# changelog

author: Florian Festi <ffesti@redhat.com> - 4.8.0-38
changelog:
  - Fix race condidition where unchecked data is exposed in the file system
    (CVE-2013-6435)(#1163059)


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-40
changelog:
  - Add check if source files aren't too big for payload (#833427)
  - Fix producing bogus dependencies by perl.req (#1024517, #1026750)
  - Fix color skipping of multiple files with the same content (#1170124)
  - Disable curl globbing for remote retrievals (#1076277)
  - Make rpm-build depend on redhat-rpm-config provide (#1122100)
  - Handle directory replaced with a symlink to one in verify (#1158377)
  - Restore default SIGPIPE handling for build scriptlets (#993868)
  - State --setperms and --setugids are mutually exclusive (#1119572)
  - Fix byteorder for 64 bit tags on big endian machines (#1040318)
  - File mode from %defattr is applied to directories with warning (#997774)
  - If an error occurs during printing log message then print the error
    on stderr (#1139444)
  - Error out on more than one --pipe option (#966093)
  - Extend PKG_CONFIG_PATH instead of override (#921969)
  - Add RPMCALLBACK_SCRIPT_START and RPMCALLBACK_SCRIPT_STOP. These events are
    not emitted by default (#606239)
  - Enable rpm to work with shebangs in format "!#/usr/bin/env interpeter"
    (#1151828)


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-41
changelog:
  - Add missing braces around the block of code (#606239)
  - Add missing patch for shebangs in format "!#/usr/bin/env interpeter"
    (#1151828)


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-43
changelog:
  - Fix for patch for color skipping (#1170124)
  - Add power64 macro (#1178083)
  - Plug segfault on NULL pointer dereference in debugedit (#903009)
  - Account for temporary disk-space requirements on update (#872314)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-34
changelog:
  - Avoid possible hang while logging an unexpected signal (#694820)
  - Fix Rpmdiff build warning about "dereferencing type-punned pointer" (#697783)
  - Let RPC services bind to a specific port (#697788)
  - Prevent memory corruption error while using large number of services (#711787)
  - Fix coverity defects in poll patch (#715303)


author: Tom Lane <tgl@redhat.com> 5.1.67-1
changelog:
  - Update to 5.1.67, for assorted upstream bugfixes including
    CVEs announced in January 2013
  Resolves: #901380


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-24
changelog:
  - cd to directory without execution permission can't fail silently (#1160923)
  - current directory could differ from PWD (#1168611)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1173668)
  - exporting fixed with variable corrupted its data (#1188377)
  - fixes memmory leak on unset of associative array (#1189294)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - fix segfault when handling a trap (#1117404)
  - closing a file descriptor in a command substitution caused loss of the output (#1116072)


author: Dan Horák <dan@danny.cz> - 1.28-2
changelog:
  - include rescan-scsi-bus script 1.35
  - rebase patches and add fix for issue mentioned in #538787
  - Related: #538787


author: Jan Kaluza <jkaluza@redhat.com> - 5.4-14
changelog:
  - Fix principal creation in Constrained Delegation so the principal can
    be defined in KrbServiceName rather than always computing the value.
    (#1210184)


author: Jeff Johnston <jjohnstn@redhat.com> 1:3.6.1-5
changelog:
  - Remove work around for openjdk bug#647737 as openjdk has
    posted its own work around and will shortly be fixing problem 
    correctly.


author: Andrew Overholt <overholt@redhat.com> 1:3.6.1-6.11
changelog:
  - Bring in line with Fedora.
  - Remove some stuff that is now done in eclipse-build.
  - Fix sources URL.
  - Add PDE dependency on zip for pdebuild script.
  - Use new eclipse-build targets.
  - Increase minimum required memory in eclipse.ini.


author: Jan Kaluza <jkaluza@redhat.com> 5.04-12
changelog:
  - fix #758109 - detect ia64 swap
  - fix #760083 - print RPM packages names
  - fix #709846 - detect BIOS headers
  - fix #688136 - remove weak msdos patterns
  - fix #747999 - improve lzma detection
  - fix #733229 - magic pattern for python function detection


author: Jan Kaluza <jkaluza@redhat.com> 5.04-13
changelog:
  - fix #688136 - fixed the patch from previous commit
  - fix #719583 - support for local magic file in /etc/magic


author: Jan Kaluza <jkaluza@redhat.com> 5.04-14
changelog:
  - fix #795425 - detect vdi images
  - fix #795761 - detect qed images
  - fix #801711 - uncompress bzip2 archives using -z parameter
  - fix #797784 - read patterns from ~/.magic.mgc


author: Peter Hutterer <peter.hutterer@redhat.com> 2.3.2-2
changelog:
  - remove references to git builds and matching sources aux files.
  - remove libxkbfile-devel BuildRequires
  - actually disable autoreconf this time.


author: Peng Huang <shawn.p.huang@gmail.com> - 1.1.0.20091031-1
changelog:
  - Update version to 1.2.0.20091031.
  - Drop ibus-hangul-1.1.0.20090328-right-ctrl-hanja.patch and
    ibus-hangul-1.1.0.20090328-hanja-arrow-keys.patch temporarily, because
    patches conflict with 1.2.0.20091031, and the key configure will available
    in next release.


author: Daiki Ueno <dueno@redhat.com> - 1.3.0.20100329-5
changelog:
  - Add workaround for the race of XIM client and IBUS_ENGINE_PREEDIT_COMMIT
  - Fix bug 965554 - ibus-hangul may not handle key event after focus change


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-1
changelog:
  - Update to 5.44.1.15 from upstream CVS
  - Remove config.sub (no longer needed), remove unused patches (few are
    upstream now, few are pointless with new version), comment patches
  - Fix unbuffer to return exit code of ubuffered program
  - Fix Tk initialization


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-3
changelog:
  - Use full path to su in passmass
    Resolves: #735962
  - Fix segfault in characters matching
    Resolves: #742911
  - Fix minor man page formatting issue
    Resolves: #674866


author: Chrissie Caulfield <ccaulfie@redhat.com> - 3.0.12.1-60
changelog:
  - fenced: keep manual ACk fifo open for longer and also make fenced_external()
    write to it.
    Resolves: rhbz#1059269


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-61
changelog:
  - libgfs2: Fix up remove_mtab_entry
    Resolves: rhbz#1059853
  - fsck.gfs2: Check and repair per_node contents such as quota_changeX
    Resolves: rhbz#1062742
  - libgfs2: patch to update gfs1 superblock correctly
  - gfs2-utils: check and fix bad dinode pointers in gfs1 sb
    Resolves: rhbz#1053668


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-63
changelog:
  - gfs2_edit: Add a savemeta file metadata header
  - gfs2_edit: Fix loop arithmetic in restore_data
  - gfs2_edit: Ensure all leaf blocks in per_node are saved
  - gfs2_edit: Reinstate a check for system dinodes
    Resolves: rhbz#1081523


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-64
changelog:
  - qdisk: Check cman_wait() return value and report errors
    Resolves: rhbz#979313
  - libccs: Read daemon logging attributes correctly
    Resolves: rhbz#980575
  - qdisk: Quorum init complete after tko_up cycles, not tko
    Resolves: rhbz#1029210
  - config: Fix typos and phrasing in defaults file
    Resolves: rhbz#1035929
  - ccs_tool: Fix crash using --verbose
    Resolves: rhbz#1074551
  - manpage: Mention cluster.conf.html schema in man page
    Resolves: rhbz#981043
  - fenced: Remove mention of skip_undefined feature as it is not supported
    Resolves: rhbz#994234


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-68.1
changelog:
  - gfs_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1234442
  - dlm_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1233534


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-2
changelog:
  - oclock 1.0.2
  - xclock 1.0.5
  - xconsole 1.0.4
  - xbiff 1.0.2
  - luit 1.1.0
  - x11perf 1.5.2
  - xcursorgen 1.0.4
  - xeyes 1.1.0
  - xload 1.1.0
  - xlogo 1.0.3
  - xmag 1.0.4
  - xmessage 1.0.3
  - xfd 1.1.0
  - xfontsel 1.0.3
  - xvidtune 1.0.2


author: Michal Sekletar <msekleta@redhat.com> - 0.6.25-17
changelog:
  - produce better error message when client reaches maximum number of dbus objects (#1292862)
  - don't print backtrace if avahi-discover can't connect to avahi-daemon (#1110349)
  - introduce new subpackage with python bindings (#753905)
  - avahi-daemon initscript improvements (#584766)
  - avahi-dnsconfd initscript improvements (#584761)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.491.el6_8.1
changelog:
  - kvm-Add-vga.h-unmodified-from-Linux.patch [bz#1331407]
  - kvm-vga.h-remove-unused-stuff-and-reformat.patch [bz#1331407]
  - kvm-vga-use-constants-from-vga.h.patch [bz#1331407]
  - kvm-vga-Remove-some-should-be-done-in-BIOS-comments.patch [bz#1331407]
  - kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch [bz#1331407]
  - kvm-vga-add-vbe_enabled-helper.patch [bz#1331407]
  - kvm-vga-factor-out-vga-register-setup.patch [bz#1331407]
  - kvm-vga-update-vga-register-setup-on-vbe-changes.patch [bz#1331407]
  - kvm-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch [bz#1331407]
  - Resolves: bz#1331407
    (EMBARGOED CVE-2016-3710 qemu-kvm: qemu: incorrect banked access bounds checking in vga module [rhel-6.8.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.491.el6_8.2
changelog:
  - kvm-vga-add-sr_vbe-register-set.patch [bz#1347192]
  - Resolves: bz#1347192
    (Regression from CVE-2016-3712: windows installer fails to start)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.491.el6_8.3
changelog:
  - kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359724]
  - Resolves: bz#1359724
    (EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-6.8.z])


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.491.el6.4
changelog:
  - kvm-virtio-introduce-virtqueue_unmap_sg.patch [bz#1408389]
  - kvm-virtio-introduce-virtqueue_discard.patch [bz#1408389]
  - kvm-virtio-decrement-vq-inuse-in-virtqueue_discard.patch [bz#1408389]
  - kvm-balloon-fix-segfault-and-harden-the-stats-queue.patch [bz#1408389]
  - kvm-virtio-balloon-discard-virtqueue-element-on-reset.patch [bz#1408389]
  - kvm-virtio-zero-vq-inuse-in-virtio_reset.patch [bz#1408389]
  - Resolves: bz#1408389
    ([RHEL6.8.z] KVM guest shuts itself down after 128th reboot)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.491.el6_8.5
changelog:
  - kvm-net-check-packet-payload-length.patch [bz#1398213]
  - Resolves: bz#1398213
    (CVE-2016-2857 qemu-kvm: Qemu: net: out of bounds read in net_checksum_calculate() [rhel-6.8.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.491.el6_8.6
changelog:
  - kvm-cirrus_vga-fix-division-by-0-for-color-expansion-rop.patch [bz#1418230 bz#1419416]
  - kvm-cirrus_vga-fix-off-by-one-in-blit_region_is_unsafe.patch [bz#1418230 bz#1419416]
  - kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch [bz#1418230 bz#1419416]
  - kvm-display-cirrus-ignore-source-pitch-value-as-needed-i.patch [bz#1418230 bz#1419416]
  - kvm-cirrus-handle-negative-pitch-in-cirrus_invalidate_re.patch [bz#1418230 bz#1419416]
  - kvm-cirrus-allow-zero-source-pitch-in-pattern-fill-rops.patch [bz#1418230 bz#1419416]
  - kvm-cirrus-fix-blit-address-mask-handling.patch [bz#1418230 bz#1419416]
  - kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch [bz#1418230 bz#1419416]
  - Resolves: bz#1418230
    (CVE-2017-2615 qemu-kvm: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.8.z])
  - Resolves: bz#1419416
    (CVE-2017-2615 qemu-kvm-rhev: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.8.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.491.el6_8.7
changelog:
  - kvm-cirrus-fix-patterncopy-checks.patch [bz#1420486 bz#1420488]
  - kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1420486 bz#1420488]
  - kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1420486 bz#1420488]
  - Resolves: bz#1420486
    (EMBARGOED CVE-2017-2620 qemu-kvm: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.8.z])
  - Resolves: bz#1420488
    (EMBARGOED CVE-2017-2620 qemu-kvm-rhev: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.8.z])


author: Jay Fenlason <fenlason@redhat.com> 1:1.2.15-1.el5
changelog:
  - Change sysconfig file to /etc/rdma/compat-dapl to match the change in dapl
  - Split out into separate source rpm from the dapl-2.0.25-2.el5.src.rpm
    Resolves: rhbz#557170 split compat-dapl into a separate srpm


author: Doug Ledford <dledford@redhat.com> - 1:1.2.15-2.el6
changelog:
  - Fix various rpmlint wanrings in spec file
  - Version all of the obsoletes
  - Now that this is no longer part of the dapl rpm, it needs its own
    doc macro so that the license and whatnot are on the system when the
    package is installed
  - Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> - 1:1.2.15-2.1.el6
changelog:
  - Include pipe-leak patch to close
    Resolves: rhbz619439 - OFED1.5.1: uDAPL - cma: memory leak of FD's (DB2 pureScale)
    This required some whitspace editing--apparently the patch was garbled
    somewhere in transit.
  - Include the cma-memleak-verbs-CQ-compl-chans-fix patch to close
    Resolves: rhbz619443 - OFED1.5.1: uDAPL handles close on forked child exit (DB2 pureScale)


author: Doug Ledford <dledford@redhat.com> - 1:1.2.19-1
changelog:
  - Update to latest upstream release (1.2.15 -> 1.2.19)
  - Remove 3 patches rolled into upstream
  - Update exclusive arch to accommodate i686 arch
  - Related: bz725016, bz724896


author: Kyle McMartin <kyle@redhat.com> - 4.0-3
changelog:
  - Add .el6 tag to Release.
  - Use upstream tarball (instead of CVS snapshot.)
    (There's no code difference.)


author: Nalin Dahyabhai <nalin@redhat.com> 0.35.1-1
changelog:
  - fix a self-test that broke because one-year-from-now is now a day's worth
    of seconds further out than it was a few days ago


author: Nalin Dahyabhai <nalin@redhat.com> 0.36-1
changelog:
  - update to 0.36
    - fix some use-after-free bugs in the daemon (#689776)
    - fix a copy/paste error in certmonger-ipa-submit(8)
    - getcert now suppresses error details when not given its new -v option
      (#683926, more of #681641/#652047)
    - updated translations
      - de, es, pl, ru, uk
      - indonesian translation is now for "id" rather than "in"


author: Nalin Dahyabhai <nalin@redhat.com> 0.37-1
changelog:
  - update to 0.37
    - be more careful about checking if we can read a PIN file successfully
      before we even call an API that might need us to try (#688229)
    - fix strict aliasing warnings


author: Nalin Dahyabhai <nalin@redhat.com> 0.38-1
changelog:
  - update to 0.38
    - catch cases where we can't read a PIN file, but we never have to log
      in to the token to access the private key (more of #688229)


author: Nalin Dahyabhai <nalin@redhat.com> 0.39-1
changelog:
  - update to 0.39
    - fix use of an uninitialized variable in the xmlrpc-based submission
      helpers (#690886)


author: Nalin Dahyabhai <nalin@redhat.com> 0.40-1
changelog:
  - update to 0.40
    - fix validation check on EKU OIDs in getcert (#691351)
    - get session bus mode sorted
    - add a list of recognized EKU values to the getcert-request man page


author: Nalin Dahyabhai <nalin@redhat.com> 0.41-1
changelog:
  - read information about the keys we've just generated before proceeding
    to generating a CSR (part of #694184, part of #695675)
  - when processing a "resubmit" request from getcert, go back to key
    generation if we don't have keys yet, else go back to CSR generation as
    before (#694184, #695675)
  - configure with --with-tmpdir=/var/run/certmonger and own /var/run/certmonger
    (#687899), and add a systemd tmpfiles.d control file for creating
    /var/run/certmonger on Fedora 15 and later
  - let session instances exit when they get disconnected from the bus
  - use a lock file to make sure there's only one session instance messing
    around with the user's files at a time
  - fix errors saving certificates to NSS databases when there's already a
    certificate there with the same nickname (#695672)
  - make key and certificate location output from 'getcert list' more properly
    translatable (#7)


author: Nalin Dahyabhai <nalin@redhat.com> 0.42-1
changelog:
  - getcert: fix a buffer overrun preparing a request for the daemon when
    there are more parameters to encode than space in the array (#696185)
  - updated translations: de, es, id, pl, ru, uk


author: Baoquan He <bhe@redhat.com> - 2.0.0-271
changelog:
  - makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption, resolves bug 1009207


author: Baoquan He <bhe@redhat.com> - 2.0.0-272
changelog:
  - Allow multipathd to configure multipath map before adding partition devmappings, resolves bug 906601
  - mkdumprd: use timeout_count as a global variable, resolves bug 906601
  - mkdumprd: add support for SCM devices available for Linux on System z, resolves bug 903529
  - kdump.init: Run multiple kdump init instances one by one in serial order, resolves bug 963948


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-83.el6
changelog:
  - Fix 'gdb internal error' [Threaded program calls clone, which
    crashes GDB] (Pedro Alves, RH BZ 1099929).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-88.el6
changelog:
  - Add --with buildisa, remove %{?_isa} from BuildRequires by default:
    https://github.com/msimacek/koschei/issues/54 (Jan Kratochvil, RH BZ 1287044)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-91.el6
changelog:
  - Load strictly build-id-checked core files only if no executable is specified
    (Jan Kratochvil, RH BZ 1339862).


author: Ryan O'Hara <rohara@redhat.com> - 1.2.13-1
changelog:
  - Rebase to upstream version 1.2.13
    Resolves: rhbz#1052380, rhbz#1077201, rhbz#1007575, rhbz#967641


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.26.0-1
changelog:
  - Updated to latest release
  - Removed patches that have been applied upstream
  - Fixed man page paths (mann -> man3)
  - Disabled mono and ocaml for ARM (Jitesh Shah, BZ#532047)
  - Disabled regression tests on sparc64 as well as ppc/ppc64 (Dennis Gilmore)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-5
changelog:
  - Fixed broken links in index.html (doc-index-fix patch)
    Resolves: rhbz#624658
  - Enabled and fixed testsuite (testsuite-sigsegv-fix, rtest-errout-fix patches)
    Resolves: rhbz#624690
  - Fixed rpmlint warnings on spec file
  - Rebuilt with updated swig
    Resolves: rhbz#679715
  - Fixed gtk plugin program-name (gtk-progname patch)
    Resolves: rhbz#640247
  - Added urw-fonts to BuildRequires
  - Compiled with -fno-strict-aliasing


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-8
changelog:
  - All docs are now installed into /usr/share/doc/graphviz-%{version}
  - Demos packaged as docs not to automatically bring in unnecessary deps
    Resolves: rhbz#821920
  - Removed -ffast-math, added -ffloat-store (on i386) to fix arithmetic on i386
    Resolves: rhbz#772637
  - Fixed build failure due to change in php_zend_api macro type


author: Miroslav Lichvar <mlichvar@redhat.com> 1.24-4.20100428git73d775
changelog:
  - update to 20100428git73d775
  - replace initstepslew directive with makestep in default config
  - add NetworkManager dispatcher script
  - add dhclient script
  - retry server/peer name resolution at least once to workaround
    NetworkManager race condition on boot
  - don't verify chrony.keys


author: Miroslav Lichvar <mlichvar@redhat.com> 1.25-1
changelog:
  - update to 1.25
  - link with -Wl,-z,relro,-z,now options
  - use iburst, four pool servers, rtcsync, stratumweight in default config
  - suppress install-info errors


author: Miroslav Lichvar <mlichvar@redhat.com> 1.25-3
changelog:
  - fix buffer overflow when processing crafted command packets (CVE-2012-4502)
  - don't send uninitialized data in command replies (CVE-2012-4503)


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-91
changelog:
  - Fix side navigation panel displayed unexpectedly when accessing index page
    without prior logging in after luci start
    Resolves: rhbz#853462
  - Rectify suboptimal logrotate arrangement imposing server restarts
    Resolves: rhbz#887340


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-92
changelog:
  - Further fixes for rhbz#853462, rhbz#877999 and rhbz#885028
    Resolves: rhbz#853462, rhbz#877999, rhbz#885028


author: Lon Hohberger <lhh@redhat.com> - 0.16.2-6
changelog:
  - Fix Changelog
  - Add SNMP traps for service state changes, node state changes,
    quorum changes, and configuration updates
  - Resolves: rhbz#561413


author: Lon Hohberger <lhh@redhat.com> - 0.16.2-7
changelog:
  - Add missing SNMP notifications to MIB and clean MIB up
  - Fix initscript return code when an invalid operation was
    specified
  - Resolves: rhbz#553382 rhbz#561413


author: Peter Hutterer <peter.hutterer@redhat.com> 0.9.0-2
changelog:
  - Multiple patches to address issues with TwinView calibration and setting
    (#624560)
  - requires xorg-x11-drv-wacom-0.10.5-7 for TwinView fixes.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.9.0-3
changelog:
  - Multiple patches to address button mapping issues (#624560).
  - update the screen number when updating
  - requires updated xorg-x11-drv-wacom for the matching fixes to xsetwacom
    and the driver.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.0-2
changelog:
  - Fix cintiq calibration issues (#675672)
  - Set eraser mappings same as stylus (#711619)
  - Allow multiple wacomcplrc files to be used  (#711618)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.4.0-5
changelog:
  - fbdev-0.4.0-Make-ISA-optional.patch: to make next patch apply cleanly.
  - fbdef-0.4.0-Remove-useless-loader-symbol-lists.patch:
    fix linker error against X server >= 1.6.99.1


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-38
changelog:
  - Include several upstream fixes related to ID views
  - Resolves: rhbz#1215195 - Override for IPA users with login does not list
                             user all groups
  - Resolves: rhbz#1213947 - Group resolution is inconsistent with group
                             overrides
  - Resolves: rhbz#1213822 - Overrides with --login work in second attempt


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-39
changelog:
  - Resolves: rhbz#1216094 - /usr/libexec/sssd/selinux_child crashes and
                             gets avc denial when ssh


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-40
changelog:
  - Resolves: rhbz#1219844 - Unable to resolve group memberships for AD
                             users when using sssd-1.12.2-58.el7_1.6.x86_64
                             client in combination with
                             ipa-server-3.0.0-42.el6.x86_64 with AD Trust


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-41
changelog:
  - Resolves: rhbz#1221358 - SSSD doesn't work with ID mapping and disabled
                             subdomains


author: Petr Stodulka <pstodulk@redhat.com> - 1.7.1-7
changelog:
  - fixes memory corruption on git shortlog
  - add -f option for "git submodule add" to add files even when
    these are included in .gitignore
  - improve performance of extremly slow http(s)
  - fix cloning using http(s) protocol when redirection is requested
    Resolves: #874659 #1207253 #1237395 #1289984


author: Petr Stodulka <pstodulk@redhat.com> - 1.7.1-8
changelog:
  - fixes previous patch which add -f option for "git submodule add"
    which incorectly used unsupported option --ignore-missing for
    "git add --dry-run"
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1207253 #1368384


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-1
changelog:
  - New version
    Resolves: rhbz#1064668
    Resolves: rhbz#982215
    Resolves: rhbz#1126757
    Resolves: rhbz#1167766
    Resolves: rhbz#1171806
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#799863
  - Documented --fixed-regexp option
    Resolves: rhbz#1103270


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1193030
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed bogus date in the changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-5
changelog:
  - Added support for environmental variable GREP_LEGACY_R to enhance
    backward compatibility of -r switch behavior
    Resolves: rhbz#1256756


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-4
changelog:
  - Two important fixes from 3.1.2 release (#590773)
  - Fix up attribute handling in xfs_fsr
  - Make sure xfs_admin writes both sb fields when changing lazy_count


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-10.1
changelog:
  - mkfs.xfs: Use multidisk mode when geometry is on cmdline (#971698)
  - xfs_repair: Handle fragmented multiblock dir2 directories (#976217)


author: Adam Tkac <atkac redhat com> 1.3.39-1
changelog:
  - update to 1.3.39
  - swig-1.3.38-rh485540.patch was merged
  - add Example/ to -doc again (#489077), filter provides correctly


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-31
changelog:
  - modcluster: Overload stop_service so that it can fulfill its nominal promise
    Resolves: rhbz#1114622


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-35
changelog:
  - modcluster: Manage cmirrord along with other services. Original patch
                provided by Curtis Taylor of IBM, heavily reworked later.
  - Resolves: rhbz#1219617


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.0.el6
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 0
  - sync with fedora
   - added and applied patch411 1029588.patch (rh 1029588)
   - added aand applied patch410, 1015432 (rh 1015432)
  - Resolves: rhbz#1050935


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.7.0.el6
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed upstreamed patch402 gstackbounds.patch
  - removed BuildRequires on pulseaudio >= 0.9.1, devel is enough
  - removed Requires: rhino, BuildRequires is enough
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
  - fixed FT2_CFLAGS and FT2_LIBS
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.5 forward port)
  - Resolves: rhbz#1085002


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.1.4-6
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Updated to latest upstream release: libnfsidmap-0.24-rc1 (bz 650970)
  - Reset default values in /etc/idmap.conf (bz 650997)
  - Remove some warnings in the RPMdiff run (bz 594279)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-14
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1066589)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-16
changelog:
  - do not resend signal on termination (#1075635)
  - fix argv rewrite (#1047506)
  - fix brace expansion on/off (#1078698)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070350)
  - fix parser errors related to the end of the here-document marker (#1036931)
  - ksh hangs when command substitution fills out the pipe buffer (#1062296)
  - using typeset -l with a restricted variabled caused segmentation fault (#1083713)
  - ksh stopped on read when monitor mode was enabled (#1023109)
  - monitor mode was documented incorrectly (#1019334)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-17
changelog:
  - do not crash when unsetting running function from another one (#1105138)
  - should report an error when trying to cd into directory without execution bit (#1102627)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-18
changelog:
  - job locking mechanism did not survive compiler optimization (#1112306)
  - wrong return code from a pipe in command substitution (#1117316)


author: Akemi Yagi <toracat@centos.org> 0.7.3-2
changelog:
  - applied patches to nxserver
    http://bazaar.launchpad.net/~freenx-team/freenx-server/ubuntu/revision/86#nxserver
    http://mail.kde.org/pipermail/freenx-knx/2009-May/008126.html


author: Doug Ledford <dledford@redhat.com> - 1.3.2-1
changelog:
  - Update to latest upstream version
  - Remove requirement on libibcommon since that library is no longer needed
  - Fix a problem with man page listing


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-21
changelog:
  - add DH_compute_key_padded needed for FIPS CAVS testing
  - make 3des strength to be 128 bits instead of 168 (#1056616)
  - FIPS mode: do not generate DSA keys and DH parameters < 2048 bits
  - FIPS mode: use approved RSA keygen (allows only 2048 and 3072 bit keys)
  - FIPS mode: add DH selftest
  - FIPS mode: reseed DRBG properly on RAND_add()
  - FIPS mode: add RSA encrypt/decrypt selftest
  - FIPS mode: add hard limit for 2^32 GCM block encryptions with the same key
  - use the key length from configuration file if req -newkey rsa is invoked


author: Steve Dickson <steved@redhat.com> 1.2.3-71
changelog:
  - rpc.mountd: set libtirpc nonblocking mode to avoid DO (bz 1301581)
  - nfsidmap: Clean up other exit status cases (bz 1313603)
  - gssd: Fix inner-loop variable reuse (bz 1313090)
  - mount.nfs manpage: Add nfsmount.conf (bz 1302981)
  - nfs.init: Set exit code on restarts (bz 1205055)


author: Steve Dickson <steved@redhat.com> 1.2.3-73
changelog:
  - mountd: fix is_subdirectory to understand '/' (bz 1331207)
  - mount.nfs: Fix for the bug in v1.2.4 that breaks mount.nfs (bz 1208385)
  - mount.nfs: Removed supported flag from usage string (bz 1000990)
  - mountd.man: Update to change -P option as an alias for -p (bz 1037926)
  - exportfs: Deal with path's trailing "/" in unexportfs_parsed() (bz 1276538)
  - mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1352856)


author: Doug Ledford <dledford@redhat.com> - 0.4-3
changelog:
  - Rebuild against updated libibmad and libibumad libraries
  - Only need to build require libibmad, it pulls in libibumad
  - Resolves: bz451466


author: Doug Ledford <dledford@redhat.com> - 0.5-4.el6
changelog:
  - Rebuild against latest opensm, which was required for latest ibutils,
    which was required to resolve licensing issues during pkgwrangler review
  - Related: bz555835


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Cole Robinson <crobinso@redhat.com> - 0.8.6-1.el6
changelog:
  - Rebase to 0.8.6 (bz 658959)
  - SPICE support (requires spice-gtk) (Marc-André Lureau)
  - Option to configure CPU model
  - Option to configure CPU topology
  - Save and migration cancellation (Wen Congyang)
  - Save and migration progress reporting
  - Option to enable bios boot menu
  - Option to configure direct kernel/initrd boot


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-101
changelog:
  - wifi: support locking connections to a band (5GHz or 2GHz) (rh #1254070)
  - editor: allow VLAN id <0-4095> (rh #1258218)
  - wifi: disable Ad-Hoc WPA connections (rh #787733)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-103
changelog:
  - libnm-util/editor: recognize PKCS#8 private keys and check passwords (rh #1212553)
  - wifi: show certificate files with the *.key extension (rh #1212553)


author: Akemi Yagi <toracat@centos.org> [2.6.32-358.18.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, EeePC hotkey, JFS
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Enabled ARPD [bug#5709]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added sysfs-fix-printk-warnings-bug6157.patch [bug#6157]
  - Added correct-tty-buffer-flush-bug6104.patch [bug#6104]
  - Added HyperV-Balloon-Fix-bug6316.patch [bug#6316]
  - Added fix-thermal-shutdown-warns-bug6346.patch [bug#6346]
  - Enabled dpt_i2o [bug#6429]
  - Added a fix for virtio_net underestimation [bug#5526]
  - Added revert-improve-queue_should_plug-bug6548.patch [bug#6548]
  - Added patch to fix irq remapping issue [bug#6319]


author: Adam Jackson <ajax@redhat.com> 1.15.0-25
changelog:
  - CVE fixes for: CVE-2014-8099, CVE-2014-8098, CVE-2014-8097, CVE-2014-8096,
    CVE-2014-8095, CVE-2014-8094, CVE-2014-8093, CVE-2014-8092, CVE-2014-8091,
    CVE-2014-8101, CVE-2014-8100, CVE-2014-8103, CVE-2014-8102


author: Tony Camuso <tcamuso@redhat.com>
changelog:
  - weak-modules: when adding a module, should collect the symbols from
    external modules of destination kernel
    Resolves: rhbz#1284935

  - weak-modules: Updating kernel was issuing warnings upon removal of
    old kernel.
    Resolves: rhbz#1343376

  - weak-modules: weak-modules does not handle periods in symbol names
    Resolves: rhbz#1389067


author: Radovan Sroka <rsroka@redhat.com> 7.4.10-7
changelog:
  - fix warning in net.c in debug mode
  - added rsyslog-7.4.10-fix-net-warning.patch
    resolves: rhbz#1388420


