staat der Nederlanden root</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.0.0.24-26" date="1317160800">- Added fixes from 1.9.2.23</changelog>
</package>
<package pkgid="aba91b5bace6440717a6e25e024aee0043e7ab60" name="thunderbird" arch="i386">
  <version epoch="0" ver="2.0.0.24" rel="27.el5_7"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-25" date="1315000800">- Added fix for mozbz#683449 - Remove the exemptions 
  for the Staat der Nederlanden root</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.0.0.24-26" date="1317160800">- Added fixes from 1.9.2.23</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-27" date="1320184800">- Added fixes from 1.9.2.24</changelog>
</package>
<package pkgid="68709e39bb1a60639a6617ff3ffdedba4e83d19f" name="thunderbird" arch="i386">
  <version epoch="0" ver="2.0.0.24" rel="28.el5_7"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.0.0.24-26" date="1317160800">- Added fixes from 1.9.2.23</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-27" date="1320184800">- Added fixes from 1.9.2.24</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.0.0.24-28" date="1327960800">- Added fixes from 1.9.2.26</changelog>
</package>
<package pkgid="7ef424d3f4fcd293d4535198e29e1131accd2a9e" name="thunderbird" arch="i386">
  <version epoch="0" ver="24.2.0" rel="2.el5_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.9-1" date="1379030400">- Update to 17.0.9 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.1.1-1" date="1386201600">- Update to 24.1.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.2.0-2" date="1386374400">- Update to 24.2.0 ESR</changelog>
</package>
<package pkgid="3b3ec2bf0bea9fa7bd72fe35092ee91a4e9a4673" name="thunderbird" arch="i386">
  <version epoch="0" ver="24.3.0" rel="2.el5_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.2.0-2" date="1386374400">- Update to 24.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.3.0-1" date="1391212800">- Update to 24.3.0</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.3.0-2" date="1391299200">- Update to 24.3.0 ESR Build 2</changelog>
</package>
<package pkgid="5d0dba226d412d052515b59f01ec25dd15bc1a12" name="thunderbird" arch="i386">
  <version epoch="0" ver="24.4.0" rel="1.el5_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.3.0-1" date="1391212800">- Update to 24.3.0</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.3.0-2" date="1391299200">- Update to 24.3.0 ESR Build 2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.4.0-1" date="1395100800">- Update to 24.4.0</changelog>
</package>
<package pkgid="41ae6cc8828a4542da6d34f54a31d9d1df61ed81" name="thunderbird" arch="i386">
  <version epoch="0" ver="24.5.0" rel="1.el5_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 24.3.0-2" date="1391299200">- Update to 24.3.0 ESR Build 2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.4.0-1" date="1395100800">- Update to 24.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.5.0-1" date="1398470400">- Update to 24.5.0</changelog>
</package>
<package pkgid="8a4caeeb925a8d949afeb93b20a2dad609434e9d" name="thunderbird" arch="i386">
  <version epoch="0" ver="24.6.0" rel="1.el5_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.4.0-1" date="1395100800">- Update to 24.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.5.0-1" date="1398470400">- Update to 24.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.6.0-1" date="1402099200">- Update to 24.6.0</changelog>
</package>
<package pkgid="270a7a692aa1b7e2419266063bcde123cf375337" name="thunderbird" arch="i386">
  <version epoch="0" ver="24.7.0" rel="1.el5_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.5.0-1" date="1398470400">- Update to 24.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.6.0-1" date="1402099200">- Update to 24.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.7.0-1" date="1405728000">- Update to 24.7.0</changelog>
</package>
<package pkgid="4fbea82bd8bf21f38391608343350066deacf188" name="thunderbird" arch="i386">
  <version epoch="0" ver="24.8.0" rel="1.el5_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.6.0-1" date="1402099200">- Update to 24.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.7.0-1" date="1405728000">- Update to 24.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 24.8.0-1" date="1409270400">- Update to 24.8.0</changelog>
</package>
<package pkgid="5e9fc92f7e417347a8ad0f2d818b171ae00ace2f" name="thunderbird" arch="i386">
  <version epoch="0" ver="31.2.0" rel="2.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.1.1-2" date="1411171200">- Update to 31.1.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.1.1-3" date="1412208000">- Sync preferences with Firefox</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.2.0-2" date="1412726400">- Update to 31.2.0</changelog>
</package>
<package pkgid="0166631e2800214dd683d78cd1271f5bd27f2bb6" name="thunderbird" arch="i386">
  <version epoch="0" ver="31.3.0" rel="1.el5_11"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 31.1.1-3" date="1412208000">- Sync preferences with Firefox</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.2.0-2" date="1412726400">- Update to 31.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.3.0-1" date="1417392000">- Update to 31.3.0</changelog>
</package>
<package pkgid="465ee82e4f68b64989751f7abec54256ffd71dd9" name="thunderbird" arch="i386">
  <version epoch="0" ver="31.4.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.3.0-2" date="1418256000">- Using Python 2.7 for build system</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.3.0-3" date="1419292800">- Fixed problems with dictionaries (mozbz#1097550)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.4.0-1" date="1420934400">- Update to 31.4.0</changelog>
</package>
<package pkgid="57f1c906e636975125815cf8e86ab1fcd006698d" name="thunderbird" arch="i386">
  <version epoch="0" ver="31.5.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.3.0-3" date="1419292800">- Fixed problems with dictionaries (mozbz#1097550)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.4.0-1" date="1420934400">- Update to 31.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.5.0-1" date="1424736000">- Update to 31.5.0</changelog>
</package>
<package pkgid="80d84a8568f822f4fc1d446b422fd01c13012dad" name="thunderbird" arch="i386">
  <version epoch="0" ver="31.6.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.4.0-1" date="1420934400">- Update to 31.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.5.0-1" date="1424736000">- Update to 31.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.6.0-1" date="1427846400">- Update to 31.6.0</changelog>
</package>
<package pkgid="0915291f170f7a1226585c5ee68600a5554a243b" name="thunderbird" arch="i386">
  <version epoch="0" ver="31.7.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.5.0-1" date="1424736000">- Update to 31.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.6.0-1" date="1427846400">- Update to 31.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.7.0-1" date="1431302400">- Update to 31.7.0</changelog>
</package>
<package pkgid="cdd057a959e6b070f4ba5bfa0743a1c0e1adf131" name="thunderbird" arch="i386">
  <version epoch="0" ver="31.8.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.6.0-1" date="1427846400">- Update to 31.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.7.0-1" date="1431302400">- Update to 31.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.8.0-1" date="1437004800">- Update to 31.8.0</changelog>
</package>
<package pkgid="46ba4991576107bc31dfa576673a5addec5c7b9b" name="thunderbird" arch="i386">
  <version epoch="0" ver="38.2.0" rel="4.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.7.0-1" date="1431302400">- Update to 31.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.0-3" date="1436832000">- Rebase to 38.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.2.0-4" date="1439596800">- Update to 38.2.0</changelog>
</package>
<package pkgid="2dd7e094e30e0d7da7467b2abf026add406c8e38" name="thunderbird" arch="i386">
  <version epoch="0" ver="38.3.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.0-3" date="1436832000">- Rebase to 38.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.2.0-4" date="1439596800">- Update to 38.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.3.0-1" date="1443571200">- Update to 38.3.0</changelog>
</package>
<package pkgid="f39fd7710048a669bb0a2c5a31bbba72d9a16242" name="thunderbird" arch="i386">
  <version epoch="0" ver="38.4.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.2.0-4" date="1439596800">- Update to 38.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.3.0-1" date="1443571200">- Update to 38.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.4.0-1" date="1448236800">- Update to 38.4.0</changelog>
</package>
<package pkgid="d53670923a383e25fcfdb46d955cc7d59a2c016a" name="thunderbird" arch="i386">
  <version epoch="0" ver="38.5.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.3.0-1" date="1443571200">- Update to 38.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.4.0-1" date="1448236800">- Update to 38.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.5.0-1" date="1450828800">- Update to 38.5.0</changelog>
</package>
<package pkgid="6c6ba2a711a8d262dc864230fbda2a276022e593" name="thunderbird" arch="i386">
  <version epoch="0" ver="38.6.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.4.0-1" date="1448236800">- Update to 38.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.5.0-1" date="1450828800">- Update to 38.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.6.0-1" date="1455580800">- Update to 38.6.0</changelog>
</package>
<package pkgid="eb72b920779df6a068114beb425559ce9094e219" name="thunderbird" arch="i386">
  <version epoch="0" ver="38.7.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.5.0-1" date="1450828800">- Update to 38.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.6.0-1" date="1455580800">- Update to 38.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.7.0-1" date="1457740800">- Update to 38.7.0</changelog>
</package>
<package pkgid="cfc17f5f93bbe5d91a03cfb30f4d9adbf570a618" name="thunderbird" arch="i386">
  <version epoch="0" ver="38.8.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.6.0-1" date="1455580800">- Update to 38.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.7.0-1" date="1457740800">- Update to 38.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.8.0-1" date="1462579200">- Update to 38.8.0</changelog>
</package>
<package pkgid="ac6713d5b61a3a64748ad133f41f7e3594b962a1" name="thunderbird" arch="i386">
  <version epoch="0" ver="45.2" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.1.0-5" date="1465257600">- Do not add symlinks to some langpacks</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.1.1-1" date="1465257601">- Update to 45.1.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.2-1" date="1467244800">- Update to 45.2</changelog>
</package>
<package pkgid="29cd15b81fc7426493cf63de8fefabcc59696f8b" name="thunderbird" arch="i386">
  <version epoch="0" ver="45.3.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.1.1-1" date="1465257600">- Update to 45.1.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.2-1" date="1467244800">- Update to 45.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.3.0-1" date="1472256000">- Update to 45.3.0</changelog>
</package>
<package pkgid="4bcfca50fc126bd45ee13ca3bcae4dda802b49dd" name="thunderbird" arch="i386">
  <version epoch="0" ver="45.4.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.2-1" date="1467244800">- Update to 45.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.3.0-1" date="1472256000">- Update to 45.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-1" date="1475193600">- Update to 45.4.0</changelog>
</package>
<package pkgid="a3326c883c30c930f650e092cc1ba007779b8728" name="thunderbird" arch="i386">
  <version epoch="0" ver="45.5.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.3.0-1" date="1472256000">- Update to 45.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-1" date="1475193600">- Update to 45.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1479513600">- Update to 45.5.0</changelog>
</package>
<package pkgid="0bde7133525f5102d5787bf86ea73a236316dd03" name="thunderbird" arch="i386">
  <version epoch="0" ver="45.5.1" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-1" date="1475193600">- Update to 45.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1479513600">- Update to 45.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480636800">- Update to 45.5.1</changelog>
</package>
<package pkgid="2b720805b676ce8b2dd804db02fd1726d0f83f08" name="thunderbird" arch="i386">
  <version epoch="0" ver="45.6.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1479513600">- Update to 45.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480636800">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481932800">- Update to the latest upstream (45.6.0)</changelog>
</package>
<package pkgid="73c70668d75f90392c018cfe4def8b7ec19be144" name="thunderbird" arch="i386">
  <version epoch="0" ver="45.7.0" rel="1.el5_11"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480636800">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481932800">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485475200">- Update to 45.7.0</changelog>
</package>
<package pkgid="e585179fb67229d7399aa16d8f80c0dc9eea5a94" name="thunderbird" arch="i386">
  <version epoch="0" ver="45.8.0" rel="1.el5_11"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481932800">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485475200">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488931200">- Update to 45.8.0</changelog>
</package>
<package pkgid="036854615a8e6f2302bdcb209389ec1b5b7e1e03" name="tkinter" arch="i386">
  <version epoch="0" ver="2.4.3" rel="46.el5_8.2"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46" date="1324504800">- add alias "en_IN" -&gt; "en_IN.ISO8859-1" to locale (patch 213)
Resolves: rhbz#708292</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46.el5_8.1" date="1332972000">- distutils.commands.register: create ~/.pypirc securely
Resolves: CVE-2011-4944
- send encoding in SimpleHTTPServer.list_directory to protect IE7 against
potential XSS attacks
Resolves: CVE-2011-4940
- oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
variable, to provide an opt-in way to protect against denial of service
attacks due to hash collisions within the dict and set types
Resolves: CVE-2012-1150</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.4.3-46.el5_8.2" date="1335823200">- if hash randomization is enabled, also enable it within pyexpat
Resolves: CVE-2012-0876</changelog>
</package>
<package pkgid="acc66ab1d7ed005109498f168dccff63c8f8e4f6" name="tomcat5" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.22.el5_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.18" date="1305756000">- Resolves: rhbz 717457 - tomcat5 NPE on start</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.19" date="1309298400">- Resolves: rhbz 717456, rhbz 717459</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.22" date="1320789600">- Resolves: CVE-2011-0013 rhbz 675931
- Resolves: CVE-2010-3718 rhbz 675931
- Resolves: CVE-2011-1184 rhbz 744983
- Resolves: CVE-2011-2204 rhbz 719181</changelog>
</package>
<package pkgid="03186c26ef6a31f56551d731a60722fcc5ab21f6" name="tomcat5" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.31.el5_8"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.27" date="1320703200">- Resolves CVE-2011-0013 rhbz 675933
- Resolves CVE-2011-3718 rhbz 675933</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.30" date="1331330400">- Resolves: CVE-2012-0022, CVE-2011-4858</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.31" date="1333058400">- Resolves: CVE-2012 regression. Changed patch file.</changelog>
</package>
<package pkgid="c4162d92727db32c194a8f5ee8d29e206870dbf7" name="tomcat5" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.38.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.36" date="1344549600">- Related: rhbz#543995, rhbz#691833, rhbz#689924, rhbz#578648, rhbz#530089</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.37" date="1344549601">- Related: rhbz#543995</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
</package>
<package pkgid="5d2c3bc7061b92d44f832358d79634fbeacd35d4" name="tomcat5" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.40.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.39" date="1369173600">- Resolves: CVE-2013-1976 Improper TOMCAT_LOG management in 
- initscript. Change location of TOMCAT_LOG to /var/log so
- only root can write to it. Touching TOMCAT_LOG is no longer 
- required during initscript startup. Permissions and ownership
- changed to 0755 tomcat:root for logdir</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.40" date="1369346400">- Related: CVE-2013-1976 It was found during additional testing
- that the tomcat5 init may fail to start because the user
- shell is set to sbin/nologin. Fixed in init scrip. SU now
- uses -s /bin/sh during startup</changelog>
</package>
<package pkgid="af28c0b694dce53a8ea50ff35ce67746e1a325c1" name="tomcat5-admin-webapps" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.22.el5_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.18" date="1305756000">- Resolves: rhbz 717457 - tomcat5 NPE on start</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.19" date="1309298400">- Resolves: rhbz 717456, rhbz 717459</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.22" date="1320789600">- Resolves: CVE-2011-0013 rhbz 675931
- Resolves: CVE-2010-3718 rhbz 675931
- Resolves: CVE-2011-1184 rhbz 744983
- Resolves: CVE-2011-2204 rhbz 719181</changelog>
</package>
<package pkgid="dd549924312902a4c2da7683428860290c3eade1" name="tomcat5-admin-webapps" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.31.el5_8"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.27" date="1320703200">- Resolves CVE-2011-0013 rhbz 675933
- Resolves CVE-2011-3718 rhbz 675933</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.30" date="1331330400">- Resolves: CVE-2012-0022, CVE-2011-4858</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.31" date="1333058400">- Resolves: CVE-2012 regression. Changed patch file.</changelog>
</package>
<package pkgid="9edb256b818bc4e787e87f27e0a8dac9ae3c76dc" name="tomcat5-admin-webapps" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.38.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.36" date="1344549600">- Related: rhbz#543995, rhbz#691833, rhbz#689924, rhbz#578648, rhbz#530089</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.37" date="1344549601">- Related: rhbz#543995</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
</package>
<package pkgid="7e7826818a2c00901901fe8704c6c5dd69b1435b" name="tomcat5-admin-webapps" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.40.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.39" date="1369173600">- Resolves: CVE-2013-1976 Improper TOMCAT_LOG management in 
- initscript. Change location of TOMCAT_LOG to /var/log so
- only root can write to it. Touching TOMCAT_LOG is no longer 
- required during initscript startup. Permissions and ownership
- changed to 0755 tomcat:root for logdir</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.40" date="1369346400">- Related: CVE-2013-1976 It was found during additional testing
- that the tomcat5 init may fail to start because the user
- shell is set to sbin/nologin. Fixed in init scrip. SU now
- uses -s /bin/sh during startup</changelog>
</package>
<package pkgid="347a53883c7d76657970a0f9f0f51d0488ecd5e8" name="tomcat5-common-lib" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.22.el5_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.18" date="1305756000">- Resolves: rhbz 717457 - tomcat5 NPE on start</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.19" date="1309298400">- Resolves: rhbz 717456, rhbz 717459</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.22" date="1320789600">- Resolves: CVE-2011-0013 rhbz 675931
- Resolves: CVE-2010-3718 rhbz 675931
- Resolves: CVE-2011-1184 rhbz 744983
- Resolves: CVE-2011-2204 rhbz 719181</changelog>
</package>
<package pkgid="2d975d3e31dc837d74fc00d7d02f65bfc89ac01f" name="tomcat5-common-lib" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.31.el5_8"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.27" date="1320703200">- Resolves CVE-2011-0013 rhbz 675933
- Resolves CVE-2011-3718 rhbz 675933</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.30" date="1331330400">- Resolves: CVE-2012-0022, CVE-2011-4858</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.31" date="1333058400">- Resolves: CVE-2012 regression. Changed patch file.</changelog>
</package>
<package pkgid="9934ffee4fbd910d7611fb2e25fa6c71e69b42b1" name="tomcat5-common-lib" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.38.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.36" date="1344549600">- Related: rhbz#543995, rhbz#691833, rhbz#689924, rhbz#578648, rhbz#530089</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.37" date="1344549601">- Related: rhbz#543995</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
</package>
<package pkgid="ac3f22de844e93f2708ce3614600b808d6857eee" name="tomcat5-common-lib" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.40.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.39" date="1369173600">- Resolves: CVE-2013-1976 Improper TOMCAT_LOG management in 
- initscript. Change location of TOMCAT_LOG to /var/log so
- only root can write to it. Touching TOMCAT_LOG is no longer 
- required during initscript startup. Permissions and ownership
- changed to 0755 tomcat:root for logdir</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.40" date="1369346400">- Related: CVE-2013-1976 It was found during additional testing
- that the tomcat5 init may fail to start because the user
- shell is set to sbin/nologin. Fixed in init scrip. SU now
- uses -s /bin/sh during startup</changelog>
</package>
<package pkgid="05363b61f95aa3b919c8c3e96e46c2cf8c14d8f3" name="tomcat5-jasper" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.22.el5_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.18" date="1305756000">- Resolves: rhbz 717457 - tomcat5 NPE on start</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.19" date="1309298400">- Resolves: rhbz 717456, rhbz 717459</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.22" date="1320789600">- Resolves: CVE-2011-0013 rhbz 675931
- Resolves: CVE-2010-3718 rhbz 675931
- Resolves: CVE-2011-1184 rhbz 744983
- Resolves: CVE-2011-2204 rhbz 719181</changelog>
</package>
<package pkgid="cd99079284307f00c6713cb94203fdbc48243b2b" name="tomcat5-jasper" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.31.el5_8"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.27" date="1320703200">- Resolves CVE-2011-0013 rhbz 675933
- Resolves CVE-2011-3718 rhbz 675933</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.30" date="1331330400">- Resolves: CVE-2012-0022, CVE-2011-4858</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.31" date="1333058400">- Resolves: CVE-2012 regression. Changed patch file.</changelog>
</package>
<package pkgid="914af83f803ccedefc80071cbf79bdbc6278f16b" name="tomcat5-jasper" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.38.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.36" date="1344549600">- Related: rhbz#543995, rhbz#691833, rhbz#689924, rhbz#578648, rhbz#530089</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.37" date="1344549601">- Related: rhbz#543995</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
</package>
<package pkgid="eed993781c0091c934f97f99c1599d1a85cbdcd8" name="tomcat5-jasper" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.40.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.39" date="1369173600">- Resolves: CVE-2013-1976 Improper TOMCAT_LOG management in 
- initscript. Change location of TOMCAT_LOG to /var/log so
- only root can write to it. Touching TOMCAT_LOG is no longer 
- required during initscript startup. Permissions and ownership
- changed to 0755 tomcat:root for logdir</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.40" date="1369346400">- Related: CVE-2013-1976 It was found during additional testing
- that the tomcat5 init may fail to start because the user
- shell is set to sbin/nologin. Fixed in init scrip. SU now
- uses -s /bin/sh during startup</changelog>
</package>
<package pkgid="e5aefab9b3f10dea637b0dd6ffaf3ab27bc81549" name="tomcat5-jasper-javadoc" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.22.el5_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.18" date="1305756000">- Resolves: rhbz 717457 - tomcat5 NPE on start</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.19" date="1309298400">- Resolves: rhbz 717456, rhbz 717459</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.22" date="1320789600">- Resolves: CVE-2011-0013 rhbz 675931
- Resolves: CVE-2010-3718 rhbz 675931
- Resolves: CVE-2011-1184 rhbz 744983
- Resolves: CVE-2011-2204 rhbz 719181</changelog>
</package>
<package pkgid="4d2e0b96b988d152d23191ede5198ab7e88517f5" name="tomcat5-jasper-javadoc" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.31.el5_8"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.27" date="1320703200">- Resolves CVE-2011-0013 rhbz 675933
- Resolves CVE-2011-3718 rhbz 675933</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.30" date="1331330400">- Resolves: CVE-2012-0022, CVE-2011-4858</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.31" date="1333058400">- Resolves: CVE-2012 regression. Changed patch file.</changelog>
</package>
<package pkgid="2d29ca88df348602cd5dd99cdfdb2efa41c9f0df" name="tomcat5-jasper-javadoc" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.38.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.36" date="1344549600">- Related: rhbz#543995, rhbz#691833, rhbz#689924, rhbz#578648, rhbz#530089</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.37" date="1344549601">- Related: rhbz#543995</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
</package>
<package pkgid="f41b4d198c567ce8886eed7d3123a5a71898a224" name="tomcat5-jasper-javadoc" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.40.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.39" date="1369173600">- Resolves: CVE-2013-1976 Improper TOMCAT_LOG management in 
- initscript. Change location of TOMCAT_LOG to /var/log so
- only root can write to it. Touching TOMCAT_LOG is no longer 
- required during initscript startup. Permissions and ownership
- changed to 0755 tomcat:root for logdir</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.40" date="1369346400">- Related: CVE-2013-1976 It was found during additional testing
- that the tomcat5 init may fail to start because the user
- shell is set to sbin/nologin. Fixed in init scrip. SU now
- uses -s /bin/sh during startup</changelog>
</package>
<package pkgid="dbdbc4c6b4410b00b338b1a0f07b1a4e0a9b9649" name="tomcat5-jsp-2.0-api" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.22.el5_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.18" date="1305756000">- Resolves: rhbz 717457 - tomcat5 NPE on start</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.19" date="1309298400">- Resolves: rhbz 717456, rhbz 717459</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.22" date="1320789600">- Resolves: CVE-2011-0013 rhbz 675931
- Resolves: CVE-2010-3718 rhbz 675931
- Resolves: CVE-2011-1184 rhbz 744983
- Resolves: CVE-2011-2204 rhbz 719181</changelog>
</package>