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 6.17-9
changelog:
  - Don't set $REMOTEHOST on the local machine
    Resolves: #669176
  - Don't print history in verbose mode
    Resolves: #658171


author: Jan Kaluza <jkaluza@redhat.com> - 6.17-13
changelog:
  - Do not dereference null pointer in cwd
    Resolves: #700309
  - Exit when child killed
    Resolves: #690356
  - Do not allow variable names beginning with number
    Resolves: #672592
  - Fix status of pipelined/backquoted/list of commands
    Resolves: #658190
  - Fix unused res variable in sh.glob.c
    Resolves: #684063


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 6.17-14
changelog:
  - Remove obsolete glob-automount patch; the issue should have been
    resolved (and is now resolved) in glibc posix/glob.c (#684063)


author: Ray Strode <rstrode@redhat.com> 2.30.4-58
changelog:
  - Fix this log spew:
        Buggy client sent a _NET_ACTIVE_WINDOW message with a timestamp of 0 for 0x260002b (Login Wind)
    Resolves: #1073546


author: Lukas Nykryn <lnykryn@redhat.com> 0.6.5-11
changelog:
  - set BUGREPORT value to launchpad (#771736)
  - add support for override files (#663594)
  - add usage stanza (#735427)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-32.P1
changelog:
  - An error in the handling of malformed client identifiers can
    cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843122)
  - Memory Leaks Found In ISC DHCP (CVE-2012-3954, #843122)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-33.P1
changelog:
  - Use getifaddrs() for interface discovery code on Linux (#803540)
  - dhclient-script: do not backup&restore /etc/resolv.conf (#824622)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-34.P1
changelog:
  - Reducing the expiration time for an IPv6 lease may cause the server to crash
    (CVE-2012-3955, #858130)


author: Jiri Popelka - 12:4.1.1-35.P1
changelog:
  - various memory leaks in omapi (#978420)
  - Modify the reply handling in the server code to send to a specified port
    rather than to the source port for the incoming message. (#952126)
  - Multiple key statements in zone definition causes inappropriate error (#919221)
  - Make sure range6 is correct for subnet6 where it's declared (#902966)
  - Relay no longer crashes, when DHCP packet is received over interface
    without any IPv4 address assigned. (#863936)
  - Expose next-server DHCPv4 option to dhclient script. (#658855)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-57
changelog:
  - Resolves: rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
  - Resolves: rhbz#745966 - sssd_pam segfaults on sssd restart
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-59
changelog:
  - Resolves: rhbz#742288 - RFC2307bis initgroups calls are slow
  - Resolves: rhbz#746654 - SSSD backend gets killed on slow systems
  - Related:  rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
                            Fixes a crash introduced by the earlier patch.
  - Related:  rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names
                            Fixes for internationalization


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-60
changelog:
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-64
changelog:
  - Resolves: rhbz#749822 - SSSD may go into infinite loop during RFC2307bis
                            initgroups when groups appear in multiple nesting
                            levels


author: Elio Maldonado <emaldona@redhat.com> - 4.9.2-0.1
changelog:
  - Retagging to ensure n-v-r is lower than the one for rhel-6.4
  - Resolves: rhbz#891661 - [RFE] Rebase nspr to 4.9.2 due to Firefox 17 ESR


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.3-3
changelog:
  - Imported from Fedora
  - Resolves: rhbz#726463 - Add libunistring as a separate component/package
                            into RHEL


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-2
changelog:
  - Allow supplying passwords from scripts
  - Allow specifying a LDAP simple bind password in libuser.conf
    Resolves: #562832


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.448.el6_6.4
changelog:
  - kvm-pcnet-fix-Negative-array-index-read.patch [bz#1225886]
  - kvm-pcnet-force-the-buffer-access-to-be-in-bounds-during.patch [bz#1225886]
  - Resolves: bz#1225886
    (EMBARGOED CVE-2015-3209 qemu-kvm: qemu: pcnet: multi-tmd buffer overflow in the tx path [rhel-6.6.z])


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Sync with Fedora devel, including:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Resolves: #552617
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #554431
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines
  - Use -N not the obsolete -n in useradd call
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql
  - add sparc/sparc64 to multilib header support


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557297
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html
  Resolves: #565558
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #561010
  - adjust license tag to reflect OSI decision


author: Tom Lane <tgl@redhat.com> 8.4.5-1.el6_0.1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #640069
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.414.el6
changelog:
  - kvm-vmstate-Add-max_version_id-field-to-VMStateDescripti.patch [bz#1016736]
  - kvm-savevm-Introduce-max_version_id-field-to-SaveStateEn.patch [bz#1016736]
  - kvm-i386-Set-cpu-section-version_id-to-11.patch [bz#1016736]
  - kvm-qemu-ga-execute-fsfreeze-freeze-in-reverse-order-of-.patch [bz#1015633]
  - Resolves: bz#1015633
    (qemu-guest-agent: "guest-fsfreeze-freeze" deadlocks if the guest have mounted disk images)
  - Resolves: bz#1016736
    (CPU migration data has version_id 12 but version 11 format)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.415.el6
changelog:
  - kvm-target-i386-don-t-migrate-steal-time-MSR-on-older-ma.patch [bz#1022821]
  - Resolves: bz#1022821
    (live-migration from RHEL6.5 to RHEL6.4.z fails with "error while loading state for instance 0x0 of device 'cpu'")


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Resolves: rhbz#975489 - Additional flags might have no effect
                            on 32bit architectures


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.26-1
changelog:
  - Rebase libtevent to 0.9.26
  - Remove upstreamed or no longer applicable patches
  - Related: rhbz#1322688


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.26-2
changelog:
  - temporarily disable make check, which keeps failing in mock despite
    working correctly on a full system
  - Related: rhbz#1322688


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.10-21.el6_3.7
changelog:
  - nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#877024)
  - tests: Reduce length of nodeinfodata test names (rhbz#877024)
  - nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#877024)
  - nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#877024)
  - Wire up handling for QMP's BALLOON_EVENT (rhbz#884713)


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-14.el6_5.1
changelog:
  - Improve handling of xmlStopParser(CVE-2013-2877)
  - Do not fetch external parameter entities (CVE-2014-0191)


author: Jindrich Novy <jnovy@redhat.com> 4.6.21-10
changelog:
  - remove libtool hacks so that compat-db builds again
  - remove support for old BDBs: 4.3.29, 4.2.52, 4.1.25


author: Joe Orton <jorton@redhat.com> - 1.3.9-4
changelog:
  - add fix for apr_fnmatch() regression (CVE-2011-1928, #706352)
  - add fix for CVE-2011-0419 (#703520)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-22
changelog:
  - Remove fixed limit on number of autofs mount points (bug #1024097)
  - Print negative quota values properly (bug #1009397)


author: Dennis Gilmore <dennis@ausil.us> - 4.18-1
changelog:
  - update to 4.18
  - spec contents pulled from RHEL5 srpm 
  - fedora spec changelog
  - update buildroot
  - use jss from fedora for building


author: Rich Megginson <rmeggins@redhat.com> 0:4.18-6
changelog:
  - Resolves: bug 684028 - LDAPSchemaElement.getOptionalValues() mangles values
  - upstream mozilla id=640750


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-9
changelog:
  - fixed broken link /usr/sbin/slapschema (#583568)
  - removed some static libraries from openldap-devel (#583575)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-10
changelog:
  - updated overlay list in config file (#586143)
  - config dir slapd.d added to package payload (#585276)
  - init script now creates only symlink, not harldink, in /var/run (#584870)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-12
changelog:
  - updated man pages - only slaptest can convert configuration schema
    (#584787)
  - openldap compiled with -fno-strict-aliasing (#596193)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.19-15.1
changelog:
  - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success
  - fix: CVE-2011-1025 rootpw is not verified for ndb backend


author: Uri Lublin <uril@redhat.com> 2.4-2
changelog:
  - add npplat.h to Makefile.am sources
  - add nsISpicec.xpt to Makefile.am EXTRA_DIST
  - add version to plugin name string
  Resolves: #672761
  - change location & name  of logfile & unix-domain-socket
  Resolves: #630601
  - look for spicec in /usr/bin if not found in /usr/libexec
  Resolves: #672497


author: Caolán McNamara <caolanm@redhat.com> - 0.4.0-8
changelog:
  - defining inline causes problems trying to build against libvisual headers, 
    e.g. libvisual-plugins


author: Jakub Jelinek <jakub@redhat.com> 0.4.3-4
changelog:
  - for prelink -u -o ... if no .gnu.prelink_undo section is
    present just pass through the original bits to the output file
    instead of saving the ELF file using libelf into a temporary
    and then copying over or renaming that to the final output file
    (#614382)


author: Jakub Jelinek <jakub@redhat.com> 0.4.4-1
changelog:
  - support copying over extended attributes (#456105)
  - handle DW_OP_GNU_implicit_pointer, fix handling of DW_OP_call_ref


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-1
changelog:
  - enable for arm (#733089)
    - adjust arm default dynamic linker
    - fix up fast PIE detection to handle PT_LOPROC ... PT_HIPROC phdrs
      before PT_PHDR
    - disable cxx{1,2}.sh test checking for conflict removal on arm
      due to EABI weirdnesses, add new cxx3.sh test that tests conflict
      removal even on arm


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-3
changelog:
  - add --layout-page-size=N option, default to --layout-page-size=32768
    on AMD Bulldozer (#739460)
  - handle 0%{?rhel} >= 7 like 0%{?fedora} >= 13


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-3.1
changelog:
  - fix saving of cache if some dependencies are unprelinkable and their                                            
    dependencies bad (#788238)                                                                                      
  - fix up DWARF4 DW_AT_data_member_location handling                                                               
  - add .debug_macro support                                                                                        
  - add DWZ multifile support


author: Sumit Bose <sbose@redhat.com> - 1.0.108-1
changelog:
  - Update to ctdb version 1.0.108
   - added fix for bz537223
   - added tdb-tools to Requires, fixes bz526479


author: Sumit Bose <sbose@redhat.com> - 1.0.108-2
changelog:
  - substituted $RPM_BUILD_ROOT by %{buildroot}
   - fix permissions on event scripts
   - Updated to ctdb version 1.0.108 maintenance release 3,
     git commit f24338e68c462e5cdee3194bb8f3ba18c3ca4672


author: Sumit Bose <sbose@redhat.com> - 1.0.112-1
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 14,
     git commit f5ac659e4df9ba6ee4652aeb9b4f5a01b532fd99
   - resolves: #583771


author: Martin Kutlak <mkutlak@redhat.com> - 2.0.9-34
changelog:
  - Correctly trim spaces before values with augeas
  - Prevent creating of customer case without reproducing knowledge
  - Rely on configurated email
  - Change URL in config for bug-report server
  - Fix segfaulting abrt-cli
  - Related #1422030, #1328768, #1323625, #1463316, #1421754


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-16
changelog:
  - Do not print a "Broken Pipe" error message after requesting a large group
    (#791042)
  - Fix a typo in the disconnection logic (#747281), patch by Martin Poole


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-20.1
changelog:
  - Resolves: rhbz#1192451 - nslcd does not reconnect to alternate ldap server
                             when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-20.2
changelog:
  - Do not crash when parsing the tls_ciphers option
  - Resolves: rhbz#1184361 - segfault occurs when nslcd starts


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-20.3
changelog:
  - Use a static buffer for OpenLDAP callback structure
  - Resolves: rhbz#999472 - nslcd does not reconnect to alternate ldap server
                            when using SSL


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-3
changelog:
  - New version of unlimit-fds patch
  - Fixed error message if FDs limit is reached (by fd-limit-err patch)
    Related: rhbz#998021


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.3-2.2.1.el6
changelog:
  - Used newly prepared tarball with security fixes
  - Bump to icedtea7-forest-2.2.1
  - _mandir/man1/jcmd-name.1 added to alternatives
  - Updated rhino.patch
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Modified partially upstreamed patch302 - systemtap.patch
  - Temporarly disabled patch102 - java-1.7.0-openjdk-size_t.patch
  - Removed already upstreamed patches 104,108,109,301,110:
    - java-1.7.0-openjdk-arm-ftbfs.patch
    - java-1.7.0-openjdk-system-zlib.patch
    - java-1.7.0-openjdk-remove-mimpure-opt.patch
    - systemtap-alloc-size-workaround.patch
    - java-1.7.0-fix-gio-detection.patch
  - Access gnome bridge jar forced to be 644
  - Added patch303 - java-1.7.0-openjdk-jstack.patch which resolved RH804632 for openjdk6
  - Resolves: rhbz#828759


author: Marek Grac <mgrac@redhat.com> - 3.1.5-10.2
changelog:
  - fence_vmware_soap: o list doesn't expose proper virtual machine path for fencing
    Resolves: rhbz#811873


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.5-6.b13
changelog:
  - Removed accessibility package
   - removed patch3 java-atk-wrapper-security.patch
   - removed its files and declaration
   - removed creation of libatk-wrapper.so and java-atk-wrapper.jar symlinks
   - removed generation of accessibility.properties
  - Resolves: rhbz#1113078


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12
changelog:
  - mayor rework of specfile - sync with f21
   - accessibility kept removed
   - lua script kept unsync
   - priority and epoch kept on 0
   - not included disable-doclint patch
   - kept bundled lcms
   - unused OrderWithRequires
   - used with-stdcpplib instead of with-stdc++lib
  - Resolves: rhbz#1081073


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12
changelog:
  - fixed desktop icons
  - Icon set to java-1.8.0
  - Development removed from policy tool
  - Resolves: rhbz#1081073


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-1.b26
changelog:
  - updated to u20-b26
  - adapted patch9999 enableArm64.patch
  - adapted patch100 s390-java-opts.patch
  - adapted patch102 size_t.patch
  - removed upstreamed patch  0001-PPC64LE-arch-support-in-openjdk-1.8.patch
  - adapted  system-lcms.patch
  - removed patch8 set-active-window.patch
  - removed patch9 javadoc-error-jdk-8029145.patch
  - removed patch10 javadoc-error-jdk-8037484.patch
  - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it
  - Resolves: rhbz#1081073


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-2
changelog:
  - fix overflow in subshell loop (#858263)
  - set default editing mode to emacs (#761551)
  - ksh -m did not turn monitor mode on (#960034)
  - prevent fork bomb trigered by SIGSTP (#922851)


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.3-6
changelog:
  - Catch exceptions for libvirt-qmf detection failures
    Resolves: rhbz#753974
  - Fix crash when we fail to read key file.
    Resolves: rhbz#758392
  - Fix erroneous man page XML
    Resolves: rhbz#761215


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-9
changelog:
  - Update the man page and configuration generator to reflect the actual
    behavior of the default value for the "interface" option.
    Resolves: rhbz#809101


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Bump to 2.6.4 and u95b00.
  - Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
  - Drop 8072932or8074489 patch as applied upstream in u91b01.
  - Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
  - Resolves: rhbz#1295765


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Resolves: rhbz#1320656


author: Doug Ledford <dledford@redhat.com> - 1.1.5-1
changelog:
  - Update to latest upstream version (1.1.4 to 1.1.5)
  - Drop libibverbs cow.patch as it is in 1.1.5 already
  - Enable valgrind support so memory corruption is easier to debug
  - Make sure RPATH entries are removed from programs
  - Related: bz725016


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-0.5.gite9db007b
changelog:
  - New upstream based on git e9db007b.
  - Fix segfault in vm-dump-metrics (RHBZ#529348).
  - On error, vm-dump-metrics now exits with status code 1.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-0.6.gite9db007b
changelog:
  - Some changes to the default configuration file suggested by SAP to
    make it more CIM standards compliant.


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.19.1.el6]
changelog:
  - [crypto] sha-s390: Reset index after processing partial block (Herbert Xu) [678996 626515]
  - [net] clear heap allocations for privileged ethtool actions (Jiri Pirko) [672434 672435] {CVE-2010-4655}
  - [usb] iowarrior: don't trust report_size for buffer size (Don Zickus) [672421 672422] {CVE-2010-4656}
  - [virt] virtio: console: Wake up outvq on host notifications (Amit Shah) [678558 643750]
  - [fs] inotify: stop kernel memory leak on file creation failure (Eric Paris) [656831 656832] {CVE-2010-4250}
  - [net] sctp: fix kernel panic resulting from mishandling of icmp dest unreachable msg (Neil Horman) [667028 667029] {CVE-2010-4526}
  - [mm] install_special_mapping skips security_file_mmap check (Frantisek Hrbata) [662198 662199] {CVE-2010-4346}
  - [kdump] vt-d: Handle previous faults after enabling fault handling (Takao Indoh) [678485 617137]
  - [kdump] Enable the intr-remap fault handling after local apic setup (Takao Indoh) [678485 617137]
  - [kdump] vt-d: Fix the vt-d fault handling irq migration in the x2apic mode (Takao Indoh) [678485 617137]
  - [kdump] vt-d: Quirk for masking vtd spec errors to platform error handling logic (Takao Indoh) [678485 617137]
  - [virt] virtio: console: Don't block entire guest if host doesn't read data (Amit Shah) [678562 643751]
  - [virt] virtio: console: Prevent userspace from submitting NULL buffers (Amit Shah) [678559 635535]
  - [virt] virtio: console: Fix poll blocking even though there is data to read (Amit Shah) [678561 634232]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.20.1.el6]
changelog:
  - [dvb] kernel: av7110 negative array offset (Mauro Carvalho Chehab) [672403 672404] {CVE-2011-0521}
  - [fs] sunrpc: Correct a misapplied patch (J. Bruce Fields) [678094 678146] {CVE-2011-0714}
  - [netdrv] orinoco: fix TKIP countermeasure behaviour (Stanislaw Gruszka) [667908 667909] {CVE-2010-4648}
  - [kernel] /proc/vmcore: speed up access to vmcore file (Neil Horman) [683442 672937]
  - [netdrv] cnic: Fix big endian bug (Steve Best) [678484 676640]
  - [scsi] fcoe: drop FCoE LOGO in FIP mode (Mike Christie) [683814 668114]
  - [s390x] remove task_show_regs (Danny Feng) [677854 677855] {CVE-2011-0710}
  - [ib] cm: Bump reference count on cm_id before invoking callback (Doug Ledford) [676190 676191] {CVE-2011-0695}
  - [rdma] cm: Fix crash in request handlers (Doug Ledford) [676190 676191] {CVE-2011-0695}
  - [net] bridge: Fix mglist corruption that leads to memory corruption (Herbert Xu) [678172 659421] {CVE-2011-0716}
  - [netdrv] r8169: use RxFIFO overflow workaround and prevent RxFIFO induced infinite loops (Ivan Vecera) [680080 630810]
  - [s390x] kernel: nohz vs cpu hotplug system hang (Hendrik Brueckner) [683815 668470]
  - [netdrv] cxgb3/cxgb3_main.c: prevent reading uninitialized stack memory (Doug Ledford) [633156 633157] {CVE-2010-3296}
  - [configs] redhat: added CONFIG_SECURITY_DMESG_RESTRICT option (Frantisek Hrbata) [683822 653245]
  - [kernel] restrict unprivileged access to kernel syslog (Frantisek Hrbata) [683822 653245]
  - [fs] cifs: allow matching of tcp sessions in CifsNew state (Jeff Layton) [683812 629085]
  - [fs] cifs: fix potential double put of TCP session reference (Jeff Layton) [683812 629085]
  - [fs] cifs: prevent possible memory corruption in cifs_demultiplex_thread (Jeff Layton) [683812 629085]
  - [fs] cifs: eliminate some more premature cifsd exits (Jeff Layton) [683812 629085]
  - [fs] cifs: prevent cifsd from exiting prematurely (Jeff Layton) [683812 629085]
  - [fs] CIFS: Make cifs_convert_address() take a const src pointer and a length (Jeff Layton) [683812 629085]
  - [kdump] kexec: accelerate vmcore copies by marking oldmem in /proc/vmcore as cached (Neil Horman) [683445 641315]
  - [virt] KVM: VMX: Disallow NMI while blocked by STI (Avi Kivity) [683783 616296]
  - [virt] kvm: write protect memory after slot swap (Michael S. Tsirkin) [683781 647367]


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038985 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Doug Ledford <dledford@redhat.com> - 1.0.2-1
changelog:
  - Update to latest upstream release (1.0.1 -> 1.0.2)
  - Remove 5 patches rolled into upstream release
  - Drop ifnarch ia64 use around valgrind as we don't build on ia64 any more
  - Fix broken libmlx4-modprobe.conf
  - Related: bz725016


author: HATAYAMA Daisuke <d.hatayama@jp.fujitsu.com> - 1.0-1
changelog:
  - Remove inclusion of kvmdump.h and unwind_x86_64.h due to non-supporting issue
    on crash-devel package. Instead, use a new interface for them.
  - Remove ppc64, ia64, s390 and s390x from ExclusiveArch, leave x86_64
    and %{ix86} there.
  - Add descriptions in BuildRequires and Requires about crash and crash-devel.


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-20
changelog:
  - chcat: Change the isSensitivity() detection
  Resolves: rhbz#965397
  - Move sepolgen utility from policycoreutils-gui to policycoreutils-python
  Resolves: rhbz#995778
  - audit2allow: use date time format compatible with ausearch
  Resolves: rhbz#1111999


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-21
changelog:
  - fixfiles verify: do not relabel /tmp and /var/tmp dirs
  Resolves: rhbz#1113083
  - Fix semanage -S <store> -o <output>
  Resolves: rhbz#1122850


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-23
changelog:
  - Move python scripts in /usr/share/system-config-selinux to policycoreutils-python
  Resolves: rhbz#995778


author: Jakub Filak <jfilak@redhat.com> 0.10-1
changelog:
  - New upstream version
    - Fix a segmentation fault in sr_rpm_package_uniq()
    - Respect kernel flavor when parsing package name
    - Parse backtrace without Thread header
    - Fix koops json output if there are no modules
    - Add support for multiple koops stacks


author: Jakub Filak <jfilak@redhat.com> 0.11-1
changelog:
  - New upstream version
    - Make all python objects hashable
    - Improve memory management in rpm module
    - Extend the list of normalized functions
    - Add command for debugging duphashes to satyr utility


author: Martin Milata <mmilata@redhat.com> 0.12-1
changelog:
  - New upstream version
    - JVM frames normalization
    - Add C++ symbol demangling
    - Unsigned overflow bugfixes
    - Fix malformed uReports for Java


author: Martin Milata <mmilata@redhat.com> 0.14-1
changelog:
  - New upstream version
    - Ported to elfutils-0.158 unwinder API
    - Frame fingerprinting disabled
    - Bugfixes


author: Jakub Filak <jfilak@redhat.com> 0.15-1
changelog:
  - New upstream version
    - uReport enhancements (DESKTOP_SESSION, auth_data, missing values)
    - Enhance the backtrace quality algorithm to tackle MiniDebuginfo
    - Support unusual Python and Java exceptions
    - Deal with infinite recursion in backtraces
    - Bugfixes


author: Martin Milata <mmilata@redhat.com> 0.16-1
changelog:
  - New upstream version
    - Add support for unwinding from core dump hook
    - Add support for Ruby uReports
    - Bugfixes


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.503.el6_9.5
changelog:
  - kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501296]
  - Resolves: bz#1501296
    (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-6.9.z])


author: Adam Jackson <ajax@redhat.com> 0.12.902-4
changelog:
  - libpciaccess-lol-dev-port.patch: Don't use /dev/port since the kernel insists
    that it remain unusably broken.


author: Adam Jackson <ajax@redhat.com> 8.1-0.19
changelog:
  - Fix pthread linkage of glapi and osmesa
  - Drop llvmpipe-related patches
  - Don't require mesa-dri1-drivers on s390{,x}


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.fc17.1
changelog:
  - Added flag so that debuginfo is built into classfiles (rhbz# 796400)
  - Updated rhino.patch to build scripting support (rhbz# 796398)


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.fc17.2
changelog:
  - Resolved rhbz#740762: java.library.path is missing some paths
  - Unified spec file for x86, x86_64, ARM and s390
    - Integrated changes from Dan Horák <dhorak@redhat.com> for Zero/s390
    - Integrated changes from Chris Phillips <chphilli@redhat.com> for Zero/ARM


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6
changelog:
  - Imported from Fedora into RHEL 6.3 branch
  - Removed unused macros
  - Removed rh740762 patch (removed from Fedora now too)
  - Disabled system lcms (not available in RHEL6)
  - Updated virtual provides to provide "7" specific items
  - Made exclusive arch for i686 and x86_64


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.1
changelog:
  - Synched with 7.0 branch
  - Removed unnecessary unsetting of USE_SYSTEM_LCMS
  - Added SystemTap fixes from Mark Wielaard


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.3
changelog:
  - Added ALT_STRIP_POLICY="no_strip" flag so that binaries are not stripped
  - Collapsed if cases for x86
  - Decreased priority
  - Removed xalan and xerces reqs in favor of libxslt which is what we use


author: Harald Hoyer <harald@redhat.com> 147-2.53
changelog:
  - add rule for idrac interface renaming
  Resolves: rhbz#1054482
  - for every modprobe locked worker, increase max_childs
  Resolves: rhbz#1028174
  - increase firmware timeout to 600 seconds
  Resolves: rhbz#1077186
  - add nvme pcie ssd scsi_id ENV
  Resolves: rhbz#1020856
  - scsi_id: add short option "-b" parsing
  Resolves: rhbz#910168
  - add  by-id (hardware serial number) for Micron PCIe SSDs
  Resolves: rhbz#839172
  - 80-iosched.rules: check for attributes
  Resolves: rhbz#1008341


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-55
changelog:
  - Resolves: #1372315 - ProxyRemote with HTTPS backend sends requests
    with absoluteURI instead of abs_path


author: Joe Orton <jorton@redhat.com> - 2.2.15-6
changelog:
  - ab: fail gracefully for OOM allocating stats structures (#645846)
  - init script: use $STOP_DELAY as delay before SIGKILL of parent (#657480)
  - stop multiple invocations of filter init functions (#631849)
  - mod_ssl: avoid overlapping memcpy (#652335)
  - mark httpd.conf as noreplace


author: Jan Rybar <jrybar@redhat.com> - 3.2.8-43
changelog:
  - Rework of patch 91 from 3.2.8-37, stripping removed permanently, no new option
  - Resolves: rhbz#1322111


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_2.9
changelog:
  - Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
    1137, 1139, 1140, 1141, 1142, 1143, 1144}
  - Properly initialize array "result" in
    FT_Outline_Get_Orientation()
  - Check bytes per row for overflow in _bdf_parse_glyphs()
  - Resolves: #806268


author: Kai Engert <kaie@redhat.com> - 3.21.3-2
changelog:
  - Mozilla #1314604 / Red Hat CVE-2016-8635
  - remove disable_hw_gcm.patch which hasn't been used since 3.16.1


author: Petr Machata <pmachata@redhat.com> - 1.41.0-6
changelog:
  - More subpackage interdependency adjustments
    - boost doesn't bring in the MPI stuff.  Instead, $MPI-devel does.
      It needs to, so that the symlinks don't dangle.
    - boost-graph-$MPI depends on boost-$MPI so that boost-mpich2
      doesn't satisfy the SONAME dependency of boost-graph-openmpi.


author: Petr Machata <pmachata@redhat.com> - 1.41.0-8
changelog:
  - Import 1.41.1 with fixes from Fedora 13 to RHEL 6
  - Turn off OpenMPI support on s390*, which isn't available in RHEL 6
  - Resolves: #571607


author: Petr Machata <pmachata@redhat.com> - 1.41.0-9
changelog:
  - Use a .gz archive instead of bz2, because that's what's hosted now.
    Fill in the full URL.
  - Resolves: #571607


author: Petr Machata <pmachata@redhat.com> - 1.41.0-10
changelog:
  - Turn on OpenMPI support on non-s390 arches.  It was accidentally
    turned off everywhere.
  - Move cmake files to libdir to avoid multilib conflicts.
  - Also install Boost.cmake, which is included by BoostConfig.cmake
  - Change soname selection to work on RHELs.
  - Resolves: #586204
  - Resolves: #592516
  - Resolves: #594146


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11
changelog:
  - ... and revert the soname change, because that's not the smartest
    thing to do mid-release.
  - Resolves: #594146