<package pkgid="d7b5212ffe93972b84afe695a77a9fa58a6f6d63" name="tomcat5-jsp-2.0-api" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.31.el5_8"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.27" date="1320703200">- Resolves CVE-2011-0013 rhbz 675933
- Resolves CVE-2011-3718 rhbz 675933</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.30" date="1331330400">- Resolves: CVE-2012-0022, CVE-2011-4858</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.31" date="1333058400">- Resolves: CVE-2012 regression. Changed patch file.</changelog>
</package>
<package pkgid="ae18fd371053d74a773a4912e094ebe29a7d809b" name="tomcat5-jsp-2.0-api" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.38.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.36" date="1344549600">- Related: rhbz#543995, rhbz#691833, rhbz#689924, rhbz#578648, rhbz#530089</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.37" date="1344549601">- Related: rhbz#543995</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
</package>
<package pkgid="3e79f1efc4cc155b0e9e0742cca119b6f449dacd" name="tomcat5-jsp-2.0-api" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.40.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.39" date="1369173600">- Resolves: CVE-2013-1976 Improper TOMCAT_LOG management in 
- initscript. Change location of TOMCAT_LOG to /var/log so
- only root can write to it. Touching TOMCAT_LOG is no longer 
- required during initscript startup. Permissions and ownership
- changed to 0755 tomcat:root for logdir</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.40" date="1369346400">- Related: CVE-2013-1976 It was found during additional testing
- that the tomcat5 init may fail to start because the user
- shell is set to sbin/nologin. Fixed in init scrip. SU now
- uses -s /bin/sh during startup</changelog>
</package>
<package pkgid="c2d609687149ef9a7606a3864755e3a40e9b5f33" name="tomcat5-jsp-2.0-api-javadoc" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.22.el5_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.18" date="1305756000">- Resolves: rhbz 717457 - tomcat5 NPE on start</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.19" date="1309298400">- Resolves: rhbz 717456, rhbz 717459</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.22" date="1320789600">- Resolves: CVE-2011-0013 rhbz 675931
- Resolves: CVE-2010-3718 rhbz 675931
- Resolves: CVE-2011-1184 rhbz 744983
- Resolves: CVE-2011-2204 rhbz 719181</changelog>
</package>
<package pkgid="e20a4e867f9e43e21bfb15262fb70ac43f4e9779" name="tomcat5-jsp-2.0-api-javadoc" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.31.el5_8"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.27" date="1320703200">- Resolves CVE-2011-0013 rhbz 675933
- Resolves CVE-2011-3718 rhbz 675933</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.30" date="1331330400">- Resolves: CVE-2012-0022, CVE-2011-4858</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.31" date="1333058400">- Resolves: CVE-2012 regression. Changed patch file.</changelog>
</package>
<package pkgid="df3eddf8a18249ccc829524173c9260bde7090df" name="tomcat5-jsp-2.0-api-javadoc" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.38.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.36" date="1344549600">- Related: rhbz#543995, rhbz#691833, rhbz#689924, rhbz#578648, rhbz#530089</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.37" date="1344549601">- Related: rhbz#543995</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
</package>
<package pkgid="28b67489538844c36a7e91d56b6f68efb701c607" name="tomcat5-jsp-2.0-api-javadoc" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.40.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.39" date="1369173600">- Resolves: CVE-2013-1976 Improper TOMCAT_LOG management in 
- initscript. Change location of TOMCAT_LOG to /var/log so
- only root can write to it. Touching TOMCAT_LOG is no longer 
- required during initscript startup. Permissions and ownership
- changed to 0755 tomcat:root for logdir</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.40" date="1369346400">- Related: CVE-2013-1976 It was found during additional testing
- that the tomcat5 init may fail to start because the user
- shell is set to sbin/nologin. Fixed in init scrip. SU now
- uses -s /bin/sh during startup</changelog>
</package>
<package pkgid="32b32e398f58b16bfea9a7038ac426945a180886" name="tomcat5-server-lib" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.22.el5_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.18" date="1305756000">- Resolves: rhbz 717457 - tomcat5 NPE on start</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.19" date="1309298400">- Resolves: rhbz 717456, rhbz 717459</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.22" date="1320789600">- Resolves: CVE-2011-0013 rhbz 675931
- Resolves: CVE-2010-3718 rhbz 675931
- Resolves: CVE-2011-1184 rhbz 744983
- Resolves: CVE-2011-2204 rhbz 719181</changelog>
</package>
<package pkgid="6448834c6650749c7ddf67718fa2bd1f024b1946" name="tomcat5-server-lib" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.31.el5_8"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.27" date="1320703200">- Resolves CVE-2011-0013 rhbz 675933
- Resolves CVE-2011-3718 rhbz 675933</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.30" date="1331330400">- Resolves: CVE-2012-0022, CVE-2011-4858</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.31" date="1333058400">- Resolves: CVE-2012 regression. Changed patch file.</changelog>
</package>
<package pkgid="282c8230fae76a11fb51beadb7ac7c431acb464e" name="tomcat5-server-lib" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.38.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.36" date="1344549600">- Related: rhbz#543995, rhbz#691833, rhbz#689924, rhbz#578648, rhbz#530089</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.37" date="1344549601">- Related: rhbz#543995</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
</package>
<package pkgid="82cbd9c1ef01dd623dcff7f77b5357b27f079d22" name="tomcat5-server-lib" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.40.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.39" date="1369173600">- Resolves: CVE-2013-1976 Improper TOMCAT_LOG management in 
- initscript. Change location of TOMCAT_LOG to /var/log so
- only root can write to it. Touching TOMCAT_LOG is no longer 
- required during initscript startup. Permissions and ownership
- changed to 0755 tomcat:root for logdir</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.40" date="1369346400">- Related: CVE-2013-1976 It was found during additional testing
- that the tomcat5 init may fail to start because the user
- shell is set to sbin/nologin. Fixed in init scrip. SU now
- uses -s /bin/sh during startup</changelog>
</package>
<package pkgid="b732ff396e286c640a698c11e015691b6738e978" name="tomcat5-servlet-2.4-api" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.22.el5_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.18" date="1305756000">- Resolves: rhbz 717457 - tomcat5 NPE on start</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.19" date="1309298400">- Resolves: rhbz 717456, rhbz 717459</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.22" date="1320789600">- Resolves: CVE-2011-0013 rhbz 675931
- Resolves: CVE-2010-3718 rhbz 675931
- Resolves: CVE-2011-1184 rhbz 744983
- Resolves: CVE-2011-2204 rhbz 719181</changelog>
</package>
<package pkgid="269a75f378ce902ed4b3bd95be117546fcdd6aad" name="tomcat5-servlet-2.4-api" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.31.el5_8"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.27" date="1320703200">- Resolves CVE-2011-0013 rhbz 675933
- Resolves CVE-2011-3718 rhbz 675933</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.30" date="1331330400">- Resolves: CVE-2012-0022, CVE-2011-4858</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.31" date="1333058400">- Resolves: CVE-2012 regression. Changed patch file.</changelog>
</package>
<package pkgid="a4970284628104eed8b6263227f40da49fb2d78e" name="tomcat5-servlet-2.4-api" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.38.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.36" date="1344549600">- Related: rhbz#543995, rhbz#691833, rhbz#689924, rhbz#578648, rhbz#530089</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.37" date="1344549601">- Related: rhbz#543995</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
</package>
<package pkgid="47db75b2c264fdd82fb752dd6d6de9430edf743a" name="tomcat5-servlet-2.4-api" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.40.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.39" date="1369173600">- Resolves: CVE-2013-1976 Improper TOMCAT_LOG management in 
- initscript. Change location of TOMCAT_LOG to /var/log so
- only root can write to it. Touching TOMCAT_LOG is no longer 
- required during initscript startup. Permissions and ownership
- changed to 0755 tomcat:root for logdir</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.40" date="1369346400">- Related: CVE-2013-1976 It was found during additional testing
- that the tomcat5 init may fail to start because the user
- shell is set to sbin/nologin. Fixed in init scrip. SU now
- uses -s /bin/sh during startup</changelog>
</package>
<package pkgid="402bc815908db6b4772fae6ab0d72a158de25a50" name="tomcat5-servlet-2.4-api-javadoc" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.22.el5_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.18" date="1305756000">- Resolves: rhbz 717457 - tomcat5 NPE on start</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.19" date="1309298400">- Resolves: rhbz 717456, rhbz 717459</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.22" date="1320789600">- Resolves: CVE-2011-0013 rhbz 675931
- Resolves: CVE-2010-3718 rhbz 675931
- Resolves: CVE-2011-1184 rhbz 744983
- Resolves: CVE-2011-2204 rhbz 719181</changelog>
</package>
<package pkgid="3ab75f5939b2487fc1602b14b37c212f5e03aa61" name="tomcat5-servlet-2.4-api-javadoc" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.31.el5_8"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.27" date="1320703200">- Resolves CVE-2011-0013 rhbz 675933
- Resolves CVE-2011-3718 rhbz 675933</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.30" date="1331330400">- Resolves: CVE-2012-0022, CVE-2011-4858</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.31" date="1333058400">- Resolves: CVE-2012 regression. Changed patch file.</changelog>
</package>
<package pkgid="bcf0b0d71613cbe9ca480a85066b19814e016e65" name="tomcat5-servlet-2.4-api-javadoc" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.38.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.36" date="1344549600">- Related: rhbz#543995, rhbz#691833, rhbz#689924, rhbz#578648, rhbz#530089</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.37" date="1344549601">- Related: rhbz#543995</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
</package>
<package pkgid="d163f75c54cbb3a3bcd6230391a0b7dda38acf30" name="tomcat5-servlet-2.4-api-javadoc" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.40.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.39" date="1369173600">- Resolves: CVE-2013-1976 Improper TOMCAT_LOG management in 
- initscript. Change location of TOMCAT_LOG to /var/log so
- only root can write to it. Touching TOMCAT_LOG is no longer 
- required during initscript startup. Permissions and ownership
- changed to 0755 tomcat:root for logdir</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.40" date="1369346400">- Related: CVE-2013-1976 It was found during additional testing
- that the tomcat5 init may fail to start because the user
- shell is set to sbin/nologin. Fixed in init scrip. SU now
- uses -s /bin/sh during startup</changelog>
</package>
<package pkgid="fb0c19da04554f0e96dc6170cbb0aa39e2876c2d" name="tomcat5-webapps" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.22.el5_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.18" date="1305756000">- Resolves: rhbz 717457 - tomcat5 NPE on start</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.19" date="1309298400">- Resolves: rhbz 717456, rhbz 717459</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.22" date="1320789600">- Resolves: CVE-2011-0013 rhbz 675931
- Resolves: CVE-2010-3718 rhbz 675931
- Resolves: CVE-2011-1184 rhbz 744983
- Resolves: CVE-2011-2204 rhbz 719181</changelog>
</package>
<package pkgid="ec7ee3a279453e9bb4ff6fa6d026967177bfc2a9" name="tomcat5-webapps" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.31.el5_8"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.27" date="1320703200">- Resolves CVE-2011-0013 rhbz 675933
- Resolves CVE-2011-3718 rhbz 675933</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.30" date="1331330400">- Resolves: CVE-2012-0022, CVE-2011-4858</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.31" date="1333058400">- Resolves: CVE-2012 regression. Changed patch file.</changelog>
</package>
<package pkgid="03413a02a436cd108eaba7989dd726f952e35442" name="tomcat5-webapps" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.38.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.36" date="1344549600">- Related: rhbz#543995, rhbz#691833, rhbz#689924, rhbz#578648, rhbz#530089</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.37" date="1344549601">- Related: rhbz#543995</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
</package>
<package pkgid="862f024950a813de33eaf1f717638724541451b2" name="tomcat5-webapps" arch="i386">
  <version epoch="0" ver="5.5.23" rel="0jpp.40.el5_9"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.38" date="1361484000">- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.39" date="1369173600">- Resolves: CVE-2013-1976 Improper TOMCAT_LOG management in 
- initscript. Change location of TOMCAT_LOG to /var/log so
- only root can write to it. Touching TOMCAT_LOG is no longer 
- required during initscript startup. Permissions and ownership
- changed to 0755 tomcat:root for logdir</changelog>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:5.5.23-0jpp.40" date="1369346400">- Related: CVE-2013-1976 It was found during additional testing
- that the tomcat5 init may fail to start because the user
- shell is set to sbin/nologin. Fixed in init scrip. SU now
- uses -s /bin/sh during startup</changelog>
</package>
<package pkgid="d4f911fa9e883e21578949d4b71856db56826452" name="tzdata" arch="i386">
  <version epoch="0" ver="2011h" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011d-3.el5" date="1301522400">- Morocco introduced DST for 2011 from April 2 to July 31. (tzdata-2011d-morocco.patch)
- Resolves: #692160</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011g-1.el5" date="1303855200">- Upstream 2011e:
  - Morocco introduced DST for 2011 from April 2 to July 31.
  - Delay end of DST in Chile in 2011 until May 7.
- Resolves: #698608
- Upstream 2011f:
  - The Falkland Islands will not turn back clocks this winter, but
    stay on daylight saving time.
- Upstream 2011g:
  - Egypt abandons DST in 2011 (and forward)
- Resolves: #698397
- Dropped tzdata-2011d-chile.patch
- Dropped tzdata-2011d-morocco.patch</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011h-1.el5" date="1309212000">- Upstream 2011h:
  - Russia abandons DST in 2011.
  - *.tab: change AN (Netherlands Antilles) to CW (Curacao)
- Resolves: #701268</changelog>
</package>
<package pkgid="201157c2ec6c22f24fd594e08613b5a7168a7e45" name="tzdata" arch="i386">
  <version epoch="0" ver="2011h" rel="2.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011g-1.el5" date="1303855200">- Upstream 2011e:
  - Morocco introduced DST for 2011 from April 2 to July 31.
  - Delay end of DST in Chile in 2011 until May 7.
- Resolves: #698608
- Upstream 2011f:
  - The Falkland Islands will not turn back clocks this winter, but
    stay on daylight saving time.
- Upstream 2011g:
  - Egypt abandons DST in 2011 (and forward)
- Resolves: #698397
- Dropped tzdata-2011d-chile.patch
- Dropped tzdata-2011d-morocco.patch</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011h-1.el5" date="1309212000">- Upstream 2011h:
  - Russia abandons DST in 2011.
  - *.tab: change AN (Netherlands Antilles) to CW (Curacao)
- Resolves: #701268</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011h-2.el5" date="1313013600">- Patch for upcoming change in Newfoundland.  The transition time
  changes from 12:01 AM to 2:00 AM.
- Resolves: #729697</changelog>
</package>
<package pkgid="895f710a7ce25fa44a5c9e68a5f3d5aa053b183e" name="tzdata" arch="i386">
  <version epoch="0" ver="2011l" rel="4.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011l-2" date="1318370400">- Upstream 2011l:
  - Fix ancient stamps for America/Sitka
  - Asia/Hebron transitioned to standard time already on Sep 30, not Oct 3
  - Fiji will introduce DST on Oct 22
- Resolves: #739916</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011l-3.el5" date="1318629600">- State of Bahia, Brazil, to resume Summer Time on Oct 16
- The project moved, reflect this in URL
- Resolves: #739916</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011l-4.el5" date="1319061600">- Ukraine will enter Winter Time after all
- Resolves: #739916</changelog>
</package>
<package pkgid="bc4b066ce842e954103c50c97d34edc2ab082033" name="tzdata" arch="i386">
  <version epoch="0" ver="2011n" rel="2.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011l-4.el5" date="1319061600">- Ukraine will enter Winter Time after all
- Resolves: #739916</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011n-1.el5" date="1329861600">- Rebase to 2011n
  - Cuba postponed DST by two weeks to Nov 13
  - Fiji will enter DST on Jan 21
- Add a patch for the leap second that will occur this summer
- Resolves: #782173</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011n-2.el5" date="1330120800">- The Chilean Government has decided to postpone the entrance into
  winter time (to leave DST) from March 11 2012 to April 28th 2012
- Resolves: #796747</changelog>
</package>
<package pkgid="59a6763933d1d1b04e4a614fffb5465532ca158a" name="tzdata" arch="i386">
  <version epoch="0" ver="2012b" rel="3.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012b-1.el5" date="1331676000">- Rebase to 2012b; changes vs. 2011n-2:
  - Changes to zones for Antarctica stations
  - Armenia abolished DST in 2012 and forward
  - Cuba enters DST on 31st March
  - Falkland Islands will stay on permanent Summer Time
  - New zone for Creston Valley, Canada, which differs from Dawson
    Creek in past stamps.  Changes to historical stamps in Canada.
  - Last year, Tokelau skipped over the date line together with Samoa
- Resolves: #802541</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012b-2.el5" date="1331848800">- Morocco DST starts on the last Sunday of March (March 25, 2012) and
  ends on last Sunday of September, except the month of Ramadan.  It
  is currently unclear what that Ramadan bit means, so this is not
  covered by the patch as of now.
- Resolves: #802541</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012b-3.el5" date="1331935200">- Morocco moved DST entry to last Sunday of April
- Resolves: #802541</changelog>
</package>
<package pkgid="814f93c3f80a6759667e4f2985dac93a26e256d4" name="tzdata" arch="i386">
  <version epoch="0" ver="2012c" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012b-2.el5" date="1331848800">- Morocco DST starts on the last Sunday of March (March 25, 2012) and
  ends on last Sunday of September, except the month of Ramadan.  It
  is currently unclear what that Ramadan bit means, so this is not
  covered by the patch as of now.
- Resolves: #802541</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012b-3.el5" date="1331935200">- Morocco moved DST entry to last Sunday of April
- Resolves: #802541</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012c-1.el5" date="1337032800">- Upstream 2012c
  - Haiti observes DST from 2012 on
  - Gaza Strip and Hebron observe DST in 2012
  - Change start of DST in Syria to last Friday in March
- Resolves: #820689</changelog>
</package>
<package pkgid="c891c0710713d2a6aacd9f16b964fc29ccac6052" name="tzdata" arch="i386">
  <version epoch="0" ver="2012c" rel="3.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012b-3.el5" date="1331935200">- Morocco moved DST entry to last Sunday of April
- Resolves: #802541</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012c-1.el5" date="1337032800">- Upstream 2012c
  - Haiti observes DST from 2012 on
  - Gaza Strip and Hebron observe DST in 2012
  - Change start of DST in Syria to last Friday in March
- Resolves: #820689</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012c-3.el5" date="1342216800">- Morocco will not observe DST during the month of Ramadan
  (tzdata-2012c-morocco.patch)</changelog>
</package>
<package pkgid="2c9d1348c81e5dcf7f4fea90d42460d298e2bf00" name="tzdata" arch="i386">
  <version epoch="0" ver="2012f" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012c-1.el5" date="1337032800">- Upstream 2012c
  - Haiti observes DST from 2012 on
  - Gaza Strip and Hebron observe DST in 2012
  - Change start of DST in Syria to last Friday in March
- Resolves: #820689</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012c-3.el5" date="1342216800">- Morocco will not observe DST during the month of Ramadan
  (tzdata-2012c-morocco.patch)</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012f-1.el5" date="1347919200">- Upstream 2012f
  - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
    and end at 3 am on Sunday 20th January 2013.  Guess it will be like
    that in following years as well.
- Upstream 2012e
  - Tokelau is in time zone UTC+13, not UTC+14 (and always was)
- Upstream 2012d
  - Morocco will not observe DST during the month of Ramadan.
    DST cessation end date was corrected.
  - Drop tzdata-2012c-morocco.patch</changelog>
</package>
<package pkgid="5c73374c32f559c9803ff7488d151509b0aea6f0" name="tzdata" arch="i386">
  <version epoch="0" ver="2012i" rel="2.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012h-2" date="1352152800">- Switch back to using system zic, ignore upstream Makefile at all.
  We do so for java anyway.
- Drop Factory from distribution</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-1" date="1352152801">- Upstream 2012i
  - Cuba switched to DST</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-2" date="1352239200">- Preserve hardlinks that zic leaves behind, install with cp -d</changelog>
</package>
<package pkgid="df43e1a2ee534e8c0e5cca7769d1e86cbc6fc6b4" name="tzdata" arch="i386">
  <version epoch="0" ver="2012j" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-1" date="1352152800">- Upstream 2012i
  - Cuba switched to DST</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-2" date="1352239200">- Preserve hardlinks that zic leaves behind, install with cp -d</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-1" date="1354312800">- Upstream 2012j
  - Libya moved to CET</changelog>
</package>
<package pkgid="f44ec8b0b62833db76c840b141147a1a3f29f570" name="tzdata" arch="i386">
  <version epoch="0" ver="2012j" rel="2.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-2" date="1352239200">- Preserve hardlinks that zic leaves behind, install with cp -d</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-1" date="1354312800">- Upstream 2012j
  - Libya moved to CET</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-2" date="1362002400">- DTS in Chile will end on 2013-04-28
  (0016-Chile-is-changing-its-DST-rules.patch)</changelog>
</package>
<package pkgid="db43b1845b0885a779885298ade9b401e39230da" name="tzdata" arch="i386">
  <version epoch="0" ver="2013b" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-1" date="1354312800">- Upstream 2012j
  - Libya moved to CET</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-2" date="1362002400">- DTS in Chile will end on 2013-04-28
  (0016-Chile-is-changing-its-DST-rules.patch)</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013b-1" date="1363212000">- Upstream 2013b
  - Paraguay will end DST on March 24 this year
  - Haiti uses US daylight-saving rules this year
  - Morocco does not observe DST during Ramadan
- Upstream 2013a
  - Retire Chile patch, 2013a has the data
  - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
  - Many changes in historical timestamps</changelog>
</package>
<package pkgid="765e2eb18bf63ab44d54613bc650c5652a8608a4" name="tzdata" arch="i386">
  <version epoch="0" ver="2013c" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013b-1" date="1363212000">- Upstream 2013b
  - Paraguay will end DST on March 24 this year
  - Haiti uses US daylight-saving rules this year
  - Morocco does not observe DST during Ramadan
- Upstream 2013a
  - Retire Chile patch, 2013a has the data
  - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
  - Many changes in historical timestamps</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013b-2" date="1364421600">- Palestine starts Daylight Saving Time on March 29, 2013
  (tzdata-2013b-gaza.patch)</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013c-1" date="1368828000">- Upstream 2013c
  - Sync past stamps for Palestine and West Bank with timeanddate.com
  - Assume that the recent change to Paraguay's DST rules is permanent
  - Macquarie was uninhabited between 1919 and 1948.  It's also part
    of Australia (update in zone.tab).</changelog>
</package>
<package pkgid="3c6140290ad01ba46a6d601d70fb807b59ec0115" name="tzdata" arch="i386">
  <version epoch="0" ver="2013c" rel="2.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013b-2" date="1364421600">- Palestine starts Daylight Saving Time on March 29, 2013
  (tzdata-2013b-gaza.patch)</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013c-1" date="1368828000">- Upstream 2013c
  - Sync past stamps for Palestine and West Bank with timeanddate.com
  - Assume that the recent change to Paraguay's DST rules is permanent
  - Macquarie was uninhabited between 1919 and 1948.  It's also part
    of Australia (update in zone.tab).</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013c-2" date="1372975200">- Update descriptions in iso3166.tab; make Jerusalem coordinates in
  zone.tab more precise
  (0001-Adjust-commentary-to-try-to-defuse-recent-issues-som.patch)
- Update local mean time for Jerusalem to match more-precise longitude
  (0002-asia-Asia-Jerusalem-Fix-LMT-to-match-more-precise-lo.patch)
- Move Morocco's midsummer 2013 transitions
  (0003-Move-Morocco-s-midsummer-2013-transitions.patch)
  Fixes 980805 980807 981019 981020
- Israel now falls back on the last Sunday of October
  (0004-Israel-now-falls-back-on-the-last-Sunday-of-October.patch)</changelog>
</package>
<package pkgid="848d2c01019f8ccf5057a2fb6f33c2a8dbb608cf" name="tzdata" arch="i386">
  <version epoch="0" ver="2013i" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013c-2" date="1372982400">- Update descriptions in iso3166.tab; make Jerusalem coordinates in
  zone.tab more precise
  (0001-Adjust-commentary-to-try-to-defuse-recent-issues-som.patch)
- Update local mean time for Jerusalem to match more-precise longitude
  (0002-asia-Asia-Jerusalem-Fix-LMT-to-match-more-precise-lo.patch)
- Move Morocco's midsummer 2013 transitions
  (0003-Move-Morocco-s-midsummer-2013-transitions.patch)
  Fixes 980805 980807 981019 981020
- Israel now falls back on the last Sunday of October
  (0004-Israel-now-falls-back-on-the-last-Sunday-of-October.patch)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; 2013g-1" date="1380758400">- Morocco moved end of DST from September to October (#1013527).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; 2013i-1" date="1387324800">- Rebase with early release of 2013i from Paul Eggert github.
  - Jordan switches back to standard time at 00:00 on December 20,2013.
  - The 2006-2011 transition schedule is planned to resume in 2014.
  - The compile-time flag NOSOLAR has been removed.
  - The files solar87, solar88, and solar89 are no longer distributed.
  - tz-link.htm now mentions Noda Time.</changelog>
</package>
<package pkgid="89fb07e547234f30accf169d583e1e9281018f58" name="tzdata" arch="i386">
  <version epoch="0" ver="2013i" rel="2.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; 2013g-1" date="1380758400">- Morocco moved end of DST from September to October (#1013527).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; 2013i-1" date="1387324800">- Rebase with early release of 2013i from Paul Eggert github.
  - Jordan switches back to standard time at 00:00 on December 20,2013.
  - The 2006-2011 transition schedule is planned to resume in 2014.
  - The compile-time flag NOSOLAR has been removed.
  - The files solar87, solar88, and solar89 are no longer distributed.
  - tz-link.htm now mentions Noda Time.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2013i-2" date="1390262400">- Fiji ends DST on 2014-01-19 at 02:00, not the previously-scheduled 03:00.</changelog>
</package>
<package pkgid="c099128294531ec2b0dcaab338a4d604430e73fa" name="tzdata" arch="i386">
  <version epoch="0" ver="2014a" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; 2013i-1" date="1387324800">- Rebase with early release of 2013i from Paul Eggert github.
  - Jordan switches back to standard time at 00:00 on December 20,2013.
  - The 2006-2011 transition schedule is planned to resume in 2014.
  - The compile-time flag NOSOLAR has been removed.
  - The files solar87, solar88, and solar89 are no longer distributed.
  - tz-link.htm now mentions Noda Time.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2013i-2" date="1390262400">- Fiji ends DST on 2014-01-19 at 02:00, not the previously-scheduled 03:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014a-1" date="1394496000">- Turkey begins DST on 2014-03-31, not 03-30.</changelog>
</package>
<package pkgid="afd1b60eb7c16453e790f82e3292db811299b9e1" name="tzdata" arch="i386">
  <version epoch="0" ver="2014b" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2013i-2" date="1390262400">- Fiji ends DST on 2014-01-19 at 02:00, not the previously-scheduled 03:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014a-1" date="1394496000">- Turkey begins DST on 2014-03-31, not 03-30.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014b-1" date="1427328000">- Rebase to 2014b
  - Crimea switches to Moscow time on 2014-03-30 at 02:00 local time.
  - New entry for Troll station, Antarctica.</changelog>
</package>
<package pkgid="b3f520e7bcfa4787d8f24e88a21aae8af074c174" name="tzdata" arch="i386">
  <version epoch="0" ver="2014e" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014c-1" date="1400716800">- Rebase to 2014c
  - Egypt's government to re-apply daylight saving time.
  - zic now generates transitions for minimum time values
  - Port to Cygwin sans glibc.
  - Remove now-confusing comment about Jordan.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014d-1" date="1401408000">- Rebase to 2014d
  - zic no longer generates files containing time stamps before
    the Big Bang.  This works around GNOME bug 730332</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014e-1" date="1402790400">- Rebase to 2014e
  - Morrocco suspends DTS for Ramadan 
       June 28 at 03:00 and August 2 at 02:00
  - Egypt suspends DTS for Ramadan
       June 26 and July 31 at 24:00</changelog>
</package>
<package pkgid="1dea7c564f7c22265b6ed753c9d0775168ddf1ba" name="tzdata" arch="i386">
  <version epoch="0" ver="2014i" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2014h-1" date="1411776000">- Rebase to 2014h
  - Changes to historical transitions in America/Jamaica and
    Asia/Novokuznetsk.
  - Africa/{Blantyre, Bujumbura, Gaborone, Harare, Kigali, Lubumbashi,
    Lusaka} now alias Africa/Maputo, because they don't differ in
    post-1970 stamps.
  - Africa/Maseru and Africa/Mbabane now alias Africa/Johannesburg for
    the same reason.</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2014h-2.el5" date="1411776001">- Bump for rebuild.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014i-1" date="1414022400">- Rebase to 2014i
  - Pacific/Fiji will observe DST from 2014-11-02 02:00 to 2015-01-18 03:00.
  - A new Zone Pacific/Bougainville, for the part of Papua New Guinea
    that plans to switch from UTC+10 to UTC+11 on 2014-12-28 at 02:00.</changelog>
</package>
<package pkgid="3828389e62dfb8fbeeaad242ec1837ef3a079d5f" name="tzdata" arch="i386">
  <version epoch="0" ver="2015a" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014i-1" date="1414022400">- Rebase to 2014i
  - Pacific/Fiji will observe DST from 2014-11-02 02:00 to 2015-01-18 03:00.
  - A new Zone Pacific/Bougainville, for the part of Papua New Guinea
    that plans to switch from UTC+10 to UTC+11 on 2014-12-28 at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014j-1" date="1415750400">- Rebase to 2014j
  - Turks &amp; Caicos' switch from US eastern time to UTC-4 year-round
    did not occur on 2014-11-02 at 02:00.  It's currently scheduled
    for 2015-11-01 at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015a-1" date="1422662400">- Rebase to 2015a
  - New leap second 2015-06-30 23:59:60 UTC as per IERS Bulletin C 49.
  - The Mexican state of Quintana Roo, represented by America/Cancun,
    will shift from Central Time with DST to Eastern Time without DST
    on 2015-02-01 at 02:00.
  - Chile will not change clocks in April or thereafter; its new
    standard time will be its old daylight saving time.  This affects
    America/Santiago, Pacific/Easter, and Antarctica/Palmer.</changelog>
</package>
<package pkgid="d99281645e523b7b827abe434814cf785fffb8fe" name="tzdata" arch="i386">
  <version epoch="0" ver="2015b" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014j-1" date="1415750400">- Rebase to 2014j
  - Turks &amp; Caicos' switch from US eastern time to UTC-4 year-round
    did not occur on 2014-11-02 at 02:00.  It's currently scheduled
    for 2015-11-01 at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015a-1" date="1422662400">- Rebase to 2015a
  - New leap second 2015-06-30 23:59:60 UTC as per IERS Bulletin C 49.
  - The Mexican state of Quintana Roo, represented by America/Cancun,
    will shift from Central Time with DST to Eastern Time without DST
    on 2015-02-01 at 02:00.
  - Chile will not change clocks in April or thereafter; its new
    standard time will be its old daylight saving time.  This affects
    America/Santiago, Pacific/Easter, and Antarctica/Palmer.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015b-1" date="1426982400">- Rebase to 2015b
  - Mongolia will start observing DST again this year, from the last
    Saturday in March at 02:00 to the last Saturday in September at 00:00.
  - Palestine will start DST on March 28, not March 27.  Also,
    correct the fall 2014 transition from September 26 to October 24.
    Adjust future predictions accordingly.</changelog>
</package>
<package pkgid="f91b2ea3146ddcac6d292084a985f04ef3f7f67c" name="tzdata" arch="i386">
  <version epoch="0" ver="2015d" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015c-1" date="1429056000">- Rebase to 2015c
  - Egypt's spring-forward transition is at 24:00 on April's last Thursday,
    not 00:00 on April's last Friday.  2015's transition will therefore be on
    Thursday, April 30 at 24:00, not Friday, April 24 at 00:00.  Similar fixes
    apply to 2026, 2037, 2043, etc.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015c-2" date="1429660800">- The Egyptian Cabinet announced that DST will be cancelled for 2015.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015d-1" date="1430006400">- Rebase to 2015d:
  - The Egyptian Cabinet announced that DST will be cancelled for 2015.
  - The abbreviations for Hawaii-Aleutian standard and daylight times
    have been changed from HAST/HADT to HST/HDT, as per US Government
    Printing Office style. This affects only America/Adak since 1983,
    as America/Honolulu was already using the new style.</changelog>
</package>
<package pkgid="c166c780503f7cb36a9438b7e4ae17f37f3f29fa" name="tzdata" arch="i386">
  <version epoch="0" ver="2015e" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015d-1" date="1430006400">- Rebase to 2015d:
  - The Egyptian Cabinet announced that DST will be cancelled for 2015.
  - The abbreviations for Hawaii-Aleutian standard and daylight times
    have been changed from HAST/HADT to HST/HDT, as per US Government
    Printing Office style. This affects only America/Adak since 1983,
    as America/Honolulu was already using the new style.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015d-3" date="1433894400">-  Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
   not 06-13 and 07-18 as we had guessed.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015e-1" date="1434326400">- Rebase to 2015e:
  - Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
    not 06-13 and 07-18 as we had guessed.  (Thanks to Milamber.)
  - Assume Cayman Islands will observe DST starting next year, using US rules.
    Although it isn't guaranteed, it is the most likely.</changelog>
</package>
<package pkgid="cbcbfce9b8c0acbe8e0d38adf50aa9945bf897eb" name="tzdata" arch="i386">
  <version epoch="0" ver="2015g" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015e-1" date="1434326400">- Rebase to 2015e:
  - Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
    not 06-13 and 07-18 as we had guessed.  (Thanks to Milamber.)
  - Assume Cayman Islands will observe DST starting next year, using US rules.
    Although it isn't guaranteed, it is the most likely.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015f-1" date="1439251200">- Rebase to 2015f
  - North Korea switches to +0830 on 2015-08-15.
    The abbreviation remains "KST".
  - Uruguay no longer observes DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015g-1" date="1443744000">- Rebase to 2015g
  - Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.
  - Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.
  - Fiji's 2016 fall-back transition is scheduled for January 17, not 24.
  - Fort Nelson, British Columbia will not fall back on 2015-11-01.  It has
    effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
    New zone America/Fort_Nelson.</changelog>
</package>
<package pkgid="008eba1dc9e1bb82b8b1d29642acfa7d835b2ca8" name="tzdata" arch="i386">
  <version epoch="0" ver="2016a" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015f-1" date="1439251200">- Rebase to 2015f
  - North Korea switches to +0830 on 2015-08-15.
    The abbreviation remains "KST".
  - Uruguay no longer observes DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015g-1" date="1443744000">- Rebase to 2015g
  - Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.
  - Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.
  - Fiji's 2016 fall-back transition is scheduled for January 17, not 24.
  - Fort Nelson, British Columbia will not fall back on 2015-11-01.  It has
    effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
    New zone America/Fort_Nelson.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-1" date="1454025600">- Rebase to 2016a
  - America/Cayman will not observe daylight saving this year after all.
    Revert our guess that it would.
  - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
  - Asia/Tehran now has DST predictions for the year 2038 and later,
    to be March 21 00:00 to September 21 00:00.  This is likely better
    than predicting no DST, albeit off by a day every now and then.</changelog>
</package>
<package pkgid="bafad86e9e9a83d19407e5c50ef41c05fcc1e6cd" name="tzdata" arch="i386">
  <version epoch="0" ver="2016b" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015g-1" date="1443744000">- Rebase to 2015g
  - Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.
  - Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.
  - Fiji's 2016 fall-back transition is scheduled for January 17, not 24.
  - Fort Nelson, British Columbia will not fall back on 2015-11-01.  It has
    effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
    New zone America/Fort_Nelson.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-1" date="1454025600">- Rebase to 2016a
  - America/Cayman will not observe daylight saving this year after all.
    Revert our guess that it would.
  - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
  - Asia/Tehran now has DST predictions for the year 2038 and later,
    to be March 21 00:00 to September 21 00:00.  This is likely better
    than predicting no DST, albeit off by a day every now and then.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016b-1" date="1458000000">- Rebase to 2016b
  - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
    Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
    2016-03-27 at 02:00 local time.  They need distinct zones since their
    post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
    Altai Republic, Russia, which will switch from +06 to +07 on the same date
    and local time.  The Astrakhan change is already official; the others have
    passed the first reading in the State Duma and are extremely likely.
    Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  - As a trial of a new system that needs less information to be made up,
    the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  - Haiti will not observe DST in 2016.
  - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
    Guess future transitions will be March's last
    Saturday at 01:00, not March's last Friday at 24:00.</changelog>
</package>
<package pkgid="0fe2feb975ef516be49e14e1e14ebccd392c76d7" name="tzdata" arch="i386">
  <version epoch="0" ver="2016c" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-1" date="1454025600">- Rebase to 2016a
  - America/Cayman will not observe daylight saving this year after all.
    Revert our guess that it would.
  - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
  - Asia/Tehran now has DST predictions for the year 2038 and later,
    to be March 21 00:00 to September 21 00:00.  This is likely better
    than predicting no DST, albeit off by a day every now and then.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016b-1" date="1458000000">- Rebase to 2016b
  - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
    Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
    2016-03-27 at 02:00 local time.  They need distinct zones since their
    post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
    Altai Republic, Russia, which will switch from +06 to +07 on the same date
    and local time.  The Astrakhan change is already official; the others have
    passed the first reading in the State Duma and are extremely likely.
    Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  - As a trial of a new system that needs less information to be made up,
    the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  - Haiti will not observe DST in 2016.
  - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
    Guess future transitions will be March's last
    Saturday at 01:00, not March's last Friday at 24:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016c-1" date="1458777600">- Rebase to 2016c
  - Azerbaijan no longer observes DST.
  - Chile reverts from permanent to seasonal DST.</changelog>
</package>
<package pkgid="163ef353a0cc926c124fd1208b03d9777752b614" name="tzdata" arch="i386">
  <version epoch="0" ver="2016d" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016b-1" date="1458000000">- Rebase to 2016b
  - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
    Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
    2016-03-27 at 02:00 local time.  They need distinct zones since their
    post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
    Altai Republic, Russia, which will switch from +06 to +07 on the same date
    and local time.  The Astrakhan change is already official; the others have
    passed the first reading in the State Duma and are extremely likely.
    Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  - As a trial of a new system that needs less information to be made up,
    the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  - Haiti will not observe DST in 2016.
  - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
    Guess future transitions will be March's last
    Saturday at 01:00, not March's last Friday at 24:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016c-1" date="1458777600">- Rebase to 2016c
  - Azerbaijan no longer observes DST.
  - Chile reverts from permanent to seasonal DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016d-1" date="1461024000">- Rebase to 2016d 
  - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
  - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
    at 02:00.</changelog>
</package>
<package pkgid="d658ad8ed9423926aff0f2667d35b68173a31fde" name="tzdata" arch="i386">
  <version epoch="0" ver="2016e" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016c-1" date="1458777600">- Rebase to 2016c
  - Azerbaijan no longer observes DST.
  - Chile reverts from permanent to seasonal DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016d-1" date="1461024000">- Rebase to 2016d 
  - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
  - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
    at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016e-1" date="1465948800">- Rebase to 2016e
  - Egypt reinstates DST.</changelog>
</package>
<package pkgid="796ad67e881d5d25f819814b1f77497d417274bc" name="tzdata" arch="i386">
  <version epoch="0" ver="2016f" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016d-1" date="1461024000">- Rebase to 2016d 
  - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
  - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
    at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016e-1" date="1465948800">- Rebase to 2016e
  - Egypt reinstates DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-1" date="1467763200">- Rebase to 2016f
  - Egypt cancelled DST.
  - Asia/Novosibirsk transitions from +06 to +07 on 2016-07-24 at 02:00.</changelog>
</package>
<package pkgid="37f57b7c531d2ffdf8306d1a962c69522fc83f2a" name="tzdata" arch="i386">
  <version epoch="0" ver="2016g" rel="2.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474934400">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1475020800">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475107200">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
</package>
<package pkgid="a865d409f4cd5dbaa3e6fb8b296e7802b4ebdb36" name="tzdata" arch="i386">
  <version epoch="0" ver="2016h" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1475020800">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475107200">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1477008000">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
</package>
<package pkgid="006e51b95cba6295867cd99f7f53cefceb74c290" name="tzdata" arch="i386">
  <version epoch="0" ver="2016i" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475107200">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1477008000">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478131200">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
</package>
<package pkgid="107e5b5f00f2da6741a3679d0f2691802813fb4d" name="tzdata" arch="i386">
  <version epoch="0" ver="2016j" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1477008000">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478131200">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479945600">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
</package>
<package pkgid="4db8c14bb179843fe21b8ff50fa83d88072f0838" name="tzdata" arch="i386">
  <version epoch="0" ver="2017a" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478131200">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479945600">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488499200">- Rebase to tzdata-2017a
  - Mongolia no longer observes DST (BZ #1425223)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab to the install files. (BZ #1427696)</changelog>
</package>
<package pkgid="b90f2c0e1913f65bc4feaf0a70d687751f047f77" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2011h" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011d-3.el5" date="1301522400">- Morocco introduced DST for 2011 from April 2 to July 31. (tzdata-2011d-morocco.patch)
- Resolves: #692160</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011g-1.el5" date="1303855200">- Upstream 2011e:
  - Morocco introduced DST for 2011 from April 2 to July 31.
  - Delay end of DST in Chile in 2011 until May 7.
- Resolves: #698608
- Upstream 2011f:
  - The Falkland Islands will not turn back clocks this winter, but
    stay on daylight saving time.
- Upstream 2011g:
  - Egypt abandons DST in 2011 (and forward)
- Resolves: #698397
- Dropped tzdata-2011d-chile.patch
- Dropped tzdata-2011d-morocco.patch</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011h-1.el5" date="1309212000">- Upstream 2011h:
  - Russia abandons DST in 2011.
  - *.tab: change AN (Netherlands Antilles) to CW (Curacao)
- Resolves: #701268</changelog>
</package>
<package pkgid="2641947e240dfb312f5d744c9f8b79dc9a08d7c9" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2011h" rel="2.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011g-1.el5" date="1303855200">- Upstream 2011e:
  - Morocco introduced DST for 2011 from April 2 to July 31.
  - Delay end of DST in Chile in 2011 until May 7.
- Resolves: #698608
- Upstream 2011f:
  - The Falkland Islands will not turn back clocks this winter, but
    stay on daylight saving time.
- Upstream 2011g:
  - Egypt abandons DST in 2011 (and forward)
- Resolves: #698397
- Dropped tzdata-2011d-chile.patch
- Dropped tzdata-2011d-morocco.patch</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011h-1.el5" date="1309212000">- Upstream 2011h:
  - Russia abandons DST in 2011.
  - *.tab: change AN (Netherlands Antilles) to CW (Curacao)
- Resolves: #701268</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011h-2.el5" date="1313013600">- Patch for upcoming change in Newfoundland.  The transition time
  changes from 12:01 AM to 2:00 AM.
- Resolves: #729697</changelog>
</package>
<package pkgid="c39767ca7a055111434bc900feddb69e1285906c" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2011l" rel="4.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011l-2" date="1318370400">- Upstream 2011l:
  - Fix ancient stamps for America/Sitka
  - Asia/Hebron transitioned to standard time already on Sep 30, not Oct 3
  - Fiji will introduce DST on Oct 22
- Resolves: #739916</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011l-3.el5" date="1318629600">- State of Bahia, Brazil, to resume Summer Time on Oct 16
- The project moved, reflect this in URL
- Resolves: #739916</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011l-4.el5" date="1319061600">- Ukraine will enter Winter Time after all
- Resolves: #739916</changelog>
</package>
<package pkgid="ccac4f4213390cf35d28202f98458ba6ad4437e1" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2011n" rel="2.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011l-4.el5" date="1319061600">- Ukraine will enter Winter Time after all
- Resolves: #739916</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011n-1.el5" date="1329861600">- Rebase to 2011n
  - Cuba postponed DST by two weeks to Nov 13
  - Fiji will enter DST on Jan 21
- Add a patch for the leap second that will occur this summer
- Resolves: #782173</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2011n-2.el5" date="1330120800">- The Chilean Government has decided to postpone the entrance into
  winter time (to leave DST) from March 11 2012 to April 28th 2012
- Resolves: #796747</changelog>
</package>
<package pkgid="d00cfc466b520446675d85f489689d1c4baa9722" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2012b" rel="3.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012b-1.el5" date="1331676000">- Rebase to 2012b; changes vs. 2011n-2:
  - Changes to zones for Antarctica stations
  - Armenia abolished DST in 2012 and forward
  - Cuba enters DST on 31st March
  - Falkland Islands will stay on permanent Summer Time
  - New zone for Creston Valley, Canada, which differs from Dawson
    Creek in past stamps.  Changes to historical stamps in Canada.
  - Last year, Tokelau skipped over the date line together with Samoa
- Resolves: #802541</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012b-2.el5" date="1331848800">- Morocco DST starts on the last Sunday of March (March 25, 2012) and
  ends on last Sunday of September, except the month of Ramadan.  It
  is currently unclear what that Ramadan bit means, so this is not
  covered by the patch as of now.
- Resolves: #802541</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012b-3.el5" date="1331935200">- Morocco moved DST entry to last Sunday of April
- Resolves: #802541</changelog>
</package>
<package pkgid="1e2882536a9b3aa2ed016b8732e78fda9cba1cc2" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2012c" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012b-2.el5" date="1331848800">- Morocco DST starts on the last Sunday of March (March 25, 2012) and
  ends on last Sunday of September, except the month of Ramadan.  It
  is currently unclear what that Ramadan bit means, so this is not
  covered by the patch as of now.