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.1
changelog:
  - Bump to 2.6.13 and u171b01.
  - Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
  - Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
  - Fix file path in rh1022017.patch.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.1
changelog:
  - Bump to 2.6.14 and u181b00.
  - Drop 8197981 Zero 32-bit patch now applied upstream.
  - Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.2
changelog:
  - Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
  - Resolves: rhbz#1559766


author: Ian Kent <ikent@redhat.com> - 5.0.5-31
changelog:
  - bz700691 - autofs sometimes stops expiring mounts
    - fix next task list update race.
    - fix stale map read.
  - bz700697 - autofs with null maps specified in auto.master segfaults on reload
    - fix null cache clean.
  - Resolves: rhbz#700691 rhbz#700697


author: Ian Kent <ikent@redhat.com> - 5.0.5-32
changelog:
  - bz704940 - autofs-5.0.1-0.rc2.131.el5_4.1 is missing man 8 auto.master
    - automount(8) man page correction.
  - bz704929 - automount hangs with nested mounts using YP lookups
    - don't hold lock for simple mounts.
  - bz703332 - autofs fails to find duplicate key after key removal
    - fix prune cache valid check.
    - fix map source check in file lookup.
  - bz704933 - [RHEL 5.4] automounter dies with pthreads error
    - wait for master source mutex.
  - bz704927 - autofs should support paged results from ldap server
    - auto adjust ldap page size.
    - fix paged ldap map read.
  - bz704932 - [RFE] Support for encrypted secret in /etc/autofs_ldap_auth.conf
    - add base64 password encode.
  - bz704416 - RFE: automounter to dump maps
    - add dump maps option.
  - bz704935 - [RFE] resolve negative cache invalidation on signal to automount
    - reset negative status on cache prune.
  - bz704937 - Segmentation fault when looking up '*.'
    - fix wildcard map entry match.
  - bz704228 - AD/LDAP connection using GSSAPI auth fails with Error: An invalid
    name was supplied (Hostname cannot be canonicalized)
    - fix sasl bind host name selection.
  - bz692816 - automount does not perform a sanity check of server name in
    configuration
    - fix sanity checks for brackets in server name.
  - bz704939 - automount segfaults in lookup_mount
    - mapent becomes negative during lookup.
  - Resolves: rhbz#704940 rhbz#704929 rhbz#703332 rhbz#704933 rhbz#704927
  - Resolves: rhbz#704932 rhbz#704416 rhbz#704935 rhbz#704937 rhbz#704228
  - Resolves: rhbz#692816 rhbz#704939


author: Ian Kent <ikent@redhat.com> - 5.0.5-33
changelog:
  - bz704228 - AD/LDAP connection using GSSAPI auth fails with Error: An invalid
    name was supplied (Hostname cannot be canonicalized)
    - check each dc server.
  - Related: rhbz#704228


author: Ian Kent <ikent@redhat.com> - 5.0.5-34
changelog:
  - bz718927 - Lock ordering problem on re-load of direct maps
    - fix null cache deadlock.
  - Resolves: rhbz#718927


author: Ian Kent <ikent@redhat.com> - 5.0.5-35
changelog:
  - bz725931 - Fix GPL v3 dependency in autofs.
    - replace GPLv3 with GPLv2 code for SRV record handling.
  - Resolves: rhbz#725931


author: Ian Kent <ikent@redhat.com> - 5.0.5-36
changelog:
  - bz704928 - autofs should support paged results from ldap server on
    ppc64 and s390x
    - fix paged query more results check.
  - Resolves: rhbz#704928


author: Ian Kent <ikent@redhat.com> - 5.0.5-37
changelog:
  - bz704416 - RFE: automounter to dump maps
    - fix dumpmaps not reading maps.
  - Related: rhbz#704416


author: Ian Kent <ikent@redhat.com> - 5.0.5-38
changelog:
  - bz700136 - autofs/automount 5.0.5 error in mounting expanded entry
    - improve mount location error reporting 
  - Resolves: rhbz#700136


author: Ian Kent <ikent@redhat.com> - 5.0.5-39
changelog:
  - bz732667 - Defects added by downstream patches
    - code analysis defect fixes, installment 1.
  - Resolves: rhbz#732667


author: Ian Kent <ikent@redhat.com> - 5.0.5-39.el6_2.1
changelog:
  - bz787122 - autofs-5.0.5-39.el6.x86_64 fails to load some LDAP maps
    - fix improve mount location error reporting.
  - Resolves: rhbz#787122


author: Baoquan He <bhe@redhat.com> - 2.0.0-264
changelog:
  - kexec-tools.spec: turn on the dynamic and lzo build for makedumpfile, resolve bug 825476
  - kexec-tools.spec: Validate patches related to makedumpfile, resolve bug 825476


author: Baoquan He <bhe@redhat.com> - 2.0.0-265
changelog:
  - add selinux relabel when service startup, resolve bug 797231
  - add bzip2-devel and lzo-devel to BuildRequires, resolve bug 825476


author: Baoquan He <bhe@redhat.com> - 2.0.0-266
changelog:
  - kdump.conf.5: Modify 2 spelling errors
  - kexec-tools: Only remap network once when cluster configured
  - tools: Clean up /etc/iface_map after remapping the devices
  - kernel cmdline: Remove hugepage allocations
  - mkdumprd: change default disk_timeout to 180 seconds
  - kdump.conf: Tell user to specify module without ".ko" suffix
  - kdump.conf: add some missing supported configurations from kdump.conf.5
  - kdump.conf: change line columns to 80
  - Raw dump: use /sbin/blockdev to flush out block device buffers
  - Update translation file for firstboot
  - Update translation file for firstboot


author: Baoquan He <bhe@redhat.com> - 2.0.0-267
changelog:
  - mkdumprd: improve error message when e2fsprogs is missing, resolves bug 975642
  - mkdumprd: improve error message when btrfs-progs is missing, resolves bug 810494
  - Document mkdumprd option --allow-missing, resolves bug 951035


author: Baoquan He <bhe@redhat.com> - 2.0.0-269
changelog:
  - add snappy build, resolves bug 902147
  - This patch fixes the parsing of inline comments in config file, resolves bug 967427


author: Peter Hutterer <peter.hutterer@redhat.com> 2.8.2-3
changelog:
  - Drop undef for HAVE_SMOOTH_SCROLLING. Nothing client-side can make use of
    this anyway so enabling has no drawbacks but aligns the code with the
    other products.
  - Don't crash when exceeding MAXDEVICES


author: Nikola Forró <nforro@redhat.com> - 3.9.4-14
changelog:
  - Merge previously released fixes for CVEs:
  - CVE-2013-1960 CVE-2013-1961 CVE-2013-4231
  - CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
  - Resolves: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-16
changelog:
  - Add patches for CVEs:
  - CVE-2016-3632 CVE-2016-3945 CVE-2016-3990
  - CVE-2016-3991 CVE-2016-5320
  - Related: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-19
changelog:
  - Add patches for CVEs:
  - CVE-2016-9533 CVE-2016-9534 CVE-2016-9535
  - CVE-2016-9536 CVE-2016-9537 CVE-2016-9540
  - CVE-2016-5652
  - Resolves: #1412078


author: Peter Jones <pjones@redhat.com> - 0.97-74
changelog:
  - Fix error on invocation of "grub-install /dev/cciss/c0d0" (patch from jnevill)
    Resolves: rhbz#736833


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-31
changelog:
  - Resolves: rhbz#1088656 pluto doesn't bring up sourceip route when peer restarts
  - Resolves: rhbz#1070356 openswan breaks NAT-T draft clients
  - Resolves: rhbz#1041576 (pluto cannot write to directories not owned by root)
  - Resolves: rhbz#1025687 service ipsec stop shows errors about unloading used modules
  - Resolves: rhbz#1092913 The default nss database created by ipsec can not be used
  - Resolves: rhbz#1105179 ipsec_auto --ready doesn't work properly
  - Resolves: rhbz#1002708 rightid=%fromcert does not use the ID from the offered peer certificate
  - Resolves: rhbz#908478  Openswan is sending DPD and/or NAT-T keep alive messages when the IPsec SA is active
  - Resolves: rhbz#970349  ikev2 pending SA and rekey issues
  - Resolves: rhbz#970279  ikev2=insist allows an ikev1 proposal when acting as responder
  - Resolves: rhbz#988106  strict checking of phase2alg= parameters allows mismatched policy
  - Resolves: rhbz#1019746 ipsec ikeping does not recognize --exchangenum parameter
  - Resolves: rhbz#1018327 ipsec.conf man page lacks example for AES-GCM configuration
  - Resolves: rhbz#730975  Openswan doesn't work with ike=modp1536 option
  - Resolves: rhbz#1021961 pluto abort when using SHA2_{384,512} IKE encryption algorithm
  - Resolves: rhbz#739949  Openswan net-to-net not work with unencrypted connection on specific port
  - Resolves: rhbz#993124  ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#834397  ikev2 crashes when firing up a few conns at once
  - Resolves: rhbz#1099871  Missing man-page ipsec_whack


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-32
changelog:
  - Resolves: rhbz#1092913 create nss db before startup if not there
  - Resolves: rhbz#1098473 ipsec newhostkey returns 0 even if it fails (and enforce min 2192 RSA key size)
  - Resolves: rhbz#1114683 configuring a non-standard ESP algorithm (like CAST) cause a restart of pluto
  - Resolves: rhbz#1126066 dcookie code enabled with force_busy=yes uses bad pointer causing restart


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-35
changelog:
  - Resolves: rhbz#1114683 configuring a non-standard AH / ESP algorithm [updated]
  - Resolves: rhbz#993124 ikev2 delete - work around to unbreak -fstack-protector [updated]


author: Stepan Kasal <skasal@redhat.com> - 4.0-1
changelog:
  - new upstream version
  - drop upstreamed patches; ./autogen not needed anymore
  - pack the xbrlapi server; move its man page to brlapi package
  - add man-page for brltty.conf (#526168)


author: Stepan Kasal <skasal@redhat.com> - 4.0-2
changelog:
  - escape rpm macros in the rpm change log
  - add requires to bind subpackages from one build together


author: Stepan Kasal <skasal@redhat.com> - 4.1-1
changelog:
  - new upstream version
  - use --disable-stripping instead of make variable override
  - install the default brltty-pm.conf to docdir only (#526168)
  - remove the duplicate copies of rhmkboot and rhmkroot from docdir
  - patch configure so that the dirs in summary are not garbled:
    brltty-autoconf-quote.patch
  - move data-directory to ${datadir}/brltty


author: Stepan Kasal <skasal@redhat.com> - 4.1-2
changelog:
  - move data-directory back to default: /etc/brltty
  - move brltty to /bin and /lib, so that it can be used to repair the system
    without /usr mounted (#276181)
  - move vstp and libbrlttybba.so to brlapi
  - brltty no longer requires brlapi
  - brlapi now requires brltty from the same build


author: Stepan Kasal <skasal@redhat.com> - 4.1-3
changelog:
  - build the TTY driver (it was disabled since it first appered in 3.7.2-1)
  - build with speech-dispatcher, packed into a separate sub-package


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.1-7
changelog:
  - Fixed build in case ocaml is preinstalled in build root
    Resolves: rhbz#684526
  - Fixed /usr/lib/libbrlapi.so symbolic link
    Resolves: rhbz#809326


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-3
changelog:
  - replaced unofficial 1.0.7 source tarball with official one
  - update of Makefile, part of it moved to postinstall section
    of spec file


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.17-36
changelog:
  - fix regression with 'jobs' builtin output not going to stdout (#1338986)
  - fix several regressions in tcsh-6.17.00-quote-backslashes-properly.patch (#1334751)


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.1.0-5
changelog:
  - Minor tweaks to summaries and descriptions.
  - Don't own /usr/include/X11.
  - Use a regular, unversioned dep on xorg-x11-filesystem.


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-8
changelog:
  - Resolves: rhbz#770455
  - Resolves: rhbz#783068
  - Resolves: rhbz#786735
  - Resolves: rhbz#786737
  - Resolves: rhbz#794744
  - Resolves: rhbz#821352
  - Resolves: rhbz#824902
  - Resolves: rhbz#827100
  - Resolves: rhbz#838524

  - Fixed bug when corosync receive JoinMSG in OPERATIONAL state (rhbz#786737)
  - merge upstream commit ffe4943ff52843e1c7beba1250256dc7b6f283e4 (rhbz#786737)
  - Correct nodeid of token when we retransmit it (rhbz#786735)
  - merge upstream commit 081bfb0a4d6050416d4daa27d7a8417f0ba697fc (rhbz#786735)
  - Wait for corosync-notifyd exit in init script (rhbz#783068)
  - merge upstream commit fbe6de4d162644aa07b14e93aa2f01299bf4692f (rhbz#783068)
  - iba: Use configured node id (rhbz#794744)
  - merge upstream commit 0b6e1dc3290cfbc6c38a19bead9f39c582f54c40 (rhbz#794744)
  - Correctly handle point-to-point IP (rhbz#821352)
  - merge upstream commit a853b6180e9832fa763ea796f310dc3de5718324 (rhbz#821352)
  - totemip: Support bind to exact address (rhbz#824902)
  - merge upstream commit 1c7b706441d18fe45c6e9c0b17ed1c8c5a723114 (rhbz#824902)
  - Register reload callback only once (rhbz#838524)
  - merge upstream commit ec51f02373d7f0372b8739ab695ae79f2dea26ce (rhbz#838524)
  - cpg: Be more verbose for procjoin message (rhbz#770455)
  - merge upstream commit dc22fd13bff1c38888ac16bc8f8fea8117ef27bd (rhbz#770455)
  - totemudpu: Bind sending sockets to bindto address (rhbz#827100)
  - merge upstream commit 71e5257eb1485ed6544ed2d17792492043e0e48d (rhbz#827100)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-9
changelog:
  - Resolves: rhbz#847232
  - Resolves: rhbz#848210

  - confdb: Fix crash with long values and add API calls to get them (rhbz#847232)
  - merge upstream commit 5704a34612d8829fce6991f130b7732108cca761 (rhbz#847232)
  - confdb: Fix crash with long values (rhbz#847232)
  - merge upstream commit 16d309be840045b3fc6d468faf07fbd727756b3f (rhbz#847232)
  - Fix dbus part of corosync-notifyd (rhbz#848210)
  - merge upstream commit 4ac9cd59e7873914fe5845e69fd79b7a2877c290 (rhbz#848210)
  - flatiron: Free outq items list on conn exit (rhbz#848210)
  - merge upstream commit 4cdaf8ef1e7676b179eaeb5bde18d4b63d17ce52 (rhbz#848210)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-10
changelog:
  - Related: rhbz#847232

  - sa-confdb: fix crash due to incorrect malloc size (rhbz#847232)
  - merge upstream commit 0a85b888b0384e83fa4a80c3751a23f4de8a9310 (rhbz#847232)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-11
changelog:
  - Resolves: rhbz#787789
  - Resolves: rhbz#794522
  - Resolves: rhbz#838743
  - Resolves: rhbz#850757
  - Resolves: rhbz#861032

  - When flushing, discard only memb_join messages (rhbz#850757)
  - merge upstream commit 17e15322b7500247c539166441fb2e78cc95d02b (rhbz#850757)
  - Add man page with Confdb keys created by corosync (rhbz#794522)
  - merge upstream commit c741dbe01ea9bb45ae5d8706c8e4287aeae4bfd5 (rhbz#794522)
  - confdb_keys: Document few more runtime statistics (rhbz#794522)
  - merge upstream commit 060abd069483aa7b9d90261c11c79b2a6f6e21c1 (rhbz#794522)
  - Add support for debug level trace in config file (rhbz#838743)
  - merge upstream commit 842d387c2f53e23c055da4509a2f28753d6ffa97 (rhbz#838743)
  - Move some totem and cpg messages to trace level (rhbz#838743)
  - merge upstream commit 9deff57e779375631541bd52146701c41e3bed68 (rhbz#838743)
  - Don't access invalid mem in totemconfig (rhbz#861032)
  - merge upstream commit 539917e35a8c74b3ea4eb9ae8cddc2f73378d203 (rhbz#861032)
  - Use unix socket for local multicast loop (rhbz#787789)
  - merge upstream commit cea2b1a302e6e4563ee5817782f15ea5d941daec (rhbz#787789)
  - Move "Totem is unable to form..." message to main (rhbz#787789)
  - merge upstream commit e032c14341c38be4d273093f1e6691f8417e264d (rhbz#787789)
  - Return back "Totem is unable to form..." message (rhbz#787789)
  - merge upstream commit b343668bbfa09ebcfa4816ddf205eeb8f2ea159c (rhbz#787789)
  - Change specfile to use runautogen


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-12
changelog:
  - Resolves: rhbz#794522
  - Resolves: rhbz#873059
  - Resolves: rhbz#876908

  - Fix minor errors in man page documentation for corosync.conf (rhbz#873059)
  - merge upstream commit b14cd84e96fff1083837a70548ff9e18472c938b (rhbz#873059)
  - manpages: Fix typo in evs* manpages (rhbz#873059)
  - merge upstream commit 6735455c598393880188db7f297ec699c8ae0492 (rhbz#873059)
  - manpages: Add links for referenced confdb calls (rhbz#873059)
  - merge upstream commit b98d4ab44979a52ef74259e0676929055442cbfb (rhbz#873059)
  - manpages: Add confdb_key_get man page (rhbz#873059)
  - merge upstream commit e414e2d34c2e5e26318cfc06f8bdd5b8c8812a7e (rhbz#873059)
  - Add link to confdb_keys in corosync-objctl mpage (rhbz#794522)
  - merge upstream commit a4e7e2bc46545a5acacb3c840bda5270efec987c (rhbz#794522)
  - Track changes for confdb logging object (rhbz#876908)
  - merge upstream commit 6c9cae79dc2680d363b0cca85cbbe55a2bc9b517 (rhbz#876908)
  - Don't call reload on corosync-objctl actions (rhbz#876908)
  - merge upstream commit bdabbf6f20138c5e33154caf32cf66330356893d (rhbz#876908)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-13
changelog:
  - Resolves: rhbz#830799
  - Resolves: rhbz#863940
  - Resolves: rhbz#869609

  - cpg: Never choose downlist with localnode (rhbz#830799)
  - merge upstream commit 559d4083ed8355fe83f275e53b9c8f52a91694b2 (rhbz#830799)
  - cpg: Process join list after downlists (rhbz#830799)
  - merge upstream commit 02c5dffa5bb8579c223006fa1587de9ba7409a3d (rhbz#830799)
  - cpg: Enhance downlist selection algorithm (rhbz#830799)
  - merge upstream commit 64d0e5ace025cc929e42896c5d6beb3ef75b8244 (rhbz#830799)
  - Don't call sync_* funcs for unloaded services (rhbz#863940)
  - merge upstream commit 6ed260b0bfc5e5230a4e765b9c63caf985708c41 (rhbz#863940)
  - Handle sync and service unload correctly (rhbz#863940)
  - merge upstream commit e7536bdaf82044671d2d18ee799eeacd8603af08 (rhbz#863940)
  - Make service_build contain correct number of msgs (rhbz#863940)
  - merge upstream commit 1cea171c4d8f9dd19b4995f96842111e41f23d6c (rhbz#863940)
  - Ignore sync barrier msgs if sync doesn't started (rhbz#869609)
  - merge upstream commit ee292e7968f749f7ebc4daddeb09f39cfbb037b4 (rhbz#869609)
  - Fix problem with sync operations under very rare circumstances (rhbz#830799)
  - merge upstream commit 6fae42ba72006941c1fde99616ea30f4f10ebb38 (rhbz#830799)
  - Handle segfault in backlog_get (rhbz#830799)
  - merge upstream commit a559ccf7247bc448ba30b6ebc02a91fa986f146f (rhbz#830799)
  - Add waiting_trans_ack also to fragmentation layer (rhbz#830799)
  - merge upstream commit 7de25c3b64b2066de19b3f9075c075fb08816de6 (rhbz#830799)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-14
changelog:
  - Resolves: rhbz#865039

  - coroipc: Don't spin when waiting on semaphore (rhbz#865039)
  - merge upstream commit 7ce8718a71b7afe341d9f9ac21c6724d6f18dfc4 (rhbz#865039)
  - On places with POLLERR check also POLLNVAL (rhbz#865039)
  - merge upstream commit 105305a486ae9f171def221ad971d607604a4770 (rhbz#865039)
  - Check socket_recv error code in ipc_dispatch_get (rhbz#865039)
  - merge upstream commit 694a9c2cf0804428671bf815b974a080c7fd1c6c (rhbz#865039)
  - coroipc: Handle pfd.revents as bit-field (rhbz#865039)
  - merge upstream commit b6aabed698d34e4e79e03a3354e59a2d0121e692 (rhbz#865039)
  - ipcc: Return dup of socket fd to user application (rhbz#865039)
  - merge upstream commit 28c5907f59afd52a67be3bddff22df57e1fb36ba (rhbz#865039)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-15
changelog:
  - Resolves: rhbz#902397

  - totemip: Properly detect ipv6 address (rhbz#902397)
  - merge upstream commit d76759ec26ecaeb9cc01f49e9eb0749b61454d27 (rhbz#902397)


author: Mike Christie <mchristie@redhat.com> - 1.0.13-0
changelog:
  - Rebase to upstream 1.0.13.
  - Add upstream iser target. This requires setting the driver/lld
  type to iser. See targets.conf for example or the README.iscsi for
  a tgtadm example.
  - 616402 read-only support


author: Mike Christie <mchristie@redhat.com> - 1.0.13-1
changelog:
  - Drop scsi-target-utils-dynamic-link-iser.patch patch. It turns out
  in 6.0 this patch was broken and linked against rdma libs, so
  the got brought in by yum. The new patch was not broken and did not
  force linking but yum/iser users are not expecting the depencies
  to be broken.


author: Doug Ledford <dledford@redhat.com> - 1.2-11
changelog:
  - Upstream has updated the tarball without updating the version, so we
    grabbed the one from the OFED-1.3.2-20080728.0355 tarball
  - Resolves: bz451481


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.347.el6
changelog:
  - kvm-qxl-vnc-register-a-vm-state-change-handler-for-dummy.patch [#873563]
  - kvm-hyper-v-Minimal-hyper-v-support-v5.patch [#801196]
  - kvm-audio-split-sample-conversion-and-volume-mixing.patch [bz#884253]
  - kvm-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
  - kvm-audio-don-t-apply-volume-effect-if-backend-has-VOICE.patch [bz#884253]
  - kvm-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
  - kvm-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
  - kvm-hw-ac97-add-support-for-volume-control.patch [bz#884253]
  - kvm-audio-spice-add-support-for-volume-control.patch [bz#884253]
  - Resolves: bz#873563
    (Guest aborted when boot with vnc and qxl)
  - Resolves: bz#801196
    (Win28k KVM guest on RHEL6.1 BSOD with CLOCK_WATCHDOG_TIMEOUT)
  - Resolves bz#884253
    (Allow control of volume from within Windows Guests (Volume Mixture))


author: Tom Lane <tgl@redhat.com> - 6b-38
changelog:
  - Initial review of package by new (old?) maintainer; marginal specfile cleanup
  - Restore libjpeg.a to distribution, in a separate -static subpackage
  Resolves: #186060, #215537
  - Fix non-security-significant buffer overrun in wrjpgcom, per Lubomir Kundrak
  Resolves: #226965
  - Apply patch4 that was added by previous maintainer, but never applied
  Resolves: #244778
  Related: #238936
  - Fix inter-RPM dependencies to include release
  Resolves: #238780


author: Tom Lane <tgl@redhat.com> - 6b-40
changelog:
  - Rip out the long-obsolete version of libtool that shipped with libjpeg 6b,
    and instead use the build system's libtool.  This obsoletes most of the
    patches we were carrying.
  - Fix configure script to #define the various HAVE_FOO macros as 1, not empty,
    for better compatibility with most other autoconf-using packages.  (This
    requires importing the original IJG configure.in, which was not shipped
    in libjpeg-6b for reasons that no longer seem very good.)
  Resolves: #427616


author: Tom Lane <tgl@redhat.com> - 6b-44
changelog:
  - Fix libtool hacking so it also works with libtool 2.2.  (For the
    moment the specfile still also works with libtool 1.5, but that can
    go away eventually.)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.3
changelog:
  - Add 0196-RHBZ-1099530-orphan-paths-on-reload.patch
    * make multipath orphan paths that are no longer included in the device
      when the table is reread.
  - Resolves: bz #1099530


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.4
changelog:
  - Add 0197-UPBZ-1137017-fast-io-fail-iscsi.patch
    * add iscsi support for fast_io_fail_tmo
  - Resolves: bz #1137017


author: Adam Jackson <ajax@redhat.com> 2.11.0-2
changelog:
  - intel-2.11.0-vga-clock-max.patch: Clamp VGA pixel clock to 250MHz,
    anything higher's going to look awful anyway. (#559426)


author: parag <paragn@fedoraproject.org> 3.5.7-3
changelog:
  - Merge-Review #226081
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Bump release and correct changelog


author: Akira TAGOH <tagoh@redhat.com> - 1.28.1-10
changelog:
  - Avoid the error message at %postun on upgrading to rhel7. (#1086690)
  - Use correct rpm macro for man page (#885846)


author: Jan Horak <jhorak@redhat.com> - 60.1.0-8
changelog:
  - Fixed homepage and bookmarks (rhbz#1606778)
  - Fixed missing file associations in RHEL6 (rhbz#1613565)


author: Jan Horak <jhorak@redhat.com> - 60.1.0-9
changelog:
  - Do not set user agent (rhbz#1608065)
  - GTK dialogs are localized now (rhbz#1619373)
  - JNLP association works again (rhbz#1607457)


author: Warren Togami <wtogami@redhat.com> - 2.29.5-0.1.rc2
changelog:
  - Update to 2.95.5-rc2
  - glade removed, replaced by GNOME Builder 
  - /etc/desktop-profile moved to /etc/sabayon/profiles
    Manual Migration:
    mv /etc/desktop-profiles/*.xml /etc/sabayon
    mv /etc/desktop-profiles/*.zip /etc/sabayon/profiles


author: Warren Togami <wtogami@redhat.com> - 2.29.91-1
changelog:
  - 2.29.91 with important bug fixes
    Saves and Restores File Permissions
    Details pane is now less confusing
    Common Editor Crasher Fixed


author: Tomas Bzatek <tbzatek@redhat.com> - 2.29.92-2
changelog:
  - Fix profile saving if file/folder names contain an apostrophe (#654567)
  - Fix sabayon crash when getting details of a profile (#674012)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-4
changelog:
  - Reintroduced -d dump switch and improved reporting options
    (by improve-reporting-options patch)
    Resolves: rhbz#1333439


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 2.2.0-1
changelog:
  - Updated the sources to 2.2.0. Couple of major changes are as follows:
  - Major changes:
  -       Adapt IANA ports of 5985 (http) and 5986 (https)
  -       Change the Ruby bindings module name to 'Openwsman'
  -       Change the Ruby plugin module name to 'Openwsman'
  -       IPv6 support (A_Venkatachalam@Dell.com)
  -       preliminary support for wbem intrinsic operations
  -           'EnumerateClassNames' and 'GetClass' (kkaempf@suse.de)
  -            (needs fixed sblim-sfcc, see www.openwsman.org for details)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.3-7
changelog:
  - Add missing openwsman headers to libwsman-devel
    Resolves: #615922
  - Move initscript to the right place
    Resolves: #626773
  - Fix return values from initscript according to guidelines
    Resolves: #613031
  - Fix ssl check behaviour in initscript
    Resolves: #617549
  - Fix openwsman crashes when sfcb is stopped
    Resolves: #625160


author: Peter Hutterer <peter.hutterer@redhat.com> 1.13.0-19
changelog:
  - Fix bad mouse offset when crossing Xephyr screens (#991077)
  - Fix doubling of mouse coords in multi-screen setups (#1004241)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.13.0-20
changelog:
  - Fix broken Xorg -configure (#1016854)
  - CVE-2013-1940: Fix xf86FlushInput() to drain evdev events too (#950438)
  - CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)


author: Soren Sandmann <ssp@redhat.com> 1.13.0-23.1
changelog:
  * Wed Oct 23 2013 Adam Jackson <ajax@redhat.com> 1.13.0-23
  - Fix root window damage reports when Xinerama is active (#919165)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-17
changelog:
  - change libgomp default spincount if OMP_WAIT_POLICY is not specified
    (#1229852, PR libgomp/43706)
  - remove -Wl,-z,nodlopen from Ada libraries, which no longer contain
    trampolines (#1241495)
  - guard __gcov_flush body in libgcov.a with a mutex (#1251488,
    PR gcov/49484, PR gcov-profile/52627)
  - add missing s390.exp hunk from -mhotpatch= support (#1233260)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-18
changelog:
  - fix up std::rethrow_exception (PR libstdc++/62258, #1380760)
  - fix fortran ICE in resolve_ordinary_assign (PR fortran/43362, #1356346)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.4.pre1.1
changelog:
  - when the initgroups function needs to parse a group entry which contains a
    large list of users, reinitialize the buffer that we pass to the parsing
    function, which destroyed what we passed to it the previous time (#788668)


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.6-1
changelog:
  - New upstream version 0.2.6; working around build system providing
    old boost-devel-1.41.0-17.el6_4 with constraints
    Resolves: #814790


author: Jeff Law <law@redhat.com> - 2.20.51.0.2-5.38
changelog:
  - Use thread-safe PLT stubs for Power. (#906079)
  - Avoid segfault when arch member uses long names, but no longname
    table exists.  (#909056)
  - Correct patch for 773526. (#922393)


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-7.1
changelog:
  - port the rhel-7 package version to rhel-6
  - enabled ECDSA due to Unbound
  - Fix issue in DSA algorithm (#1077799)


author: Eric Sandeen <sandeen@redhat.com> - 1.0.1-2
changelog:
  - Upstream respun the release tarball to re-include top-level dir
  - drop exclude of bno_plot.py[co], not getting built now?


author: Edward Shishkin <edward@redhat.com> - 1.0.1-4
changelog:
  - blktrace doesn't run when device name is duplicated (#583615)
  - blktrace prints incorrect usage when running w/o parameters (#619201)
  - btreplay cannot work for /dev/cciss/c0d0 device (#650229)
  - option -k doesn't kill running trace (#583624)
  - blkiomon prints nothing when blktrace works with logical volume (#650243)
  - blkparese exit with non-zero status when tracefile doesn't exist (#583695)
  - run time went but blktrace is still running (#595356)
  - inconsistencies in btrecord man page (#595413)
  - undocumented options in blkiomon (#595419)
  - undocumented options in blkparce (#595615)
  - undocumented options in blktrace (#595620)
  - undocumented options in btreplay (#595623)
  - undocumented options in btt (#595628)


author: Jindrich Novy <jnovy@redhat.com> 20120613-2
changelog:
  - backport patch from upstream to correctly process buildroot
    after installation (compress man pages, etc.) (#844028)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-2.3
changelog:
  - Allow overriding values in macro scl_package (#960556)
  - Delete redundant argument from check_asprintf (#961424)
  - Enable all collections given as arguments, not just the first one (#961430)
  - Prevent collections to be enabled multiple times (#961429)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.141-1
changelog:
  - Do not check for suspended devices if scanning for lvmetad update.
  - Fix part. table filter with external_device_info_source="udev" and blkid<2.20.
  - Add metadata/check_pv_device_sizes switch to lvm.conf for device size checks.
  - Warn if device size is less than corresponding PV size in metadata.
  - Cache device sizes internally.
  - Restore support for command breaking in process_each_lv_in_vg() (2.02.118).
  - Use correct mempool when process_each_lv_in_vg() (2.02.118).
  - Fix lvm.8 man to show again prohibited suffixes.
  - Fix configure to set proper use_blkid_wiping if autodetected as disabled.
  - Initialise udev in clvmd for use in device scanning. (2.02.116)
  - Add seg_le_ranges report field for common format when displaying seg devices.
  - Honour report/list_item_separator for seg_metadata_le_ranges report field.
  - Don't mark hidden devs in -o devices,metadata_devices,seg_pe_ranges.(2.02.140)
  - Change LV sizes in seg_pe_ranges report field to match underlying devices.
  - Add kernel_cache_settings report field for cache LV settings used in kernel.
  - Fix man page for dmsetup udevcreatecookie.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-1
changelog:
  - Use uninitilized pool header detection in all cases.
  - Fix read error detection when checking for uninitialized thin-pool header.
  - Fix error path for internal error in lvmetad vg lookup code.
  - Fix error path when sending thin-pool message fails in update_pool_lv().
  - Support reporting CheckNeeded and Fail state for thin-pool and thin LV.
  - For failing thin-pool and thin volume correctly report percentage as INVALID.
  - Report -1, not 'unkown' for lv_{snapshot_invalid,merge_failed} with --binary.
  - If PV belongs to some VG and metadata missing, skip it if system ID is used.
  - Automatically change PV header extension to latest version if writing PV/VG.
  - Identify used PVs in pv_attr field by new 'u' character.
  - Add pv_in_use reporting field to report if PV is used or not.
  - Add pv_ext_vsn reporting field to report PV header extension version.
  - Add protective flag marking PVs as used even if no metadata available.
  - Fix memory pool corruption in pvmove (2.02.141).
  - Support control of spare metadata creation when repairing thin-pool.
  - Fix config type of 'log/verbose' from bool to int (2.02.99).
  - Fix inverted data LV thinp watermark calc for dmeventd response (2.02.133).
  - Use use_blkid_wiping=0 if not defined in lvm.conf and support not compiled in.
  - Clear cached bootloader areas when PV format changed.
  - Fix string boundary check in _get_canonical_field_name().
  - Always initialized hist struct in _stats_parse_histogram().
  - Improve status parsing for thin-pool and thin devices.
  - Use fully aligned allocations for dm_pool_strdup/strndup() (1.02.64).
  - Fix thin-pool table parameter feature order to match kernel output.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-2
changelog:
  - Fix resize of stacked raid thin data volume (2.02.141).
  - Allow for raid leg replacement if not both data and metadata image are on pvs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-3
changelog:
  - Detect and warn about mismatch between devices used and assumed for an LV.
  - If available, use /proc/self/mountinfo to detect mounted volume in fsadm.