- Resolves: #802541</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012b-3.el5" date="1331935200">- Morocco moved DST entry to last Sunday of April
- Resolves: #802541</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012c-1.el5" date="1337032800">- Upstream 2012c
  - Haiti observes DST from 2012 on
  - Gaza Strip and Hebron observe DST in 2012
  - Change start of DST in Syria to last Friday in March
- Resolves: #820689</changelog>
</package>
<package pkgid="039c8d713546d5dc5a11f6c4dfb27b90c27868cc" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2012c" rel="3.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012b-3.el5" date="1331935200">- Morocco moved DST entry to last Sunday of April
- Resolves: #802541</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012c-1.el5" date="1337032800">- Upstream 2012c
  - Haiti observes DST from 2012 on
  - Gaza Strip and Hebron observe DST in 2012
  - Change start of DST in Syria to last Friday in March
- Resolves: #820689</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012c-3.el5" date="1342216800">- Morocco will not observe DST during the month of Ramadan
  (tzdata-2012c-morocco.patch)</changelog>
</package>
<package pkgid="75c5733ff138363c2bc23ee712a840a0b3c0025b" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2012f" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012c-1.el5" date="1337032800">- Upstream 2012c
  - Haiti observes DST from 2012 on
  - Gaza Strip and Hebron observe DST in 2012
  - Change start of DST in Syria to last Friday in March
- Resolves: #820689</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012c-3.el5" date="1342216800">- Morocco will not observe DST during the month of Ramadan
  (tzdata-2012c-morocco.patch)</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012f-1.el5" date="1347919200">- Upstream 2012f
  - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
    and end at 3 am on Sunday 20th January 2013.  Guess it will be like
    that in following years as well.
- Upstream 2012e
  - Tokelau is in time zone UTC+13, not UTC+14 (and always was)
- Upstream 2012d
  - Morocco will not observe DST during the month of Ramadan.
    DST cessation end date was corrected.
  - Drop tzdata-2012c-morocco.patch</changelog>
</package>
<package pkgid="e9fbd7b5848254e964ef2ecaaaef2e7cb5a10b14" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2012i" rel="2.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012h-2" date="1352152800">- Switch back to using system zic, ignore upstream Makefile at all.
  We do so for java anyway.
- Drop Factory from distribution</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-1" date="1352152801">- Upstream 2012i
  - Cuba switched to DST</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-2" date="1352239200">- Preserve hardlinks that zic leaves behind, install with cp -d</changelog>
</package>
<package pkgid="7824ea40dea32b42c19adb69ba7bc3e44d6b414c" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2012j" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-1" date="1352152800">- Upstream 2012i
  - Cuba switched to DST</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-2" date="1352239200">- Preserve hardlinks that zic leaves behind, install with cp -d</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-1" date="1354312800">- Upstream 2012j
  - Libya moved to CET</changelog>
</package>
<package pkgid="08ed49ff377c124ecb4b0c2366cb4d48829c5c4d" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2012j" rel="2.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-2" date="1352239200">- Preserve hardlinks that zic leaves behind, install with cp -d</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-1" date="1354312800">- Upstream 2012j
  - Libya moved to CET</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-2" date="1362002400">- DTS in Chile will end on 2013-04-28
  (0016-Chile-is-changing-its-DST-rules.patch)</changelog>
</package>
<package pkgid="06689a422e3ec845f580f7ea34ee6826609e66d4" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2013b" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-1" date="1354312800">- Upstream 2012j
  - Libya moved to CET</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-2" date="1362002400">- DTS in Chile will end on 2013-04-28
  (0016-Chile-is-changing-its-DST-rules.patch)</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013b-1" date="1363212000">- Upstream 2013b
  - Paraguay will end DST on March 24 this year
  - Haiti uses US daylight-saving rules this year
  - Morocco does not observe DST during Ramadan
- Upstream 2013a
  - Retire Chile patch, 2013a has the data
  - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
  - Many changes in historical timestamps</changelog>
</package>
<package pkgid="63e6651475cfc4761b6cd46c985c59b40c0a3492" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2013c" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013b-1" date="1363212000">- Upstream 2013b
  - Paraguay will end DST on March 24 this year
  - Haiti uses US daylight-saving rules this year
  - Morocco does not observe DST during Ramadan
- Upstream 2013a
  - Retire Chile patch, 2013a has the data
  - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
  - Many changes in historical timestamps</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013b-2" date="1364421600">- Palestine starts Daylight Saving Time on March 29, 2013
  (tzdata-2013b-gaza.patch)</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013c-1" date="1368828000">- Upstream 2013c
  - Sync past stamps for Palestine and West Bank with timeanddate.com
  - Assume that the recent change to Paraguay's DST rules is permanent
  - Macquarie was uninhabited between 1919 and 1948.  It's also part
    of Australia (update in zone.tab).</changelog>
</package>
<package pkgid="b07bad197ca676dcbba0bfb1358da4248bb82b54" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2013c" rel="2.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013b-2" date="1364421600">- Palestine starts Daylight Saving Time on March 29, 2013
  (tzdata-2013b-gaza.patch)</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013c-1" date="1368828000">- Upstream 2013c
  - Sync past stamps for Palestine and West Bank with timeanddate.com
  - Assume that the recent change to Paraguay's DST rules is permanent
  - Macquarie was uninhabited between 1919 and 1948.  It's also part
    of Australia (update in zone.tab).</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013c-2" date="1372975200">- Update descriptions in iso3166.tab; make Jerusalem coordinates in
  zone.tab more precise
  (0001-Adjust-commentary-to-try-to-defuse-recent-issues-som.patch)
- Update local mean time for Jerusalem to match more-precise longitude
  (0002-asia-Asia-Jerusalem-Fix-LMT-to-match-more-precise-lo.patch)
- Move Morocco's midsummer 2013 transitions
  (0003-Move-Morocco-s-midsummer-2013-transitions.patch)
  Fixes 980805 980807 981019 981020
- Israel now falls back on the last Sunday of October
  (0004-Israel-now-falls-back-on-the-last-Sunday-of-October.patch)</changelog>
</package>
<package pkgid="fb45e760680ab38b0e7913181a5879633000e2d3" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2013i" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013c-2" date="1372982400">- Update descriptions in iso3166.tab; make Jerusalem coordinates in
  zone.tab more precise
  (0001-Adjust-commentary-to-try-to-defuse-recent-issues-som.patch)
- Update local mean time for Jerusalem to match more-precise longitude
  (0002-asia-Asia-Jerusalem-Fix-LMT-to-match-more-precise-lo.patch)
- Move Morocco's midsummer 2013 transitions
  (0003-Move-Morocco-s-midsummer-2013-transitions.patch)
  Fixes 980805 980807 981019 981020
- Israel now falls back on the last Sunday of October
  (0004-Israel-now-falls-back-on-the-last-Sunday-of-October.patch)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; 2013g-1" date="1380758400">- Morocco moved end of DST from September to October (#1013527).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; 2013i-1" date="1387324800">- Rebase with early release of 2013i from Paul Eggert github.
  - Jordan switches back to standard time at 00:00 on December 20,2013.
  - The 2006-2011 transition schedule is planned to resume in 2014.
  - The compile-time flag NOSOLAR has been removed.
  - The files solar87, solar88, and solar89 are no longer distributed.
  - tz-link.htm now mentions Noda Time.</changelog>
</package>
<package pkgid="c22e723a846a5d98ab40fefd6dc49a67aeeb4e77" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2013i" rel="2.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; 2013g-1" date="1380758400">- Morocco moved end of DST from September to October (#1013527).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; 2013i-1" date="1387324800">- Rebase with early release of 2013i from Paul Eggert github.
  - Jordan switches back to standard time at 00:00 on December 20,2013.
  - The 2006-2011 transition schedule is planned to resume in 2014.
  - The compile-time flag NOSOLAR has been removed.
  - The files solar87, solar88, and solar89 are no longer distributed.
  - tz-link.htm now mentions Noda Time.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2013i-2" date="1390262400">- Fiji ends DST on 2014-01-19 at 02:00, not the previously-scheduled 03:00.</changelog>
</package>
<package pkgid="f6fe8371ba7b4ce318febd13c148546d4f70b93d" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2014a" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; 2013i-1" date="1387324800">- Rebase with early release of 2013i from Paul Eggert github.
  - Jordan switches back to standard time at 00:00 on December 20,2013.
  - The 2006-2011 transition schedule is planned to resume in 2014.
  - The compile-time flag NOSOLAR has been removed.
  - The files solar87, solar88, and solar89 are no longer distributed.
  - tz-link.htm now mentions Noda Time.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2013i-2" date="1390262400">- Fiji ends DST on 2014-01-19 at 02:00, not the previously-scheduled 03:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014a-1" date="1394496000">- Turkey begins DST on 2014-03-31, not 03-30.</changelog>
</package>
<package pkgid="0006f75eb2104bd458e652d06c15c63724b84f89" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2014b" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2013i-2" date="1390262400">- Fiji ends DST on 2014-01-19 at 02:00, not the previously-scheduled 03:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014a-1" date="1394496000">- Turkey begins DST on 2014-03-31, not 03-30.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014b-1" date="1427328000">- Rebase to 2014b
  - Crimea switches to Moscow time on 2014-03-30 at 02:00 local time.
  - New entry for Troll station, Antarctica.</changelog>
</package>
<package pkgid="f8923530e29e242fc4130d3352cab430b1217d62" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2014e" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014c-1" date="1400716800">- Rebase to 2014c
  - Egypt's government to re-apply daylight saving time.
  - zic now generates transitions for minimum time values
  - Port to Cygwin sans glibc.
  - Remove now-confusing comment about Jordan.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014d-1" date="1401408000">- Rebase to 2014d
  - zic no longer generates files containing time stamps before
    the Big Bang.  This works around GNOME bug 730332</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014e-1" date="1402790400">- Rebase to 2014e
  - Morrocco suspends DTS for Ramadan 
       June 28 at 03:00 and August 2 at 02:00
  - Egypt suspends DTS for Ramadan
       June 26 and July 31 at 24:00</changelog>
</package>
<package pkgid="c447970bd79e17b0921cd8f5df68e02d16bfd8f1" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2014i" rel="1.el5"/>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2014h-1" date="1411776000">- Rebase to 2014h
  - Changes to historical transitions in America/Jamaica and
    Asia/Novokuznetsk.
  - Africa/{Blantyre, Bujumbura, Gaborone, Harare, Kigali, Lubumbashi,
    Lusaka} now alias Africa/Maputo, because they don't differ in
    post-1970 stamps.
  - Africa/Maseru and Africa/Mbabane now alias Africa/Johannesburg for
    the same reason.</changelog>
  <changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2014h-2.el5" date="1411776001">- Bump for rebuild.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014i-1" date="1414022400">- Rebase to 2014i
  - Pacific/Fiji will observe DST from 2014-11-02 02:00 to 2015-01-18 03:00.
  - A new Zone Pacific/Bougainville, for the part of Papua New Guinea
    that plans to switch from UTC+10 to UTC+11 on 2014-12-28 at 02:00.</changelog>
</package>
<package pkgid="fa3e37ceeea9ef9d73c4d53106e6693dca3198b8" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2015a" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014i-1" date="1414022400">- Rebase to 2014i
  - Pacific/Fiji will observe DST from 2014-11-02 02:00 to 2015-01-18 03:00.
  - A new Zone Pacific/Bougainville, for the part of Papua New Guinea
    that plans to switch from UTC+10 to UTC+11 on 2014-12-28 at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014j-1" date="1415750400">- Rebase to 2014j
  - Turks &amp; Caicos' switch from US eastern time to UTC-4 year-round
    did not occur on 2014-11-02 at 02:00.  It's currently scheduled
    for 2015-11-01 at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015a-1" date="1422662400">- Rebase to 2015a
  - New leap second 2015-06-30 23:59:60 UTC as per IERS Bulletin C 49.
  - The Mexican state of Quintana Roo, represented by America/Cancun,
    will shift from Central Time with DST to Eastern Time without DST
    on 2015-02-01 at 02:00.
  - Chile will not change clocks in April or thereafter; its new
    standard time will be its old daylight saving time.  This affects
    America/Santiago, Pacific/Easter, and Antarctica/Palmer.</changelog>
</package>
<package pkgid="e674324b1206115edb6e78e3658000a48090498b" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2015b" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2014j-1" date="1415750400">- Rebase to 2014j
  - Turks &amp; Caicos' switch from US eastern time to UTC-4 year-round
    did not occur on 2014-11-02 at 02:00.  It's currently scheduled
    for 2015-11-01 at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015a-1" date="1422662400">- Rebase to 2015a
  - New leap second 2015-06-30 23:59:60 UTC as per IERS Bulletin C 49.
  - The Mexican state of Quintana Roo, represented by America/Cancun,
    will shift from Central Time with DST to Eastern Time without DST
    on 2015-02-01 at 02:00.
  - Chile will not change clocks in April or thereafter; its new
    standard time will be its old daylight saving time.  This affects
    America/Santiago, Pacific/Easter, and Antarctica/Palmer.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015b-1" date="1426982400">- Rebase to 2015b
  - Mongolia will start observing DST again this year, from the last
    Saturday in March at 02:00 to the last Saturday in September at 00:00.
  - Palestine will start DST on March 28, not March 27.  Also,
    correct the fall 2014 transition from September 26 to October 24.
    Adjust future predictions accordingly.</changelog>
</package>
<package pkgid="c8ef5b30cc92906846c80576ef0751e35b0c2490" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2015d" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015c-1" date="1429056000">- Rebase to 2015c
  - Egypt's spring-forward transition is at 24:00 on April's last Thursday,
    not 00:00 on April's last Friday.  2015's transition will therefore be on
    Thursday, April 30 at 24:00, not Friday, April 24 at 00:00.  Similar fixes
    apply to 2026, 2037, 2043, etc.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015c-2" date="1429660800">- The Egyptian Cabinet announced that DST will be cancelled for 2015.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015d-1" date="1430006400">- Rebase to 2015d:
  - The Egyptian Cabinet announced that DST will be cancelled for 2015.
  - The abbreviations for Hawaii-Aleutian standard and daylight times
    have been changed from HAST/HADT to HST/HDT, as per US Government
    Printing Office style. This affects only America/Adak since 1983,
    as America/Honolulu was already using the new style.</changelog>
</package>
<package pkgid="e1b639769b35f61b0f37d8a9c6da41faf0e71aa2" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2015e" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015d-1" date="1430006400">- Rebase to 2015d:
  - The Egyptian Cabinet announced that DST will be cancelled for 2015.
  - The abbreviations for Hawaii-Aleutian standard and daylight times
    have been changed from HAST/HADT to HST/HDT, as per US Government
    Printing Office style. This affects only America/Adak since 1983,
    as America/Honolulu was already using the new style.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015d-3" date="1433894400">-  Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
   not 06-13 and 07-18 as we had guessed.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015e-1" date="1434326400">- Rebase to 2015e:
  - Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
    not 06-13 and 07-18 as we had guessed.  (Thanks to Milamber.)
  - Assume Cayman Islands will observe DST starting next year, using US rules.
    Although it isn't guaranteed, it is the most likely.</changelog>
</package>
<package pkgid="83714515e03e02b0cb702afafc4ab5aa61fa01b2" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2015g" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015e-1" date="1434326400">- Rebase to 2015e:
  - Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
    not 06-13 and 07-18 as we had guessed.  (Thanks to Milamber.)
  - Assume Cayman Islands will observe DST starting next year, using US rules.
    Although it isn't guaranteed, it is the most likely.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015f-1" date="1439251200">- Rebase to 2015f
  - North Korea switches to +0830 on 2015-08-15.
    The abbreviation remains "KST".
  - Uruguay no longer observes DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015g-1" date="1443744000">- Rebase to 2015g
  - Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.
  - Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.
  - Fiji's 2016 fall-back transition is scheduled for January 17, not 24.
  - Fort Nelson, British Columbia will not fall back on 2015-11-01.  It has
    effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
    New zone America/Fort_Nelson.</changelog>
</package>
<package pkgid="769b753a0cb3886fe5e825c3ea97b516cad497cf" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2016a" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015f-1" date="1439251200">- Rebase to 2015f
  - North Korea switches to +0830 on 2015-08-15.
    The abbreviation remains "KST".
  - Uruguay no longer observes DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015g-1" date="1443744000">- Rebase to 2015g
  - Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.
  - Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.
  - Fiji's 2016 fall-back transition is scheduled for January 17, not 24.
  - Fort Nelson, British Columbia will not fall back on 2015-11-01.  It has
    effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
    New zone America/Fort_Nelson.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-1" date="1454025600">- Rebase to 2016a
  - America/Cayman will not observe daylight saving this year after all.
    Revert our guess that it would.
  - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
  - Asia/Tehran now has DST predictions for the year 2038 and later,
    to be March 21 00:00 to September 21 00:00.  This is likely better
    than predicting no DST, albeit off by a day every now and then.</changelog>
</package>
<package pkgid="1131bb33a5f0893956da772dd4a12725f1c0e65d" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2016b" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015g-1" date="1443744000">- Rebase to 2015g
  - Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.
  - Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.
  - Fiji's 2016 fall-back transition is scheduled for January 17, not 24.
  - Fort Nelson, British Columbia will not fall back on 2015-11-01.  It has
    effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
    New zone America/Fort_Nelson.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-1" date="1454025600">- Rebase to 2016a
  - America/Cayman will not observe daylight saving this year after all.
    Revert our guess that it would.
  - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
  - Asia/Tehran now has DST predictions for the year 2038 and later,
    to be March 21 00:00 to September 21 00:00.  This is likely better
    than predicting no DST, albeit off by a day every now and then.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016b-1" date="1458000000">- Rebase to 2016b
  - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
    Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
    2016-03-27 at 02:00 local time.  They need distinct zones since their
    post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
    Altai Republic, Russia, which will switch from +06 to +07 on the same date
    and local time.  The Astrakhan change is already official; the others have
    passed the first reading in the State Duma and are extremely likely.
    Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  - As a trial of a new system that needs less information to be made up,
    the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  - Haiti will not observe DST in 2016.
  - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
    Guess future transitions will be March's last
    Saturday at 01:00, not March's last Friday at 24:00.</changelog>
</package>
<package pkgid="7b33c7a7b79e37ca3c36be3bc7208dcdaebc9211" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2016c" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-1" date="1454025600">- Rebase to 2016a
  - America/Cayman will not observe daylight saving this year after all.
    Revert our guess that it would.
  - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
  - Asia/Tehran now has DST predictions for the year 2038 and later,
    to be March 21 00:00 to September 21 00:00.  This is likely better
    than predicting no DST, albeit off by a day every now and then.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016b-1" date="1458000000">- Rebase to 2016b
  - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
    Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
    2016-03-27 at 02:00 local time.  They need distinct zones since their
    post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
    Altai Republic, Russia, which will switch from +06 to +07 on the same date
    and local time.  The Astrakhan change is already official; the others have
    passed the first reading in the State Duma and are extremely likely.
    Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  - As a trial of a new system that needs less information to be made up,
    the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  - Haiti will not observe DST in 2016.
  - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
    Guess future transitions will be March's last
    Saturday at 01:00, not March's last Friday at 24:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016c-1" date="1458777600">- Rebase to 2016c
  - Azerbaijan no longer observes DST.
  - Chile reverts from permanent to seasonal DST.</changelog>
</package>
<package pkgid="e42446fe85cd7bc085591240cb5b8507924cc009" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2016d" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016b-1" date="1458000000">- Rebase to 2016b
  - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
    Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
    2016-03-27 at 02:00 local time.  They need distinct zones since their
    post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
    Altai Republic, Russia, which will switch from +06 to +07 on the same date
    and local time.  The Astrakhan change is already official; the others have
    passed the first reading in the State Duma and are extremely likely.
    Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  - As a trial of a new system that needs less information to be made up,
    the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  - Haiti will not observe DST in 2016.
  - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
    Guess future transitions will be March's last
    Saturday at 01:00, not March's last Friday at 24:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016c-1" date="1458777600">- Rebase to 2016c
  - Azerbaijan no longer observes DST.
  - Chile reverts from permanent to seasonal DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016d-1" date="1461024000">- Rebase to 2016d 
  - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
  - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
    at 02:00.</changelog>
</package>
<package pkgid="7e80376feb0e983411b8ec537da15a77887f4b87" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2016e" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016c-1" date="1458777600">- Rebase to 2016c
  - Azerbaijan no longer observes DST.
  - Chile reverts from permanent to seasonal DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016d-1" date="1461024000">- Rebase to 2016d 
  - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
  - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
    at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016e-1" date="1465948800">- Rebase to 2016e
  - Egypt reinstates DST.</changelog>
</package>
<package pkgid="7ee38a2da982b9655108dbb05c4bb767f4ec0024" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2016f" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016d-1" date="1461024000">- Rebase to 2016d 
  - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
  - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
    at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016e-1" date="1465948800">- Rebase to 2016e
  - Egypt reinstates DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-1" date="1467763200">- Rebase to 2016f
  - Egypt cancelled DST.
  - Asia/Novosibirsk transitions from +06 to +07 on 2016-07-24 at 02:00.</changelog>
</package>
<package pkgid="83f27a7c67b59bc0ffae32a50b95ea18e7f8524d" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2016g" rel="2.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474934400">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1475020800">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475107200">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
</package>
<package pkgid="43b449a72d7fd00e0c27eab184ceebb017bfe8e8" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2016h" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1475020800">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475107200">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1477008000">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
</package>
<package pkgid="d83cb4efd7f9e11984c4190a3450be1413785657" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2016i" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475107200">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1477008000">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478131200">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
</package>
<package pkgid="429988f7eacdeafaed0bb924c1f5e64f4f39c6f3" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2016j" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1477008000">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478131200">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479945600">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
</package>
<package pkgid="6bd9f0817ad6af6dd2620921fff2e82dd47abe75" name="tzdata-java" arch="i386">
  <version epoch="0" ver="2017a" rel="1.el5"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478131200">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479945600">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488499200">- Rebase to tzdata-2017a
  - Mongolia no longer observes DST (BZ #1425223)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab to the install files. (BZ #1427696)</changelog>
</package>
<package pkgid="4c8dd69eea8d88aa8c2ce2d2487d0fa201d06a13" name="unixODBC" arch="i386">
  <version epoch="0" ver="2.2.11" rel="10.el5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.11-8" date="1260482400">- rebuild to pick up newer libtool, fixing CVE-2009-3736
Resolves: #545576</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.11-9" date="1318284000">- split out libraries into a -libs subpackage, to allow them to be installed
  concurrently with unixODBC64-libs
Resolves: #497016</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.11-10" date="1318975200">- Compile with -fno-strict-aliasing, per rpmdiff complaint.
- Install icons in /usr/share/pixmaps, not /usr/share/icons as this package
  has historically done; the former is considered correct.  Also per rpmdiff.
Related: #497016</changelog>
</package>
<package pkgid="d4416eeb18d49f9fa258f5db6e9a3937f254af81" name="unixODBC-devel" arch="i386">
  <version epoch="0" ver="2.2.11" rel="10.el5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.11-8" date="1260482400">- rebuild to pick up newer libtool, fixing CVE-2009-3736
Resolves: #545576</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.11-9" date="1318284000">- split out libraries into a -libs subpackage, to allow them to be installed
  concurrently with unixODBC64-libs
Resolves: #497016</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.11-10" date="1318975200">- Compile with -fno-strict-aliasing, per rpmdiff complaint.
- Install icons in /usr/share/pixmaps, not /usr/share/icons as this package
  has historically done; the former is considered correct.  Also per rpmdiff.