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-1.2
changelog:
  - Access oVirt API through /ovirt-engine/api rather than /api, this fixes
    foreign menu when accessing a VM from .vv files
    Resolves: rhbz#1297810


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Lukas Nykryn <lnykryn@redhat.com> 9.03.28-1
changelog:
  - sysconfig support for IPv6 policy based routing (#781493)
  - fix typo in translation (#757637)
  - fix logic error with removing arp_ip_target (#787107, #746045)
  - don't set primary before we enslave devices. (#749610, <agospoda@redhat.com>)
  - do not check mounted filesystems (#745224)
  - eviscerate ifconfig uses from ip-aliases (#721010, #588993)
  - improve comment in init/serial.conf (#746808)
  - turn off UPS in powerfail situation (#754984, <robert@fedoraproject.org>)
  - netconsole exit arping on first response (#765835)
  - add cifs to check for network filesystem (#760018)
  - fix comments in sysctl.conf (#755175)
  - rc.sysinit - use rcS-emergency job instead of sulogin (#582002)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-113
changelog:
  - Fix segfaulting agent during removal of CAC credentials (#1253612)
  - Make  pam_namespace  usage consistent across system-wide (#1250069)
  - Add GSSAPIKexAlgorithms option for both server and client (#1253060)
  - ECDSA host key not loaded by sshd by default (fix man page) (#1218070)
  - Resolve segfault in pam_ssh_agent_auth in FIPS mode (#1278315)
  - Backport Match LocalAddress from OpenSSH 6.1 (#1211673)
  - Backport security patches from openssh-6.9 and 7.0 (#1281468)
  -  CVE-2015-5352: XSECURITY restrictions bypass under certain conditions
  -  CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
  -  CVE-2015-6563: Privilege separation weakness related to PAM support
  -  CVE-2015-6564: Use-after-free bug related to PAM support
  -  weakness of agent locking (ssh-add -x) to password guessing (#1238238)
  - Clarify a keyword that appears in multiple matching Match blocks (#1219820)
  - Clarity of TERM variable in AcceptEnv and SendEnv options (#1285003)
  - Enhance AllowGroups documentation in man page (#1284997)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-114
changelog:
  - pam_ssh_agent_auth: Provide authorized_keys_command= feature (#1299555)
  - CVE-2016-1908: Prevent possible fallback from untrusted X11 forwarding (#1299048)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-116
changelog:
  - Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
  - Initialize devices_done variable for challenge response (#1281468)
  - Update behaviour of X11 forwarding to match upstream (#1299048)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-119
changelog:
  - Resolve sftp force permission colision with umask (#1341747)
  - Relax bits needed check to allow hmac-sha2-512 with gss-group1-sha1- (#1353359)
  - close ControlPersist background process stderr when not in debug mode (#1335539)
  - Do not add a message "The agent has no identities." in ~/.ssh/authorized_keys (#1353410)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-120
changelog:
  - Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
  - Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-122
changelog:
  - Allow to use ibmca crypto hardware (#1397547)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-2
changelog:
  - Update to NSPR_4_9_5_RTM
  - Resolves: rhbz#927186 - Rebase to nspr-4.9.5
  - Add upstream URL for an existing patch per packaging guidelines


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 4.3.1-10
changelog:
  - Backported assembler routines from recent gmp-6:
    gmp-s390x-optimization.patch, gmp-s390-31bit-optimization.patch
  - Resolves: #1149237


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.3.1-11
changelog:
  - Explicitly added '-g' option into CFLAGS to correctly build .debug_info for i386
    Resolves: #729039


author: Denys Vlasenko <dvlasenk@redhat.com> 2.0.8-13
changelog:
  - Prevent daemon from being stuck (unresponsive to socket connects)
    while post-create even runs
  - Prevent infinite loop of crashes
  - Resolves: #826924


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-17
changelog:
  - ABRT won't install debuginfos from rhn repository rhbz#759443
  - Brewtap reports MacroSurprise or SetuidMissingRELRO rhbz#812284
  - abrt missing dependency: libreport-plugin-bugzilla rhbz#828673
  - Same values for variables  'DumpLocation' & 'WatchCrashdumpArchiveDir'  stops mailx plugin rhbz#854668
  - abrt-vmcore repeats processing old vmcores on the service (re)start rhbz#885044
  - abrt-gui help menu item points to generic RHEL documentation rhbz#903195
  - Desktop file is named %{desk-vendor}-abrt.desktop rhbz#905822
  - 'post-create' on 'xxx' exited with 1 Corrupted or bad directory xxx, deleting rhbz#909617
  - abrt.pth prevents python virtualenv creation rhbz#912672
  - [RFE] add the console notification to RHEL6 rhbz#961231
  - provide the python API for abrt rhbz#952704
  - abrtd marks problems having count > 1 as duplicates rhbz#886631
  - Resolves: #886631, #905429, #961231, #961231, #961231, #961231, #812284, #828673, #828673, #759443, #759443, #903195, #854668, #905822, #909617, #885044, #912672, #912672, #952704, #875260


author: Gavin Romig-Koch <gavin@redhat.com> 0.16-1
changelog:
  - Insure correct PRODUCT and VERSION used in the Bugzilla and Strata plugins 
        under Anaconda (RHEL 586147)
  - Prepare for the switch from RHEL-bugzilla to Strata (RHEL 567972 partial)
  - allow canceling out of input with ctrl-D (RHEL 604030)
  - pretty up Newt IO a bit (RHEL 603067)
  - clean up documentation a bit (RHEL 604045)
  - remove the unused 'username' command line and configuration option. 
        (RHEL 604195)
  - fix the worst of the problems with the ftp plugin (RHEL 604782)(RHEL 604780)
  - Need to add -DFORTIFY_SOURCE=2 (RHEL 599342)
  - fix command line crash on empty or non-existant input file 
      (RHEL 594892)(Fedora 594890)
      with help from Adam Stokes <astokes@redhat.com>
  - make target buttons list vertically, improve 'Query' titles 
      (RHEL 594897)(Fedora 594895)
  - change the config file parser to make config names case sensitive 
      (Fedora 594863)(RHEL 594865)
      from Adam Stokes <astokes@redhat.com>
  - change "localsave" button to "local" (Fedora 594899)(RHEL 594901)
      from Adam Stokes <astokes@redhat.com>
  - fix bug in localsave to /tmp (Fedora 595854)(RHEL 595855)
      from Adam Stokes <astokes@redhat.com>
  - Strata client now handles 305 redirects (RHEL 591907)
  - Add po/ru.po to the list of PO files
  - fix so that we continue to build on RHEL/EPEL-5: old libcurl version
  - l10n: Updates to Ukrainian (uk) translation
      from yurchor <yurchor@fedoraproject.org> -


author: Gavin Romig-Koch <gavin@redhat.com> 0.17-1
changelog:
  - better fix for bug in localsave to /tmp
      (Fedora 595854)(RHEL 595855)(RHEL 607507)
  - Revert "fix bug in localsave to /tmp (Fedora 595854)(RHEL 595855)"
  - correct SyntaxWarning: name 'HAVE_gnomekeyring' is used prior to
      global declaration. (Fedora 604235)
      Author: Ales Kozumplik <akozumpl@redhat.com>
  - l10n: Updates to Polish (pl) translation
      Author: raven <raven@fedoraproject.org>
  - l10n: Updates to Ukrainian (uk) translation
      Author: yurchor <yurchor@fedoraproject.org>


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-1
changelog:
  - strata plugin buttonURLXxxx (RHEL 589704)
  - improve strata server testing scripts
  - reorg functions in strata_client_lib (RHEL 591922 related)
  - improved error checking of C compiler
  - Eliminate crash in DisplayXXXMessage


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-2
changelog:
  - fix crash in ftp plugin (Fedora 610870)(RHEL 609480)
  - Production/GA configuration of report, enable Strata plugin (RHEL 567972)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-3
changelog:
  - correct Obsoletes for report-*-RHEL-*
  - strata: handle self signed certs
  - strata-test.conf: setup URL translation
  - add html and xml response translation to strata_client_lib


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-5
changelog:
  - scp plugin: force password auth (RHEL 589702)
  - fix known hosts bug for strata scp target (RHEL 589702)
  - GTKIO: only show 'clickable' button if displaying the link is possible (RHEL 594827)
  - strata client needs to attach each file as separate file (RHEL 591922)
  - report cmd: check access to file immediatly (RHEL 614274)
  - Report throws traceback when there is a configuration for a non-present plugin (RHEL 614139)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-6
changelog:
  - Correct the order of target choices
  - remove http headers from user display (RHEL 621354)
  - correct GTKIO success dialog box (partial RHEL 621354)


author: Christophe Fergeau <cfergeau@redhat.com> - 2.7-17
changelog:
  - Add WAN options to spice-xpi plugin
    Resolves: rhbz#747313
  - Add controller messages for new USB redirection
    Resolves: rhbz#807303


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.190
changelog:
  - Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296029).
  - Update malloc free_list cyclic fix (#1264189).
  - Update tzdata-update changes (#1200555).


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Remove files related to setting ports to Ethernet mode as that
    isn't even supported on this card yet and the files that are
    there will be wrong when it is supported


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#799192 - Update to 3.13.3
  - Update minimum nspr version for Requires and BuildRequires to 4.9
  - Fix version/release in changelog to match the Version and Release tags, now 3.13.3-2


author: Tomas Mraz <tmraz@redhat.com> - 2.2-1
changelog:
  - updated to new upstream version
  - SMP build should work now
  - drop fix for spurious rpath - no longer necessary


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.1
changelog:
  - Cleanup selinux_mnt on disabled machines
  Resolves: #706049
  - Make restorecon python binding use realpath
  Resolves: #698583


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.6
changelog:
  - Back port handling of is_selinux_enabled form rhel7. We need is_selinux_enabled() to report disabled in a docker container so that SELinux aware applications do not attempt to do SELinux activities.
  Resolves: #1096816


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.4-1
changelog:
  - wacom 0.10.4
  - Update sources to point to sourceforge.
  - Install the upstream fdi file instead of our custom one.
  - Update Requires and BuildRequires for xsetwacom.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-2
changelog:
  - wacom-0.10.5-linuwacom-man-page.patch: drop reference to linuxwacom from
    man page (#584588)
  - wacom-0.10.5-pad-scrolling.patch: force relative mode for pad (#584589)
  - wacom-0.10.5-tpcbutton-on.patch: enable TPCButton for ISDV4 devices
    (#584597)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-4
changelog:
  - Remove wacom-0.10.5-axis-mode.patch: this is an X server bug (#594523)
  - wacom-0.10.5-relative-pressure.patch: subtract old pressure from new
    pressue values to get a relative value (#597932)
  - wacom-0.10.05-xsetwacom-man-page.patch: add xsetwacom man page (#598312)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-5
changelog:
  - wacom-0.10.5-wheel-events.patch: don't convert the wheel events to scroll
    events for anything but the pad (#593948)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-6
changelog:
  - wacom-0.10.5-keycodes-not-keysyms.patch: load keycodes into the driver,
    not keysyms. Avoids server hangs when XkbGetCoreMap() allocs in signal
    handler (#616653)
  - wacom-0.10.5-scroll-wheel-zoom.patch: zoom with wheel, not ctrl+/- since
    the latter is now layout-dependent.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-6.1
changelog:
  - wacom-0.10.5-xsetwacom-add-super-and-hyper-to-modifiers.patch: parse Hyper
    and Super as modifiers.
  - wacom-0.10.5-xsetwacom-fix-strjoinsplit.patch: fix parameter advancement.
  - A list of patches to improve TwinView configuration (#624560).


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-6.2
changelog:
  - Several patches related to bug #624560 (zstream-bug #642915)
    - xsetwacom: remove core keyword parsing, has no effect
    - fix button map handling in xsetwacom
    - add more keywords and special characters
    - twinview and calibration fixes


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-17
changelog:
  - fix memory leak in ls -l (#751974)
  - document difference between ls -lZ and ls -Zl (#771843)
  - fix various i18n patch related issues in pr (#772172)
  - df should display target device information when
    a symbolic link is specified as a parameter(#766461)
  - su no longer hangs when a program set itself to ignore
    SIG_CHLD signal, and fork a child to exec su(#754029)
  - stat recognizes few new filesystems, tail -f recognizes
    FhGFS and GPFS as remote (disables inotify) (#769874)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-7
changelog:
  - xkbcomp 1.0.5
  - Remove xkbcomp-1.0.4-open-less.patch.
  - xkbcomp-1.0.5-dont-overwrite.patch: Don't overwrite groups unnecessarily.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-11
changelog:
  - Resolves: #1248855 - After updating to squid-3.1.23-9.el6,
    service squid {reload,restart} fails with "Operation not permitted"


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-15
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.7.0.25-2.3.10.4.el6
changelog:
  - Sync with upstream IcedTea7-forest 2.3.10 tag
  - Fixes regressions as introduced with 1.7.0.25-2.3.10.3.el6:
    rhbz#978005, rhbz#977979, rhbz#976693, IcedTeaBZ#1487.
  - Related: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.0.el6
changelog:
  - security update to 2.3.13
  - adapted java-1.7.0-openjdk-disable-system-lcms.patch (and redeclared to 105)
  - removed bootstrap
  - fixed nss
  - fixed buildver and updatever (Set to 25,30)
  - moved to xz compression of sources
  - all patches moved correctly to prep
  - added patch404 tck20131015_1.patch, to resolve one of tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.1.el6
changelog:
  - removed useless  patch404 tck20131015_1.patch
  - added patch405 tck20131015_2.patch, to resolve one of tck failures
  - added patch406 tck20131015_3.patch, to resolve one of tck failures
  - added patch407 tck20131015_4.patch, to resolve one of tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.2.el6
changelog:
  - updated to newer security tarball of 2.3.13
  - removed patch405 tck20131015_2.patch, no longer necessary to fix tck failures
  - removed patch406 tck20131015_3.patch, no longer necessary to fix tck failures
  - removed patch407 tck20131015_4.patch, no longer necessary to fix tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.3.el6
changelog:
  - added back patch404 tck20131015_1.patch, to resolve one of tck failures
  - added back patch405 tck20131015_2.patch, to resolve one of tck failures
  - added back patch406 tck20131015_3.patch, to resolve one of tck failures (modified)
  - added back patch407 tck20131015_4.patch, to resolve one of tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.1.el6
changelog:
  - sync with rhel 6.5 to icedtea 2.4 because of pernament tck failures
   - nss kept disabled
  - Resolves: rhbz#1017626


author: Bob Relyea <rrelyea@redhat.com> - 1.1.0-22
changelog:
  - Some Gemalto Card Managers silently ignore SELECT APDU's for applets 
    that don't exist. This makes coolkeys with this cards look like PIV.
    Check the data returned from select and make sure the PIV is for real.


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-9
changelog:
  - Rebuild for the pem module to link with freel from nss-softokn-3.14.3-6.el6
  - Related: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]
  - Related: rhbz#1010224 - NSS 3.15 breaks SSL in OpenLDAP clients


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-10
changelog:
  - Restore a mistakenly removed patch
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-11
changelog:
  - Fix the test for zero failures in the %check section
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Peng Huang <shawn.p.huang@gmail.com> - 1.1.0.20090330-1
changelog:
  - Update version to 1.1.0.20090330.
  - Fix bug 486056 - missing options for 2bul, 3bul and other Korean layouts
  - Fix bug 487269 - missing Hanja Conversion


author: Warren Togami <wtogami@redhat.com> - 1.1.0.20090330-2
changelog:
  - Bug 493706: ibus-hangul Hanja arrow keys are wrong
  - Bug 493509: ibus-hangul missing right Ctrl for Hanja button
    These fixes are not ideal, but they make it usable for Fedora 11.
    These must become configurable in a future version.


author: Akemi Yagi <toracat@centos.org> [2.6.32-431.20.3.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, all serial ATA, Adaptec I2O,
    ARPD, BusLogic, IPX, Appletalk, ReiserFS, JFS, TOMOYO
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added sysfs-fix-printk-warnings-bug6157.patch [bug#6157]
  - Added correct-tty-buffer-flush-bug6104.patch [bug#6104]
  - Added a fix for virtio_net underestimation [bug#5526]
  - Added revert-improve-queue_should_plug-bug6548.patch [bug#6548]
  - Added fs-tmpfs-add-xattrs-support.patch [bug#4586.18700]
  - Added fix-fadvise-for-tmpfs.patch [bug#6938]
  - Added ipvs-fix-missing-locking patch [bug#6752]
  - DEBUG_KMEMLEAK enabled in config [bug#7055]


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Update to nss-3.14.0.0-1
  - Add temporary patch so utilmod doesn't include any headers from softoken
  - Keep the hasht.h from current nss-softokn-devel
  - Remove the long obsoleted nss-nolocalsql.patch


author: Dan Horák <dhorak@redhat.com> 2.4-2
changelog:
  - don't add root to pkcs11 group (#732756)
  - document implications of the pkcs11 group membership (#730903)
  - Resolves: #732756, #730903


author: Petr Lautrbach <plautrba@redhat.com> 2.4.3.1-2
changelog:
  - use correct OID in CKA_ECDSA_PARAMS attribute
  - fixed ica token's SHA update function when passing zero message size
  - Resolves: #1027606, #1131745


author: Doug Ledford <dledford@redhat.com> - 1.5.3-1.el5
changelog:
  - Update to latest upstream version
  - Don't include the newly added devel stuff as it's likely only needed
    internally (and certainly not needed by anything we've supported before
    since we've never shipped it)
  - Related: bz518218


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-5
changelog:
  - Fix SIGSEGV in tool_mm_flush()
    Resolves: #907204
  - Fix minor init script inconsistencies
    Resolves: #805588


author: Doug Ledford <dledford@redhat.com> - 3.3.5-2
changelog:
  - Drop libibmad as it didn't soname bump, and also remove the lower level
    opensm libs, libosm{comp,vendor} as they didn't soname bump either
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 3.3.5-3
changelog:
  - Change the file spec so we don't accidentally pick up the debug files in
    the base package on 32bit arches
  - Resolves: bz732495


author: Adam Tkac <atkac redhat com> 1.0.9-5
changelog:
  - run ck-xinit-session for all sessions where the xdg cookie isn't already
    set (#452156, patch from Patrice Dumas)
  - add which Requires (#413041, patch from Patrice Dumas)


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.9-8
changelog:
  - have ck-xinit-session tell the session bus to set
    XDG_SESSION_COOKIE for services which it autostarts (#502258)
  - add direct build dependency on dbus-devel, since we call it
    directly now


author: Matěj Cepl <mcepl@redhat.com> - 1.0.9-9
changelog:
  - consider scripts in /etc/X11/xinit/Xclients.d/ as well
  - add back scripts in Release -7 and -8 from F11 branch.


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-1
changelog:
  - Sync with upstream 2.0.873
  - 854776 Bring up network interface for iSCSI boot with bnx2i
  - 811428 make version string reported by iscsiadm match RPM version
  - fix iscsid segfault during qla4xxx login


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-3
changelog:
  - 831003 boot over VLAN support patches
  - 916007 replace iscsiuio with code merged upstream 0.7.8.1b
  - 884427 fix for db errors when vdsm creates static entries for
           target portals already setup through discovery
  - 983553 run target refresh in parallel so unreachable doesn't block others


author: Andy Grover <agrover@redhat.com> - 6.2.0.873-6
changelog:
  - Update bnx2i-vlan-boot-support.patch to check session != NULL
    before calling iscsi_sysfs_read_iface


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Add pseudo provides of libibverbs-driver
  - Update buildrequires for libibverbs API change


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-3
changelog:
  - The location of libnssckbi.so moved from /lib[64] to /usr/lib[64] (#558545)
  - Don't generate output when the default NSS database is generated (#538859)


author: Doug Ledford <dledford@redhat.com> - 1.1.3-2
changelog:
  - Add Requires of -devel package to -devel-static package
  - Add Requires of libibverbs-driver (this pulls in the various driver packages
    automatically when the libibverbs package is installed)


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-5
changelog:
  - Fix EAP client authentication with TLS 1.2
    Resolves: Bug#1254176 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-6
changelog:
  - Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
    Related: Bug#1254176 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Dan Winship <danw@redhat.com> - 1:0.8.1-34
changelog:
  - connection-editor: switch from notebook to tree (part of rh #465345)
  - connection-editor: add InfiniBand support (rh #685096)


author: Dan Winship <danw@redhat.com> - 1:0.8.1-35
changelog:
  - ifcfg-rh: fix writing of bond connections (rh #717475, rh #838907)
  - ifcfg-rh: fix reading of InfiniBand bond slaves (rh #717475)
  - connection-editor: add bond support (rh #465345)


author: Dan Winship <danw@redhat.com> - 1:0.8.1-36
changelog:
  - connection-editor: add VLAN support (rh #712302)
  - libnm-util: add API for VLAN connection editor
  - core: add more checks to VLAN creation
  - ifcfg-rh: fix writing of VLAN connections
  - misc other small connection editor UI updates


author: Dan Williams <dcbw@redhat.com> - 1:0.8.1-37
changelog:
  - core: fix 802.1x credentials being requested twice (rh #837056)
  - core: inherit leasefiles from the initramfs (rh #817660)
  - core: periodically retry connections even if they have failed (rh #829499)


author: Dan Williams <dcbw@redhat.com> - 1:0.8.1-41
changelog:
  - core: additional fixes for bridging and bonding operation (rh #558983)
  - applet: add support for Bridge, Bond, and VLAN devices


author: Frank Ch. Eigler <fche@redhat.com> - 1.8-5
changelog:
  - rebased to systemtap 1.8, including scox's fixes from rhel-5.9:
  - rhbz844910: grumble quietly about preexisting gid/uid conflicts in .spec  
  - rhbz843480: systemtap-server should work without systemtap-runtime preinstalled
  - rhbz843392: systemtap-testsuite unresolved deps
  - rhbz843389: sdt.c on systemtap-testsuite cannot be compiled
  - rhbz835027: systemtap-testsuite requires prelink on ia64
  - Backported fix for pr14325
  - No publican in rhel 5.
  - Add s390 to the publican blacklist.
  - rebase
  - Backported fixes for pr14230 pr14296


author: Lukáš Nykrýn <lnykryn@redhat.com> - 0.6.5-15
changelog:
  - fix issue with multiple nih_error_raise calls in previous patch
  - reset console only for console owners (#1046190)


author: Adam Tkac <atkac redhat com> - 0.99.15-8
changelog:
  - fix CVE-2011-3323
  - fix CVE-2011-3324
  - fix CVE-2011-3325
  - fix CVE-2011-3326
  - fix CVE-2011-3327
  - fix CVE-2012-0255
  - fix CVE-2012-0249 and CVE-2012-0250
  - fix CVE-2012-1820


author: Michal Sekletar <msekleta@redhat.com> - 0.99.15-10
changelog:
  - add watchquagga initscript (#862826, #1208617)
  - remove pidfile when service is stopped (#842308)
  - use QCONFDIR correctly in initscripts (#839620)
  - include watchquagga and ospfclient manpages (#674862)


author: Michal Sekletar <msekleta@redhat.com> - 0.99.15-11
changelog:
  - fix for CVE-2013-2236 (#1391918)
  - fix for CVE-2016-1245 (#1391914)
  - fix for CVE-2016-2342 (#1391916)
  - fix for CVE-2016-4049 (#1391919)


author: Michal Ruprich <mruprich@redhat.com> - 0.99.15-14
changelog:
  - Resolves: #1416013 - CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory


author: Jan Grulich <jgrulich@redhat.com> - 4.3.4-30
changelog:
  - Make sure all windows are properly closed and removed from the task manager applet
    Resolves: bz#1027703


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.20.1.el6]
changelog:
  - [scsi] hpsa: Use LUN reset instead of target reset (Tomas Henzl) [884422 875091]
  - [char] tty: Fix possible race in n_tty_read() (Stanislaw Gruszka) [891580 765665]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.21.1.el6]
changelog:
  - [scsi] mpt2sas: fix for driver fails EEH recovery from injected pci bus error (Tomas Henzl) [888818 829149]
  - [net] bonding: Bonding driver does not consider the gso_max_size setting of slave devices (Ivan Vecera) [886618 883643]
  - [netdrv] tg3: Do not set TSS for 5719 and 5720 (John Feeney) [888215 823371]
  - [kernel] kmod: make __request_module() killable (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] kmod: introduce call_modprobe() helper (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] usermodehelper: implement UMH_KILLABLE (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] usermodehelper: introduce umh_complete(sub_info) (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] call_usermodehelper: simplify/fix UMH_NO_WAIT case (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] wait_for_helper: SIGCHLD from user-space can lead to use-after-free (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [net] sunrpc: Ensure that rpc_release_resources_task() can be called twice (Jeff Layton) [880928 878204]
  - [scsi] qla2xxx: Don't toggle RISC interrupt bits after IRQ lines are attached. (Chad Dupuis) [886760 826565]
  - [kernel] rcu: Remove function versions of __kfree_rcu and offset (Doug Ledford) [880085 873949]
  - [kernel] rcu: define __rcu address space modifier for sparse (Doug Ledford) [880085 873949]
  - [kernel] rcu: Add rcu_access_pointer and rcu_dereference_protected (Doug Ledford) [880085 873949]
  - [kernel] rcu: Add lockdep checking to rhel (Doug Ledford) [880085 873949]
  - [kernel] rcu: Make __kfree_rcu() less dependent on compiler choices (Doug Ledford) [880085 873949]
  - [kernel] rcu: introduce kfree_rcu() (Doug Ledford) [880085 873949]
  - [net] rcu: add __rcu API for later sparse checking (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Fix AB-BA deadlock when deleting neighbours (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Fix memory leak in the neigh table deletion flow (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Fix RCU pointer dereference of wrong object (Doug Ledford) [880085 873949]
  - [misc] Make rcu_dereference_bh work (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Use a private hash table for path lookup in xmit path (Doug Ledford) [880085 873949]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.22.1.el6]
changelog:
  - [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862903 862904] {CVE-2012-4461}
  - [fs] fuse: optimize __fuse_direct_io() (Brian Foster) [865305 858850]
  - [fs] fuse: optimize fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] fuse: use get_user_pages_fast() (Brian Foster) [865305 858850]
  - [fs] fuse: pass iov[] to fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] mm: minor cleanup of iov_iter_single_seg_count() (Brian Foster) [865305 858850]
  - [fs] fuse: use req->page_descs[] for argpages cases (Brian Foster) [865305 858850]
  - [fs] fuse: add per-page descriptor <offset, length> to fuse_req (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_do_ioctl() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_perform_write() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_readpages() (Brian Foster) [865305 858850]
  - [fs] fuse: categorize fuse_get_req() (Brian Foster) [865305 858850]
  - [fs] fuse: general infrastructure for pages[] of variable size (Brian Foster) [865305 858850]
  - [fs] exec: do not leave bprm->interp on stack (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [fs] exec: use -ELOOP for max recursion depth (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [scsi] have scsi_internal_device_unblock take new state (Frantisek Hrbata) [878774 854140]
  - [scsi] add new SDEV_TRANSPORT_OFFLINE state (Chris Leech) [878774 854140]
  - [kernel] cpu: fix cpu_chain section mismatch (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: Don't modify cpusets during suspend/resume (Frederic Weisbecker) [876090 852148]
  - [kernel] sched, cpuset: Drop __cpuexit from cpu hotplug callbacks (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: adjust when cpu_active and cpuset configurations are updated during cpu on/offlining (Frantisek Hrbata) [876090 852148]
  - [kernel] cpu: return better errno on cpu hotplug failure (Frederic Weisbecker) [876090 852148]
  - [kernel] cpu: introduce cpu_notify(), __cpu_notify(), cpu_notify_nofail() (Frederic Weisbecker) [876090 852148]
  - [fs] nfs: Properly handle the case where the delegation is revoked (Steve Dickson) [846840 842435]
  - [fs] nfs: Move cl_delegations to the nfs_server struct (Steve Dickson) [846840 842435]
  - [fs] nfs: Introduce nfs_detach_delegations() (Steve Dickson) [846840 842435]
  - [fs] nfs: Fix a number of RCU issues in the NFSv4 delegation code (Steve Dickson) [846840 842435]


author: Akemi Yagi <toracat@centos.org> [2.6.32-279.22.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client, EeePC hotkey, JFS
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - As of 2.6.32-131.12.1.el6, parallel printer support is enabled in distro kernel.
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix for the 208.5-days-and-the-system-reboots issue [bug#5397]
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Enabled ARPD [bug#5709]
  - Added a patch for PCIe PME issue [bug#5383]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added patch fix-ptrace-getventmsg-pid-in-lxc-bug5424 [bug#5424]
  - Added a patch for fsync() tid wraparound bug [bug#5955]
  - Added patches to fix e1000e-related network crash [bug#6018]
  - [Re]enabled ARPD [bug#5709]
  - Added sysfs-fix-printk-warnings-bug6157.patch [bug#6157]
  - Added e1000-properly-kill-reset-task-bug6187.patch [bug#6187]


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-14
changelog:
  - Resolves: #637705
    'sar -u ALL' doesn't report an correct value
  - Resolves: #631841
    fix the tickless kernel output of sar command
  - Resolves: #592283
    add CIFS support to iostat


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-16
changelog:
  - Related: #592283
    improved support of cifs mount points (mounting and unmounting during
    cifsiostat run)


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-19
changelog:
  - resolves: #766431
    added support for symlinks to the iostat command
  - resolves: #771594
    updated reading /proc/diskstats file according to the kernel
  - resolves: #700797
    fixed minor resource leak
  - resolves: #694759
    fixed iostat command does not reporting shares with long names
  - resolves: #690562
    fixed cifsiostat does not report number of open files correctly
  - resolves: #674648
    added new option -P ON to mpstat, showing only online cpu in statistics
  - resolves: #693398
    updated sysstat configuration


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-20
changelog:
  - related: #693398
    added note about -S option to the sadc manual page
  - resolved: #801453
    fixed return code of sa2 script
  - resolved: #801702
    increased IOC_MAXMINOR constant for block devices


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-21
changelog:
  - resolves: #838914
    keep log files for 28 days instead of 7
  - resolves: #916396
    fixed buffer overflow in iostat program when inspecting encrypted disks
  - resolves: #826399, #826403, #804534
    added support for persistent device names
  - resolves: #888823
    increased NR_CPUS and NR_IRQS constants
  - resolves: #820992
    made init script LSB
  - resolves: #850810
    added iostat option to report interval statistics in first report


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-22
changelog:
  - resolves: #996134
    fixed umask command in sa1 script
  - resolves: #967386
    documented and partialy fixed regression caused by sysstat-9.0.4-diskstats.patch


author: Doug Ledford <dledford@redhat.com> - 1.1.3-1
changelog:
  - Update to latest upstream release
  - Rebuild against latest libibverbs (native FDR/IBoE enabled)
  - Related: bz750609


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.2-10.1
changelog:
  - Disable driver-based resolutions scaling on ABI 18.1 (#1012816)
  - Conflict with X server's that don't provide the proper scaling (#1012816)


author: Daniel Kopecek <dkopecek@redhat.com> 2.2-2
changelog:
  - added support for scrubing only allocated file extents (option -E)
  - added patch to fix scrub-freespace
    Resolves: rhbz#907173
    Resolves: rhbz#903890


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-33
changelog:
  - su: don't terminate parent process upon SIGTERM(#1063887)
  - tail: do not show "reverting to polling" warning when not
    necessary (#1046818)
  - chcon: document default behaviour for symlink (#1064621)
  - fix dd sparse test failure on XFS (#1075679)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-34
changelog:
  - tail: disable inotify in --follow for vxfs (#1104244)
  - df: dereference symlinks to disk device nodes (#812449)
  - dd: add support for count_bytes iflag (#1098078)


author: Petr Hracek <phracek@redhat.com> - 1.17.2-2
changelog:
  - Update description
  - Remove other distros from SPEC
  - Changed license
  - Change Source0 to Sourceforge
  - Resolves: #981637


author: Joe Orton <jorton@redhat.com> - 2.0.1-8
changelog:
  - add security fix for CVE-2009-3560 (#533174)
  - add security fix for CVE-2009-3720 (#531697)
  - run the test suite


author: Rüdiger Landmann <r.landmann@redhat.com> 1.8
changelog:
  - remove reference to OPL licence
  - add max_image_width for BZ#580774
  - add confidential_text for BZ#588980


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - renmoved upstreamed patch9, 1051245.patch
  - Resolves: rhbz#1085010


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.6
changelog:
  - fixed outdated debug build
  - debug set (temporarily) on (1)
  - fixed java-1.6.0-openjdk-debugdocs.patch and ava-1.6.0-openjdk-debuginfo.patch
  - redeffined debugbuild and buildoutputdir (for debug on)
  - added and applied it6-mkfile-tmp.patch (upstreamed already)
  - Resolves: rhbz#1059925


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.0-9.1.13.3
changelog:
  - Backport fix (7027300) replacing HashMap with ConcurrentHashMap to avoid deadlock
  - Also includes related backport (7183251) to fix issue revealed by fixing 7027300
  - Resolves: rhbz#1098399


author: Omair Majid <omajid@redhat.com> - 1:1.6.0.1-5.1.13.8
changelog:
  - Work when capabilities are set on the binary
  - Include hardcoded install path as well as $ORIGIN in RPATH
  - Don't Expect LD_LIBRARY_PATH to be set in the launcher
  - Resolves: rhbz#1059925


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - reworked patch for unsyncHashMap.patch
    - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115868


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-24
changelog:
  - Wait for 389-ds tasks to complete (#698421)
  - Set replica to restart ipa on boot (#705794)
  - Improve client debug logging (#705800)
  - Managed Entries not configured on replicas (#703869)
  - Don't create bogus aRecord when creating new zone (#704012)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.1-2.el6
changelog:
  - Update minimum xmlrpc-c version (#736787)
  - Fix package installation order causing SELinux problems (#737516)


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.7
changelog:
  - Fix selinuxdefcon to print end of line at the end of output.
  Resolves:#913115
  - Fix security_get_initial_context desc in security_compute_av.3
  Resolves:#1011109
  - Apply fix for selinux.8 man page from pschiffe@redhat.com.
  Resolves:#1011145


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.8
changelog:
  - avc_has_perm will now return yes if the machine is in permissive mode
  Resolves:#753675
  - nscd permission support for netgroup
  - Fix matchpathcon verify handling to fail on non-existing objects


author: David Knox <dknox@redhat.com> 0:6.0.24-82
changelog:
  - Resolves: rhbz#1207048  Tomcat init script needs to be adjusted 
  - to kill tomcat if stop is unsuccessful


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-1
changelog:
  - Updated to 2.0.0
  - Removed upstream-ed patches
  - Ugly hack (added cvconfig.h)
  - Disable %check on ppc64


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-6
changelog:
  - use cmake build system
  - applications renamed to opencv_xxx instead of opencv-xxx
  - add devel-docs subpackage #546605
  - add OpenCVConfig.cmake
  - enable openmp build
  - enable old SWIG based python wrappers
  - opencv package is a good boy and use global instead of define


author: Karel Klic <kklic@redhat.com> - 2.0.0-7
changelog:
  - re-enable testing on CMake build system
  - fix memory corruption in the gaussian random number generator


author: Benjmain Marzinski <bmarzins@redhat.com> -0.4.9.57
changelog:
  - Add 0145-RHBZ-831045-realloc-vector.patch
    * fix deleting items from vector, and handle error cases
  - Resolves: bz #831045


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.59
changelog:
  - Add 0146-RHBZ-595692-fix-cciss-names.patch
    * convert cmdline cciss names to sysfs format
  - Add 0147-RHBZ-824243-826610-833124-doc-fix.patch
  - Add 0148-RHBZ-619173-storagetek-config.patch
  - Add 0149-RHBZ-810788-remove-dups.patch
    * remove duplicates from builtin configs
  - Add 0150-RHBZ-810755-update-conf-defaults.patch
  - Add 0151-RHBZ-822389-fix-rename.patch
    * make multipath switch names on reload after disabling
      user_friendly_names
  - Add 0152-RHBZ-735459-mpath_persist.patch
    * mpathpersist allows persistent reservatoins through multipath devices
  - Add 0153-RHBZ-839386-retain_hwhandler.patch
    * add retain_attached_hw_handler default and multipaths config option
  - Add 0154-RHBZ-578114-kpartx-retry.patch
    * retry on EBUSY for loop device deletes
  - Add 0155-RHBZ-810989-load-modules.patch
    * service multipathd start loads kernel modules
  - Add 0156-RHBZ-813963-new-alua-prio.patch
    * combine the "alua" and "tpg_pref" prioritizers
  - Add 0157-RHBZ-816717-flush-full-paths.patch
    * make multipath accept full pathnames in -f
  - Add 0158-RHBZ-821885-check-blacklist.patch
    * make multipath -c check the device blacklisting
  - Add 0159-RHBZ-818367-829065-rdac.patch
  - Add 0160-RHBZ-841732-dont-swap-devices.patch
  - Resolves: bz #595692, #824243, #826610, #833124, #619173, #810788, #810755
  - Resolves: bz #822389, #735459, #839386, #578114, #810989, #813963, #816717
  - Resolves: bz #821885, #818367, #829065, #841732


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.60
changelog:
  - Add 0161-RHBZ-836890-AIX-whitespace.patch
  - Add 0162-RHBZ-860748-early-blacklist.patch
    * blacklist devices as soon as possible
  - Add 0163-RHBZ-839386-detect-prio.patch
    * add default and device configuration option detect-prio
  - Add 0164-RHBZ-839386-netapp-config.patch
  - Modify 0153-RHBZ-839386-retain_hwhandler.patch
    * cleanup minor issues
  - Resolves: bz #836890, #860748, #839386


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.62
changelog:
  - Add 0165-RHBZ-869253-disable-libdm-failback.patch
    * multipathd and kpartx now set a flag to request device-mapper
      not create devices itself.
  - Resolves: bz #869253


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.63
changelog:
  - Add 0166-RHBZ-880487-make-path-fd-readonly.patch
    * revert change from 0152-RHBZ-735459-mpath_persist.patch, so that
      path fds are again opened O_RDONLY
  - Resolves: bz #880487


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64.el6_4.1
changelog:
  - Add 0168-RHBZ-988704-fix_cli_resize.patch
    * deal with resize happening while path device is being removed.
  - Resolves: bz #988704


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64.el6_4.2
changelog:
  - Add 0169-RHBZ-993545-rw-change.patch
    * reload a readonly multipath device if a path device has become
      read/write
  - Resolves: bz #993545


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-20
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#730311)
  - fix regression: openldap built without tcp_wrappers (#742592)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-21
changelog:
  - fix: ldapsearch crashes with invalid parameters (#743781)
  - fix: replication (syncrepl) with TLS causes segfault (#783445)
  - fix: openldap server in MirrorMode sometimes fails to resync via syncrepl (#784211)
  - use portreserve to reserve LDAPS port (636/tcp+udp) (#790687)
  - fix: missing options in manual pages of client tools (#745470)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732916)
  - fix: slapd segfaults when certificate key cannot be loaded (#796808)
  - Jan Synáček <jsynacek@redhat.com>
    + fix: overlay constraint with count option work bad with modify operation (#742163)
    + fix: Default SSL certificate bundle is not found by openldap library (#742023)
    + fix: Duplicate close() calls in OpenLDAP (#784203)


author: Harald Hoyer <harald@redhat.com> 147-2.41
changelog:
  - add "nowatch" option to manpage
  Resolves: rhbz#628762
  - fixed return code of udev-post for "status"
  Resolves: rhbz#735410
  - fixed udev_device_get_devnode()
    backported cdb1d7608a2e2ba708a890eeab6e5e99409a1953
  Resolves: rhbz#784648


author: Harald Hoyer <harald@redhat.com> 147-2.43
changelog:
  - add cciss handling to path_id
  Resolves: rhbz#784697
  - add kmsg alias logger
  Resolves: rhbz#826396
  - extend udev(7) man page about character encoding in symlinks
  Resolves: rhbz#790321
  - fix cdrom_id to honor feature profiles, if no medium is present
  Resolves: rhbz#847925


author: Harald Hoyer <harald@redhat.com> 147-2.46
changelog:
  - make symlink/rename failure info() only
    this can happen for multipath devices
  Resolves: rhbz#838451


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-12
changelog:
  - incorporate a fix to teach the file labeling patch about when replay caches
    are expunged (#714217)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-13
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-14
changelog:
  - krb5kdc init script: pull in some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (#651466)
  - don't use %{?_smp_mflags} -- the build machinery doesn't always work
    right for those cases
  - tag the application of patches which we use to fix compile problems with
    %{_rawbuild} so that minimum-patches builds can be done (#711032)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-15
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-16
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#724033)
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-17
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-19
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-21
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth with AD KDCs (#734341)


author: Josef Ridky <jridky@redhat.com> - 1:5.5-58.el6
changelog:
  - Resolves: #1315481 - An SNMPv3 request with a small max message size can lead to SNMPv1/2c bulk requests timing out


author: Jindrich Novy <jnovy@redhat.com> 20120209-1
changelog:
  - fix minor bugs (#788194)
    - clear temp files
    - handle commands from stdin properly
    - run command even if ran as "scl enable SCL command" from already
      enabled SCL


author: Jindrich Novy <jnovy@redhat.com> 20120423-1
changelog:
  - update to the latest upstream scl-utils-20120423 (#713147)
   - filesystem ownership by meta package
   - add man page
   - fix memory leak when parsing commands from stdin
   - use more descriptive error message if /etc/prefixes is missing
   - do not prepend scl_* prefix to package names
   - unify package naming to <SCL>-package-version
   - add scl --list functionality to list available SCLs


author: Ivan Devat <idevat@redhat.com> - 0.9.154-1
changelog:
  - Rebased to latest upstream packages
  - Keep a cluster qauorate as long as possible when shutting it down
  - Fixed disabling TLSv1.1 in pcsd
  - Fixed error message in node maintenance/unmaintenance commands
  - Fixed adding a node when fencing configuration has been manually changed in cluster.conf
  - Make pcsd init script wait for pcsd to fully start
  - Gracefully handle errors when reading cluster properties definition
  - Resolves: rhbz#1373874 rhbz#1353738 rhbz#1344928 rhbz#1369029 rhbz#1319070 rhbz#1328870 rhbz#1325459


author: Ivan Devat <idevat@redhat.com> - 0.9.155-1
changelog:
  - Rebased to latest upstream packages
  - When stopping a cluster with some of the nodes unreachable, stop the cluster completely on all reachable nodes
  - Fixed occasional crashes / failures when using locale other than en_US.UTF8
  - Added SBD support for cman clusters
  - Added alerts management in web UI
  - Resolves: rhbz#1373874 rhbz#1315748 rhbz#1380372 rhbz#1387106 rhbz#1380352 rhbz#1376480


author: Ivan Devat <idevat@redhat.com> - 0.9.155-2
changelog:
  - Fixed upgrading CIB to the latest schema version
  - Adding a node in a cluster does not cause the new node to be fenced immediately
  - Fixed handling of HTTP communication failure
  - Added dependency on cman
  - Resolves: rhbz#1397408 rhbz#1394846 rhbz#1394273 rhbz#1394857


author: Ondrej Mular <omular@redhat.com> - 0.9.155-3
changelog:
  - Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
  - Resolves: rhbz#1557962


author: Ondrej Vasik <ovasik@redhat.com> 2.10-7
changelog:
  - CVE-2010-0624 fix heap-based buffer overflow by expanding
    a specially-crafted archive(#571843)
  - comment patches


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.101-2.6.6.1
changelog:
  - Bump to 2.6.6 and u101b00.
  - Drop a leading zero from the priority as the update version is now three digits
  - Update PR2809 patch to apply against 2.6.6.
  - Resolves: rhbz#1325426


author: Dan Horák <dhorak@redhat.com> 2.3.1-1
changelog:
  - New upstream release 2.3.1. (#559364)
  - opencryptoki-2.3.0-fix-nss-breakage.patch was merged.
  - updated pkcsslotd initscript (#547324)
  - Resolves: #559364
  - Related: #547324


author: Caolan McNamara <caolanm@redhat.com> 0.2.8.4-16
changelog:
  - I wrote it and still had to check the headers to see if I had
    cut and pasted "and later" into then


author: Doug Ledford <dledford@redhat.com> - 3.0-1
changelog:
  - Update to latest upstream version
  - Compile three times against the three mpi stacks and make three packages
  - Resolves: bz451474


author: Jay Fenlason <fenlason@redhat.com> 3.2-3.el6
changelog:
  - Build using new mvapich, mvapich2, and openmpi.
    Add support for the -psm variants of the three mpi stacks.
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 3.2-5.el6
changelog:
  - Rebuild against newer infinipath-psm, openmpi, mvapich, mvapich2
    This removes the openmpi-psm subpackage, as openmpi now switches between
     psm and non- at runtime.
  - Correct version numbers for IMB and OSU benchmarkes in the description.
  - Update spec file to fix pkgwrangler warnings.
    Resolves: rhbz557803
    Related: rhbz739138


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-1
changelog:
  - move reporter plugins from abrt to libreport
  - fixed provides/obsolete to properly obsolete report package
  - wizard: make more fields editable
  - Related: #697494


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-2
changelog:
  - removed mailx from possible reporter list (still enabled as post-create event)
  - added python bindings to libreport client lib
  - honor reporters minimal rating
  - fixed (null) in bz summary
  - Related: #714045


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-3
changelog:
  - improved compatibility with bugzilla
  - enabled bugzilla for libreport reports (analyzer=libreport)
  - Resolves: #725857


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-4
changelog:
  - further improvement in Anaconda compatibility rhbz#727243
  - warn silently when keyring is not available rhbz#725858
  - Resolves: #727243 #725858


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-5
changelog:
  - added the report cmdline tool rhbz#725660
  - fixed man pages version rhbz#728190
  - fixed text wrapping rhbz#728132
  - improved dump_dir detection rhbz#728166
  - fixed reporting from Anaconda newt ui rhbz#729566
  - added defualt config file for rhtsupport rhbz#729566
  - make reporters use default conf when -c is not used rhbz#729986
  - Resolves: #725660 #728190 #728132 #728166 #729566 #729986


author: Karel Klíč <kklic@redhat.com> - 2.0.5-6
changelog:
  - Added two patches (libreport-code-was-moved-to-abrt.git,
    libreport-fix-d-delete-option) from upstream making report-cli
    -d/--delete to remove DUMP_DIR after reporting. First patch also
    removes --list and --info and --full options, which were already
    moved to abrt-cli.
    Resolves: #726097
  - Added fallback text editor for editing multiline fields in Anaconda
    Resolves: #728479


author: Denys Vlasenko <dvlasenk@redhat.com> - 2.0.5-7
changelog:
  - Fix report-cli crash if config files are missing.
    Resolves: #730942
  - Pull in libreport-plugin-reportuploader on update
    (fixes a problem with "yum update" on RHEL system with old report package.
    Resolves: #732683


author: Nikola Pajkovsky <npajkovs@redhat.com> - 2.0.5-8
changelog:
  - Missing man pages of report and report.conf
    Resolves: #729957
  - Update translations
    Resolves: #731037


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.0.5-9
changelog:
  - fixed make check rhbz#729686
  - fixed attaching anaconda-tb* rhbz#731389
  - Resolves: #729686 #731389


author: Miroslav Lichvar <mlichvar@redhat.com> 2.3-5
changelog:
  - rename getline to avoid conflict with glibc (#511715)
  - remove makefiles from docs
  - drop wchar patch


author: John Ferlan <jferlan@redhat.com> - 0.6.1-4.el6_4.1
changelog:
  - Distinguish running or inactive state (rhbz#913164)
  - Only support script on bridge for xen domains (rhbz#951402)
  - Need to initialize domain->type to UNKNOWN (rhbz#951402)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-4.el6_4.2
changelog:
  - Add shareable property to disk and dumpCore tag support (rhbz#1009117)
  - Update spec file to more closely match upstream
  - Uninstall open-pegasus-specific providers from sfcb.eml (rhbz#833633)
  - Don't install open-pegasus' specific providers (rhbz#859122)
  - Fixed dates in changelog


author: Florian La Roche <laroche@redhat.com> - 1.08-1
changelog:
  - change Source: tag
  - Bernardo Innocenti bernie at codewiz.org: add LDFLAGS to opt patch
    to enable cross building on 64bit host
  - release 1.08 with loginpause option from Bernardo Innocenti bernie at codewiz.org


author: Petr Pisar <ppisar@redhat.com> - 1.08-5
changelog:
  - Check chroot(), chdir(), and nice() (bug #640933)
  - Limit TTY name length to prevent buffer overflow (bug #640940)
  - Allow login name up to LOGIN_NAME_MAX length (bug #651955)


author: Ian Kent <kpnt@redhat.com> - 1:5.0.5-22
changelog:
  - bz578128 - Service autofs initscript not LSB compliant
  - bz577097 - automount aborts when it authenticates by DIGEST-MD5
  - Resolves: rhbz#578128 rhbz#577097


author: Ian Kent <ikent@redhat.com> - 5.0.5-23
changelog:
  - bz597944 - autofs5: segfault in close_mount()
    - add mutex to serialize access to mount module handle in parse module.
    - dont check null cache on expire.
    - fix null cache race.
    - fix cache_init() on source re-read.
    - fold autofs-5.0.5-fix-memory-leak-on-reload.patch into
      fix cache_init() on source re-read patch where it belongs.
  - bz594565 - If maps include both file and nis maps, included nis maps which
      worked on RHEL 5.3 no longer work on RHEL 5.4
    - fix negative cache included map lookup
  - Resolves: rhhz#597944 rhbz#594565


author: Ian Kent <ikent@redhat.com> - 5.0.5-24
changelog:
  - bz572608 - autofs has unncessary wakeups
    - remove state machine timed wait.
  - bz577099 - RFE: Add locality LDAP attribute to
    - add locality as valid ldap master map attribute
  - bz650009 - automount hangs on startup when started with an already
    mounted cifs share
    - fix remount locking
  - bz624444 - 'Restart' option does not work for autofs initd script
    - fix restart.
  - bz630954 - "service autofs reload" does not pick the updated entry
    from NIS autofs direct map
    - fix direct map not updating on reread
  - bz629480 - include autofs support for SASL External authentication
    using certificates
    - add external bind method
  - bz579963 - autmount maps stored in LDAP can not be read using simple
    authenticated binds
    - add simple bind authentication
  - bz520844 - [RFE] autofs should honor admin supplied server weights in
    maps
    - use weight only for server selection.
  - Resolves: rhbz#572608 rhbz#577099 rhbz#650009 rhbz#624444 rhbz#630954
  - Resolves: rhbz#629480 rhbz#579963 rhbz#520844


author: Ian Kent <ikent@redhat.com> - 5.0.5-26
changelog:
  - bz666340 - autofs handle isspace() char incorrectly
    - fix isspace() wild card substition.
  - Resolves: rhbz#666340


author: Ian Kent <ikent@redhat.com> - 5.0.5-27
changelog:
  - bz616426 - autofs initscript should implement force-reload and try-restart
    - add lsb force-reload and try-restart
  - bz629359 - [RFE] Automounter debug mode should include IP addresses
    - include ip address in debug logging.
    - mount using address for DNS round robin host names.
  - Resolves: rhbz#616426 rhbz#629359


author: Ian Kent <ikent@redhat.com> - 5.0.5-28
changelog:
  - bz630954 - "service autofs reload" does not pick the updated entry
    from NIS autofs direct map
    - fix patch not actually applied.
  - Related: rhbz#630954


author: Ian Kent <ikent@redhat.com> - 5.0.5-29
changelog:
  - bz579963 - autmount maps stored in LDAP can not be read using simple
    authenticated binds
    - deal with Kerberos library dependency.
  - Related: rhbz#579963


author: Ian Kent <ikent@redhat.com> - 5.0.5-30
changelog:
  - bz579963 - autmount maps stored in LDAP can not be read using simple
    authenticated binds
    - remove ERR_remove_state() openssl call. 
  - bz520844 - [RFE] autofs should honor admin supplied server weights in maps
    - update patch, also override proximity.
  - Related: rhbz#579963 rhbz#520844


author: Seth Vidal <skvidal at fedoraproject.org> - 1.1.2-14
changelog:
  - apply latest patches from upstream - consolidate into one big patch
  - test before a 1.1.3 from upstream


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11.1
changelog:
  - Add an upstream patch that fixes computation of CRC in zlib streams.
  - Turn off mpich2 support on platforms where it's not shipped.
  - Resolves: #723503


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11.2
changelog:
  - Build with -fno-strict-aliasing due to the sheer amount of warnings
    that we get.
  - Related: #723503


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-3
changelog:
  - Really enable fix for problem where a device fails to remove from
  - an IMSM container
  - Resolves: bz771332


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-4
changelog:
  - Fix bug where IMSM arrays stay inactive in case a reboot is
  - performed during the reshape process.
  - Resolves: bz730052


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-5
changelog:
  - Fix issue with devices failing to be added to a raid using bitmaps,
    due to trying to write the bitmap with mis-aligned buffers using
    O_DIRECT 
  - Resolves: bz790394


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.15
changelog:
  - network: Allow <vlan> in type='hostdev' networks (rhbz#1014445)
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1017196)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#1017194)
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1017198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1017198)


author: Ryan McCabe <rmccabe@redhat.com> - 0.22.2-9
changelog:
  - Fix bz600027 (Fix cluster service creation/configuration UX issues)
  - Fix bz600040 (Add nodes to existing cluster does not work)
  - Fix bz600045 (Removing nodes from existing clusters fails)
  - Fix bz600055 ("cluster busy" dialog does not work)
  - Fix bz613868 (Remove fence_virsh from luci UI since this fence is not supported with RHEL HA/Cluster)
  - Fix bz614434 (adding an IP resource ends with an error 500)
  - Fix bz614439 (adding GFS2 resource type in RHEL6 cluster is "interesting")
  - Fix bz615096 (Traceback when unchecking "Prioritized" in Failover Domains)
  - Fix bz615468 (When creating a new failover domain, adding nodes has no effect)
  - Fix bz615872 (unicode error deleting a cluster)
  - Fix bz615889 (luci cannot start an imported cluster)
  - Fix bz615911 (luci shows many unsupported fence devices when adding a new fence device)
  - Fix bz615917 (adding per node fence instance results in error 500 if no fence devices are configured)
  - Fix bz615929 (luci generated cluster.conf with fence_scsi fails to validate)
  - Fix bz616094 (Deleting a fence device which is in use, causes a traceback on Nodes page)
  - Fix bz616228 (Clicking on cluster from manage clusters page results in traceback (500 error))
  - Fix bz616230 (Clicking on the join button doesn't work on nodes page)
  - Fix bz616244 (Clicking on the leave button doesn't work on nodes page.)


author: Ryan McCabe <rmccabe@redhat.com> - 0.22.2-10
changelog:
  - Additional fixes for bz600027 (Fix cluster service creation/configuration UX issues)
  - Additional fixes for bz600055 ("cluster busy" dialog does not work)
  - Fix bz618424 (Can't remove nodes in node add dialog or create cluster dialog)
  - Fix bz616382 (luci db error removing a node from a cluster)
  - Fix bz613871 (luci should not give ungraceful error messages when encountering fence devices that it does not recognize/support)


author: Ryan McCabe <rmccabe@redhat.com> - 0.22.2-11
changelog:
  - Fix bz614433 (cannot configure ipport for fence agents)
  - Fix bz617575 (Unclear options when configuring a cluster)
  - Fix bz617591 (Some fields when adding an IP address are unclear)
  - Fix bz617602 (Fields in "Fence Daemon Properties" have no units)
  - Fix bz618577 (wrong message displayed when adding ip resource)
  - Fix bz619220 (Luci does extra queries which slows down page load)


author: Ryan McCabe <rmccabe@redhat.com> - 0.22.2-12
changelog:
  - Fix bz615926 (luci does not handle qdisk / cman config correctly)
  - Fix bz619220 (Luci does extra queries which slows down page load)
  - Fix bz619652 (luci sometimes prints a traceback when deleting multiple nodes at the same time)
  - Fix bz619641 (luci init script prints a python traceback when status is queried by a non-root user)


author: Ryan McCabe <rmccabe@redhat.com> - 0.22.2-13
changelog:
  - Remove extra debugging logging from the fix for bz619220
  - Fix bz614130 (implement tomcat6 resource agent)
  - Fix bz618578 (ip resource should have netmask field)


author: Lon Hohberger <lhh@redhat.com> - 0.22.2-14
changelog:
  - Randomize secret key in who.ini on each installation.
    Specfile patch from Jan Pokorny.
  - Resolves: rhbz#626415


author: Jay Fenlason <fenlason@redhat.com> 1.5.7-8
changelog:
  - Add the -output patch to have programs use /var/cache/ibutils
    instead of /tmp
    Resolves: bz958569


author: Doug Ledford <dledford@redhat.com> - 1.5.7-9
changelog:
  - We built a new opensm against a new libibumad and libibmad
    to resolve a bug.  So we need to rebuild this to be against
    the new libs.  Updated to latest upstream since we had to
    rebuild anyway and it's often needed to make it compatible
    with the minor changes in libibumad and libibmad and
    opensm-libs
  - Related: bz1082730


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.6
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.17-35.el6_8.1
changelog:
  - fix regression with 'jobs' builtin output not going to stdout (bug #1357127)
  - fix several regressions in tcsh-6.17.00-quote-backslashes-properly.patch (bug #1357126)


author: Thomas Haller <thaller@redhat.com> - 1:0.8.1-58
changelog:
  - man: add manual pages for nm-applet (rh #564465)
  - man: add manual pages for nm-connection-editor (rh #564467)
  - core: don't fight with the kernel over the default IPv6 route (rh #991341)


author: Thomas Haller <thaller@redhat.com> - 1:0.8.1-59
changelog:
  - applet: remove nag dialog for missing CA certificate (rh #758076)
  - connection-editor: fixup preserve EAP passwords between options (rh #713975)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-12
changelog:
  - qemu: Eliminate bogus error log when changing netdev's bridge (rhbz#885838)
  - remote: Avoid the thread race condition (rhbz#866524)
  - storage: Error out earlier if the volume target path already exists (rhbz#832302)
  - dnsmasq: Fix parsing of the version number (rhbz#885727)
  - qemu: Restart CPUs with valid async job type when doing external snapshots (rhbz#885081)
  - examples: Fix balloon event callback (rhbz#884650)
  - util: Don't fail virGetGroupIDByName when group not found (rhbz#883832)
  - util: Don't fail virGetUserIDByName when user not found (rhbz#883832)
  - util: Rework error reporting in virGet(User|Group)IDByName (rhbz#883832)
  - util: Fix warning message in previous patch (rhbz#883832)


author: Colin Walters <walters@verbum.org> - 1:1.2.24-5
changelog:
  - Merge changes from RHEL-6 branch:
    * Drop default patch fuzz
    * Merge CVE-2010-4352.patch from RHEL-6_0-Z
  - Apply patches for CVE-2011-2200
  - Resolves: #725313


author: Ville Skyttä <ville.skytta at iki.fi> - 1:3.2.5-7
changelog:
  - Get rid of csh dependency, add missing one on bc (#435993).
  - Build with $RPM_OPT_FLAGS (#329831).
  - Convert specfile to UTF-8.
  - Add URL, fix source URL.
  - Escape macros in changelog.
  - Improve summary.


author: Ivan Devat <idevat@redhat.com> - 0.9.148-3
changelog:
  - Fixed updating cluster properties from older version of web UI
  - Fixed syntax error in utilization attributes functions
  - Resolves: rhbz#1298163
  - Related: rhbz#1260021


author: Joe Orton <jorton@redhat.com> - 2.2.15-4
changelog:
  - use init script to rotate logs (#606955)
  - disable keepalive for 100-continue and error response (#606964)


author: Joe Orton <jorton@redhat.com> - 2.2.15-9.3
changelog:
  - add security fixes for CVE-2011-3347, CVE-2011-3368 (#743901)
  - fix regressions in CVE-2011-3192 patch (#736592)


author: Harald Hoyer <harald@redhat.com> 147-2.26
changelog:
  - more quirk for virtual machines, which do not report correct
    CDROM information
  Resolves: rhbz#624707


author: Harald Hoyer <harald@redhat.com> 147-2.27
changelog:
  - added ID_SERIAL_RAW to scsi_id export output, which is not
    whitespace stripped
  Resolves: rhbz#612173


author: Harald Hoyer <harald@redhat.com> 147-2.28
changelog:
  - quirk for cisco virtual cdrom was not complete, reports
    blank media, rhbz#628962
  Resolves: rhbz#624707


author: Harald Hoyer <harald@redhat.com> 147-2.29
changelog:
  - set the selinux context for "add" events, regression
    the fix for rhbz#575128 caused a lot of selinux errors like
    rhbz#603729
  Resolves: rhbz#575128


author: Harald Hoyer <harald@redhat.com> 147-2.30
changelog:
  - fixed udevadm segfault, if log is set to debug
  Resolves: rhbz#657360
  - fixed keyboard handling for extra keys, especially volume
    control
  Resolves: rhbz#617572
  - quote output of 'udevadm info --query=shenv' or
                    'udevadm info --query=shproperty'
  Resolves: rhbz#644330


author: Harald Hoyer <harald@redhat.com> 147-2.31
changelog:
  - fixed zero macs in 70-persistent-net.rules
  Resolves: rhbz#656059
  - add 42-qemu-usb.rules
  Resolves: rhbz#663064
  - create /dev/hugepages directory
  Resolves: rhbz#667750


author: Harald Hoyer <harald@redhat.com> 147-2.32
changelog:
  - added new page codes for scsi_id, to export ID_SERIAL_80 and ID_SERIAL_83.
  Resolves: rhbz#644902
  - correctly handle ENV{ACL_MANAGE}==0
  Resolves: rhbz#674168


author: Harald Hoyer <harald@redhat.com> 147-2.34
changelog:
  - add CFLAGS and LDFLAGS to add missing PIE and RELRO flags
  Resolves: rhbz#676004
  - fixed udevadm trigger segmentation fault
  Resolves: rhbz#677857


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.16.4.1567-2
changelog:
  - updated to 1.16.4
  - rediffed/updated patches
  - splitted some subpackages (c++, client) out of main package as they
    introduce additional dependencies (c++, curl)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.16.24-1200.1840
changelog:
  - updated to 1.16.24
  - rediffed patches
  - added patch fix handling of wrong certificates (Nikola Pajkovsky)
  - added support for $XMLRPC_TRACE_CURL env (John Dennis)
  - fixed 'xmlrpc-c-config --help' output (#531910)
  - build xmlrpc_pstream tool


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.el6_1.1
changelog:
  - backported GSSAPI delegation from upstream version 1.27.04 with strong attention
    to libxmlrpc++ client ABI backward compatibility (#729793)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.el6_1.2
changelog:
  - added Requires libcurl to the client/apps packages (.so libraries needed)
  - specified BuildRequires curl-devel version for CURLOPT_GSSAPI_DELEGATION option


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.3-1
changelog:
  - Add get_flags method from the first python-ethtool contributor, yay
  - Add pifconfig command, that mimics the ifconfig tool using the
    bindings available


author: Ales Ledvinka <aledvink@redhat.com> - 5.6-4
changelog:
  - With no value provided for watchdog-timeout do not attempt
    to set it. Avoid conflict with custom module parameter.
  - Resolves: rhbz#1099604