Related: #497016</changelog>
</package>
<package pkgid="6e2764d8ebecfe514cc97a8da4c8e786611a2799" name="unixODBC-kde" arch="i386">
  <version epoch="0" ver="2.2.11" rel="10.el5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.11-8" date="1260482400">- rebuild to pick up newer libtool, fixing CVE-2009-3736
Resolves: #545576</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.11-9" date="1318284000">- split out libraries into a -libs subpackage, to allow them to be installed
  concurrently with unixODBC64-libs
Resolves: #497016</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.11-10" date="1318975200">- Compile with -fno-strict-aliasing, per rpmdiff complaint.
- Install icons in /usr/share/pixmaps, not /usr/share/icons as this package
  has historically done; the former is considered correct.  Also per rpmdiff.
Related: #497016</changelog>
</package>
<package pkgid="866487abfdfd94dd729d4f2bd47427dbaee19a6a" name="unixODBC-libs" arch="i386">
  <version epoch="0" ver="2.2.11" rel="10.el5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.11-8" date="1260482400">- rebuild to pick up newer libtool, fixing CVE-2009-3736
Resolves: #545576</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.11-9" date="1318284000">- split out libraries into a -libs subpackage, to allow them to be installed
  concurrently with unixODBC64-libs
Resolves: #497016</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.11-10" date="1318975200">- Compile with -fno-strict-aliasing, per rpmdiff complaint.
- Install icons in /usr/share/pixmaps, not /usr/share/icons as this package
  has historically done; the former is considered correct.  Also per rpmdiff.
Related: #497016</changelog>
</package>
<package pkgid="7673af52a9f8cac737e38c5f1623f50e598fc2a8" name="unixODBC64" arch="i386">
  <version epoch="0" ver="2.2.14" rel="3.el5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.14-1" date="1318284000">- Constructed from current Fedora package, removing -kde subpackage because
  2.2.14 seems to need a newer version of Qt than RHEL-5 provides.
- Split libraries into a -libs subpackage to allow installation concurrent
  with the original unixODBC package (or at least its -libs subpackage).
Resolves: #742597</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.14-2" date="1318888800">- Treat ia64 as a multilib architecture, because rpmdiff has started to
  whinge about it
Related: #742597</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.14-3" date="1322604000">- Drat, forgot to teach conffile.h about ia64 multilib support
Resolves: #757126</changelog>
</package>
<package pkgid="5bf535c46ce4329445718de8097da8d90197c859" name="unixODBC64-devel" arch="i386">
  <version epoch="0" ver="2.2.14" rel="3.el5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.14-1" date="1318284000">- Constructed from current Fedora package, removing -kde subpackage because
  2.2.14 seems to need a newer version of Qt than RHEL-5 provides.
- Split libraries into a -libs subpackage to allow installation concurrent
  with the original unixODBC package (or at least its -libs subpackage).
Resolves: #742597</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.14-2" date="1318888800">- Treat ia64 as a multilib architecture, because rpmdiff has started to
  whinge about it
Related: #742597</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.14-3" date="1322604000">- Drat, forgot to teach conffile.h about ia64 multilib support
Resolves: #757126</changelog>
</package>
<package pkgid="edeb8f29878cf4b416ef968540a052dc610fcb99" name="unixODBC64-libs" arch="i386">
  <version epoch="0" ver="2.2.14" rel="3.el5"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.14-1" date="1318284000">- Constructed from current Fedora package, removing -kde subpackage because
  2.2.14 seems to need a newer version of Qt than RHEL-5 provides.
- Split libraries into a -libs subpackage to allow installation concurrent
  with the original unixODBC package (or at least its -libs subpackage).
Resolves: #742597</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.14-2" date="1318888800">- Treat ia64 as a multilib architecture, because rpmdiff has started to
  whinge about it
Related: #742597</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2.2.14-3" date="1322604000">- Drat, forgot to teach conffile.h about ia64 multilib support
Resolves: #757126</changelog>
</package>
<package pkgid="effec793b416d5558a0f75a2a0c9c78b68c67abc" name="util-linux" arch="i386">
  <version epoch="0" ver="2.13" rel="0.59.el5"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.13-0.57" date="1319580000">- fix #646300 - login doesn't update /var/run/utmp properly
- fix #726572 - import missing fsfreeze into util-linux 
- fix #678430 - fdisk should not report error on 1gB LUNs
- fix #699639 - mount man page is missing support for ext4/xfs
- fix #650937 - blockdev man page missing information
- fix #678407 - ipcs and ipcrm in wrong man section</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.13-0.58" date="1319580001">- fix #677452 - util-linux fails to build with gettext-0.17</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.13-0.59" date="1324504800">- fix #768382 - CVE-2011-1675 CVE-2011-1677 util-linux various flaws</changelog>
</package>
<package pkgid="e3f38ed908baf697fae63022f29c86560dd950b5" name="vino" arch="i386">
  <version epoch="0" ver="2.13.5" rel="10.el5_10"/>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; - 2.13.6-7" date="1239926400">- Backport status icon code, using vino-status-icon.[ch] from 2.20. 
  Bug #426256</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; - 2.13.5-8" date="1257465600">- Patch for #493097 (check before using shmpixmaps)</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; - 2.13.5-10" date="1382054400">- Reject clients in deferred auth state
  - Bug 1009228</changelog>
</package>
<package pkgid="903503ce8dd95e73eb63d6a24b8fa78e7b1c3448" name="vixie-cron" arch="i386">
  <version epoch="4" ver="4.1" rel="81.el5"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 4:4.1-79" date="1317160800">- CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp 
  of user's crontab file, when editing the file
- Resolves: rhbz#741534</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 4:4.1-80" date="1319061600">- 654961 crond process ignores the changes of user's home directory needs
  bigger changes of code. The fix wasn't applied, detail in comment#11.
- Related: rhbz#249512</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 4:4.1-81" date="1319148000">- 455664 adoptions of crontab orphans, forgot add buffer for list of
  orphans
- Related: rhbz#455664</changelog>
</package>
<package pkgid="3faa8742445b034d1375ea20d724a462b8d2759e" name="wireshark" arch="i386">
  <version epoch="0" ver="1.0.15" rel="5.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 1.0.15-3" date="1340748000">- fixed various flaws: CVE-2011-1959 CVE-2011-2175 CVE-2011-1958 
  CVE-2011-2698 CVE-2011-4102 CVE-2012-0041 CVE-2012-0042 CVE-2012-0066
  CVE-2012-0067</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 1.0.15-4" date="1343858400">- fixed NetDump dissector (#484999)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 1.0.15-5" date="1345500000">- fixed CVE-2012-4285, CVE-2012-4289, CVE-2012-4291 and CVE-2012-4290
  (#849521)</changelog>
</package>
<package pkgid="c34dd5e329467221bec572814465758d452e6360" name="wireshark" arch="i386">
  <version epoch="0" ver="1.0.15" rel="6.el5_10"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 1.0.15-4" date="1343865600">- fixed NetDump dissector (#484999)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 1.0.15-5" date="1345507200">- fixed CVE-2012-4285, CVE-2012-4289, CVE-2012-4291 and CVE-2012-4290
  (#849521)</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; 1.0.15-6" date="1394841600">- security patches
- Resolves: CVE-2012-6056
            CVE-2012-6060
            CVE-2012-6061
            CVE-2012-6062
            CVE-2013-3557
            CVE-2013-3559
            CVE-2013-4081
            CVE-2013-4083
            CVE-2013-4927
            CVE-2013-4931
            CVE-2013-4932
            CVE-2013-4933
            CVE-2013-4934
            CVE-2013-4935
            CVE-2013-5721
            CVE-2013-7112
            CVE-2014-2281
            CVE-2014-2299</changelog>
</package>
<package pkgid="83e7ff76723795454ea2e4a1c551954e4e8a11db" name="wireshark" arch="i386">
  <version epoch="0" ver="1.0.15" rel="7.el5_11"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 1.0.15-5" date="1345507200">- fixed CVE-2012-4285, CVE-2012-4289, CVE-2012-4291 and CVE-2012-4290
  (#849521)</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; 1.0.15-6" date="1394841600">- security patches
- Resolves: CVE-2012-6056
            CVE-2012-6060
            CVE-2012-6061
            CVE-2012-6062
            CVE-2013-3557
            CVE-2013-3559
            CVE-2013-4081
            CVE-2013-4083
            CVE-2013-4927
            CVE-2013-4931
            CVE-2013-4932
            CVE-2013-4933
            CVE-2013-4934
            CVE-2013-4935
            CVE-2013-5721
            CVE-2013-7112
            CVE-2014-2281
            CVE-2014-2299</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; 1.0.15-7" date="1412380800">- security patches
- Resolves: CVE-2014-6421
            CVE-2014-6423
            CVE-2014-6425
            CVE-2014-6428
            CVE-2014-6429</changelog>
</package>
<package pkgid="66862aa61e7c748e1950c97fbdfe44913fea76fc" name="wireshark-gnome" arch="i386">
  <version epoch="0" ver="1.0.15" rel="5.el5"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 1.0.15-3" date="1340748000">- fixed various flaws: CVE-2011-1959 CVE-2011-2175 CVE-2011-1958 
  CVE-2011-2698 CVE-2011-4102 CVE-2012-0041 CVE-2012-0042 CVE-2012-0066
  CVE-2012-0067</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 1.0.15-4" date="1343858400">- fixed NetDump dissector (#484999)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 1.0.15-5" date="1345500000">- fixed CVE-2012-4285, CVE-2012-4289, CVE-2012-4291 and CVE-2012-4290
  (#849521)</changelog>
</package>
<package pkgid="9ac80b6fefb490f7cecdc9a6a49c612cd009c7d8" name="wireshark-gnome" arch="i386">
  <version epoch="0" ver="1.0.15" rel="6.el5_10"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 1.0.15-4" date="1343865600">- fixed NetDump dissector (#484999)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 1.0.15-5" date="1345507200">- fixed CVE-2012-4285, CVE-2012-4289, CVE-2012-4291 and CVE-2012-4290
  (#849521)</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; 1.0.15-6" date="1394841600">- security patches
- Resolves: CVE-2012-6056
            CVE-2012-6060
            CVE-2012-6061
            CVE-2012-6062
            CVE-2013-3557
            CVE-2013-3559
            CVE-2013-4081
            CVE-2013-4083
            CVE-2013-4927
            CVE-2013-4931
            CVE-2013-4932
            CVE-2013-4933
            CVE-2013-4934
            CVE-2013-4935
            CVE-2013-5721
            CVE-2013-7112
            CVE-2014-2281
            CVE-2014-2299</changelog>
</package>
<package pkgid="6aba865ca0af9fc806c3fb77aec9470f31ee8c35" name="wireshark-gnome" arch="i386">
  <version epoch="0" ver="1.0.15" rel="7.el5_11"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 1.0.15-5" date="1345507200">- fixed CVE-2012-4285, CVE-2012-4289, CVE-2012-4291 and CVE-2012-4290
  (#849521)</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; 1.0.15-6" date="1394841600">- security patches
- Resolves: CVE-2012-6056
            CVE-2012-6060
            CVE-2012-6061
            CVE-2012-6062
            CVE-2013-3557
            CVE-2013-3559
            CVE-2013-4081
            CVE-2013-4083
            CVE-2013-4927
            CVE-2013-4931
            CVE-2013-4932
            CVE-2013-4933
            CVE-2013-4934
            CVE-2013-4935
            CVE-2013-5721
            CVE-2013-7112
            CVE-2014-2281
            CVE-2014-2299</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; 1.0.15-7" date="1412380800">- security patches
- Resolves: CVE-2014-6421
            CVE-2014-6423
            CVE-2014-6425
            CVE-2014-6428
            CVE-2014-6429</changelog>
</package>
<package pkgid="7b0b1e2931ac900bcd300d4709af1fed8b0b2c6a" name="xalan-j2" arch="i386">
  <version epoch="0" ver="2.7.0" rel="6jpp.2"/>
  <changelog author="Vivek Lakshmanan &lt;vivekl@redhat.com&gt; - 0:2.7.0-5jpp.3" date="1155340800">- Rebuild.</changelog>
  <changelog author="Vivek Lakshmanan &lt;vivekl@redhat.com&gt; - 0:2.7.0-6jpp.1" date="1155945600">- Resync with latest from JPP.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.7.0-6jpp.2" date="1396051200">- Add patch to fix remote code execution vulnerability
- Resolves: CVE-2014-0107</changelog>
</package>
<package pkgid="fa3a7dce629cb3a51c4306f0f6e8c45ab9aff8fe" name="xalan-j2-demo" arch="i386">
  <version epoch="0" ver="2.7.0" rel="6jpp.2"/>
  <changelog author="Vivek Lakshmanan &lt;vivekl@redhat.com&gt; - 0:2.7.0-5jpp.3" date="1155340800">- Rebuild.</changelog>
  <changelog author="Vivek Lakshmanan &lt;vivekl@redhat.com&gt; - 0:2.7.0-6jpp.1" date="1155945600">- Resync with latest from JPP.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.7.0-6jpp.2" date="1396051200">- Add patch to fix remote code execution vulnerability
- Resolves: CVE-2014-0107</changelog>
</package>
<package pkgid="d5d9efebd15aa25f4f8c907ebb109f18385b3400" name="xalan-j2-javadoc" arch="i386">
  <version epoch="0" ver="2.7.0" rel="6jpp.2"/>
  <changelog author="Vivek Lakshmanan &lt;vivekl@redhat.com&gt; - 0:2.7.0-5jpp.3" date="1155340800">- Rebuild.</changelog>
  <changelog author="Vivek Lakshmanan &lt;vivekl@redhat.com&gt; - 0:2.7.0-6jpp.1" date="1155945600">- Resync with latest from JPP.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.7.0-6jpp.2" date="1396051200">- Add patch to fix remote code execution vulnerability
- Resolves: CVE-2014-0107</changelog>
</package>
<package pkgid="722c4ef4ecff03b19400e531c81f389f23274586" name="xalan-j2-manual" arch="i386">
  <version epoch="0" ver="2.7.0" rel="6jpp.2"/>
  <changelog author="Vivek Lakshmanan &lt;vivekl@redhat.com&gt; - 0:2.7.0-5jpp.3" date="1155340800">- Rebuild.</changelog>
  <changelog author="Vivek Lakshmanan &lt;vivekl@redhat.com&gt; - 0:2.7.0-6jpp.1" date="1155945600">- Resync with latest from JPP.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.7.0-6jpp.2" date="1396051200">- Add patch to fix remote code execution vulnerability
- Resolves: CVE-2014-0107</changelog>
</package>
<package pkgid="b3b5cfbc1fec5995765a2c4018eacffe408fe6d4" name="xalan-j2-xsltc" arch="i386">
  <version epoch="0" ver="2.7.0" rel="6jpp.2"/>
  <changelog author="Vivek Lakshmanan &lt;vivekl@redhat.com&gt; - 0:2.7.0-5jpp.3" date="1155340800">- Rebuild.</changelog>
  <changelog author="Vivek Lakshmanan &lt;vivekl@redhat.com&gt; - 0:2.7.0-6jpp.1" date="1155945600">- Resync with latest from JPP.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.7.0-6jpp.2" date="1396051200">- Add patch to fix remote code execution vulnerability
- Resolves: CVE-2014-0107</changelog>
</package>
<package pkgid="093cbcba3539c69251004f163f070a43560f6280" name="xen" arch="i386">
  <version epoch="0" ver="3.0.3" rel="132.el5_7.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-132.el5" date="1306360800">- hvmloader: leave HPET table in (rhbz 702607)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-132.el5_7.1" date="1316469600">- hotplug: set netback/tap MTU to the same value as the bridge MTU (rhbz 738608)
- copy the MTU of the physical interface to the Xen bridge (rhbz 738610)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-132.el5_7.2" date="1318284000">- Release device backends before restarting guest on the destination machine (rhbz 743850)
- Fix SCSI buffer overflow and disable SCSI CD-ROMs (rhbz 736289)</changelog>
</package>
<package pkgid="62dd45ffe54b8bfc6b902a2b09997cfa9036aeba" name="xen" arch="i386">
  <version epoch="0" ver="3.0.3" rel="135.el5_8.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5" date="1319666400">- Fix valid cdrom image check (rhbz 737851)
- pygrub: add more grub2 config file names (rhbz 746602)
- pygrub: read all MSDOS partitions (rhbz 746602)
- pygrub: read all GPT partitions (rhbz 746602)
- pygrub: parse more grub2 config file constructs (rhbz 746602)
- fix SCSI buffer overflow, disable SCSI CD-ROMs (rhbz 736291)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.1" date="1330380000">- qemu-dm/e1000: bounds packet size against buffer size (rhbz 786862)
- Use correct expansion in xen-network-common.sh (rhbz 797191)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.2" date="1330380001">- Fix broken timestamp log (rhbz 797836)</changelog>
</package>
<package pkgid="d5ea6e37a6ea75a639fd81f8edac1b6632b55ea2" name="xen" arch="i386">
  <version epoch="0" ver="3.0.3" rel="135.el5_8.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.1" date="1330380000">- qemu-dm/e1000: bounds packet size against buffer size (rhbz 786862)
- Use correct expansion in xen-network-common.sh (rhbz 797191)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.2" date="1330380001">- Fix broken timestamp log (rhbz 797836)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.4" date="1342648800">- pygrub: Improve handling of big files (rhbz 821704)</changelog>
</package>
<package pkgid="b154d1714484df22753739d1f8233687dc97fdb6" name="xen" arch="i386">
  <version epoch="0" ver="3.0.3" rel="135.el5_8.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.2" date="1330380000">- Fix broken timestamp log (rhbz 797836)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.4" date="1342648800">- pygrub: Improve handling of big files (rhbz 821704)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.5" date="1346709600">- console: Prevent escape sequence length overflow (rhbz 851253)</changelog>
</package>
<package pkgid="55faf45c2be91657da8cc6598b05bd4df9ef37df" name="xen" arch="i386">
  <version epoch="0" ver="3.0.3" rel="142.el5_9.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-141.el5" date="1346709600">- console: Prevent escape sequence length overflow</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5" date="1349128800">- Properly close logfile of console daemon on error (rhbz 749776)
- Fix leaks in block-qcow driver (rhbz 749776)
- Avoid bogus use of NULL pointer in hvmloader (rhbz 749776)
- qemu-dm: fix unregister_iomem (rhbz 861349)
- Backport a single hunk from qemu-xen-unstable commit 13669683 (rhbz 861349)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5_9.1" date="1358978400">- libxc: move error checking next to the function which returned the error (rhbz 876997)
- libxc: builder: limit maximum size of   kernel/ramdisk (rhbz 876997)</changelog>
</package>
<package pkgid="7e8cba4f723e2d983579e029555dc9126a9a4a31" name="xen" arch="i386">
  <version epoch="0" ver="3.0.3" rel="142.el5_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5" date="1349128800">- Properly close logfile of console daemon on error (rhbz 749776)
- Fix leaks in block-qcow driver (rhbz 749776)
- Avoid bogus use of NULL pointer in hvmloader (rhbz 749776)
- qemu-dm: fix unregister_iomem (rhbz 861349)
- Backport a single hunk from qemu-xen-unstable commit 13669683 (rhbz 861349)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5_9.1" date="1358978400">- libxc: move error checking next to the function which returned the error (rhbz 876997)
- libxc: builder: limit maximum size of   kernel/ramdisk (rhbz 876997)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5_9.2" date="1361311200">- e1000: discard packets that are too long if !SBP and !LPE (rhbz 910843)
- e1000: discard oversized packets based on SBP|LPE (rhbz 910843)</changelog>
</package>
<package pkgid="3ded105f71b07447ca56507d5f487cde7ec66f3e" name="xen" arch="i386">
  <version epoch="0" ver="3.0.3" rel="146.el5_11"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-143.el5" date="1361318400">- libxc: move error checking next to the function which returned the error (rhbz 870413)
- libxc: builder: limit maximum size of   kernel/ramdisk (rhbz 870413)
- e1000: discard packets that are too long if !SBP and !LPE (rhbz 910844)
- e1000: discard oversized packets based on SBP|LPE (rhbz 910844)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-144.el5" date="1367625600">- xm: Fix vcpu-pin complain for CPU number out of range (rhbz 955656)
- libxc: Support set affinity for more than 64 CPUS (rhbz 955656)
- libxc: Fixes for "support affinity for more than 64 CPUS" (rhbz 955656)
- xend: Fix bug of a cpu affinity vcpu-pin under ia32pa (rhbz 955656)
- libxc: Fix cpu number overflow for vcpu-pin (rhbz 955656)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-146.el5" date="1431388800">- xen-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch
- xen-FDC-Fix-buffer-overflow-Herv-Poussineau.patch
- Resolves: bz#1219333
 (xen: qemu: floppy disk controller flaw [rhel-5.11.z])</changelog>
</package>
<package pkgid="f34048c321049c925555686beb3169c160938602" name="xen" arch="i386">
  <version epoch="0" ver="3.0.3" rel="147.el5_11"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-144.el5" date="1367625600">- xm: Fix vcpu-pin complain for CPU number out of range (rhbz 955656)
- libxc: Support set affinity for more than 64 CPUS (rhbz 955656)
- libxc: Fixes for "support affinity for more than 64 CPUS" (rhbz 955656)
- xend: Fix bug of a cpu affinity vcpu-pin under ia32pa (rhbz 955656)
- libxc: Fix cpu number overflow for vcpu-pin (rhbz 955656)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-146.el5" date="1431388800">- xen-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch
- xen-FDC-Fix-buffer-overflow-Herv-Poussineau.patch
- Resolves: bz#1219333
 (xen: qemu: floppy disk controller flaw [rhel-5.11.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-147.el5" date="1443744000">- net: add checks to validate ring buffer pointers 
- Resolves: bz#1263273
  (xen: qemu: Heap overflow vulnerability in ne2000_receive() function)</changelog>
</package>
<package pkgid="8c001a16abb098b64b3e75ba112f1eabe7745f78" name="xen" arch="i386">
  <version epoch="0" ver="3.0.3" rel="148.el5_11"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-146.el5" date="1431388800">- xen-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch
- xen-FDC-Fix-buffer-overflow-Herv-Poussineau.patch
- Resolves: bz#1219333
 (xen: qemu: floppy disk controller flaw [rhel-5.11.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-147.el5" date="1443744000">- net: add checks to validate ring buffer pointers 
- Resolves: bz#1263273
  (xen: qemu: Heap overflow vulnerability in ne2000_receive() function)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-148.el5_11" date="1481328000">- xen-qemu-ioport-array-overflow.patch [bz#1401521]
- Resolves: bz#1401521
  (CVE-2016-9637 xsa199 xen: qemu ioport array overflow (XSA-199) [rhel-5.11.z])</changelog>
</package>
<package pkgid="14e376f7c6bcccd036ff833ec2777c45a4e379e9" name="xen-devel" arch="i386">
  <version epoch="0" ver="3.0.3" rel="132.el5_7.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-132.el5" date="1306360800">- hvmloader: leave HPET table in (rhbz 702607)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-132.el5_7.1" date="1316469600">- hotplug: set netback/tap MTU to the same value as the bridge MTU (rhbz 738608)
- copy the MTU of the physical interface to the Xen bridge (rhbz 738610)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-132.el5_7.2" date="1318284000">- Release device backends before restarting guest on the destination machine (rhbz 743850)
- Fix SCSI buffer overflow and disable SCSI CD-ROMs (rhbz 736289)</changelog>
</package>
<package pkgid="2fa8188ad276717545e87f0f60de51383ef4c870" name="xen-devel" arch="i386">
  <version epoch="0" ver="3.0.3" rel="135.el5_8.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5" date="1319666400">- Fix valid cdrom image check (rhbz 737851)
- pygrub: add more grub2 config file names (rhbz 746602)
- pygrub: read all MSDOS partitions (rhbz 746602)
- pygrub: read all GPT partitions (rhbz 746602)
- pygrub: parse more grub2 config file constructs (rhbz 746602)
- fix SCSI buffer overflow, disable SCSI CD-ROMs (rhbz 736291)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.1" date="1330380000">- qemu-dm/e1000: bounds packet size against buffer size (rhbz 786862)
- Use correct expansion in xen-network-common.sh (rhbz 797191)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.2" date="1330380001">- Fix broken timestamp log (rhbz 797836)</changelog>
</package>
<package pkgid="8b65074ec101cd08f51a4572138b8a9c5ab531f1" name="xen-devel" arch="i386">
  <version epoch="0" ver="3.0.3" rel="135.el5_8.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.1" date="1330380000">- qemu-dm/e1000: bounds packet size against buffer size (rhbz 786862)
- Use correct expansion in xen-network-common.sh (rhbz 797191)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.2" date="1330380001">- Fix broken timestamp log (rhbz 797836)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.4" date="1342648800">- pygrub: Improve handling of big files (rhbz 821704)</changelog>
</package>
<package pkgid="ebf2cef1f2a55ca74030220f035bee4884295784" name="xen-devel" arch="i386">
  <version epoch="0" ver="3.0.3" rel="135.el5_8.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.2" date="1330380000">- Fix broken timestamp log (rhbz 797836)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.4" date="1342648800">- pygrub: Improve handling of big files (rhbz 821704)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.5" date="1346709600">- console: Prevent escape sequence length overflow (rhbz 851253)</changelog>
</package>
<package pkgid="2f919dc93e9bc16ef715c6329dbe3bab4436b0cd" name="xen-devel" arch="i386">