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-31.P1.1
changelog:
  - An error in the handling of malformed client identifiers can
    cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843120)
  - Memory Leaks Found In ISC DHCP (CVE-2012-3954, #843120)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.6
changelog:
  - Remove contiguous CPU indexes assumption (rhbz#1080439)
  - qemu: monitor: Fix error message and comment when getting cpu info (rhbz#1080439)
  - qemu: monitor: Filter out thread ids of CPUS that were unplugged (rhbz#1080439)
  - qemu: monitor: Fix invalid parentheses (rhbz#1080471)
  - virNetClientSetTLSSession: Restore original signal mask (rhbz#1080501)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.8
changelog:
  - LSN-2014-0003: Don't expand entities when parsing XML (CVE-2014-0179)
  - QoS: make tc filters match all traffic (rhbz#1096806)
  - use virBitmapFree instead of VIR_FREE for cpumask (rhbz#1091206)
  - Properly free vcpupin info for unplugged CPUs (rhbz#1091206)
  - sanlock: code movement in virLockManagerSanlockAcquire (rhbz#1097227)
  - sanlock: don't fail with unregistered domains (rhbz#1097227)
  - sanlock: avoid leak in acquire() (rhbz#1097227)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100202-6
changelog:
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - fix stdin for double command substitution (#584704)


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-1
changelog:
  - Update to tmpwatch-2.9.16.
  - Exclude /tmp/hsperfdata_*.
    Resolves: #527425
  - Preserve timestamps where possible.


author: Dave Airlie <airlied@redhat.com> 9.0-0.8
changelog:
  - CVE-2013-1872: memory corruption oob read/write on intel (#963063)
  - CVE-2013-1993: interger overflows in protocol handling (#961613)


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-6
changelog:
  - Kernel module aliases configuration for kmod. (#1032965)
  - Big-Endian authentication fix. (#1032963)
  - Revert short options removal to preserve 0.7.16 command line parameters.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.3
changelog:
  - Support repetition of --addtag and --deltag arguments.
  - Add infrastructure for specific cmdline arguments to be repeated in groups.
  - Split the_args cmdline arguments and values into arg_props and arg_values.
  - Fix fsadm to not require '-f' for resize of unmounted filesystem.
  - Fix fsadm to detect mounted filesystems on older system
  - Fix regex optimiser not to ignore RHS of OR nodes in _find_leftmost_common.
  - Update VG metadata only once in vgchange when making multiple changes.
  - Allow independent vgchange arguments to be used together.
  - Fix vgchange to process -a, --refresh, --monitor and --poll like lvchange.
  - Don't take write lock in vgchange --refresh, --poll or --monitor.
  - Skip dm devices in scan if they contain only error targets or are empty.


author: Than Ngo <than@redhat.com> - 3.5.10-21
changelog:
  - fix security issues in libltdl bundle within kdelibs CVE-2009-3736
  - backport upstream patches
  - patch autoconfigury to build with autoconf >= 2.64 (Stepan Kasal)


author: Than Ngo <than@redhat.com> - 3.5.10-25
changelog:
  - Resolves: bz#681901, drops old Obsoletes/Provides
  - Resolves; bz#734447, use ca-certificates' ca-bundle.crt


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-18.el6
changelog:
  - CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149086)
  - Fix html serialization error and htmlSetMetaEncoding (rhbz#1004513)


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-19.el6
changelog:
  - Stop parsing on entities boundaries errors
  - Fix missing entities after CVE-2014-3660 fix (rhbz#1149086)


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-20.1
changelog:
  - Fix a series of CVEs (rhbz#1286495)
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - Libxml violates the zlib interface and crashes


author: Mike Cressman <mcressman@redhat.com> - 0.14-19
changelog:
  - BZs: 609685, 683711, 693444, 707682, 729311, 801465, 808090,
         809357, 811481, 817283, 826989, 831365, 835628


author: Akemi Yagi <toracat@centos.org> [2.6.32-220.23.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client, EeePC hotkey, JFS
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - As of 2.6.32-131.12.1.el6, parallel printer support is enabled in distro kernel.
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix for the 208.5-days-and-the-system-reboots issue [bug#5397]
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Enabled ARPD [bug#5709]
  - Added a patch for PCIe PME issue [bug#5383]


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.1
changelog:
  - Resolves: rhbz#1284966 add libreswan to RHEL6 (core)
  - Resolves: rhbz#1288086 /var/run/pluto should have 755 and should have 700


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.2
changelog:
  - Resolves: rhbz#1289498 keyingtries=0 is broken
  - Resolves: rhbz#1166151 Pluto crashes on during 'service ipsec stop'
  - Resolves: rhbz#1216946 IPv6 in RHEL6 fails after reboot
  - Resolves: rhbz#1144462 ikev2 status shows "no tunnels up" while tunnel is up


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1345959 openswan - libreswan migration issues
  - Resolves: rhbz#1360134 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1313709 ipsec pluto returns zero even if it fails [doc change only]
  - Resolves: rhbz#1315415 ipsec.conf manpage does not contain any mention about crl-strict option


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.1
changelog:
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort when ' auto --up --asynchronous' is used
  - Resolves: rhbz#1335896 ipsec initnss/checknss custom directory not recognized


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.2
changelog:
  - Resolves: rhbz#1313843 Prescript warning: Missing control file /var/run/pluto/pluto.ctl
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort [extended patch]
  - Resolves: rhbz#1369990 Libreswan connection sometimes does not get re-established after one side restarts


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.3
changelog:
  - Resolves: rhbz#1403201 pluto uses up available memory and fails with 'unable to popen'
  - Resolves: rhbz#1311360 When IKE rekeys [...] (updated for IKEv1 responder side)


author: Chris Feist <cfeist@redhat.com> - 3.9.2-2
changelog:
  - Postgres-8 resource agent now properly detects if postgresql was started
  - fs.sh resource agent now returns the proper response code when a device
    does not yet exist.
  - Resolves: rhbz#709400 rhbz#694816


author: Chris Feist <cfeist@redhat.com> - 3.9.2-3
changelog:
  - Main rgmanager resource agents now use proper return codes for use with
    pacemaker.
  - NFS mounts now unmount faster when the network is lost.
  - Resolves: rhbz#678497 rhbz#727643


author: Chris Feist <cfeist@redhat.com> - 3.9.2-4
changelog:
  - Create a link for the modified dtd for rgmanager
  - Fix ocf-tester so rgmanager agents requiring bash don't cause syntax errors
  - Resolves: rhbz#727643


author: Chris Feist <cfeist@redhat.com> - 3.9.2-9
changelog:
  - More SAPDatabase updates to fix SAP workloads
  - Allow rgmanager SAP resource agent to manage SAP Webdispatcher & TREX
  - Resolves: rhbz#726500 rhbz#746996


author: Chris Feist <cfeist@redhat.com> - 3.9.2-10
changelog:
  - Fix to prevent /dev/shm being filled up by ocf_log debug messages
  - NFS client resource are now recovered properly when they are missing in
    /var/lib/nfs/etab
  - Resolves: rhbz#797922 rhbz#749713


author: Chris Feist <cfeist@redhat.com> - 3.9.2-11
changelog:
  - In LVM HA agent, remove missing PVs before attempting to remove the tag
  - Rgmanager now properly detects when clvmd is not running when using HA LVM
  - vm.sh now supports a 'tunnelled' option
  - Resource agent script now have common directory set properly
  - Fixed apache resource agent configuration with IPv6
  - fs-lib.sh now will now properly work with all return codes of mount
  - netfs now allows you to have the same NFS export mounted in different locations
  - The timeout in rhev-check has been increased to 90 seconds
  - Resolves: rhbz#772773 rhbz#729481 rhbz#712174 rhbz#784357 rhbz#742859 rhbz#728086 rhbz#799998 rhbz#727546


author: Chris Feist <cfeist@redhat.com> - 3.9.2-12
changelog:
  - Fix for LVM HA agent for service relocation after leg failure (we now
    properly remove tag).
  - Resolves: rhbz#772773


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050190


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - Resolves: rhbz#1085009


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115580
  - Resolves: rhbz#1115867


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.0-7.1.13.4
changelog:
  - Add fix for ArrayIndexOutOfBoundsException when certain glyphs are processed
  - Resolves: rhbz#1132523


author: Rob Crittenden <rcritten@redhat.com> - 1.1-7
changelog:
  - Fix calculation of username string length in authenticate_gss_client_wrap
    (#1057333)
  - Fix version in setup.py so egg information is correct (#973379)


author: Doug Ledford <dledford@redhat.com> - 1.0.2-1
changelog:
  - Bump and rebuild against latest libibverbs and latest valgrind-devel
  - Update to latest upstream release for various fixes and improvements
  - Resolves: bz1142162, bz1116096


author: Martin Milata <mmilata@redhat.com> - 0.17-2
changelog:
  - Backport commit ec1bf395 that fixes several memory leaks
  - Backport abf036d5 that fixes a NULL dereference
  - Backport 6e0f49a3 that adds version to the manual page
  - Resolves: #803774, #903140, #905854


author: Steve Dickson <steved@redhat.com> 1.2.3-8
changelog:
  - initscripts: just try to mount rpc_pipefs always (bz 692702) 
  - Rely on crypto module autoloading in init scripts
  - svcgssd: Document "-n" for svcgssd (bz 697359)
  - mount.nfs: anticipate RLIMIT_FSIZE (bz 697981)
  - exportfs manpage: Ipv6 update (bz 715078)
  - mountd: Stop segfault in mtab code (bz 723438)
  - exportfs: wilcards in exports can lead to unintended mounts (bz 715391)
  - umount: allow spaces in unmount paths (bz 702273)
  - specfile: reordered how libgssglue is linked in (bz 720479)


author: Steve Dickson <steved@redhat.com> 1.2.3-9
changelog:
  - umount.nfs: Got IPV6 unmounts working again (bz 732673)
  - mountd: return multiple hosts exporting the same directory (bz 726112) 
  - mount: Better error message for invalid version (bz 723780)


author: Steve Dickson <steved@redhat.com> 1.2.3-15
changelog:
  - mout.nfs: Don't roll back to IPv4 whe IPv6 fails (bz 744657)
  - rpcdebug: Added pNFS and FSCache debugging (bz 747400)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-11
changelog:
  - mention it in config file, that we disabled SSLv2 and SSLv3
    by default (#1153041)
  - add ssl_protocols configuation option and disable SSLv2 and SSLv3
    by default (#1153041)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.4
changelog:
  - Update to 0.8.1 release candidate
  - core: fix WWAN hardware enable state tracking (rh #591622)
  - core: fix Red Hat initscript return value on double-start (rh #584321)
  - core: add multicast route entry for IPv4 link-local connections
  - core: fix connection sharing in cases where a dnsmasq config file exists
  - core: fix handling of Ad-Hoc wifi connections to indicate correct network
  - core: ensure VPN interface name is passed to dispatcher when VPN goes down
  - ifcfg-rh: fix handling of ASCII WEP keys
  - ifcfg-rh: fix double-quoting of some SSIDs (rh #606518)
  - applet: ensure deleted connections are actually forgotten (rh #618973)
  - applet: don't crash if the AP's BSSID isn't availabe (rh #603236)
  - editor: don't crash on PolicyKit events after windows are closed (rh #572466)


author: Ian Kent <ikent@redhat.com> - 5.0.5-64
changelog:
  - bz868973 - autofs leaks UDP sockets when a NFSv4 server is not available
    - destroy the socket when rpc_ping_proto() failed for NFSv4.
  - Resolves: rhbz#868973


author: Ian Kent <ikent@redhat.com> - 5.0.5-65
changelog:
  - bz836422 - autofs /net maps do not refresh list of shares exported on
    the NFS server
    - fix map entry duplicate offset detection.
  - Related: rhbz#836422


author: Ian Kent <ikent@redhat.com> - 5.0.5-66
changelog:
  - bz866338 - update the man pages to describe 'nobind' option current behaviour
    - fix nobind man page description.
  - Resolves: rhbz#866338


author: David Walluck <dwalluck@redhat.com> 0:1.1-7.1
changelog:
  - Fedora-specific: enable GCJ support
  - Fedora-specific: build with java 1.6.0
  - Fedora-specific: disable integration and tests


author: Akira TAGOH <tagoh@redhat.com> - 0.108.0-2
changelog:
  - Fix issue the invocation of IM always fails in the internal status. (#582448)
  - Add imsettings-lxde subpackage.


author: Jens Petersen <petersen@redhat.com> - 0.108.0-3.5
changelog:
  - only enable XIM for X locale compose for necessary locales (#616061)
    (for pt_BR, fi_FI, am_ET, el_GR, and ru_RU):
  - drop imsettings-none.conf-gtk-xim-default.patch
  - add imsettings-xinput-xcompose.patch


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.7
changelog:
  - High: Adds ability to monitor VirtualDomain instances using
    kvm without requiring libvirtd.

    Resolves: rhbz#1054327


author: Ondrej Vasik <ovasik@redhat.com> 1.5-7
changelog:
  - Merge review (#226434) changes: convert AN-1.5 to utf-8,
    spec file cosmetic/policy changes, ship README.linux in doc


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871814


author: Lukáš Tinkl <ltinkl@redhat.com> - 6:4.3.4-22
changelog:
  - Resolves rhbz#1206180 - Opening a terminal in Konqueror / Dolphin does not 
    inherit environment variables


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-24
changelog:
  - resolves: #921612
    fix issues when sa data files weren't correctly overwritten in some cases.
    Part of this fix is lowering the line when the sa data files are kept
    in subfolders (from 28 to 25 days), and because of this, the default history
    value was also lowered from 28 to 25 days.


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-25
changelog:
  - related: #921612
    reverted the boundary when the sa data files are stored in directories
    and default history value back to 28. Without the revert, backward
    compatibility could be broken in some cases.


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-26
changelog:
  - resolves: #1110851
    added sysstat(5) man page describing /etc/sysconfig/sysstat file
  - resolves: #1102603
    added possibility to set compress method in /etc/sysconfig/sysstat file


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-27
changelog:
  - resolves: #1124180
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-28
changelog:
  - resolves: #1224878
    fixed bug when pidstat could run out of pre-allocated space for PIDs
  - resolves: #887231
    fixed segfaults on bogus localtime input
  - resolves: #1185057
    added two new columns to iostat: r_await and w_await
  - resolves: #1188612
    fixed description of %util field in sar(1) and iostat(1) man pages


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-31
changelog:
  - related: #1224878
    in some corner cases, pidstat could still output values for % CPU bigger
    than 100; this commit fixes the issue


author: Michal Sekletar <msekleta@redhat.com> - 9.0.4-32
changelog:
  - cifsiostat: report correct number of open/closed files (#1346844)
  - sar: output timestamps when running with ko_KR.UTF-8 locale (#1363947)


author: Adam Jackson <ajax@redhat.com> 1:7.2-3
changelog:
  - Move bdftruncate (and its perl dependency) to a subpackage.
  - %doc for the non-empty READMEs and non-stub COPYINGs.


author: Dmitry V. Levin <ldv@altlinux.org> - 4.8-1
changelog:
  - New upstream release:
    + fixed ERESTARTNOINTR leaking to userspace on ancient kernels (#659382);
    + fixed decoding of *xattr syscalls (#885233);
    + fixed handling of files with 64-bit inode numbers by 32-bit strace (#912790);
    + added aarch64 support (#969858).


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.6-1
changelog:
  - update to 1.6
  - add suggested summary, buildrequires, and modify install call as suggested
    by package review (#226021)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-2
changelog:
  - fix use of macro in changelog (rpmlint)
  - build with --disable-rpath (rpmlint)
  - build with %{?_smp_mflags}


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-3
changelog:
  - turn off common lisp bindings the right way
  - drop finger output
  - recode the changelog into UTF-8 if it isn't UTF-8 (rpmlint)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-7.1
changelog:
  - added lost patch for #647411: openmotif-2.3.3-motifzone_1529.patch
    (rhbz#1096754)
  - fixed missing outline in mwm while moving window (rhbz#1096749)
    (copy of rhbz#997241)


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.4.2-3
changelog:
  - Resolves: rhbz#833512 provide a /usr/bin/openoffice.org-1.9 for backwards compat
  - Resolves: rhbz#902694 inaccessibile CJK/Indic shortcuts


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-19
changelog:
  - RHEL-6.7 erratum
    - modified the authlogicfix patch to fix #1144448
    - fixed a bug in the ldapusermatchfix patch
    Resolves: rhbz#1144448
    Resolves: rhbz#1142122


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - removed defaults option requiretty from /etc/sudoers
    - backported pam_service and pam_login_service defaults options
    - implemented a new defaults option for changing netgroup processing
      semantics
    - fixed visudo's quiet cli option
    Resolves: rhbz#1248695
    Resolves: rhbz#1247231
    Resolves: rhbz#1241896
    Resolves: rhbz#1197885
    Resolves: rhbz#1233205


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - fixed ldap's and sssd's sudoOption value and remove quotes
    - fixed ldap's and sssd's sudoOption whitespaces parse problem
    Resolves: rhbz#1144422
    Resolves: rhbz#1279447


author: kwizart < kwizart at gmail.com > - 0.2.3-7
changelog:
  - Disable Gnome/KDE default support via builtin modules.
   (it needs to be integrated via Gconf2/neon instead).


author: kwizart < kwizart at gmail.com > - 0.2.3-8
changelog:
  - Merge NetworkManager module into the main libproxy package
  - Main Requires the -python and -bin subpackage 
   (splitted for multilibs compliance).


author: Adam Jackson <ajax@redhat.com> 10.1.1-0.1
changelog:
  - Rebase to Mesa 10.1.1
  - Initial rebuild against llvm 3.4
  - Add llvm_rebase macro for future convenience


author: Till Maas <opensource till name> - 20061109-2
changelog:
  - Make description line less than 80 instead of less that 81 characters long
  - Permissions of manpage are 0644 instead of 0755 now


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.1-6
changelog:
  - Fix man page references: fence_virtd.conf -> fence_virt.conf
    (fix_man_page_references_fence_virtd_conf_fence_virt_conf.patch)
    Resolves: rhbz#667170


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.3-1
changelog:
  - Zap patch queue
  - Add post call to fence-virt to integrate with cluster 3.1.4
  - Rebase to latest upstream
  - Provide 'domain' in metadata output for compatibility
  - Fix input parsing to allow domain again
    Resolves: rhbz#719645


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.3-3
changelog:
  - Fix error getting status from libvirt-qpid plugin
    Convert libvirt-qpid plugin to QMFv2
    Add libvirt-qmf support to the libvirt-qpid plugin
    Resolves: rhbz#691200


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-29
changelog:
  - initialize NSS with no database if the selected database is broken (#772642)
  - use NSS_InitContext() to avoid a collision with OpenLDAP (#738456)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-30
changelog:
  - print reason phrase from HTTP status line on error (#676596)
  - fix typo in curl.1 man page (#729984)
  - introduce the --delegation option of curl (#730445)
  - enforce versioned libssh2 dependency for libcurl (#741935)
  - nss: select client certificates by DER (#746629)
  - fix a build failure when building against newer libssh2-devel (#841905)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-20.1
changelog:
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server
  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
  - disable SSLv2 in the generic TLS method


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19
changelog:
  - Fix sandbox -H and -T regression
  Resolves: #626404
  - Fix fcontext translation handling in system-config-selinux


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.9
changelog:
  - selinux-polgengui should not blow up on disabled SELinux system
  Resolves: #695288
  CVE-2011-1011 policycoreutils: insecure temporary directory handling in seunshare
  Resolves: #679690
  check return value of getpwuid()
  Resolves: #684015 
  Fix semanage module -D' traceback
  Resolves: #666861 
  sandbox -- AttributeError: 'module' object has no attribute 'chcon' 	
  Resolves: #690502 	
  system-config-selinux could not open interface info 	
  Resolves: #696809
  Mv sandbox.conf.5.gz to sandbox.5.gz and put in base package
  Resolves: #690744 
  sestatus usage message not complete (missing -b option) 	
  Resolves: #705027
  correct package name in the -sandbox subpackage description 	
  Resolves: #679798
  dracut attempts to load_policy with SELinux=disabled 	
  Resolves: #659076
  Resolves: #658532
  8 options are not described in semanage man page 	
  Resolves: #677541
  Mention "semanage module" in semanage man page 	 
  Resolves: #677542
  Update translations
  Resolves: #589232 
  Allow polcycoreutils-gui and tools to run on disabled SELinux systems
  Resolves: #695288 
  Resolves: #689153


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.10
changelog:
  - Fix policycoreutils-sandbox description
  - Change sepolgen-ifgen to search all available policy files
  - Fix portspage in system-config-selinux to not crash
  - fix to sandbox 
    - Fix seunshare to use more secure handling of /tmp
      - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
     - Change to allow sandbox to run on nfs homedirs, add start python script
     - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
     - Move seunshare to sandbox package
     - Fix sandbox to show correct types in  usage statement
  Resolves: #679690
  Resolves: #679689
  Resolves: #677541
  Resolves: #679798
  - Fixes for sepologen 
    - Usage statement needs -n name
    - Names with _ are being prevented
    - dbus apps should get _chat interface
    - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
    - Add sandbox to sepolgen
    - Polgengui raises the wrong type of exception.  #471078
  - Cleanup chcat man page
  - Update translations
  Resolves: #589232
  - restorecond fixes
    - Have restorecond watch more directories in homedir
    - Fix restorecond watching utmp file for people logging in our out
    - Exit in restorecond if it can not find a UID in the passwd database

  - Stop fixfiles from complaining about missing dirs

  - Semanage fixes
    - Fix up node handling in semanage command
    - Fix proper handling of getopt errors
    - Do not allow modules names to contain spaces
    - Change semanage to not allow it to semanage module -D
  Resolves: #684015
  Resolves: #677542
  - Change setsebool to suggest run as root on failure
  - Don't report error on load_policy when system is disabled.
  Resolves: #659076
  - Fix unchecked return value of getpwuid()
  Resolves: #684015


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.11
changelog:
  - Remove sandbox calling -k, only should be used by seunshare, should not be
  called all the time.
  Resolves: #679690
  Resolves: #679689
  Resolves: #677541
  Resolves: #679798


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-10
changelog:
  - fix verification of SSL certificate with NUL in name (#553390, CVE-2009-4565)
  - don't start service by default (#529686)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-1
changelog:
  - new version 8.14.4 (#552078)
  - RPM attributes S, 5, T not recorded for statistics file
  - adapted patches: makemapman, dynamic, switchfile (#552078)
  - movefiles patch incorporated into aliases_dir patch
  - dropped patches (fixed upstream): exitpanic, certcnnul


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-5
changelog:
  - used noreplace for sasl config
  - used ghost instead of explicit provides
  - deffattr changed to (-,root,root,-)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-9
changelog:
  - fixed MAXHOSTNAMELEN for FQDN
    resolves: rhbz#640234
  - fixed assertion if server connection is lost while making LDAP query
    resolves: rhbz#837007
  - fixed milterfdleaks patch to check socket before using fcntl on it
    resolves: rhbz#845821
  - fixed ldap_routing macro
    resolves: rhbz#890227
  - properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    resolves: rhbz#1106852


author: Petr Šabata <contyk@redhat.com> - 1.0.22-1
changelog:
  - Update to 1.0.22 with 7d3c9d1, "Add date and ps output to fcoedump.sh"
  - Require libhbalinux-1.0.13 or newer


author: Petr Šabata <contyk@redhat.com> - 1.0.22-2
changelog:
  - Reverting a part of d789267 upstream patch.  Initscript shouldn't return code 2 on
    status query when the daemon is running. (#804936)


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-120
changelog:
  - 731246 (CVE-2011-2939)CVE-2011-2939 heap overflow - decoding Unicode string
  - 743010 - perl: code injection vulnerability in Digest->new()
  - Resolves: rhbz#743093, rhbz#743091


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-122
changelog:
  - Resolves: rhbz#738421 - Package bzip2 modules
  - Resolves: rhbz#750145 - Add require EE::MM into IPC::Cmd


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915692 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915692 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915692 - CVE-2013-1667 (DoS in rehashing code)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.3-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  previous patch broke build on el5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.4-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.5-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix another coverity NULL deref in previous patch


author: Peter Jones <pjones@redhat.com> - 0.97-70.1
changelog:
  - Fix error on invocation of "grub-install /dev/cciss/c0d0" (patch from jnevill)
    Resolves: rhbz#742976


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-82
changelog:
  - Release 1.2.11.15-82
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-83
changelog:
  - Release 1.2.11.15-83
  - Resolves: #1327065 - After updating server, component nss-3.21.0-0.3.el6_7.x86_64, some client applications cannot connect to server (DS 48798)
  - Resolves: #1266920 - invalid message about write_changelog_and_ruv on consumers (DS 47801)
  - Resolves: #1330758 - add a nsTLS1.0 on or off new configuration parameter to cn=encryption,cn=config in RHEL 6 389-ds-base (DS 48816)
  - Resolves: #1369572 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964)
  - Resolves: #1371706 - Server Side Sorting crashes the server. (DS 48970)
  - Resolves: #1371678 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)
  - Resolves: #1370145 - cannot reindex retrochangelog (DS 47619)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-84
changelog:
  - Release 1.2.11.15-84
  - Resolves: #1352109 - Replication stops working only when fips mode is set to true  (DS 48909)
  - Resolves: #1372420 - DES to AES backport issues (DS 47462)
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)
  - Resolves: #1382386 - Directory Server accepts a wrong userdn macro ACI (DS 449)
  - Resolves: #1382519 - 1.2.11 only -- coverity fixes (DS 49004)
  - Resolves: #1387022 - specific search with sizelimit=1 sometimes returns no entry (DS 47703)
  - Resolves: #1387772 - trace args debug logging must be more restrictive (DS 49009)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-85
changelog:
  - Release 1.2.11.15-85
  - Resolves: #1372420 - DES to AES backport issues (DS 47462)
  - Resolves: #1391324 - ds9 backport 47411 - Replace substring search with plain search in referint plugin (DS 47411)


author: Boris Ranto <branto@redhat.com> - 0:1.2.1-8
changelog:
  - New release (0:1.2.1-8)
  - Check record counts against array length
  - Increase max record ids in sensor tools to 4096


author: Steve Grubb <sgrubb@redhat.com> 2.0.6-1
changelog:
  resolves: #584981 - ausearch/report performance improvement needed
  resolves: #640948 - inodes display incorrectly when listing rules
  resolves: #647128 - audit_encode_nv_string() will crash on NULL pointer on OOM
  resolves: #647131 - Man page for audit_encode_nv_string() is incorrect
  resolves: #670938 - searching on auid = -1 results in all events


author: Jaromir Capik <jcapik@redhat.com> - 6.3.2-66
changelog:
  - Resolves: rhbz#837621
  - Fixing 'sa -u' SIGSEGVs & wrong UIDs
  - Fixing the ChengeLog version typos ... 6.2.3 -> 6.3.2


author: Bob Relyea <rrelyea@redhat.com> - 3.14.3-21
changelog:
  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1183448 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.81
changelog:
  - Add 0219-RHBZ-1136966-fix-partition-mapping-creation-race-with-kpartx.patch
    * Only run kpartx on device activation
  - Resolves: bz #1136966


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.82
changelog:
  - Add 0220-RHBZ-1128786-dont-show-pg-timeout.patch
    * remove pg_timeout from chow config
  - Add 0221-RHBZ-1175888-add-wwid-option.patch
    * add multipath option "-a". To add a device's wwid to the wwids file
  - Add 0222-RHBZ-1175888-cmdline-wwid.patch
    * make multipathd read wwids specified by the kernel commandline mpath.wwid
      option on startup.
  - Resolves: bz #1128786, #1175888


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.83
changelog:
  - Add 0223-UPBZ-1120047-change-alua-prio.patch
    * Paths with the pref bit set will no longer be in pathgroups by
      themselves, if there are other paths that they could be load
      balanced with.
  - Add 0224-UPBZ-1148096-reload-on-rename.patch
    * multipath will reload a table even if it also renames the device
  - Add 0225-UPBZ-1148096-user-friendly-name-remap.patch
    * multipath will default to continue using the existing
      user_friendly_name
  - Add 0226-RHBZ-1006895-add-config_dir-option.patch
    * multipath will now also read its configuration from files with
      the .conf suffix in the directory specified by config_dir
      which defaults to /etc/multipath/conf.d
  - Add 0227-RHBZ-1171862-thread-safe.patch
    * only multipathd will keep a global cache of sysfs information
      for paths.
  - Resolves: bz #1006895, #1120047, #1148096, #1171862


author: Petr Sabata <psabata@redhat.com> - 0.9.38-4
changelog:
  - patch to resolve hang observed during FCoE boot due to dcbx failing to initiate PFC and FCoE app priority negotiations
  - Resolves: rhbz#631587


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-82
changelog:
  - check return value of PK11_Authenticate in ssh-add -n (#782912)
  - document available methods to RequiredAuthentications[12] (#821641)
  - fix ssh-copy-id (#836650)
  - fix segmentation fault in ssh client (#836655)
  - update pam_ssh_agent_auth to 0.9.3 upstream version
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running (#834404)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-20
changelog:
  - register and deregister: if there is an error registering or deregistering
    one or more collection, skip it but return non-zero return code
  - fix the problem with metapackage dependencies when BuildArch is specified


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-21
changelog:
  - fix an obscure segfault when listing collections on i386
  - fix registration to work with slash-ended paths
  - add the %scl_dependency_generators macro
  - drop recursive ownership of /usr/lib within SCL root


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-22
changelog:
  - Add execution of register and deregister scripts during registration
    and deregistration if they exist.
  - Add capability to make collection nfs mountable using macro nfsmountable.
  - removed the dependency generators and all related changes
    (maintainers' demands)


author: Lubos Kardos <lkardos@redhat.com - 20120927-23
changelog:
  - Modified paths of state and conf files
  - Add owning and creating of state and conf files if nfsmountable is defined
  - Add printing file names in error messages


author: Lubos Kardos <lkardos@redhat.com> - 20120927-25
changelog:
  - Creating filelist in build subdirectory instead of build directory.
  - Removing filelist before build.


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-4
changelog:
  - Patch for new configurable options(rhbz# 219201): 
    disable first upper and last digit check, passwords 
    prompts can be read from a file
  - Fixed an issue with spec file where "Release:" is not
    specified with "(?dist)". Without this, it gives problem
    when tagging across different fedora releases.


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-5
changelog:
  - Fixed following rpmlint errors on src rpm:
    pam_passwdqc.src: W: summary-ended-with-dot Pluggable
    password quality-control module.,
    pam_passwdqc.src:11: E: buildprereq-use pam-devel


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-6
changelog:
  - Added explanation of new options, disable_firstupper_lastdigit_check,
    oldpass_prompt_file, and newpass_prompt_file in the man pages
  - Fixed output messages when disable_firstupper_lastdigit_check option
    is used 
  Resolves: #219201 pam_passwdqc should be more configurable


author: Ray Strode <rstrode@redhat.com> 2.28.1-29
changelog:
  - Put background.xml in ~/.config/gnome-control-center
    This makes it more easily admin relocatable
    Resolves: #524942


author: Alon Levy <alevy@redhat.com> - 0.1.0-4
changelog:
  - address review issues:
   - Group for main and devel and tools
   - Requires for devel and tools
  - fix changelog for previous entry (day was wrong, and macro quoting)


author: Alon Levy <alevy@redhat.com> - 0.1.2-1
changelog:
  - bump version to 0.1.2
   - style fixes
   - vscclient.c: fix tabulation
    - add copyright header
    - send init on connect, only start vevent thread on response
    - use hton,ntoh
    - read payload after header check, before type switch
    - update for vscard_common changes, empty Flush implementation
   - vcard_emul_nss: load coolkey in more situations
   - vscard_common.h:
    - VSCMsgInit capabilities and magic
    - VSCMsgReconnect stringified
    - define VSCARD_MAGIC
    - update copyright
    - fix message type enum
   - bump version to 0.1.1
    - vcard_emul,vcard_emul_nss
     - add VCARD_EMUL_INIT_ALREADY_INITED
     - add vcard_emul_replay_insertion_events
   - vreader: add vreader_queue_card_event
    Resolves: rhbz#663063


author: Alon Levy <alevy@redhat.com> - 0.15.0-rc0
changelog:
  - upstream update, it is now qemu based, so build process changed, and version to match.
   - no non-rc release yet of qemu with required patches, hence using rc0. There are still
     some patches carried here that hopefully will get into 0.15.0 or 0.16.0 in the latest.
   - upstream updated to 0.15.0-rc0
   - resolves rhbz#723895


author: Alon Levy <alevy@redhat.com> - 0.14.90-2
changelog:
  - fix permissions of h files to not change because of rebase.
   - change NVR to match libcacard.so
     - will change when qemu-0.15.0 is released.
   - Copied correct README
   - Resolves: rhbz#723895


author: Alon Levy <alevy@redhat.com> - 0.15.0
changelog:
  - not a rebase - no changes in libcacard subdirectory
     between 0.15.0-rc0 and 0.15.0 in the upstream package.
    - but allows the fedora and RHEL package to remain in sync
      on a released version.
   - dropped zlib dep which was only required for configure phase
     via added patch 0001-drop-zlib-check.patch
   - added three patches that only cleanup the build process
     0010-Fix-spelling-in-comments-and-debug-messages-recieve-.patch
     0011-Improvements-to-libtool-support.patch
     0012-Silence-make-if-nothing-is-to-do-for-libcacard.patch
   - Final two patches resolve the bug 727916:
     0013-libcacard-cac-fix-typo-in-cac_delete_pki_applet_priv.patch
     0014-libcacard-vscclient-fix-error-paths-for-socket-creat.patch
   - Resolves: rhbz#727916


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-5
changelog:
  - newusers man page more informative
  - userdel should not need to run semanage
    Resolves: #586330 #586408


author: Petr Machata <pmachata@redhat.com> - 1.41.0-16
changelog:
  - Fix a GCC warning for looser throw specifier in
    boost::exception_ptr::~exception_ptr.
    (boost-1.41.0-exception_ptr.patch)


author: Milan Crha <mcrha@redhat.com> - 2.28.3-20.el6
changelog:
  - Add versioned evolution-conduits to evolution-devel Requires
  - Add nss/nspr libraries to LDAP_LIBS, because latest openldap requires it


author: Peter Hutterer <peter.hutterer@redhat.com> 1.10.4-6.2
changelog:
  - Add patches to change the screen crossing behaviour for multiple
    ScreenRecs (#783505)
  - remove the xorg.conf.man page from our .gitignore - we need to patch it
    now and it's part of the upstream distribution


author: Peter Hutterer <peter.hutterer@redhat.com> 1.10.4-6.3
changelog:
  - xserver-1.10.4-dix-when-rescaling-from-master-rescale-from-desktop-.patch:
    fix rescaling from master to slave if the pointer (#783505)


author: Karsten Hopp <karsten@redhat.com> 1.4.102-4
changelog:
  - remove excludearch s390, s390x (#467788)
    even though s390 does not have libusb or smartCards, the libusb
    packages are required to build other packages.


author: Nikola Pajkovsky <npajkovs@redhta.com> - 3.1.1-8
changelog:
  - Resolves: #575757 - Init script: missing force-reload action, script exits with wrong exit code
  - remove one of init scripts from /etc/init.d


author: Nikola Pajkovsky <npajkovs@redhat.com> - 3.1.1-10
changelog:
  - Resolves: #616760 - lm_sensors init script missing - regression from beta 1
  - revert "remove one of init scripts from /etc/init.d"


author: Michal Minar <miminar@redhat.com> - 3.1.1-11
changelog:
  - Resolves: #623587 - lm_sensors doesn't find/ load coretemp module automatically
  - Resolves: #768365 - sensors-detect reports error when run without user input
  - coretemp_detect function in sensors-detect updated


author: Michal Minar <miminar@redhat.com> - 3.1.1-16
changelog:
  - Related: #610000
  - fixed requirements among packages
  - spelling corrections of summaries and description


author: Michal Minar <miminar@redhat.com> - 3.1.1-17
changelog:
  - Related: #768365
  - Related: #623587
  - Solves spitting of "uninitialized values" messages occuring on ppc64
    architectures.
  - Added generic detection of Intel CPUs for coretemp module to sensors-detect.


author: Bastien Nocera <bnocera@redhat.com> 4.66-1
changelog:
  - Update to 4.66
  - Update cable pairing patch
  - Remove out-dated patches, including wacom pairing
  - Move hidd, pand and dund man pages to the -compat
    sub-package
  Resolves: rhbz#565586


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.33
changelog:
  - Add 0073-RHBZ-650664-clarify-error-msg.patch
      * tell users to increase max_fds, if multipath gets EMFILE trying to
        open a file.
  - Add 0074-RHBZ-602883-dont-print-change.patch
      * don't print messages for every change uevent
  - Add 0075-RHBZ-576919-log-checker-err.patch
      * add log_checker_err default config option, to control the verbosity
        of repeated checker error messages
  - Add 0076-RHBZ-599690-update-multipath-conf.patch
  - Add 0077-RHBZ-622608-nvdisk-config.patch
  - Add 0078-RHBZ-628095-config-warnings.patch
      * print warning messages for invalid config parameters
  - Add 0079-RHBZ-650797-display-iscsi-tgt-name.patch
      * get tgt name for iscsi devices
  - Add 0080-RHBZ-622731-fix-no-config-value-segfault.patch
      * check that a config option has a value before trying to get the
        strlen of the value.
  - Resolves: bz #576919, #599690, #602883, #622608, #622731, #628095, #650664
  - Resolves: bz #650797


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.34
changelog:
  - Add 0081-RHBZ-623644-fix-sysfs-caching.patch
      * Remove attribute value caching, and free cached parent devices on remove
  - Resolves: bz #623644


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.35
changelog:
  - Add 0082-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
      * Set DM_UDEV_DISABLE_DISK_RULES_FLAG in dm_simplecmd to stop blkid from
        running on reloads
  - Add 0083-RHBZ-636213-633643-new-configs.patch
      * Autoconfigs for HP P2000 family and NEC Storage M Series arrays
  - Resolves: bz #631009, #636213, #636213


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.36
changelog:
  - Add 0084-RHBZ-644111-read-only-bindings.patch
      * Add -B multipath and multipathd option, to make the bindings file
        read-only. This is to be used by the initramfs
  - Resolves: bz #644111


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.37
changelog:
  - Add 0085-RHBZ-645605-fix-offline-check.patch
     * Make path_offline return false if it can't deterime a paths state.
  - Rename 0080-RHBZ-622731-fix-no-config-value-segfault.patch to
           0080-RHBZ-662731-fix-no-config-value-segfault.patch
     * accidentally used the wrong bug number
  - Resolves: bz #645605, #662731


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.38
changelog:
  - Remove 0082-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
     * This patch was causing a serious regression (677937), and resolving
       it requires changes in /etc/rc.sysinit, so I'm backing it out for
       now.
  - Resolves: bz #677937
  - Related: bz #631009


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.39
changelog:
  - Add 0086-RHBZ-681144-sysfs-device-cleanup.patch
     * Make sure to remove the sysfs device from cache when the path is
       removed. Also, only search the sysfs device cache under the vecs lock
  - Resolves: bz #681144


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.40
changelog:
  - Add 0087-RHBZ-680480-skip-if-no-sysdev.patch
     * Don't check the path if it has no sysdev, since it is about to
       be removed.
  - Resoves: bz# 680480


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.41
changelog:
  - Add 0088-RHBZ-693524-fix-prio-segfault.patch
     * Don't reuse the the path argument as a variable in the vector
       loop.
  - Resolves: bz# 696157


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.41.el6_1.1
changelog:
  - Add 0089-RHBZ-732384-check-return-value.patch
     * Don't try to update path groups on a path priority change if the
       multipath device has disappeared.
  - Resolves: bz# 732384


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-6
changelog:
  - add function acl_extended_file_nofollow() (#720318)
  - build with partial RELRO support as a security enhancement (#723998)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-7
changelog:
  - fix SIGSEGV of getfacl -e on overly long group name (#1025246)
  - fix test-suite failure on a repeated run (#743847)


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.10
changelog:
  - Fix policycoreutils-sandbox description
  - Change sepolgen-ifgen to search all available policy files
  - Fix portspage in system-config-selinux to not crash
  - fix to sandbox 
    - Fix seunshare to use more secure handling of /tmp
      - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
     - Change to allow sandbox to run on nfs homedirs, add start python script
     - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
     - Move seunshare to sandbox package
     - Fix sandbox to show correct types in  usage statement
  Resolves: #679690
  Resolves: #679689
  Resolves: #677541
  Resolves: #679798
  - Fixes for sepologen 
    - Usage statement needs -n name
    - Names with _ are being prevented
    - dbus apps should get _chat interface
    - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
    - Add sandbox to sepolgen
    - Polgengui raises the wrong type of exception.  #471078
  - Cleanup chcat man page
  - Update translations
  Resolves: #589232
  - restorecond fixes
    - Have restorecond watch more directories in homedir
    - Fix restorecond watching utmp file for people logging in our out
    - Exit in restorecond if it can not find a UID in the passwd database

  - Stop fixfiles from complaining about missing dirs

  - Semanage fixes
    - Fix up node handling in semanage command
    - Fix proper handling of getopt errors
    - Do not allow modules names to contain spaces
    - Change semanage to not allow it to semanage module -D
  Resolves: #684015
  Resolves: #677542
  - Change setsebool to suggest run as root on failure
  - Don't report error on load_policy when system is disabled.
  - Fix unchecked return value of getpwuid()
  Resolves: #684015


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.3-0
changelog:
  - 1.3 release
   - added dependency on libibverbs-devel pciutils-devel
   - cannot provide support for cuda (cuda_runtime_api.h). 
   - Nvidia CUDA is free but not open-source therefore not in Fedora.


author: Andreas Schneider <asn@redhat.com> - 4.0.0-67.rc4
changelog:
  - resolves: #1290709 - CVE-2015-7540
  - related: #1290709 - CVE-2015-5299
  - related: #1290709 - CVE-2015-5296
  - related: #1290709 - CVE-2015-5252
  - related: #1290709 - CVE-2015-5330


author: Tomas Hozza <thozza@redhat.com> - 1.12-8
changelog:
  - Added build dependency needed to run HTTP unit tests (Related #1295847)
  - Explicitly disabled IDN/IRI support during build due to QA TPS test failures (Related #1295847)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 3.0.0-3
changelog:
  - Change /dev/i2c-# creation from /lib/udev/devices to /etc/udev/makedev.d
    usage
  - Add an /etc/modprobe.d/i2c-dev file to work around bug 380971


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-6
changelog:
  - resolves: #1105500 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108841 - CVE-2014-3493: DoS in smbd with unicode path names.


author: - Andreas Schneider <asn@redhat.com> - 3.6.23-8
changelog:
  - resolves: #1110733 - Fix write operations as guest with 'security = share'.
  - resolves: #1053886 - Fix receiving the gecos field with winbind.


author: Jaromír Končický <jkoncick@redhat.com> - 12:4.1.1-40.P1
changelog:
  - Fix handling of UDP packets with checksum 0xffff. (#1015997)
  - Add GUIDs in the DHCP logs for IPoIB. (#1064416)


author: Jaromír Končický <jkoncick@redhat.com> - 12:4.1.1-41.P1
changelog:
  - Fix dhcpd.leases reverting to root:root on every dhcpd start (#1067142)
    New patch "paranoia" merged with older "paranoia-pid" patch
  - Add init script for dhcrelay IPv6 version (#1053155)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-43.P1.1
changelog:
  - dhcpd generates spurious responses when seeing requests
    from vlans on plain interface (#1184333)


author: Matthias Clasen <mclasen@redhatcom> - 0.8-4
changelog:
  - Don't show bubbles before the icon is there
  - Use the same invisible char as the rest of the world


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-10
changelog:
  - Fix possible exception path in the luci cluster model object related to bz624558 (replace broadcast option with udpu)
  - Correct duplication of the fence brocade menu item in the fence devices section related to bz681506 (readd urgently fence_brocade to the list of shipped fence_agents in luci)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-11
changelog:
  - Additional fix for bz613871 (luci should not give ungraceful error messages when encountering fence devices that it does not recognize/support)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-12
changelog:
  - Fix bz617587 (Luci doesn't display underlying errors)
  - Fix bz617586 (Implement progress dialog for long-running operations)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-13
changelog:
  - More fixes for bz617586 (Implement progress dialog for long-running operations)
  - More fixes for bz616239 (Need option to completely destroy cluster)
  - More fixes for bz557234 ([RFE] luci update to handle private network/hostnames for cluster create/config)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-2
changelog:
  - Add suppport for pkcs8 formatted keys in the pem module
  - Add verify(not md5 size mtime) to configuration files attributes
  - Prevent nss-sysinit disabling on package upgrade
  - Create pkcs11.txt with correct permissions regardless of current umask
  - Add option to setup-nsssysinit.sh to report nss-sysinit status
  - Update test certificate which had expired


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-2
changelog:
  - Prefer user database ca cert trust settings system's ones
  - Swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-3
changelog:
  - Add requires for pkcs11-devel on nss-softokn-freebl devel
  - Run the test suites in check section per packaging guidelines


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.25.el6_1.1
changelog:
  - Define initgroups callback for nss_files (#705465)
  - Schedule nscd cache pruning more accurately from re-added values
    (#703481)
  - Use mmap for allocation of buffers used for __abort_msg (#676591)


author: Harald Hoyer <harald@redhat.com> 147-2.37
changelog:
  - add requires for libgudev1 on libudev with version and release
  Resolves: rhbz#727500
  - change import property buffer to 16384 bytes
  Resolves: rhbz#726566


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-15
changelog:
  - libxfs: restrict platform_test_xfs_fd to regular files (#1018751)
  - xfs_repair: avoid segfault if reporting progress early in repair (#1020438)
  - xfs_fsr: fix SWAPEXT failures under selinux (#1024702)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-16
changelog:
  - xfs_copy: do not exit with error code if we succeed (#1100107)
  - xfs_copy: fix corruption when source fs sector size is > 512 bytes (#1104956)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-17
changelog:
  - xfs_quota: Allow user project starting with digits (#1167413)
  - xfs_repair: Don't validate symlink component lengths (#1171267)
  - xfs_repair: Handle log in allocation group zero (#1215616)
  - xfs_io: deprecate -F flag (#1136742)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-20
changelog:
  - xfs_logprint: Fix some inode logging corner cases (#1027075)
  - xfs_fsr: Fix more selinux-related failures (#1225651)
  - xfs_repair: Detect reserved attribute names (#1304285)


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Stef Walter <stefw@redhat.com> - 0.7.4-1
changelog:
  - Update to upstream point release 0.7.4
  - Correctly handle truncating long host names [#1001667]
  - Try to contact all available addresses for discovery [#1004442]
  - Build fixes [#1004823]


author: Stef Walter <stefw@redhat.com> - 0.7.5-1
changelog:
  - Update to upstream point release 0.7.5
  - Workaround for discovery via IPv6 address [#1004442]
  - Correctly put IPv6 addresses in temporary krb5.conf


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-102
changelog:
  - fixed statistics.c to use unsigned long long (instead of int) to handle 64 bit integers (Bug #580054)
  - fixed typo in statistics.c
  - interface slip: cast keepalive/outfill to unsigned long to fix warnings on 64bit hosts
  - interface: fix IPv6 parsing of interfaces with large indexes (> 255)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-103
changelog:
  - improved statistics-doubleword.patch (Bug #580054)
  - improved netstat(8) man page (#614931)
  - HFI support (#633506)
  - fixed memory leak in netstat when run with -c option (#634539)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-105
changelog:
  - Fix mii-tool/mii-diag/ether-wake to not default to eth0 because
    since RHEL-6.1 network devices can have arbitrary names (#682368)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-106
changelog:
  - Improve route(8) man page saying that 'route mss' actually sets MTU (#680837)
  - plipconfig man page and usage output fixes (#694766)
  - Add -A,--all-fqdns and -I,--all-ip-addresses options to hostname (#705110)
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (#708538)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-108
changelog:
  - patch netstat to separate basename of -p only if it is absolute
    path (in order to make argv[0]="sshd pty/0" display as sshd, and not as /0).
    (#725348)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-32
changelog:
  - Resolves: bug 1074847 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-6.5.z] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-31
changelog:
  - Applied patch for CVE-2010-1748 (web interface memory disclosure,
    STR #3577, bug #591983).
  - Applied patch for CVE-2010-0542 (texttops unchecked memory
    allocation failure leading to NULL pointer dereference, STR #3516,
    bug #587746).
  - Applied patch for CVE-2010-0540 (web interface CSRF, STR #2398),
    including cancel-RSS fix (bug #588805).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-36
changelog:
  - Applied patch to fix cupsd memory corruption vulnerability
    (CVE-2010-2941, STR #3648, bug #624438).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-37
changelog:
  - Fixed cupsSNMPQuirks parsing code in cups-snmp-quirks.patch (bug #580604).
  - lpstat -p reported current job as job id zero (STR #3627, bug #614908).
  - Set the default RIPCache to 128m (STR #3535, bug #616864).
  - Scheduler tracks whether we are shutting down and doesn't start
    new jobs if so (STR #3679, bug #624441).
  - Added 'restartlog' action to initscript usage output (bug #632180).
  - Fixed following rpmlint errors and warnings (bug #634931):
    - Fix character encoding in CREDITS.txt.
    - Mark D-Bus configuration file as config file.
    - Don't mark MIME types and convs files as config files.  Overrides
      can be placed as new *.types/*.convs files in /etc/cups.
    - Don't mark banners as config files.  Better is to provide new banners.
    - Don't mark initscript as config file.
    - Don't mark templates and www files as config files.  A better way to
      provide local overrides is to use a different ServerRoot setting.
      Note that a recent security fix required changed to template files.
    - Provide versioned LPRng symbol for rpmlint.
    - Use mode 0755 for binaries and libraries where appropriate.
    - Move /etc/cups/pstoraster.convs to /usr/share/cups/mime/.
    - Move cups-config man page to the devel sub-package.
  - Revert STR #2537 so non-UTF-8 clients continue to be accepted (bug #642448).
  - The php sub-package now explicitly requires the libs package with
    the same version and release (bug #646814).
  - Added tolerance for DNS failures (bug #654667).
  - Fixed initscript to stop service on reboot/halt (bug #659692).


author: Peter Vrabec <pvrabec@redhat.com> - 0.19-6
changelog:
  - make initscript LSB compliant
  - show version of netlabelctl and libnetlabel in help
  - fixing return codes
    Resolves: #537053 #602577 #602291


author: Akemi Yagi <toracat@centos.org> [2.6.32-220.17.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client, EeePC hotkey, JFS
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - As of 2.6.32-131.12.1.el6, parallel printer support is enabled in distro kernel.
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix for the 208.5-days-and-the-system-reboots issue [bug#5397]
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Enabled ARPD [bug#5709]


author: Baoquan He <bhe@redaht.com> - 2.0.0-281
changelog:
  - starting kdump service after network, local fs and remote fs, resolves bug 1132300
  - Add sample eppic scripts to kexec-tools-eppic package, resolves bug 1104837
  - Convert leftover "getent hosts" to "getent ahostsv4", resolves bug 1142666
  - mkdurmpd: Fix the syntax error on the condition of fips inexistence, resolves bug 1131945


author: Baoquan He <bhe@redhat.com> - 2.0.0-283
changelog:
  - makedumpfile: Exclude unnecessary hugepages. resolves bug 1068674
  - makedumpfile: Vtop address translation support for vmalloc region in PPC64 arch. resolves bug 1068674
  - makedumpfile: Initialize for vmalloc address translation support in PPC64 arch. resolves bug 1068674
  - makedumpfile: Get rid of overrun adjustments. resolves bug 1068674
  - makedumpfile: Generic handling of multi-page exclusions. resolves bug 1068674


author: Baoquan He <bhe@redhat.com> - 2.0.0-286
changelog:
  - update kexec-kdump-howto.txt, resolves bug 949376
  - mkdumprd: Load the mlx4_core module if it is needed in the 2nd kernel, resolves bug 1099589
  - nfs dump will fail when netdev has different device name in ifcfg-$dev, resolves bug 1005141 
  - udev-rules: Restart kdump service on cpu ADD/REMOVE events, resolves bug 1113276


author: Jakub Filak <jfilak@redhat.com> - 2.0.8-32
changelog:
  - add usermode and pam used by abrt-(cli|gui) to Requires
  - correct the description of PrivateReports in abrt.conf
  - Related: #1211967


author: Jakub Filak <jfilak@redhat.com> - 2.0.8-33
changelog:
  - ccpp: never remove user core files
  - suid debug info wrapper: do not open build_ids as root
  - abrtd: process only dump directories owned by root
  - Related: #1211967


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.8-37
changelog:
  - Add AllowedUsers and AllowedGroups feature
  - Add IgnoredPath option
  - Resolves: #1256705, #1208713


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-16.P1
changelog:
  - Unexpected abort caused by a DHCPv6 decline message (CVE-2011-0413, #672995)
  - Write/accept a semi-colon at the end of the max-life and preferred-life
    clauses in dhcpv6 lease files (#672551)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-57
changelog:
  - Resolves: rhbz#1438360 - The originalMemberOf attribute disappears from
                             the cache, causing intermittent HBAC issues


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.13.3-58
changelog:
  - Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                             function is provided by the client app
  - Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                             failed user logins
  - Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
  - Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                             Global scope


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.13.3-59
changelog:
  - Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
  - Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
  - Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
  - Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.13.3-60
changelog:
  - Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
  - Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6


author: Adam Jackson <ajax@redhat.com> 1.7.7-20
changelog:
  - xserver-1.7.7-xephyr-24bpp.patch: Fix crash in Xephyr when running on a
    24bpp host framebuffer. (#581505)


author: Adam Jackson <ajax@redhat.com> 1.7.7-21
changelog:
  - xserver-1.7.7-int10-reserved-areas.patch: Fix vesa driver (and int10
    services generally) when VBIOS code exists below the VGA memory
    hole. (#605302)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.7-22
changelog:
  - xserver-1.7.7-postfix-DCE-PointerKeys.patch: post-fix event sequences by
    PointerKeys with DeviceChangeEvents (#618422)
  - xserver-1.7.7-reset-unused-classes.patch: reset the classes after copying
    them from the buffer. Fixes double-free on CloseDownDevices() exposed
    by xserver-1.7.7-postfix-DCE-PointerKeys.patch.


author: Adam Jackson <ajax@redhat.com> 1.7.7-23
changelog:
  - xserver-1.7.7-lid-hack.patch: Account for lid status when multiple outputs
    appear to be connected. (#601319)
  - xserver-1.6.99-randr-error-debugging.patch: Fix thinko to print the
    contents of the triggering request, not the address.


author: Adam Jackson <ajax@redhat.com> 1.7.7-24
changelog:
  - xserver-1.7.7-randr-cursor-dead-zones.patch: Clip cursor motion to CRTC
    boundaries if all your CRTCs are contiguous. (#585283)


author: Adam Jackson <ajax@redhat.com> 1.7.7-28
changelog:
  - xserver-1.7.7-classic-default-mode.patch: Bump classic driver default mode
    to 1024x768. (#638234)


author: Jan Grulich <jgrulich@redhat.com> - 4.3.4-37
changelog:
  - Add explicit dependency for KDM subpackage to require -libs subpackage
    at the same version
    Resolves: bz#1304735


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: some server certificates refused with inadequate type error (#669846)
  - fix: default encryption strength dropped in switch to using NSS (#669845)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-24
changelog:
  - security: Provide supplemental groups even when parsing label (rhbz#964359)
  - qemu: Remove hostdev entry when freeing the depending network entry (rhbz#1000973)
  - virsh: Correct DESCRIPTION for virsh help blockcopy (rhbz#1002790)
  - Add '<nat>' element to '<forward>' network schemas (rhbz#1004365)
  - build: More workarounds for if_bridge.h (rhbz#1002735)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-9
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - add option to set Differentiated Services Code Point (DSCP) (#1228314)
  - extend rawstats log (#1242895)
  - fix resetting of leap status (#1243034)
  - report clock state changes related to leap seconds (#1242937)
  - allow -4/-6 on restrict lines with mask (#1232146)
  - retry joining multicast groups (#1288534)
  - explain synchronised state in ntpstat man page (#1286969)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10
changelog:
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-11
changelog:
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-12
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-12.el6_9.1
changelog:
  - fix buffer overflow in datum refclock driver (CVE-2017-6462)
  - fix crash with invalid unpeer command (CVE-2017-6463)
  - fix potential crash with invalid server command (CVE-2017-6464)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-16.20080301
changelog:
  - update to patch 20080301
  - provide libtermcap.so (#428898)
  - move all headers to /usr/include
  - move libncursesw out of /usr
  - make examples in documentation compilable (#436355)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-18.20080628
changelog:
  - update to patch 20080628
  - move mlterm and screen.* entries to -base
  - change kbs to ^? in rxvt and screen entries


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.10.1-143
changelog:
  - Fix typo in name of the signal PIPE in IPC::Cmd (bug #1315053)
  - Fix crash in httpd mod_perl Perl_sv_pvn_force_flags (bug #1364206)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22
changelog:
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#746341)
  - apply upstream patch to fix a null pointer derference with the LDAP kdb
    backend (CVE-2011-1527), an assertion failure with multiple kdb backends
    (CVE-2011-1528), and a null pointer dereference with multiple kdb backends
    (CVE-2011-1529) (MITKRB5-SA-2011-006, #740085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22.1
changelog:
  - add candidate patch to fix a NULL pointer dereference while processing TGS
    requests (MITKRB5-SA-2011-007, #754046)


author: Thomas Woerner <twoerner@redhat.com> - 6.11-1
changelog:
  - new version 6.11 with so library version 2, includes
  - cleaned up spec file for 6.11, dropped patch, no kernel will be built
  - adapted for RHEL-6: added clean tag, BuildRoot


author: Tim Waugh <twaugh@redhat.com> 1.1.0-9
changelog:
  - Init script fixes:
    - Attempt to start all configured servers (bug #562669, bug #768405).
    - Avoid problems when user's configured shell is not bash (bug #949522).
  - Applied Debian patch to fix busy loop when run from inetd in nowait
    mode (bug #958988, bug #920373).
  - Avoid initializing the vnc extension twice (bug #1004093).
  - Use exceptions instead of asserts for ZRLE decoding boundary checks
    (bug #1078508).


author: Tim Waugh <twaugh@redhat.com> 1.1.0-13
changelog:
  - Added versioned pixman and libX11 dependencies (bug #917717,
    bug #991285).
  - Link against system-wide libjpeg-turbo (bug #956779).
  - Describe -SecurityTypes option in man pages (bug #882952).
  - Fixed kbase URL in sysconfig file (bug #728981).


author: Tim Waugh <twaugh@redhat.com> 1.1.0-16
changelog:
  - Unknown pseudo-encodings (those with negative values) would cause
    vncviewer to crash (bug #1121041).
  - Set source as well as target when building java as some JDKs require
    this (bug #1078427).


author: Jaroslav Reznik <jreznik@redhat.com> - 7:4.3.4-8
changelog:
  - Resolves: #591967,
      CVE-2010-1000, CVE-2010-1511: improper sanitization of metalink 
      attribute


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-28
changelog:
  - Related:  rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-32
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix typo causing build breakage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-33
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix segfault in TGT renewal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34
changelog:
  - Resolves: rhbz#701700 - sssd client libraries use select() but should use
  -                         poll() instead


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34.1
changelog:
  - Resolves: rhbz#708352 - SSSD's async resolver only tries the first
  -                         nameserver in /etc/resolv.conf
  - Resolves: rhbz#708353 - latest sssd fails if ldap_default_authtok_type is
  -                         not mentioned


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34.2
changelog:
  - Resolves: rhbz#716905 - sssd shuts down if inotify crashes
  - Resolves: rhbz#716909 - libsss_ldap segfault at login against OpenLDAP


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-1
changelog:
  - Resolves: Bug 744070 - Update to 3.13.1
  - nss should protect against being called before nss_Init [784674]
  - CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) [784490]


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-17.1
changelog:
  - Resolves: rhbz#1080103

  - cpg: Refactor mh_req_exec_cpg_procleave (rhbz#1080103)
  - merge upstream commit e9d9c4be7293c04ca97bfd84f95b76a22690a92a (rhbz#1080103)
  - cpg: Make sure nodid is always logged as hex num (rhbz#1080103)
  - merge upstream commit 0b825f22f2b95beca1aeb614d22a7e74a84c66b5 (rhbz#1080103)
  - cpg: Make sure left nodes are really removed (rhbz#1080103)
  - merge upstream commit b55f32fe2e1538db33a1ec584b67744c724328c6 (rhbz#1080103)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:0.97-94.el6_7.1
changelog:
  - Fix the ineffectiveness when loading fragmented initramfs from Ext4 filesystem
    Resolves: #1311474