  <version epoch="0" ver="3.0.3" rel="142.el5_9.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-141.el5" date="1346709600">- console: Prevent escape sequence length overflow</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5" date="1349128800">- Properly close logfile of console daemon on error (rhbz 749776)
- Fix leaks in block-qcow driver (rhbz 749776)
- Avoid bogus use of NULL pointer in hvmloader (rhbz 749776)
- qemu-dm: fix unregister_iomem (rhbz 861349)
- Backport a single hunk from qemu-xen-unstable commit 13669683 (rhbz 861349)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5_9.1" date="1358978400">- libxc: move error checking next to the function which returned the error (rhbz 876997)
- libxc: builder: limit maximum size of   kernel/ramdisk (rhbz 876997)</changelog>
</package>
<package pkgid="0792eba155f9955cc9d935e7e397bc55878870bf" name="xen-devel" arch="i386">
  <version epoch="0" ver="3.0.3" rel="142.el5_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5" date="1349128800">- Properly close logfile of console daemon on error (rhbz 749776)
- Fix leaks in block-qcow driver (rhbz 749776)
- Avoid bogus use of NULL pointer in hvmloader (rhbz 749776)
- qemu-dm: fix unregister_iomem (rhbz 861349)
- Backport a single hunk from qemu-xen-unstable commit 13669683 (rhbz 861349)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5_9.1" date="1358978400">- libxc: move error checking next to the function which returned the error (rhbz 876997)
- libxc: builder: limit maximum size of   kernel/ramdisk (rhbz 876997)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5_9.2" date="1361311200">- e1000: discard packets that are too long if !SBP and !LPE (rhbz 910843)
- e1000: discard oversized packets based on SBP|LPE (rhbz 910843)</changelog>
</package>
<package pkgid="5b6ac00e66586295bcf6dabefea403fe1f1bfedb" name="xen-devel" arch="i386">
  <version epoch="0" ver="3.0.3" rel="146.el5_11"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-143.el5" date="1361318400">- libxc: move error checking next to the function which returned the error (rhbz 870413)
- libxc: builder: limit maximum size of   kernel/ramdisk (rhbz 870413)
- e1000: discard packets that are too long if !SBP and !LPE (rhbz 910844)
- e1000: discard oversized packets based on SBP|LPE (rhbz 910844)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-144.el5" date="1367625600">- xm: Fix vcpu-pin complain for CPU number out of range (rhbz 955656)
- libxc: Support set affinity for more than 64 CPUS (rhbz 955656)
- libxc: Fixes for "support affinity for more than 64 CPUS" (rhbz 955656)
- xend: Fix bug of a cpu affinity vcpu-pin under ia32pa (rhbz 955656)
- libxc: Fix cpu number overflow for vcpu-pin (rhbz 955656)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-146.el5" date="1431388800">- xen-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch
- xen-FDC-Fix-buffer-overflow-Herv-Poussineau.patch
- Resolves: bz#1219333
 (xen: qemu: floppy disk controller flaw [rhel-5.11.z])</changelog>
</package>
<package pkgid="e04075bdb4f6124deadd13eda6790e0440956b1c" name="xen-devel" arch="i386">
  <version epoch="0" ver="3.0.3" rel="147.el5_11"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-144.el5" date="1367625600">- xm: Fix vcpu-pin complain for CPU number out of range (rhbz 955656)
- libxc: Support set affinity for more than 64 CPUS (rhbz 955656)
- libxc: Fixes for "support affinity for more than 64 CPUS" (rhbz 955656)
- xend: Fix bug of a cpu affinity vcpu-pin under ia32pa (rhbz 955656)
- libxc: Fix cpu number overflow for vcpu-pin (rhbz 955656)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-146.el5" date="1431388800">- xen-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch
- xen-FDC-Fix-buffer-overflow-Herv-Poussineau.patch
- Resolves: bz#1219333
 (xen: qemu: floppy disk controller flaw [rhel-5.11.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-147.el5" date="1443744000">- net: add checks to validate ring buffer pointers 
- Resolves: bz#1263273
  (xen: qemu: Heap overflow vulnerability in ne2000_receive() function)</changelog>
</package>
<package pkgid="438642673f508e15481ce39bfd49731bf99b4343" name="xen-devel" arch="i386">
  <version epoch="0" ver="3.0.3" rel="148.el5_11"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-146.el5" date="1431388800">- xen-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch
- xen-FDC-Fix-buffer-overflow-Herv-Poussineau.patch
- Resolves: bz#1219333
 (xen: qemu: floppy disk controller flaw [rhel-5.11.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-147.el5" date="1443744000">- net: add checks to validate ring buffer pointers 
- Resolves: bz#1263273
  (xen: qemu: Heap overflow vulnerability in ne2000_receive() function)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-148.el5_11" date="1481328000">- xen-qemu-ioport-array-overflow.patch [bz#1401521]
- Resolves: bz#1401521
  (CVE-2016-9637 xsa199 xen: qemu ioport array overflow (XSA-199) [rhel-5.11.z])</changelog>
</package>
<package pkgid="b143bceedca45cc54446b37f3976f9ec866e5a4c" name="xen-libs" arch="i386">
  <version epoch="0" ver="3.0.3" rel="132.el5_7.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-132.el5" date="1306360800">- hvmloader: leave HPET table in (rhbz 702607)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-132.el5_7.1" date="1316469600">- hotplug: set netback/tap MTU to the same value as the bridge MTU (rhbz 738608)
- copy the MTU of the physical interface to the Xen bridge (rhbz 738610)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-132.el5_7.2" date="1318284000">- Release device backends before restarting guest on the destination machine (rhbz 743850)
- Fix SCSI buffer overflow and disable SCSI CD-ROMs (rhbz 736289)</changelog>
</package>
<package pkgid="79dd5dae2d15f8dc6d0593873bbd3aece8d1b94d" name="xen-libs" arch="i386">
  <version epoch="0" ver="3.0.3" rel="135.el5_8.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5" date="1319666400">- Fix valid cdrom image check (rhbz 737851)
- pygrub: add more grub2 config file names (rhbz 746602)
- pygrub: read all MSDOS partitions (rhbz 746602)
- pygrub: read all GPT partitions (rhbz 746602)
- pygrub: parse more grub2 config file constructs (rhbz 746602)
- fix SCSI buffer overflow, disable SCSI CD-ROMs (rhbz 736291)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.1" date="1330380000">- qemu-dm/e1000: bounds packet size against buffer size (rhbz 786862)
- Use correct expansion in xen-network-common.sh (rhbz 797191)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.2" date="1330380001">- Fix broken timestamp log (rhbz 797836)</changelog>
</package>
<package pkgid="5856218c25cdc7ce81fa9768327e35c93fd5a4dc" name="xen-libs" arch="i386">
  <version epoch="0" ver="3.0.3" rel="135.el5_8.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.1" date="1330380000">- qemu-dm/e1000: bounds packet size against buffer size (rhbz 786862)
- Use correct expansion in xen-network-common.sh (rhbz 797191)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.2" date="1330380001">- Fix broken timestamp log (rhbz 797836)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.4" date="1342648800">- pygrub: Improve handling of big files (rhbz 821704)</changelog>
</package>
<package pkgid="8edf9edf9118ac898055caabb5e266ff7a1997ba" name="xen-libs" arch="i386">
  <version epoch="0" ver="3.0.3" rel="135.el5_8.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.2" date="1330380000">- Fix broken timestamp log (rhbz 797836)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.4" date="1342648800">- pygrub: Improve handling of big files (rhbz 821704)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-135.el5_8.5" date="1346709600">- console: Prevent escape sequence length overflow (rhbz 851253)</changelog>
</package>
<package pkgid="e9151898ac2f6937ebbc247eb2a99600df4f24fd" name="xen-libs" arch="i386">
  <version epoch="0" ver="3.0.3" rel="142.el5_9.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-141.el5" date="1346709600">- console: Prevent escape sequence length overflow</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5" date="1349128800">- Properly close logfile of console daemon on error (rhbz 749776)
- Fix leaks in block-qcow driver (rhbz 749776)
- Avoid bogus use of NULL pointer in hvmloader (rhbz 749776)
- qemu-dm: fix unregister_iomem (rhbz 861349)
- Backport a single hunk from qemu-xen-unstable commit 13669683 (rhbz 861349)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5_9.1" date="1358978400">- libxc: move error checking next to the function which returned the error (rhbz 876997)
- libxc: builder: limit maximum size of   kernel/ramdisk (rhbz 876997)</changelog>
</package>
<package pkgid="9a3808a6f42fa29a5f0bee8da333afb6d7821a93" name="xen-libs" arch="i386">
  <version epoch="0" ver="3.0.3" rel="142.el5_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5" date="1349128800">- Properly close logfile of console daemon on error (rhbz 749776)
- Fix leaks in block-qcow driver (rhbz 749776)
- Avoid bogus use of NULL pointer in hvmloader (rhbz 749776)
- qemu-dm: fix unregister_iomem (rhbz 861349)
- Backport a single hunk from qemu-xen-unstable commit 13669683 (rhbz 861349)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5_9.1" date="1358978400">- libxc: move error checking next to the function which returned the error (rhbz 876997)
- libxc: builder: limit maximum size of   kernel/ramdisk (rhbz 876997)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-142.el5_9.2" date="1361311200">- e1000: discard packets that are too long if !SBP and !LPE (rhbz 910843)
- e1000: discard oversized packets based on SBP|LPE (rhbz 910843)</changelog>
</package>
<package pkgid="c6a4e959597f57b34d0e49c14e228872de32cf0c" name="xen-libs" arch="i386">
  <version epoch="0" ver="3.0.3" rel="146.el5_11"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-143.el5" date="1361318400">- libxc: move error checking next to the function which returned the error (rhbz 870413)
- libxc: builder: limit maximum size of   kernel/ramdisk (rhbz 870413)
- e1000: discard packets that are too long if !SBP and !LPE (rhbz 910844)
- e1000: discard oversized packets based on SBP|LPE (rhbz 910844)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-144.el5" date="1367625600">- xm: Fix vcpu-pin complain for CPU number out of range (rhbz 955656)
- libxc: Support set affinity for more than 64 CPUS (rhbz 955656)
- libxc: Fixes for "support affinity for more than 64 CPUS" (rhbz 955656)
- xend: Fix bug of a cpu affinity vcpu-pin under ia32pa (rhbz 955656)
- libxc: Fix cpu number overflow for vcpu-pin (rhbz 955656)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-146.el5" date="1431388800">- xen-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch
- xen-FDC-Fix-buffer-overflow-Herv-Poussineau.patch
- Resolves: bz#1219333
 (xen: qemu: floppy disk controller flaw [rhel-5.11.z])</changelog>
</package>
<package pkgid="54ee5bc39db8e469ab997800db0027e64d6d1e1f" name="xen-libs" arch="i386">
  <version epoch="0" ver="3.0.3" rel="147.el5_11"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-144.el5" date="1367625600">- xm: Fix vcpu-pin complain for CPU number out of range (rhbz 955656)
- libxc: Support set affinity for more than 64 CPUS (rhbz 955656)
- libxc: Fixes for "support affinity for more than 64 CPUS" (rhbz 955656)
- xend: Fix bug of a cpu affinity vcpu-pin under ia32pa (rhbz 955656)
- libxc: Fix cpu number overflow for vcpu-pin (rhbz 955656)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-146.el5" date="1431388800">- xen-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch
- xen-FDC-Fix-buffer-overflow-Herv-Poussineau.patch
- Resolves: bz#1219333
 (xen: qemu: floppy disk controller flaw [rhel-5.11.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-147.el5" date="1443744000">- net: add checks to validate ring buffer pointers 
- Resolves: bz#1263273
  (xen: qemu: Heap overflow vulnerability in ne2000_receive() function)</changelog>
</package>
<package pkgid="e803e3cf50a176b912d0e2290fb08d75bcf044aa" name="xen-libs" arch="i386">
  <version epoch="0" ver="3.0.3" rel="148.el5_11"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-146.el5" date="1431388800">- xen-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch
- xen-FDC-Fix-buffer-overflow-Herv-Poussineau.patch
- Resolves: bz#1219333
 (xen: qemu: floppy disk controller flaw [rhel-5.11.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-147.el5" date="1443744000">- net: add checks to validate ring buffer pointers 
- Resolves: bz#1263273
  (xen: qemu: Heap overflow vulnerability in ne2000_receive() function)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 3.0.3-148.el5_11" date="1481328000">- xen-qemu-ioport-array-overflow.patch [bz#1401521]
- Resolves: bz#1401521
  (CVE-2016-9637 xsa199 xen: qemu ioport array overflow (XSA-199) [rhel-5.11.z])</changelog>
</package>
<package pkgid="adcacaa1869a65c3e7963a64fda25e834516ac2d" name="xinetd" arch="i386">
  <version epoch="2" ver="2.3.14" rel="19.el5"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2:2.3.14-17" date="1340064000">- Fix: connecting to tcpmux service causes SIGSEGV in xinetd
- Resolves: #801507</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; -2:2.3.14-18" date="1365638400">- Fix leaking file descriptors (#852274)
- Fix: Service disabled due to bind failure (#811000)
- CVE-2012-0862 xinetd: enables unintentional services over tcpmux port (#788795)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2:2.3.14-19" date="1366761600">- Correctly backport patches that fix the descriptor leakage
- Related: #852274</changelog>
</package>
<package pkgid="d188923e37c66877c8b4d95219de417e9d1763a8" name="xinetd" arch="i386">
  <version epoch="2" ver="2.3.14" rel="20.el5_10"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; -2:2.3.14-18" date="1365638400">- Fix leaking file descriptors (#852274)
- Fix: Service disabled due to bind failure (#811000)
- CVE-2012-0862 xinetd: enables unintentional services over tcpmux port (#788795)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2:2.3.14-19" date="1366761600">- Correctly backport patches that fix the descriptor leakage
- Related: #852274</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2:2.3.14-20" date="1380672000">- Honor user and group directives
- Resolves: CVE-2013-4342</changelog>
</package>
<package pkgid="00173148a33f78e5e5b9127db2af058c2fdb3e2e" name="xmlrpc-c" arch="i386">
  <version epoch="0" ver="1.16.24" rel="1206.1840.4.el5"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 1.16-24-1206.1840.2" date="1313013600">- backported GSSAPI delegation from upstream version 1.27.04 with strong attention
  to libxmlrpc++ client ABI backward compatibility (#723645)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.16.24-1206.1840.3" date="1322517600">- Add BuildRequires against version of curl that provides the GSSAPI
  delegation API. (#756704)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 1.16.24-1206.1840.4" date="1322690400">- Add Requires to subpackages dependent on particular curl version that
  provides the GSSAPI delegation API (#756704, #723645)</changelog>
</package>
<package pkgid="ce511a89f84a5c32db70eb0355427bf5b1c18ff4" name="xmlrpc-c-apps" arch="i386">
  <version epoch="0" ver="1.16.24" rel="1206.1840.4.el5"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 1.16-24-1206.1840.2" date="1313013600">- backported GSSAPI delegation from upstream version 1.27.04 with strong attention
  to libxmlrpc++ client ABI backward compatibility (#723645)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.16.24-1206.1840.3" date="1322517600">- Add BuildRequires against version of curl that provides the GSSAPI
  delegation API. (#756704)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 1.16.24-1206.1840.4" date="1322690400">- Add Requires to subpackages dependent on particular curl version that
  provides the GSSAPI delegation API (#756704, #723645)</changelog>
</package>
<package pkgid="792d07fcac98e919a296ff92df57e95b719321e9" name="xmlrpc-c-c++" arch="i386">
  <version epoch="0" ver="1.16.24" rel="1206.1840.4.el5"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 1.16-24-1206.1840.2" date="1313013600">- backported GSSAPI delegation from upstream version 1.27.04 with strong attention
  to libxmlrpc++ client ABI backward compatibility (#723645)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.16.24-1206.1840.3" date="1322517600">- Add BuildRequires against version of curl that provides the GSSAPI
  delegation API. (#756704)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 1.16.24-1206.1840.4" date="1322690400">- Add Requires to subpackages dependent on particular curl version that
  provides the GSSAPI delegation API (#756704, #723645)</changelog>
</package>
<package pkgid="5a3fad85751a7559fd8a5388c4adbe575fb506a7" name="xmlrpc-c-client++" arch="i386">
  <version epoch="0" ver="1.16.24" rel="1206.1840.4.el5"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 1.16-24-1206.1840.2" date="1313013600">- backported GSSAPI delegation from upstream version 1.27.04 with strong attention
  to libxmlrpc++ client ABI backward compatibility (#723645)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.16.24-1206.1840.3" date="1322517600">- Add BuildRequires against version of curl that provides the GSSAPI
  delegation API. (#756704)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 1.16.24-1206.1840.4" date="1322690400">- Add Requires to subpackages dependent on particular curl version that
  provides the GSSAPI delegation API (#756704, #723645)</changelog>
</package>
<package pkgid="348fa8344f2226f50c9101e85e94374c76d4f14f" name="xmlrpc-c-client" arch="i386">
  <version epoch="0" ver="1.16.24" rel="1206.1840.4.el5"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 1.16-24-1206.1840.2" date="1313013600">- backported GSSAPI delegation from upstream version 1.27.04 with strong attention
  to libxmlrpc++ client ABI backward compatibility (#723645)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.16.24-1206.1840.3" date="1322517600">- Add BuildRequires against version of curl that provides the GSSAPI
  delegation API. (#756704)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 1.16.24-1206.1840.4" date="1322690400">- Add Requires to subpackages dependent on particular curl version that
  provides the GSSAPI delegation API (#756704, #723645)</changelog>
</package>
<package pkgid="4f45c3474db4accb0cb698772b87f3920d30e744" name="xmlrpc-c-devel" arch="i386">
  <version epoch="0" ver="1.16.24" rel="1206.1840.4.el5"/>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 1.16-24-1206.1840.2" date="1313013600">- backported GSSAPI delegation from upstream version 1.27.04 with strong attention
  to libxmlrpc++ client ABI backward compatibility (#723645)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.16.24-1206.1840.3" date="1322517600">- Add BuildRequires against version of curl that provides the GSSAPI
  delegation API. (#756704)</changelog>
  <changelog author="Vojtech Vitek (V-Teq) &lt;vvitek@redhat.com&gt; - 1.16.24-1206.1840.4" date="1322690400">- Add Requires to subpackages dependent on particular curl version that
  provides the GSSAPI delegation API (#756704, #723645)</changelog>
</package>
<package pkgid="deab18c3ce889ac47d25ed6f53591e1d54e272d1" name="xorg-x11-drv-i810" arch="i386">
  <version epoch="0" ver="1.6.5" rel="9.40.el5"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.6.5-9.36" date="1268172000">- Fix CFLAGS.</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.6.5-9.37" date="1277935200">- intel-2.2.1-ironlake-lvds-fixes.patch: Further ILK fixes for X201 + T410 (#581897)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.6.5-9.40" date="1279317600">- intel-2.2.1-ironlake-lvds-fixes.patch: Another ILK fix for LVDS (#581897)</changelog>
</package>
<package pkgid="8670dd803d9458d02dab897b2cc64a4291a4088b" name="xorg-x11-drv-i810-devel" arch="i386">
  <version epoch="0" ver="1.6.5" rel="9.40.el5"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.6.5-9.36" date="1268172000">- Fix CFLAGS.</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.6.5-9.37" date="1277935200">- intel-2.2.1-ironlake-lvds-fixes.patch: Further ILK fixes for X201 + T410 (#581897)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.6.5-9.40" date="1279317600">- intel-2.2.1-ironlake-lvds-fixes.patch: Another ILK fix for LVDS (#581897)</changelog>
</package>
<package pkgid="4595e70506ee415c2d59b7bf3daaa92b1ec61707" name="xorg-x11-drv-mga" arch="i386">
  <version epoch="0" ver="1.4.13" rel="5.el5"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.13-3" date="1315346400">- mga-1.4.13-pilot3.patch: Update for G200SE Pilot 3. (#475269)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.13-4" date="1319148000">- mga-1.4.13-g200er-tagfifo.patch: Fix mode switching on G200ER (#745089)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.13-5" date="1321912800">- mga-1.4.13-g200se-12x7-bug.patch: Fix (wrong) selection of 1280x768 on
  G200SE when no monitor connected (#735713)</changelog>
</package>
<package pkgid="fcbd2caff09d7e04d1fd57528fb19fe787ae5ad0" name="xorg-x11-drv-qxl" arch="i386">
  <version epoch="0" ver="0.0.12" rel="2.el5"/>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 0.0.9-1.2" date="1265320800">- Add qxl.xinf</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 0.0.12-1.2" date="1265493600">- Fix for bug 552181</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 0.0.12-2" date="1288735200">- Fix crash and vga font corruption when switching vc
  Resolves: rhbz#585141
- Add support for many more resolutions and enable resolutions &gt; 1024x768
  without requiring an xorg.conf
  Resolves: rhbz#581841</changelog>
</package>
<package pkgid="45e7b52c6b24c11d363cc2f49645b0c50cbada9f" name="xorg-x11-drv-sis" arch="i386">
  <version epoch="0" ver="0.9.1" rel="7.3.el5_7.1"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.9.1-7.2" date="1284156000">- xgi 1.6.0 for Z9s support (#483568)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.9.1-7.3" date="1290463200">- xgi-fix.patch: Fix XGI driver build issues (#483568)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.9.1-7.3.1" date="1319493600">- xgi-z9s-fix-dpms.patch: Fix DPMS-on on XG21 (Z9s and Z9m) (#736061)</changelog>
</package>
<package pkgid="f2a8fdc0be4edd223f93a7fe932cc401fe7a7339" name="xorg-x11-drv-vesa" arch="i386">
  <version epoch="0" ver="1.3.0" rel="8.3.el5"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.0-8.1" date="1180994400">- Remove blank-on-init patch. (#235816)
- Sync with F7 vesa driver. (#233133)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.0-8.2" date="1263247200">- vesa-1.3.0-vbe-dpms.patch: Use VBE's DPMS method, instead of manual VGA
  register writes, so that laptop backlights turn off too. (#494671)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.0-8.3" date="1297720800">- vesa-1.3.1-*.patch: Backport various fixes from upstream, and allow mismatch
  between 136[0-8]x768 modes. (#614960)
- Bump xserver requires to a version that includes VBE PanelID.</changelog>
</package>
<package pkgid="ed670217c7bc4979fff0d79980dcb70f7bb292cb" name="xorg-x11-font-utils" arch="i386">
  <version epoch="1" ver="7.1" rel="3"/>
  <changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 1:7.1-1.1" date="1152741600">- rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajackson@redhat.com&gt; 1:7.1-2" date="1152914400">- Added fonttosfnt-1.0.1-freetype22-build-fix.patch to fix a build failure
  with new freetype 2.2.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 7.1-3" date="1297893600">- Fix FHS compliance issue. (#405891)</changelog>
</package>
<package pkgid="f79c7bebe48ac9ed31d2e531bf3da414c02b792a" name="xorg-x11-server-Xdmx" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.1"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.100" date="1352246400">- xserver-1.1.1-more-regen-leaks.patch: Cope with root cursor refcounting
  being differently broken in different DDXes. (#498357)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
</package>
<package pkgid="f7030a0b74a0a3437f6b5c24b6324fbe6bad0303" name="xorg-x11-server-Xdmx" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.101.2" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
</package>
<package pkgid="adf217c9ee2614ae9f387c4e1148ac2361d9f744" name="xorg-x11-server-Xdmx" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.107.el5_11"/>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.103" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.104" date="1395792000">- xserver-1.1.1-randr-config-timestamps.patch: Backport timestamp comparison
  fix from upstream RANDR code (#1006076)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.107" date="1418256000">- CVE-2014-8091 denial of service due to unchecked malloc in client
  authentication (#1168680)
- CVE-2014-8092 integer overflow in X11 core protocol requests when
  calculating memory needs for requests (#1168684)
- CVE-2014-8097 out of bounds access due to not validating length or offset
  values in DBE extension (#1168705)
- CVE-2014-8095 out of bounds access due to not validating length or offset
  values in XInput extension (#1168694)
- CVE-2014-8096 out of bounds access due to not validating length or offset
  values in XC-MISC extension(#1168700)
- CVE-2014-8099 out of bounds access due to not validating length or offset
  values in XVideo extension (#1168710)
- CVE-2014-8100 out of bounds access due to not validating length or offset
  values in Render extension (#1168711)
- CVE-2014-8102 out of bounds access due to not validating length or offset
  values in XFixes extension (#1168714)
- CVE-2014-8101 out of bounds access due to not validating length or offset
  values in RandR extension (#1168713)
- CVE-2014-8093 xorg-x11-server: integer overflow in GLX extension requests
  when calculating memory needs for requests (#1168688)
- CVE-2014-8098 xorg-x11-server: out of bounds access due to not validating
  length or offset values in GLX extension (#1168707)</changelog>
</package>
<package pkgid="55578e427d703993af6a5bfd55e7b32c50c231ef" name="xorg-x11-server-Xdmx" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.76.el5_7.5"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.3" date="1301349600">- xserver-1.1.1-bs-crash.patch: Fix crash in the backing store code. (#690270)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.76.4" date="1302300000">- Fix cursor confined to one screen issue (#694728)
- Fix mouse stuck on left edge (#529717)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.5" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
</package>
<package pkgid="d95e639807167e4d8565440a150d7ef1ff0b2cda" name="xorg-x11-server-Xdmx" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.90.el5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.87" date="1316728800">- xserver-1.1.1-fbdev-iterate-modes.patch: fix fbdev driver not iterating
  across all modes of a certain dimension (#740497)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.88" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.90" date="1325714400">- cve-2011-4028.patch: File existence disclosure vulnerability.</changelog>
</package>
<package pkgid="b65418ec6bfe5f8cddc77e9b2d4a54d36282b4ae" name="xorg-x11-server-Xephyr" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.1"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.100" date="1352246400">- xserver-1.1.1-more-regen-leaks.patch: Cope with root cursor refcounting
  being differently broken in different DDXes. (#498357)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
</package>
<package pkgid="3f470fdcea29733ef5fc33cc3f60bdbab4c6635d" name="xorg-x11-server-Xephyr" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.101.2" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
</package>
<package pkgid="a6476e4d7c665bb6f9c51bb1cc10cde41d65665c" name="xorg-x11-server-Xephyr" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.107.el5_11"/>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.103" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.104" date="1395792000">- xserver-1.1.1-randr-config-timestamps.patch: Backport timestamp comparison
  fix from upstream RANDR code (#1006076)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.107" date="1418256000">- CVE-2014-8091 denial of service due to unchecked malloc in client
  authentication (#1168680)
- CVE-2014-8092 integer overflow in X11 core protocol requests when
  calculating memory needs for requests (#1168684)
- CVE-2014-8097 out of bounds access due to not validating length or offset
  values in DBE extension (#1168705)
- CVE-2014-8095 out of bounds access due to not validating length or offset
  values in XInput extension (#1168694)
- CVE-2014-8096 out of bounds access due to not validating length or offset
  values in XC-MISC extension(#1168700)
- CVE-2014-8099 out of bounds access due to not validating length or offset
  values in XVideo extension (#1168710)
- CVE-2014-8100 out of bounds access due to not validating length or offset
  values in Render extension (#1168711)
- CVE-2014-8102 out of bounds access due to not validating length or offset
  values in XFixes extension (#1168714)
- CVE-2014-8101 out of bounds access due to not validating length or offset
  values in RandR extension (#1168713)
- CVE-2014-8093 xorg-x11-server: integer overflow in GLX extension requests
  when calculating memory needs for requests (#1168688)
- CVE-2014-8098 xorg-x11-server: out of bounds access due to not validating
  length or offset values in GLX extension (#1168707)</changelog>
</package>
<package pkgid="54497c5d4aa4069d8346f3b66dabd268ca1a8065" name="xorg-x11-server-Xephyr" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.76.el5_7.5"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.3" date="1301349600">- xserver-1.1.1-bs-crash.patch: Fix crash in the backing store code. (#690270)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.76.4" date="1302300000">- Fix cursor confined to one screen issue (#694728)
- Fix mouse stuck on left edge (#529717)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.5" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
</package>
<package pkgid="5c1e02e50190b438651ca6dd41e8ab71fae5483e" name="xorg-x11-server-Xephyr" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.90.el5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.87" date="1316728800">- xserver-1.1.1-fbdev-iterate-modes.patch: fix fbdev driver not iterating
  across all modes of a certain dimension (#740497)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.88" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.90" date="1325714400">- cve-2011-4028.patch: File existence disclosure vulnerability.</changelog>
</package>
<package pkgid="d46c2a95a5bf2f0cb8311490d954fa9778a4a536" name="xorg-x11-server-Xnest" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.1"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.100" date="1352246400">- xserver-1.1.1-more-regen-leaks.patch: Cope with root cursor refcounting
  being differently broken in different DDXes. (#498357)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
</package>
<package pkgid="2f522275cbe4fb92abfc0c4b0b5077d79b34197e" name="xorg-x11-server-Xnest" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.101.2" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
</package>
<package pkgid="5364b15450a1466970b97f84608858923edfc848" name="xorg-x11-server-Xnest" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.107.el5_11"/>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.103" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.104" date="1395792000">- xserver-1.1.1-randr-config-timestamps.patch: Backport timestamp comparison
  fix from upstream RANDR code (#1006076)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.107" date="1418256000">- CVE-2014-8091 denial of service due to unchecked malloc in client
  authentication (#1168680)
- CVE-2014-8092 integer overflow in X11 core protocol requests when
  calculating memory needs for requests (#1168684)
- CVE-2014-8097 out of bounds access due to not validating length or offset
  values in DBE extension (#1168705)
- CVE-2014-8095 out of bounds access due to not validating length or offset
  values in XInput extension (#1168694)
- CVE-2014-8096 out of bounds access due to not validating length or offset
  values in XC-MISC extension(#1168700)
- CVE-2014-8099 out of bounds access due to not validating length or offset
  values in XVideo extension (#1168710)
- CVE-2014-8100 out of bounds access due to not validating length or offset
  values in Render extension (#1168711)
- CVE-2014-8102 out of bounds access due to not validating length or offset
  values in XFixes extension (#1168714)
- CVE-2014-8101 out of bounds access due to not validating length or offset
  values in RandR extension (#1168713)
- CVE-2014-8093 xorg-x11-server: integer overflow in GLX extension requests
  when calculating memory needs for requests (#1168688)
- CVE-2014-8098 xorg-x11-server: out of bounds access due to not validating
  length or offset values in GLX extension (#1168707)</changelog>
</package>
<package pkgid="b89dd97e47bdf20d2aced361deabcc23e5414b2a" name="xorg-x11-server-Xnest" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.76.el5_7.5"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.3" date="1301349600">- xserver-1.1.1-bs-crash.patch: Fix crash in the backing store code. (#690270)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.76.4" date="1302300000">- Fix cursor confined to one screen issue (#694728)
- Fix mouse stuck on left edge (#529717)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.5" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
</package>
<package pkgid="df9e7c09dfa4d2a7f271aa171010384ab1a797ed" name="xorg-x11-server-Xnest" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.90.el5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.87" date="1316728800">- xserver-1.1.1-fbdev-iterate-modes.patch: fix fbdev driver not iterating
  across all modes of a certain dimension (#740497)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.88" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.90" date="1325714400">- cve-2011-4028.patch: File existence disclosure vulnerability.</changelog>
</package>
<package pkgid="134ca07307316f0785924d2a0cdb4ffc96613ad1" name="xorg-x11-server-Xorg" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.1"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.100" date="1352246400">- xserver-1.1.1-more-regen-leaks.patch: Cope with root cursor refcounting
  being differently broken in different DDXes. (#498357)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
</package>
<package pkgid="c1fc6b46f40cd03cdcd8ba30da63a504ef006d01" name="xorg-x11-server-Xorg" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.101.2" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
</package>
<package pkgid="95e1aa3784cc3e49d49b6f9f58b70e4b23cba0c2" name="xorg-x11-server-Xorg" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.107.el5_11"/>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.103" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.104" date="1395792000">- xserver-1.1.1-randr-config-timestamps.patch: Backport timestamp comparison
  fix from upstream RANDR code (#1006076)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.107" date="1418256000">- CVE-2014-8091 denial of service due to unchecked malloc in client
  authentication (#1168680)
- CVE-2014-8092 integer overflow in X11 core protocol requests when
  calculating memory needs for requests (#1168684)
- CVE-2014-8097 out of bounds access due to not validating length or offset
  values in DBE extension (#1168705)
- CVE-2014-8095 out of bounds access due to not validating length or offset
  values in XInput extension (#1168694)
- CVE-2014-8096 out of bounds access due to not validating length or offset
  values in XC-MISC extension(#1168700)
- CVE-2014-8099 out of bounds access due to not validating length or offset
  values in XVideo extension (#1168710)
- CVE-2014-8100 out of bounds access due to not validating length or offset
  values in Render extension (#1168711)
- CVE-2014-8102 out of bounds access due to not validating length or offset
  values in XFixes extension (#1168714)
- CVE-2014-8101 out of bounds access due to not validating length or offset
  values in RandR extension (#1168713)
- CVE-2014-8093 xorg-x11-server: integer overflow in GLX extension requests
  when calculating memory needs for requests (#1168688)
- CVE-2014-8098 xorg-x11-server: out of bounds access due to not validating
  length or offset values in GLX extension (#1168707)</changelog>
</package>
<package pkgid="d1fef008269c76f06e9d5ac7b66929fa16660eef" name="xorg-x11-server-Xorg" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.76.el5_7.5"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.3" date="1301349600">- xserver-1.1.1-bs-crash.patch: Fix crash in the backing store code. (#690270)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.76.4" date="1302300000">- Fix cursor confined to one screen issue (#694728)
- Fix mouse stuck on left edge (#529717)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.5" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
</package>
<package pkgid="709cf58f8bb26954b52269efa7e5daf9ed8a86b3" name="xorg-x11-server-Xorg" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.90.el5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.87" date="1316728800">- xserver-1.1.1-fbdev-iterate-modes.patch: fix fbdev driver not iterating
  across all modes of a certain dimension (#740497)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.88" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.90" date="1325714400">- cve-2011-4028.patch: File existence disclosure vulnerability.</changelog>
</package>
<package pkgid="4a9551d8313b0018c20396b582a8c392fe3c2572" name="xorg-x11-server-Xvfb" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.1"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.100" date="1352246400">- xserver-1.1.1-more-regen-leaks.patch: Cope with root cursor refcounting
  being differently broken in different DDXes. (#498357)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
</package>
<package pkgid="d750a02e41de6940d55d4c408f8f4c11050b45e4" name="xorg-x11-server-Xvfb" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.101.2" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
</package>
<package pkgid="c5ebcb6ea212d819a64db414f9e8e3a456e02809" name="xorg-x11-server-Xvfb" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.107.el5_11"/>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.103" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.104" date="1395792000">- xserver-1.1.1-randr-config-timestamps.patch: Backport timestamp comparison
  fix from upstream RANDR code (#1006076)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.107" date="1418256000">- CVE-2014-8091 denial of service due to unchecked malloc in client
  authentication (#1168680)
- CVE-2014-8092 integer overflow in X11 core protocol requests when
  calculating memory needs for requests (#1168684)
- CVE-2014-8097 out of bounds access due to not validating length or offset
  values in DBE extension (#1168705)
- CVE-2014-8095 out of bounds access due to not validating length or offset
  values in XInput extension (#1168694)
- CVE-2014-8096 out of bounds access due to not validating length or offset
  values in XC-MISC extension(#1168700)
- CVE-2014-8099 out of bounds access due to not validating length or offset
  values in XVideo extension (#1168710)
- CVE-2014-8100 out of bounds access due to not validating length or offset
  values in Render extension (#1168711)
- CVE-2014-8102 out of bounds access due to not validating length or offset
  values in XFixes extension (#1168714)
- CVE-2014-8101 out of bounds access due to not validating length or offset
  values in RandR extension (#1168713)
- CVE-2014-8093 xorg-x11-server: integer overflow in GLX extension requests
  when calculating memory needs for requests (#1168688)
- CVE-2014-8098 xorg-x11-server: out of bounds access due to not validating
  length or offset values in GLX extension (#1168707)</changelog>
</package>
<package pkgid="dadb63ed9e40542c9df678b69c74aed0c3551374" name="xorg-x11-server-Xvfb" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.76.el5_7.5"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.3" date="1301349600">- xserver-1.1.1-bs-crash.patch: Fix crash in the backing store code. (#690270)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.76.4" date="1302300000">- Fix cursor confined to one screen issue (#694728)
- Fix mouse stuck on left edge (#529717)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.5" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
</package>
<package pkgid="7f492ea372117c6722ebfea74e24bfa0a9d4525b" name="xorg-x11-server-Xvfb" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.90.el5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.87" date="1316728800">- xserver-1.1.1-fbdev-iterate-modes.patch: fix fbdev driver not iterating
  across all modes of a certain dimension (#740497)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.88" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.90" date="1325714400">- cve-2011-4028.patch: File existence disclosure vulnerability.</changelog>
</package>
<package pkgid="d66b124e31cf0cee276b1be2506206ab4d92fa49" name="xorg-x11-server-Xvnc-source" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.1"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.100" date="1352246400">- xserver-1.1.1-more-regen-leaks.patch: Cope with root cursor refcounting
  being differently broken in different DDXes. (#498357)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
</package>
<package pkgid="517d0819c0c9ac7df4c6a159aeda50ac75cb9345" name="xorg-x11-server-Xvnc-source" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.101.2" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
</package>
<package pkgid="7b207c2e96712a44875523320f9f7c3bfb1d0672" name="xorg-x11-server-Xvnc-source" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.107.el5_11"/>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.103" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.104" date="1395792000">- xserver-1.1.1-randr-config-timestamps.patch: Backport timestamp comparison
  fix from upstream RANDR code (#1006076)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.107" date="1418256000">- CVE-2014-8091 denial of service due to unchecked malloc in client
  authentication (#1168680)
- CVE-2014-8092 integer overflow in X11 core protocol requests when
  calculating memory needs for requests (#1168684)
- CVE-2014-8097 out of bounds access due to not validating length or offset
  values in DBE extension (#1168705)
- CVE-2014-8095 out of bounds access due to not validating length or offset
  values in XInput extension (#1168694)
- CVE-2014-8096 out of bounds access due to not validating length or offset
  values in XC-MISC extension(#1168700)
- CVE-2014-8099 out of bounds access due to not validating length or offset
  values in XVideo extension (#1168710)
- CVE-2014-8100 out of bounds access due to not validating length or offset
  values in Render extension (#1168711)
- CVE-2014-8102 out of bounds access due to not validating length or offset
  values in XFixes extension (#1168714)
- CVE-2014-8101 out of bounds access due to not validating length or offset
  values in RandR extension (#1168713)
- CVE-2014-8093 xorg-x11-server: integer overflow in GLX extension requests
  when calculating memory needs for requests (#1168688)
- CVE-2014-8098 xorg-x11-server: out of bounds access due to not validating
  length or offset values in GLX extension (#1168707)</changelog>
</package>
<package pkgid="29dc49d2836fd09bb2cd4ced55051a28304dc5f5" name="xorg-x11-server-Xvnc-source" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.76.el5_7.5"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.3" date="1301349600">- xserver-1.1.1-bs-crash.patch: Fix crash in the backing store code. (#690270)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.76.4" date="1302300000">- Fix cursor confined to one screen issue (#694728)
- Fix mouse stuck on left edge (#529717)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.5" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
</package>
<package pkgid="63747bc8b2b9730c01c422d5970a64499ea4c339" name="xorg-x11-server-Xvnc-source" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.90.el5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.87" date="1316728800">- xserver-1.1.1-fbdev-iterate-modes.patch: fix fbdev driver not iterating
  across all modes of a certain dimension (#740497)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.88" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.90" date="1325714400">- cve-2011-4028.patch: File existence disclosure vulnerability.</changelog>
</package>
<package pkgid="beee9e59046c1779990cc719e33af56d63cab8ac" name="xorg-x11-server-sdk" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.1"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.100" date="1352246400">- xserver-1.1.1-more-regen-leaks.patch: Cope with root cursor refcounting
  being differently broken in different DDXes. (#498357)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
</package>
<package pkgid="09a6f68925ffa7dca56d86c1c293d475a5d03b8c" name="xorg-x11-server-sdk" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.101.el5_10.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.101" date="1369353600">- xserver-1.1.1-more-regen-leaks.patch: Fix a crash on exit in XKB (#960950)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.1.1-48.101.1" date="1381449600">- CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)</changelog>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.101.2" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
</package>
<package pkgid="78278a3d73e5bcdb4d4894f09ec87055772ffb3c" name="xorg-x11-server-sdk" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.107.el5_11"/>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.1.1-48.103" date="1387411200">- CVE-2013-6424: Fix OOB in trapezoid rasterization</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.104" date="1395792000">- xserver-1.1.1-randr-config-timestamps.patch: Backport timestamp comparison
  fix from upstream RANDR code (#1006076)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.107" date="1418256000">- CVE-2014-8091 denial of service due to unchecked malloc in client
  authentication (#1168680)
- CVE-2014-8092 integer overflow in X11 core protocol requests when
  calculating memory needs for requests (#1168684)
- CVE-2014-8097 out of bounds access due to not validating length or offset
  values in DBE extension (#1168705)
- CVE-2014-8095 out of bounds access due to not validating length or offset
  values in XInput extension (#1168694)
- CVE-2014-8096 out of bounds access due to not validating length or offset
  values in XC-MISC extension(#1168700)
- CVE-2014-8099 out of bounds access due to not validating length or offset
  values in XVideo extension (#1168710)
- CVE-2014-8100 out of bounds access due to not validating length or offset
  values in Render extension (#1168711)
- CVE-2014-8102 out of bounds access due to not validating length or offset
  values in XFixes extension (#1168714)
- CVE-2014-8101 out of bounds access due to not validating length or offset
  values in RandR extension (#1168713)
- CVE-2014-8093 xorg-x11-server: integer overflow in GLX extension requests
  when calculating memory needs for requests (#1168688)
- CVE-2014-8098 xorg-x11-server: out of bounds access due to not validating
  length or offset values in GLX extension (#1168707)</changelog>
</package>
<package pkgid="23da25ac4b816248ce81207f3001dc9aa7a112db" name="xorg-x11-server-sdk" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.76.el5_7.5"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.3" date="1301349600">- xserver-1.1.1-bs-crash.patch: Fix crash in the backing store code. (#690270)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.76.4" date="1302300000">- Fix cursor confined to one screen issue (#694728)
- Fix mouse stuck on left edge (#529717)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.76.5" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
</package>
<package pkgid="efc5bd626f93460757b4a30b47e53eee48b05e3f" name="xorg-x11-server-sdk" arch="i386">
  <version epoch="0" ver="1.1.1" rel="48.90.el5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.1-48.87" date="1316728800">- xserver-1.1.1-fbdev-iterate-modes.patch: fix fbdev driver not iterating
  across all modes of a certain dimension (#740497)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.88" date="1317160800">- cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
- xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.1-48.90" date="1325714400">- cve-2011-4028.patch: File existence disclosure vulnerability.</changelog>
</package>
<package pkgid="814fa052e20c4c0b6fd09a9c41f45e1f9cd6a381" name="xorg-x11-server-utils" arch="i386">
  <version epoch="0" ver="7.1" rel="5.el5_6.2"/>
  <changelog author="Adam Jackson &lt;ajackson@redhat.com&gt; 7.1-4.fc6" date="1154728800">- xvidtune-1.0.1-buffer-stomp.patch: Fix a heap smash. (#189146)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 7.1-5.el5_6.1" date="1300312800">- cve-2011-0465.patch: Sanitize cpp macro expansion. (CVE 2011-0465)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 7.1-5.el5_6.2" date="1302732000">- cve-2011-0465.patch: Fix quoting and escaping logic to match upstream (#696316)</changelog>
</package>
<package pkgid="23436db5a4b967ed8ca8b65b2d1257401a8be7ff" name="xorg-x11-xfs" arch="i386">
  <version epoch="1" ver="1.0.2" rel="5.el5_6.1"/>
  <changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - sh: line 0: fg: no job control" date="1152741600">- rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.0.2-3.2" date="1300140000">- xfs-1.0.2-ffs.patch: Backport 64-bitness fixes from upstream. (#652633)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.0.2-5.1" date="1301436000">- Sync xfs.init from zstream</changelog>
</package>
<package pkgid="822fe17fbf4943d48e63b574a677c09ebb06479f" name="xorg-x11-xfs-utils" arch="i386">
  <version epoch="1" ver="1.0.2" rel="5.el5_6.1"/>
  <changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - sh: line 0: fg: no job control" date="1152741600">- rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.0.2-3.2" date="1300140000">- xfs-1.0.2-ffs.patch: Backport 64-bitness fixes from upstream. (#652633)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.0.2-5.1" date="1301436000">- Sync xfs.init from zstream</changelog>
</package>
<package pkgid="3c973698b0ce5be487f4a2aa5627530304cedd27" name="xulrunner" arch="i386">
  <version epoch="0" ver="1.9.2.18" rel="2.el5_6"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.17-2" date="1302904800">- Update to 1.9.2.17</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.17-3" date="1303423200">- Rebuild</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.18-2" date="1308002400">- Update to 1.9.2.18</changelog>
</package>
<package pkgid="f80300b6ffe7a6c61d0790532fd1224f77862af7" name="xulrunner" arch="i386">
  <version epoch="0" ver="1.9.2.20" rel="2.el5"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.17-3" date="1303423200">- Rebuild</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.18-2" date="1308002400">- Update to 1.9.2.18</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.20-2" date="1312495200">- Update to 1.9.2.20</changelog>
</package>
<package pkgid="63e462cb0ca101652b71212ecc959f47e63a8ca5" name="xulrunner" arch="i386">
  <version epoch="0" ver="1.9.2.20" rel="3.el5_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.18-2" date="1308002400">- Update to 1.9.2.18</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.20-2" date="1312495200">- Update to 1.9.2.20</changelog>
  <changelog author="Christopher Aillon &lt;caillon@redhat.com&gt; - 1.9.2.20-3" date="1314741600">- Distrust a specific Certificate Authority</changelog>
</package>
<package pkgid="147bd7061ddf52c48814db29df71145b89ec617c" name="xulrunner" arch="i386">
  <version epoch="0" ver="1.9.2.22" rel="1.el5_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.20-2" date="1312495200">- Update to 1.9.2.20</changelog>
  <changelog author="Christopher Aillon &lt;caillon@redhat.com&gt; - 1.9.2.20-3" date="1314741600">- Distrust a specific Certificate Authority</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.9.2.22-1" date="1315173600">- Update to 1.9.2.22</changelog>
</package>
<package pkgid="2483007a634cc37961892441bcef5be2719a6aed" name="xulrunner" arch="i386">
  <version epoch="0" ver="1.9.2.23" rel="1.el5_7"/>
  <changelog author="Christopher Aillon &lt;caillon@redhat.com&gt; - 1.9.2.20-3" date="1314741600">- Distrust a specific Certificate Authority</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.9.2.22-1" date="1315173600">- Update to 1.9.2.22</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 1.9.2.23-1" date="1317160800">- Update to 1.9.2.23</changelog>
</package>
<package pkgid="154bc85b70d9769f5d0673969518a50f70983436" name="xulrunner" arch="i386">
  <version epoch="0" ver="1.9.2.24" rel="2.el5_7"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.9.2.22-1" date="1315173600">- Update to 1.9.2.22</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 1.9.2.23-1" date="1317160800">- Update to 1.9.2.23</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.24-2" date="1320184800">- Update to 1.9.2.24</changelog>
</package>
<package pkgid="88c4c7609a132a993beb49a223caf7cd123976cf" name="xulrunner" arch="i386">
  <version epoch="0" ver="1.9.2.26" rel="1.el5_7"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 1.9.2.23-1" date="1317160800">- Update to 1.9.2.23</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.24-2" date="1320184800">- Update to 1.9.2.24</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.9.2.26-1" date="1327960800">- Update to 1.9.2.26</changelog>
</package>
<package pkgid="69306e21bf3339727cb96d829a9664da8a6e28f4" name="xulrunner" arch="i386">
  <version epoch="0" ver="1.9.2.26" rel="2.el5_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.24-2" date="1320184800">- Update to 1.9.2.24</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.9.2.26-1" date="1327960800">- Update to 1.9.2.26</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.9.2.26-2" date="1329343200">- added fix for mozbz#727401</changelog>
</package>
<package pkgid="f7ff12e8cf840ae41f09d3fb73433a57f5859ef3" name="xulrunner" arch="i386">
  <version epoch="0" ver="10.0.10" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349560800">- Update to 10.0.8 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.8-2" date="1349992800">- Added patches from 10.0.9 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.10-1" date="1351202400">- Added patches from 10.0.10 ESR</changelog>
</package>
<package pkgid="4f299a36b2fc34948c2e5c952abde1c78e9121be" name="xulrunner" arch="i386">
  <version epoch="0" ver="10.0.11" rel="1.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.8-2" date="1349992800">- Added patches from 10.0.9 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.10-1" date="1351202400">- Added patches from 10.0.10 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.11-1" date="1353103200">- Update to 10.0.11 ESR</changelog>
</package>
<package pkgid="78af05867638f686b255e924901ef08154845c86" name="xulrunner" arch="i386">
  <version epoch="0" ver="10.0.12" rel="1.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.10-1" date="1351202400">- Added patches from 10.0.10 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.11-1" date="1353103200">- Update to 10.0.11 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.12-1" date="1357336800">- Update to 10.0.12 ESR</changelog>
</package>
<package pkgid="89cca2f7e2b7d3fb32189e5961cdeafb31fd7458" name="xulrunner" arch="i386">
  <version epoch="0" ver="10.0.3" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.1-1" date="1328824800">- Update to 10.0.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.1-2" date="1329429600">- Fixed mozbz#727401</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.3-1" date="1330984800">- Update to 10.0.3 ESR</changelog>
</package>
<package pkgid="01d7c740087a3d0e03daf1bf2164dde99e8bee53" name="xulrunner" arch="i386">
  <version epoch="0" ver="10.0.4" rel="1.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.3-1" date="1330984800">- Update to 10.0.3 ESR</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; 10.0.3-2" date="1333404000">- Fixed mozbz#681937</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.4-1" date="1335045600">- Update to 10.0.4 ESR</changelog>
</package>
<package pkgid="77fc956ae26d0c4fb53ebe875ef042b329f3ae93" name="xulrunner" arch="i386">
  <version epoch="0" ver="10.0.5" rel="1.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.4-1" date="1335045600">- Update to 10.0.4 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.4-2" date="1338328800">- Added fix for mozbz#703633</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.5-1" date="1338588000">- Update to 10.0.5 ESR</changelog>
</package>
<package pkgid="7b05d4124b6e9534ffc764f8900120bc2be7878d" name="xulrunner" arch="i386">
  <version epoch="0" ver="10.0.6" rel="2.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.5-1" date="1338588000">- Update to 10.0.5 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.5-2" date="1340748000">- Added fix for rhbz#808136 (mozbz#762301)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.6-2" date="1342303200">- Update to 10.0.6 ESR</changelog>
</package>
<package pkgid="3ebd9ace2a9a05bf95e60489f20bd33bdf2dff7a" name="xulrunner" arch="i386">
  <version epoch="0" ver="10.0.7" rel="2.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.6-2" date="1342303200">- Update to 10.0.6 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.6-3" date="1345154400">- Added fix for rhbz#770276 - Firefox segfaults, should
  have a font dependency</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.7-2" date="1346018400">- Update to 10.0.7 ESR</changelog>
</package>
<package pkgid="655af1daf810f75497670651329db025061fd381" name="xulrunner" arch="i386">
  <version epoch="0" ver="10.0.8" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.7-2" date="1346018400">- Update to 10.0.7 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.7-3" date="1346191200">- updated python build script</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349560800">- Update to 10.0.8 ESR</changelog>
</package>
<package pkgid="c9ec142aa064e0066c8ab456d7eed00cfc153a3d" name="xulrunner" arch="i386">
  <version epoch="0" ver="10.0.8" rel="2.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.7-3" date="1346191200">- updated python build script</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349560800">- Update to 10.0.8 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.8-2" date="1349992800">- Added patches from 10.0.9 ESR</changelog>
</package>
<package pkgid="d7ebec50ee881d4e8db2c4e570c3e38a9bb1f2f9" name="xulrunner" arch="i386">
  <version epoch="0" ver="17.0.10" rel="1.el5_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.8-5" date="1378339200">- Fixed mozbz#633001 - Cannot open ipv6 address with self-signed certificate</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.9-2" date="1379030400">- Update to 17.0.9 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.10-1" date="1382572800">- Update to 17.0.10 ESR</changelog>
</package>
<package pkgid="9468c76d27b87763d47c5e648e1847c38946fa73" name="xulrunner" arch="i386">
  <version epoch="0" ver="17.0.3" rel="1.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-1" date="1358200800">- Update to 17.0.2 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-2" date="1358287200">- Added fix for NM regression (mozbz#791626)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361052000">- Update to 17.0.3 ESR</changelog>
</package>
<package pkgid="721d3bcfc73633cc5c4782ab3d9eadceaf7f41eb" name="xulrunner" arch="i386">
  <version epoch="0" ver="17.0.3" rel="2.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-2" date="1358287200">- Added fix for NM regression (mozbz#791626)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361052000">- Update to 17.0.3 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362693600">- Added fix for mozbz#848644</changelog>
</package>
<package pkgid="abbd41126b37e5c4cfdd53a338bccd6ca0370fee" name="xulrunner" arch="i386">
  <version epoch="0" ver="17.0.5" rel="1.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-3" date="1363125600">- Added fix for rhbz#916180 - Wrong library directory reference
  in /usr/bin/xulrunner</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-4" date="1363644000">- Fix for rhbz#913600</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364594400">- Update to 17.0.5 ESR</changelog>
</package>
<package pkgid="f3ac7cc2d17bf61f6b25b8f8014fbbc5ede9cc80" name="xulrunner" arch="i386">
  <version epoch="0" ver="17.0.6" rel="1.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-4" date="1363644000">- Fix for rhbz#913600</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364594400">- Update to 17.0.5 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-1" date="1368223200">- Update to 17.0.6 ESR</changelog>
</package>
<package pkgid="7d90b6977e2a4022cf2ba135131dda80542a028a" name="xulrunner" arch="i386">
  <version epoch="0" ver="17.0.7" rel="1.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364594400">- Update to 17.0.5 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-1" date="1368223200">- Update to 17.0.6 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.7-1" date="1371679200">- Update to 17.0.7 ESR</changelog>
</package>
<package pkgid="fbbb8bf293f78a595cd653e5aa719c5be95f6676" name="xulrunner" arch="i386">
  <version epoch="0" ver="17.0.8" rel="3.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-1" date="1375308000">- Update to 17.0.8 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-2" date="1375394400">- Added fix for rhbz#990921 - firefox does not build with.
  required nss/nspr</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-3" date="1375826400">- Update to 17.0.8 ESR Build 2
- Disable strict aliasing - mozbz#821502</changelog>
</package>
<package pkgid="b1ecc62d763e5b720d4eb87d6c1477788f6d7cff" name="xulrunner" arch="i386">
  <version epoch="0" ver="17.0.9" rel="1.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-4" date="1378252800">- Fixed rhbz#818636 - Firefox allows install of addons,
  disregarding xpinstall.enabled flag set as false.</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.8-5" date="1378339200">- Fixed mozbz#633001 - Cannot open ipv6 address with self-signed certificate</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.9-1" date="1379030400">- Update to 17.0.9 ESR</changelog>
</package>
<package pkgid="833be03bcf5fb9623725f87f1fd0c88d6bd593e5" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="1.9.2.18" rel="2.el5_6"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.17-2" date="1302904800">- Update to 1.9.2.17</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.17-3" date="1303423200">- Rebuild</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.18-2" date="1308002400">- Update to 1.9.2.18</changelog>
</package>
<package pkgid="e7d328d766fe5fc29405e3dac6c983db4ceecea2" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="1.9.2.20" rel="2.el5"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.17-3" date="1303423200">- Rebuild</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.18-2" date="1308002400">- Update to 1.9.2.18</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.20-2" date="1312495200">- Update to 1.9.2.20</changelog>
</package>
<package pkgid="eae309ab72c5711c1b2f36d7f97ddfec61daec27" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="1.9.2.20" rel="3.el5_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.18-2" date="1308002400">- Update to 1.9.2.18</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.20-2" date="1312495200">- Update to 1.9.2.20</changelog>
  <changelog author="Christopher Aillon &lt;caillon@redhat.com&gt; - 1.9.2.20-3" date="1314741600">- Distrust a specific Certificate Authority</changelog>
</package>
<package pkgid="51799ebdb1b055d75a3cde161a74d6db38d4277a" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="1.9.2.22" rel="1.el5_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.20-2" date="1312495200">- Update to 1.9.2.20</changelog>
  <changelog author="Christopher Aillon &lt;caillon@redhat.com&gt; - 1.9.2.20-3" date="1314741600">- Distrust a specific Certificate Authority</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.9.2.22-1" date="1315173600">- Update to 1.9.2.22</changelog>
</package>
<package pkgid="bf2cb0c2705f4ffdbdbe66786ccc1df2f72a2871" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="1.9.2.23" rel="1.el5_7"/>
  <changelog author="Christopher Aillon &lt;caillon@redhat.com&gt; - 1.9.2.20-3" date="1314741600">- Distrust a specific Certificate Authority</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.9.2.22-1" date="1315173600">- Update to 1.9.2.22</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 1.9.2.23-1" date="1317160800">- Update to 1.9.2.23</changelog>
</package>
<package pkgid="1203ba9a4d046dce831f77704f820bb8a4003f5a" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="1.9.2.24" rel="2.el5_7"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.9.2.22-1" date="1315173600">- Update to 1.9.2.22</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 1.9.2.23-1" date="1317160800">- Update to 1.9.2.23</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.24-2" date="1320184800">- Update to 1.9.2.24</changelog>
</package>
<package pkgid="6834c607cffd12d77fde5a094352033e751a537a" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="1.9.2.26" rel="1.el5_7"/>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 1.9.2.23-1" date="1317160800">- Update to 1.9.2.23</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.24-2" date="1320184800">- Update to 1.9.2.24</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.9.2.26-1" date="1327960800">- Update to 1.9.2.26</changelog>
</package>
<package pkgid="95f45de2e63f0874bef5d05c6231cf57edba9c0a" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="1.9.2.26" rel="2.el5_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 1.9.2.24-2" date="1320184800">- Update to 1.9.2.24</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.9.2.26-1" date="1327960800">- Update to 1.9.2.26</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.9.2.26-2" date="1329343200">- added fix for mozbz#727401</changelog>
</package>
<package pkgid="2c11380a909c970ccface732e9ada833106e6899" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="10.0.10" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349560800">- Update to 10.0.8 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.8-2" date="1349992800">- Added patches from 10.0.9 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.10-1" date="1351202400">- Added patches from 10.0.10 ESR</changelog>
</package>
<package pkgid="60f28b6217f4e33653e82652d38d8df92bbd00ad" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="10.0.11" rel="1.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.8-2" date="1349992800">- Added patches from 10.0.9 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.10-1" date="1351202400">- Added patches from 10.0.10 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.11-1" date="1353103200">- Update to 10.0.11 ESR</changelog>
</package>
<package pkgid="eca68bbebd529191d926880b500881d37b8fa722" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="10.0.12" rel="1.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.10-1" date="1351202400">- Added patches from 10.0.10 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.11-1" date="1353103200">- Update to 10.0.11 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.12-1" date="1357336800">- Update to 10.0.12 ESR</changelog>
</package>
<package pkgid="70ba8c05f257571953e06884a315ac167e78fe61" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="10.0.3" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.1-1" date="1328824800">- Update to 10.0.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.1-2" date="1329429600">- Fixed mozbz#727401</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.3-1" date="1330984800">- Update to 10.0.3 ESR</changelog>
</package>
<package pkgid="0ca8d34f7dae4031e89481ec462126309f17d8f0" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="10.0.4" rel="1.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.3-1" date="1330984800">- Update to 10.0.3 ESR</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; 10.0.3-2" date="1333404000">- Fixed mozbz#681937</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.4-1" date="1335045600">- Update to 10.0.4 ESR</changelog>
</package>
<package pkgid="6bc76ab47a4e8841856c12542d1b5dc99ae370f4" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="10.0.5" rel="1.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.4-1" date="1335045600">- Update to 10.0.4 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.4-2" date="1338328800">- Added fix for mozbz#703633</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.5-1" date="1338588000">- Update to 10.0.5 ESR</changelog>
</package>
<package pkgid="3b49d1bc3d838b5c6ab4795314694472606d7f04" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="10.0.6" rel="2.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.5-1" date="1338588000">- Update to 10.0.5 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.5-2" date="1340748000">- Added fix for rhbz#808136 (mozbz#762301)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.6-2" date="1342303200">- Update to 10.0.6 ESR</changelog>
</package>
<package pkgid="23336b9815be29996876ed8f5863b01a115d36c6" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="10.0.7" rel="2.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.6-2" date="1342303200">- Update to 10.0.6 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.6-3" date="1345154400">- Added fix for rhbz#770276 - Firefox segfaults, should
  have a font dependency</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.7-2" date="1346018400">- Update to 10.0.7 ESR</changelog>
</package>
<package pkgid="f6a73622310e11a4f63636df0b38973b4c3ad195" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="10.0.8" rel="1.el5_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.7-2" date="1346018400">- Update to 10.0.7 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.7-3" date="1346191200">- updated python build script</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349560800">- Update to 10.0.8 ESR</changelog>
</package>
<package pkgid="c3a11ff6da1205a38342b91b35306cd7d1f9e34e" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="10.0.8" rel="2.el5_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.7-3" date="1346191200">- updated python build script</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349560800">- Update to 10.0.8 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 10.0.8-2" date="1349992800">- Added patches from 10.0.9 ESR</changelog>
</package>
<package pkgid="b8ed7522b3810a44840b5cade61d9b259d8e4abb" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="17.0.10" rel="1.el5_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.8-5" date="1378339200">- Fixed mozbz#633001 - Cannot open ipv6 address with self-signed certificate</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.9-2" date="1379030400">- Update to 17.0.9 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.10-1" date="1382572800">- Update to 17.0.10 ESR</changelog>
</package>
<package pkgid="9a2987aab8e9ba0e4f9154ac3067539029621c44" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="17.0.3" rel="1.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-1" date="1358200800">- Update to 17.0.2 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-2" date="1358287200">- Added fix for NM regression (mozbz#791626)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361052000">- Update to 17.0.3 ESR</changelog>
</package>
<package pkgid="168b85354896b7fb2f9cc7ddd6a3613c09e3cdca" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="17.0.3" rel="2.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-2" date="1358287200">- Added fix for NM regression (mozbz#791626)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361052000">- Update to 17.0.3 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362693600">- Added fix for mozbz#848644</changelog>
</package>
<package pkgid="052fab74ac7b7b4456f3175345f3ff38de108b69" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="17.0.5" rel="1.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-3" date="1363125600">- Added fix for rhbz#916180 - Wrong library directory reference
  in /usr/bin/xulrunner</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-4" date="1363644000">- Fix for rhbz#913600</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364594400">- Update to 17.0.5 ESR</changelog>
</package>
<package pkgid="98f7d17423b33b0ccac11545fabd7bc2da332d70" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="17.0.6" rel="1.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-4" date="1363644000">- Fix for rhbz#913600</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364594400">- Update to 17.0.5 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-1" date="1368223200">- Update to 17.0.6 ESR</changelog>
</package>
<package pkgid="8f0734af199685901230624013e9d993895053d9" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="17.0.7" rel="1.el5_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364594400">- Update to 17.0.5 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-1" date="1368223200">- Update to 17.0.6 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.7-1" date="1371679200">- Update to 17.0.7 ESR</changelog>
</package>
<package pkgid="57bcfe93a4ca2e9d7dd5146a3ab73a587ed50290" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="17.0.8" rel="3.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-1" date="1375308000">- Update to 17.0.8 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-2" date="1375394400">- Added fix for rhbz#990921 - firefox does not build with.
  required nss/nspr</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-3" date="1375826400">- Update to 17.0.8 ESR Build 2
- Disable strict aliasing - mozbz#821502</changelog>
</package>
<package pkgid="d6b440f92f36fabf957f09bf27943c88fea56b63" name="xulrunner-devel" arch="i386">
  <version epoch="0" ver="17.0.9" rel="1.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-4" date="1378252800">- Fixed rhbz#818636 - Firefox allows install of addons,
  disregarding xpinstall.enabled flag set as false.</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.8-5" date="1378339200">- Fixed mozbz#633001 - Cannot open ipv6 address with self-signed certificate</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.9-1" date="1379030400">- Update to 17.0.9 ESR</changelog>
</package>
<package pkgid="cd7638aa345c3313b69617bc0c46de2f3290d14b" name="yelp" arch="i386">
  <version epoch="0" ver="2.16.0" rel="29.el5"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 2.16.0-26" date="1273183200">- rebuild against xulrunner</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.16.0-27" date="1317160800">- rebuild against xulrunner</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 2.16.0-29" date="1327960800">- rebuild against xulrunner
- fixed xulrunner patch</changelog>
</package>
<package pkgid="ad6346028c031c3c9abe414d1324440313673755" name="yelp" arch="i386">
  <version epoch="0" ver="2.16.0" rel="30.el5_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 2.16.0-27" date="1317160800">- rebuild against xulrunner</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 2.16.0-29" date="1327960800">- rebuild against xulrunner
- fixed xulrunner patch</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 2.16.0-30" date="1354140000">- Rebuild against xulrunner
- Added ESR 17 xulrunner patch</changelog>
</package>
<package pkgid="c323e0a16314d10c53ba3e07fa468c6b8a5e4208" name="yum-autoupdate" arch="noarch">
  <version epoch="5" ver="1.2" rel="2.SL"/>
  <changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.1-2.SL" date="1317168000">- added dependency</changelog>
  <changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.2-1.SL" date="1333411200">- added PRERUN and POSTRUN from SL6
- added /etc/yum.d/yum.cron.updateexec for configuring PRERUN and POSTRUN</changelog>
  <changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 1.2-2.SL" date="1339804800">- doing a better job creating the tempfiles</changelog>
</package>
<package pkgid="05d4050b1c1dff8346f1437e7cd5c2fd501ed8b0" name="yum-updatesd" arch="noarch">
  <version epoch="1" ver="0.9" rel="6.sl5"/>
  <changelog author="Zdenek Pavlas &lt;zpavlas@redhat.com&gt; 1:0.9-5" date="1343952000">- Update previous patch
- Related: rhbz#563494</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; 1:0.9-6" date="1406937600">- updatesd: prevent installing unsigned packages.
- Resolves: rhbz#1125185</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1407283200">- Added Source: yum-updatesd-spec_add-provides.patch
--&gt;  On SL5 you must have "yum-autoupdate" this adds the necessary provide
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl5\2
--&gt;  Modify release string to note changes
- Added Source: yum-updatesd.ini
--&gt;  Config file for automated patch script</changelog>
</package>
</otherdata>