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-90
changelog:
  - editor: improve navigation in address/route treeview (rh #1201412)
  - editor: fix on-the-fly color validation for 0.0.0.0/:: (rh #1201416)


author: Lubomir Rintel <lrintel@redhat.com> - 1:0.8.1-91
changelog:
  - Add support for vlans over bonds and fix associated issues:
  - rh1113996-ifcfg-rh-writer-ip4-fix.patch: canonicalize paths (rh #1063661)
  - rh558983-bridging.patch: fix NM_BOND_BRIDGE_VLAN_ENABLED parsing (rh #1063661)
  - rh919242-editor-indicate-bond-bridge-vlan-disabled.patch: fix dbus call (rh #1063661)
  - system-settings: for non-ethernet devices, lacking BOOTPROTO implies no L3 configuration (rh #1063661)
  - device: allow vlans on bond and bridges (rh #1063661)
  - ifcfg-rh: always signal connection added when loading a connection (rh #1063661)
  - manager: try to create virtual devices on device state changes (rh #1063661)
  - connection-editor,vlan: don't disable the system connection checkbox if the connection is not valid (rh #1063661)
  - device: make the activation succeed if no L3 configuration is desired (rh #1063661)


author: Lubomir Rintel <lrintel@redhat.com> - 1:0.8.1-95
changelog:
  - ip6-manager: ensure we don't get past GOT_LINK_LOCAL if we don't have a link-local address (rh #1197154)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-96
changelog:
  - ifcfg-rh: don't remove base connection if an alias file is removed (rh #1157867)
  - editor: fix mnemonic collisions (rh #896200)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-97
changelog:
  - vpn: let plugins forbid VPN connections from getting the default route (rh #1069313)
  - core: don't duplicate addresses (and other) info in IP configs (rh #1207599)
  - editor: check gateway to be in the network specified by addr/prefix (rh #1167491)
  - cli: fix 'nmcli con' hang if both NetworkManager and nm-applet are stopped (rh #1213327)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.32
changelog:
  - Add 0064-RHBZ-612173-fix-reverse-lookup.patch
      * don't terminate WWID at whitespace on reverse lookup.
  - Add 0065-RHBZ-635088-update-priority.patch
      * refresh all priorities when a new path comes online
  - Add 0066-RHBZ-636071-mpathconf-variable_names.patch
      * don't use DISPLAY variable name. It configs with X. Also, unset all
        the variable names, so this doesn't happen again.
  - Add 0067-RHBZ-622569-symmetrix-config.patch
  - Add 0068-RHBZ-632734-nvdisk-config.patch
  - Add 0069-RHBZ-636246-hp-open-config.patch
  - Add 0070-RHBZ-639037-hitachi-open-config.patch
  - Add 0071-RHBZ-611779-fix-whitespace-crash.patch
      * get_cmdvec wasn't setting the passed in vector to NULL, when
        there was no command.
  - Add 0072-RHBZ-651389-change-scsi-tmo-order.patch
      * Make multipath set fast_io_fail_tmo before dev_loss_tmo, so that
        you can set dev_loss_tmo above 600.
  - Resolves: bz #651389, #611779, #639037, #636246, #632734, #622569, #636071
  - Resolves: bz #635088, #612173


author: Lon Hohberger <lhh@redhat.com> 0.2-1
changelog:
  - Update to latest upstream version
  - Serial & VMChannel listener support
  - Static permission map support
  - Man pages
  - Init script
  - Various bugfixes


author: Lon Hohberger <lhh@redhat.com> 0.2.1-2
changelog:
  - Fix man page location
  - Fix metadata output
  - Fix arguments to be more consistent with other fencing
    agents
  - Resolves: rhbz#561418 rhbz#563624 rhbz#563626


author: Lon Hohberger <lhh@redhat.com> 0.2.1-3
changelog:
  - Fix spec file due to qpid package renaming and architecture changes
  - Don't build on s390 and s390x
  - Resolves: rhbz#568003 rhbz#567744


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.2-29
changelog:
  - wacom: Update input transformation matrix on monitor changes (#861890)
    wacom: Re-fix LED as per latest discussions on linuxwacom-devel (#805064)
    Resolves: #805064 #861890


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-1
changelog:
  - Rebase package on top of new upstream:
    * rgmanager: fix compiler warning in clulog.c
    * rgmanager: Add resource-defaults section
    * rgmanager: Fix clustat help & version operations
    * rgmanager: Make clustat -f not query CCS/objdb
    * rgmanager: Pause during exit if we stopped services
    * rgmanager: Fix reference count handling
  - spec file update:
    * update spec file copyright date
    * drop all patches
    * update and clean configure and build section.
    * resync with fedora spec file
    Resolves: rhbz#707118
  - Move rgmanager S/Lang from resource-agents to rgmanager:
    * Add versioned Requires/Obsoletes on resource-agents to avoid file conflicts
    Resolves: rhbz#693517


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-2
changelog:
  - Improve rgmanager's exclusive prioritization handling
    Resolves: rhbz#690191
  - Fix bad passing of SFL_FAILURE up
    Resolves: rhbz#716231
  - Fix segfault on config reload
    Resolves: rhbz#692895
  - Make handling of failed services consistent
    Resolves: rhbz#673167


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-3
changelog:
  - rgmanager: Fix race in shutdown vs. notification
    Resolves: rhbz#697446
  - rgmanager: Add 'disabled' configuration option
    Resolves: rhbz#723925


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-4
changelog:
  - rgmanager: Fix segfault caused by unref race
    Resolves: rhbz#697446
  - rgmanager: Fix uninitialized variable
    Resolves: rhbz#734730


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-5
changelog:
  - rgmanager: Clean up DBus concurrency
    rgmanager: Block signals when dealing with dbus
    Resolves: rhbz#741607


author: John Dennis <jdennis@redhat.com> - 2.1.8-1
changelog:
  - update to latest upstream
    Feature improvements
    * Print more descriptive error message for too many EAP sessions.
      This gives hints on what to do when "failed to store handler"
    * Commands received from radmin are now printed on stdout when
      in debugging mode.
    * Allow accounting packets to be written to a detail file, even
      if they were read from a different detail file.
    * Added OpenSSL license exception (src/LICENSE.openssl)

    Bug fixes
    * DHCP sockets can now set the broadcast flag before binding to a
      socket.  You need to set "broadcast = yes" in the DHCP listener.
    * Be more restrictive on string parsing in the config files
    * Fix password length in scripts/create-users.pl
    * Be more flexible about parsing the detail file.  This allows
      it to read files where the attributes have been edited.
    * Ensure that requests read from the detail file are cleaned up
      (i.e. don't leak) if they are proxied without a response.
    * Write the PID file after opening sockets, not before
      (closes bug #29)
    * Proxying large numbers of packets no longer gives error
      "unable to open proxy socket".
    * Avoid mutex locks in libc after fork
    * Retry packet from detail file if there was no response.
    * Allow old-style dictionary formats, where the vendor name is the
      last field in an ATTRIBUTE definition.
    * Removed all recursive use of mutexes.  Some systems just don't
      support this.
    * Allow !* to work as documented.
    * make templates work (see templates.conf)
    * Enabled "allow_core_dumps" to work again
    * Print better errors when reading invalid dictionaries
    * Sign client certificates with CA, rather than server certs.
    * Fix potential crash in rlm_passwd when file was closed
    * Fixed corner cases in conditional dynamic expansion.
    * Use InnoDB for MySQL IP Pools, to gain transactional support
    * Apply patch to libltdl for CVE-2009-3736.
    * Fixed a few issues found by LLVM's static checker
    * Keep track of "bad authenticators" for accounting packets
    * Keep track of "dropped packets" for auth/acct packets
    * Synced the "debian" directory with upstream
    * Made "unlang" use unsigned 32-bit integers, to match the
      dictionaries.


author: John Dennis <jdennis@redhat.com> - 2.1.8-2
changelog:
  - bug #526559 initial install should run bootstrap to create certificates
    running radiusd in debug mode to generate inital temporary certificates
    is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial
    rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file
  - bug #528493 use sha1 algorithm instead of md5 during cert generation
    the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files
    were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-66.1
changelog:
  - Resolves: rhbz#758696 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758713 - LDAP failover not working if server refuses
                            connections


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1
changelog:
  - initscript LSB related fixes (#523435)
  - revert the "DEBUG" feature (#510283), it causes too many problems (#545128)


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2
changelog:
  - obsolete dnssec-conf
  - automatically update configuration from old dnssec-conf based
  - improve default configuration; enable DLV by default
  - remove obsolete triggerpostun from bind-libs subpackage


author: Adam Tkac <atkac redhat com> 32:9.7.0-2
changelog:
  - improve automatic DNSSEC reconfiguration trigger
  - initscript now returns 2 in case that action doesn't exist (#523435)
  - enable/disable chroot when bind-chroot is installed/uninstalled


author: Adam Tkac <atkac redhat com> 32:9.7.0-4.P1
changelog:
  - fix occassional crash on keytable.c:286 (#554316)
  - active query might be destroyed in resume_dslookup() which triggered REQUIRE
    failure (#507429)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.413.el6
changelog:
  - kvm-scsi-Allocate-SCSITargetReq-r-buf-dynamically-CVE-20.patch [bz#1007330]
  - kvm-scsi-Fix-data-length-SCSI_SENSE_BUF_SIZE.patch [bz#956929]
  - Resolves: bz#1007330
    (CVE-2013-4344 qemu: buffer overflow in scsi_target_emulate_report_luns)
  - Resolves: bz#956929
    (/usr/libexec/qemu-kvm was killed by signal 6 (SIGABRT) when SCSI inquiry is sent to unsupported page inside the KVM guest)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-16.3
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183671)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183679)


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-0.1.beta
changelog:
  - Rebase to NSS 3.36.0 BETA
  - Remove upstreamed nss-is-token-present-race.patch
  - Revert the upstream changes that default to sql database


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-3
changelog:
  - Use the correct tarball of NSS 3.36 release
  - Ignore EncryptDeriveTest which only works with newer nss-softokn


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-5
changelog:
  - Decrease the iteration count of PKCS#12 for compatibility with Windows
  - Fix deadlock when a token is re-inserted while a client process is running


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-9
changelog:
  - Backport upstream fix for CVE-2018-12384
  - Remove nss-lockcert-api-change.patch, which turned out to be a
    mistake (the symbol was not exported from libnss)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-2
changelog:
  - make CA dir readable - the private keys are in private subdir (#584810)
  - a few fixes from upstream CVS
  - make X509_NAME_hash_old work in FIPS mode (#568395)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-3
changelog:
  - fix wrong ASN.1 definition of OriginatorInfo - CVE-2010-0742 (#598738)
  - fix information leak in rsa_verify_recover - CVE-2010-1633 (#598732)


author: Tomas Popela <tpopela@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Decrease debuginfo verbosity for s390 reduce memory consumption
  - Resolves: rhbz#1033151


author: Tomas Popela <tpopela@redhat.com> - 1.4.3-2
changelog:
  - Create symlinks to the libwebkitgtk library with the old name (libwebkit)
  - Resolves: rhbz#1033151


author: Tomas Popela <tpopela@redhat.com> - 1.4.3-3
changelog:
  - Compile with --disable-geolocation
  - Resolves: rhbz#1119647
  - Restore symlinks after ldconfig call in post to avoid their removal
  - Resolves: rhbz#1118424


author: Tomas Popela <tpopela@redhat.com> - 1.4.3-8
changelog:
  - Fix more of the wrongly aligned memory commits on ppc64
  - Fix crash in Yarr JIT
  - Resolves: rhbz#1136299


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-18
changelog:
  - Fix several issues related to cluster config reload operation
    including checks that would allow the config to be downgraded
    and extra spurious config reload notifications.
    (cman_config_reload_fix_part1.patch)
    (cman_config_reload_fix_part2.patch)
    (cman_config_reload_fix_part3.patch)
    (cman_config_reload_fix_part4.patch)
    (cman_config_reload_fix_part5.patch)
    (cman_config_reload_fix_part6.patch)
    Resolves: rhbz#617161, rhbz#617163
  - Fix logging configuration reload operations
    (cman_preconfig_handle_logging_reload_operation_part1.patch)
    (cman_preconfig_handle_logging_reload_operation_part2.patch)
    Resolves: rhbz#615202


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-12
changelog:
  - Use real binary name in help message (rhbz #814150)
  - Correctly detect IPv6 any address (rhbz #832121)
  - Add --title option to remote-viewer (rhbz #828339)
  - Add newline at end of verbose info output (rhbz #822794)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-15
changelog:
  - Fix crash starting remote-viewer from XPI plugin (rhbz #867459)
  - Fix crash connecting with wrong spice password (rhbz #867248)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-16
changelog:
  - Don't resize to 50x50 when toggling autoresize (rhbz #856610)
  - Allow zooming beyond normal size (rhbz #856678)
  - Allow changing resolution when in fullsreen (rhbz #864929)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-18
changelog:
  - Fix resolution when switching to fullscreen (rhbz #881020)
  - Ensure correct file extension on screenshots (rhbz #875126)


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-27.3
changelog:
  - Resolves: rhbz#1089395 pluto doesn't bring up sourceip route when peer restarts
  - Resolves: rhbz#1090273 openswan breaks NAT-T draft clients
  - Resolves: rhbz#1090614 pluto cannot write to directories not owned by root


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.1-6
changelog:
  - Enable deprecated GLib/GTK+ symbols since Devhelp uses some of them
    since the GLib rebase. Apps should not be shipping with these build
    flags anyway.
  - Resolves: rhbz#1136304


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.1.0-5
changelog:
  - Use tarball from upstream
  - Add COPYING, README and AUTHORS to sources (previously placed in the, probably modified, tarball)


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-10
changelog:
  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1082900 - Admin server segfault when configuration DS configured on SSL port
  - Add workaround to %check
  unset DISPLAY
   section for RHEL-5 based build machines where kernel lacks support for hardware GCM


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.7-2
changelog:
  - Fix %files (to be able build -devel dependent packages)
  - Remove rpath from libraries
  - Spec file cleanup, rpmlint check


author: Soren Sandmann <ssp@redhat.com>
changelog:
  - Add two patches for the man page:
    - 0001-xfreerdp.1.xml-Don-t-claim-to-support-multiple-conne.patch
      Don't claim to support multiple connections, #988272
    - 0002-Replace-itemizedlist-s-with-variablelist-s.patch
      Work around a bug in RHEL 6 docbook, that causes <itemizedlist>
      to be mangled. This patch replaces them with <variablelist>s.


author: Soren Sandmann <ssp@redhat.com> - 1.0.2-2
changelog:
  - Add patch listing the plugins available in RHEL 6
    - 0003-List-plugins-available-in-RHEL-6.patch
    Related: #988272


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-4
changelog:
  - Related rhbz#706120
  - Catch-up build corresponding to RHEL-5 builds 0.10-4 -5 -6 and -7:
  - RHEL-5 0.10-4:
    - 2.0 RC build 1
    - BZs: 690261,693407,695263,695716,696637,696655,696698
  - RHEL-5 0.10-5:
    - Intermediate build to address rpmdiff/multilib problems
    - BZs: 689907
    - Now sourcing the doxygen-generated HTML from distcvs
  - RHEL-5 0.10-6:
    - 2.0 RC build 2
    - BZs: 675921,681313,689907,698254,700822,701709,701777,701786,701804
  - RHEL-5 0.10-7:
    - 2.0 RC build 3
    - BZs: 693895,698721


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-5
changelog:
  - Related rhbz#706120
    The patch file for the -4 build was not updated, this respin corrects
    that mistake. The fixes described below for -4 should now correctly
    apply to the -5 build.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-6
changelog:
  - Related rhbz#706120
  - MRG 2.0 GA build, equates to 0.10-8.el5 build
  - The mrg-2.0.x patch file was updated to include:
    - BZ 707023: RPMdiff failure (multilib regressions) in qpid-qmf
    - BZ 709343: Packaging problem in qpid-qmf-devel (qmf-gen templates)
    - BZ 709862: dash-7 source RPM does not build
    - BZ 671369: RDMA client can segfault when no SASL mechanism specified


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.23
changelog:
  - 696808 Sync brcm/uio to v0.7.0.8.
  - 715434 Fix iscsiadm command line help discoverydb/discovery2 description.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.25
changelog:
  - 732912 Fix return value/msg when iscsiadm fails to log into target
  - 696808 Update iscsiuio to v0.7.0.14.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.28
changelog:
  - 736116 (again) fix aligment for iface nl msgs.
  - Fix iscsid restart issue when using qla4xxx boot.
  - Fix ipv6 boot when using ibft.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.31
changelog:
  - 749051 Sync iscsiuio to iscsiuio-0.7.0.14g to fix boot hang
    when connection is lost during startup.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-6
changelog:
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Resolves bz903212


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-1
changelog:
  - Update mdadm to upstream release v3.2.6
    This includes all current patches, except for
    mdadm-3.2.5-imsm-Forbid-spanning-between-multiple-controllers.patch and
    mdadm-3.2.5-Create.c-check-if-freesize-is-equal-0.patch
  - Fix problem with arrays marked <ignored> in mdadm.conf still being
    auto-assembled
  - Fix problem with it not being possible to use <ignore> more than
    once in mdadm.conf
  - Resolves bz922971
  - Resolves bz902142
  - Resolves bz902137


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-2
changelog:
  - Enhance raid-check to allow the admin to specify the max number of
    concurrent arrays to be checked at any given time.
  - Resolves bz819943


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-3
changelog:
  - Fix problem where first stop command doesn't stop container during
    IMSM volume's reshape
  - Fix annoying build noise caused by latest rpmbuild
  - Resolves bz956016


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-4
changelog:
  - Fix problem with RAID10 resync failing to restart if it has been
    stopped after 50% completion.
  - Resolves bz995105


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7
changelog:
  - Check for DM_UDEV_DISABLE_OTHER_RULES_FLAG instead of
    DM_UDEV_DISABLE_DISK_RULES_FLAG in 65-md-incremental.rules 
  - Resolves bz1015514


author: Jonathon Jongsma <jjongsma@redhat.com> - 2.0-1
changelog:
  - Rebase to 2.0 release
    Resolves: rhbz#1179477, rhbz#1108523, rhbz#1085216, rhbz#1129479,
    rhbz#1085210, rhbz#1083786, rhbz#1032936, rhbz#1021841, rhbz#987549,
    rhbz#1146998


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-4
changelog:
  - Take --direct into consideration when checking if a guest is reachable
    Resolves: rhbz#1085216
  - Update geometry when enabling/disabling displays
    Resolves: rhbz#1111425
  - Monitor config at sometimes leaves additional monitors enabled
    Resolves: rhbz#1200750
  - Bring back debug log about nonexistent guest
    Resolves: rhbz#1201177
  - Don't show empty foreign menu on secondary displays
    Resolves: rhbz#1201605
  - Do not add "https://" and "/api" to oVirt URI
    Resolves: rhbz#1201599
  - Fix tiny window when opening a vnc guest
    Resolves: rhbz#1201679


author: Tom Lane <tgl@redhat.com> 2.0.14-1
changelog:
  - Update to 2.0.14 to get the last few upstream fixes in this release series,
    and to not be behind what MRG has shipped for RHEL-5
  - Fix refcount leaks in _mogrify()
  Resolves: #765998


author: Christina Fu <cfu@redhat.com> - 4.2.6-23
changelog:
  - Bugzilla Bug #804838 - [RFE] ECC encryption keys cannot be archived
    ECC phase2 work - support for ECC encryption key archival and recovery (cfu)
  - Bugzilla Bug #797352 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-24
changelog:
  - Bugzilla Bug #797353 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . BadPaddingException (mharmsen)


author: Uri Lublin <uril@redhat.com> - 0.8.2-7
changelog:
  - semi-seamless migration support
  - added pyparsing.py as source, and using it to build the package.
  - added BuildRequires: autoconf automake libtool and using them.
  - applied server patches too
  - requires spice-protocol-0.8.1-2 (equivalent to upstream 0.8.2)
  - advertise itself as version 0.8.3, to notify the new feature.
  Resolves: rhbz#725009


author: Christophe Fergeau <cfergeau@redhat.com> - 0.8.2-8
changelog:
  - added upstream patches for various RHEL bugs
    - client: add xinerama support
  Resolves: rhbz#695323
    - client/x11: fix mode setting in MultyMonScreen::restore
  Resolves: rhbz#693431
    - Don't use "hw:0,0" for recording with alsa
  Resolves: rhbz#711810
    - Handle Application::set_hotkeys failure
  Resolves: rhbz#750030


author: Christophe Fergeau <cfergeau@redhat.com> - 0.8.2-10
changelog:
  - sync RHEV (windows client) patches which are upstream
    - fix USB sharing when starting SPICE fullscreen (windows client only)
  Resolves: rhbz#791269
    - fix menu issues when USB sharing is enabled (windows client only)
  Resolves: rhbz#791271
    - fix issues with AltGr when keyboard layout is non-us (windows client
      only)
  Resolves: rhbz#791274


author: Christophe Fergeau <cfergeau@redhat.com> - 0.8.2-12
changelog:
  - handle ENABLE_SMARTCARD messages from the controller
    Resolves: rhbz#641828
  - handle SEND_CAD messages from the controller
    Resolves: rhbz#750856


author: Milan Crha <mcrha@redhat.com> - 2.32.3-9.el6
changelog:
  - Add patch for RH bug #970013 (Disable IMAP+ QResync feature by default)
  - Add patch for RH bug #983031 (Google book saves other fax as business fax)
  - Add patch for RH bug #975409 (Custom alarm message for local calendars)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-10.el6
changelog:
  - Add patch for RH bug #950005 (Ignore cached zero-sized files)
  - Add patch for RH bug #983964 (Do calendar operations in a thread)


author: David Zeuthen <davidz@redhat.com> - 2.29.90-1.el6
changelog:
  - Update to new release for LVM2/Multipath support
  - Don't include support for connecting to remote udisks instances
  - Related: rhbz#548874
  - Related: rhbz#548870


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.25.rc1
changelog:
  - configure with --enable-filter-aaaa to enable use of filter-aaaa-on-v4 option (#1025008)
  - Fix race condition when destroying a resolver fetch object (#993612)
  - Fix the RRL functionality to include referrals-per-second and nodata-per-second options (#1036700)
  - Fix segfault on SERVFAIL to NXDOMAIN failover (#919545)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.26.rc1
changelog:
  - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#846065)
  - Fix initscript to return correct exit value when calling checkconfig/configtest/check/test (#848033)
  - Don't (un)mount chroot filesystem when running initscript command configtest with running server (#851123)
  - Fix zone2sqlite tool to accept zones containing "." or "-" or starting with a digit (#919414)
  - Fix initscript not to mount chroot filesystem is named is already running (#948743)
  - Fix initscript to check if the PID in PID-file is really s PID of running named server (#980632)
  - Correct the installed documentation ownership (#1051283)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.27.rc1
changelog:
  - Fix segmentation fault in nsupdate when -r option is used (#1064045)
  - Fix race condition on send buffer in host tool when sending UDP query (#1008827)
  - Allow authentication using TSIG in allow-notify configuration statement (#1044545)
  - Fix SELinux context of /var/named/chroot/etc/localtime (#902431)
  - Include updated named.ca file with root server addresses (#917356)
  - Don't generate rndc.key if there is rndc.conf on start-up (#997743)
  - Fix dig man page regarding how to disable IDN (#1023045)
  - Handle ICMP Destination unreachable (Protocol unreachable) response (#1066876)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.28.rc1
changelog:
  - Add support for TLSA resource records (#956685)
  - Increase defaults for lwresd workers and make workers and client objects number configurable (#1092035)


author: Doug Ledford <dledford@redhat.com> - 1.1.0-0.3355.1.el5
changelog:
  - Update to final ofed 1.4.1 bits
  - Compile against non-XRC libibverbs
  - Related: bz506258, bz506097


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885310


author: Adam Tkac <atkac redhat com> 32:9.7.2-1.P3
changelog:
  - update to 9.7.2-P3 (#623122)
  - patch bind97-managed-keyfile.patch replaced by bind97-compat-keysdir.patch
  - patches merged
    - bind97-rh554316.patch
    - bind97-rh576906.patch


author: Roman Rakus <rrakus@redhat.com> - 1.4.3-24
changelog:
  - Fixed using valist with log option on.
    Resolves: #446844
  - user ident has home dir set to /
    Resolves: #458144


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: David Cantrell <dcantrell@redhat.com> - 13.21.168-1
changelog:
  - Don't write iscsi targets set up via ibft in generated ks (rvykydal)
    Resolves: rhbz#811426
    Related: rhbz#811426
  - Fix parsing of iscsi iface udev info for offload devices (rvykydal)
    Resolves: rhbz#811426
  - Honour dhcptimeout set for NM in anaconda (rvykydal)
    Resolves: rhbz#769145
    Related: rhbz#769145


author: David Cantrell <dcantrell@redhat.com> - 13.21.169-1
changelog:
  - fall back to global proxy for repos (bcl)
    Resolves: rhbz#788537
  - set PROXY environmental variables (bcl)
    Resolves: rhbz#800388
  - Add /usr/bin/id to install image (mgracik)
    Resolves: rhbz#773545
  - Disable NM for iface used by root on iscsi (rvykydal)
    Resolves: rhbz#500273
    Related: rhbz#500273


author: David Cantrell <dcantrell@redhat.com> - 13.21.170-1
changelog:
  - Add ip= dracut parameter for iscsi nodes using default iface (rvykydal)
    Resolves: rhbz#500273
    Related: rhbz#500273
  - Do not pass :default:default iscsi nic specification to dracut (rvykydal)
    Resolves: rhbz#500273
    Related: rhbz#500273
  - Fix a question in a storage init, when no dispatcher is present (msivak)
    Resolves: rhbz#805910


author: David Cantrell <dcantrell@redhat.com> - 13.21.171-1
changelog:
  - Load mlx4 modules after DDs to make updates possible (msivak)
    Resolves: rhbz#801094
  - Make sure all kickstart partition reqs get appropriate weight setting.
    (dlehman)
    Resolves: rhbz#813158
  - Show lvm vg free space as a whole number in the partition gui. (dlehman)
    Related: rhbz#734128
  - Add sg_inq and sg_readcap to the install image (mgracik)
    Resolves: rhbz#737097


author: David Cantrell <dcantrell@redhat.com> - 13.21.172-1
changelog:
  - Change swap suggestions to the chart proposed in the discussion
    (vpodzime)
    Resolves: rhbz#744129


author: David Cantrell <dcantrell@redhat.com> - 13.21.173-1
changelog:
  - Set network configuration for root on partial offload iscsi devices
    (rvykydal)
    Resolves: rhbz#819132
  - Fix traceback trying to import textw.netconfig_text (dcantrell)
    Resolves: rhbz#785400


author: David Cantrell <dcantrell@redhat.com> - 13.21.175-1
changelog:
  - Adapt to fipvlan naming change (rvykydal)
    Resolves: rhbz#823086
  - Handle offload qla4xxx iscsi devices properly (rvykydal)
    Resolves: rhbz#823810


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Add two needed patches
  - Resolves: rhbz#783315 - Need nss workaround for freebl bug that causes openswan to drop connections
  - Resolves: rhbz#747387 - Unable to contact LDAP Server during winsync


author: Steven Pritchard <steve@kspei.com> 0.26-1
changelog:
  - Update to 0.26.
  - Cleanup a little to more closely match cpanspec output.
  - BR ExtUtils::MakeMaker.


author: Petr Pisar <ppisar@redhat.com> - 0.26-6
changelog:
  - Do not source /etc/profile.d/krb5-devel.sh as krb5-devel-1.8.1-6 does not
    provide it and places executables into standard PATH (Resolves: #657274)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-12
changelog:
  - added ip6t_set (rhbz#1033270)
  - do not block uninstall on a failing alternatives --remove call in preun
    (rhbz#1059214) (rhbz#1070123)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-15
changelog:
  - Add message for init script error returns (rhbz#1081191)
  - Fix rule deletion of ipset matches (rhbz#1081422)
  - Add space after dccp types (rhbz#1084974)
  - Add -C option to check for existing rules (rhbz#1088361)
  - Copy custom plugins for updates from iptables < 1.4.7-10 (rhbz#1088400)
  - Enable the IPv6 set target (rhbz#1161330)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-16
changelog:
  - Fixed ressource leak in libiptc found by coverity (rhbz#1088361)
  - Copy custom plugins also for releases up to 14 (rhbz#1088400)


author: Phil Sutter <psutter@redhat.com> - 1.4.7-17
changelog:
  - Include /etc/sysctl.d when searching for settings to apply (rhbz#1459673)
  - Ignore security table when setting chain policies (rhbz#1210563)


author: Matthias Clasen <mclasen@redhat.com> - 1.1.15.3-1
changelog:
  - Update to 1.1.15.3, more crash fixes and important media player fixes
  - See https://lists.webkit.org/pipermail/webkit-gtk/2009-October/000047.html


author: Peter Jones <pjones@redhat.com> - 4.02-2
changelog:
  - Split out extlinux and tftpboot.
  - remove duplicate syslinux/com32/ left in base package after 3.83-2


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-6
changelog:
  - Do not remove Python multiprocessing sockets.  Patch by Chris St. Pierre
    <chris.a.st.pierre@gmail.com>.
    Resolves: #1058310


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.9
changelog:
  - qemuDomainObjBeginJobInternal: Return -2 for temporary failures (rhbz#1100671)
  - qemu: Make qemuProcess{Start, Stop}CPUs easier to follow (rhbz#1100671)
  - qemu: Ignore temporary job errors when checking migration status (rhbz#1100671)
  - qemu: Send migrate_cancel when aborting migration (rhbz#1100642)
  - qemu: add host-pci-multidomain capability (rhbz#1100737)
  - qemu: specify domain in host-side PCI addresses when needed/supported (rhbz#1100737)
  - spec: Switch to "git am" for applying patches


author: Patsy Franklin <pfrankli@redhat.com. - 1:3.81-22
changelog:
  - When the exit status is 2, clean_jobserver() would incorrectly write an
    extra jobserver token to the pipe leading to an internal error message
    complaining that an extra jobserver token is available.
    Resolves: #861189


author: Patsy Franklin <pfrankli@redhat.com. - 1:3.81-23
changelog:
  - Get rid of any avoidable limit on stack size for processes spawned
    via $(shell). 
  - In eval_buffer() don't assume reading_file != NULL. This is not the
    case during the secondexpansion phase.
    Resolves: #835483


author: Dan Williams <dcbw@redhat.com> - 0.8.1-15
changelog:
  - wifi: calculate quality correctly with nl80211/mac80211 drivers (rh #748075)
  - wifi: fix Ad-Hoc associations when using nl80211/mac80211 drivers (rh #747066)
  - vpn: fix D-Bus interface properties export (rh #659685)


author: Steven Dake <sdake@redhat.com> 1.2.3-13
changelog:
  - Resolves: rhbz#614219
  - Add upstream revision 2989 - Don't reset the token timer when a retransmitted
    token is received.  Only reset when a token is received.


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-4.el6_2.1
changelog:
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919
  - Resolves: rhbz#771913


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.8
changelog:
  - kvm-ccid-card-emul-do-not-crash-if-backend-is-not-provid.patch [bz#965152]
  - kvm-ccid-make-backend_enum_table-static-const-and-adjust.patch [bz#965152]
  - kvm-ccid-declare-DEFAULT_ATR-table-to-be-static-const.patch [bz#965152]
  - kvm-libcacard-vscclient-fix-error-paths-for-socket-creat.patch [bz#965152]
  - kvm-libcacard-Use-format-specifier-u-instead-of-d-for-un.patch [bz#965152]
  - kvm-Spelling-fixes-in-comments-it-s-its.patch [bz#965152]
  - kvm-libcacard-Fix-unchecked-strdup-by-converting-to-g_st.patch [bz#965152]
  - kvm-libcacard-split-vscclient-main-from-socket-reading.patch [bz#965152]
  - kvm-libcacard-vscclient-to-use-QemuThread-for-portabilit.patch [bz#965152]
  - kvm-libcacard-teach-vscclient-to-use-GMainLoop-for-porta.patch [bz#965152]
  - kvm-libcacard-use-system-config-directory-for-nss-db-on-.patch [bz#965152]
  - kvm-libcacard-remove-sql-prefix.patch [bz#965152]
  - kvm-libcacard-remove-default-libcoolkey-loading.patch [bz#965152]
  - kvm-dev-smartcard-reader-nicer-debug-messages.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader.c-remove-aborts-never-tr.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader-support-windows-guest.patch [bz#965152]
  - kvm-libcacard-change-default-ATR.patch [bz#965152]
  - kvm-hw-ccid-card-passthru.c-add-atr-check.patch [bz#965152]
  - kvm-ccid-card-passthru-dev-smartcard-reader-add-debug-en.patch [bz#965152]
  - kvm-usb-ccid-Drop-unused-CCIDCardInfo-callback-print.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader.c-define-structs-for-CCI.patch [bz#965152]
  - kvm-dev-smartcard-reader-change-default-protocol-to-T-0.patch [bz#965152]
  - kvm-dev-smartcard-reader-copy-atr-protocol-to-ccid-param.patch [bz#965152]
  - kvm-libcacard-vreader-add-debugging-messages-for-apdu.patch [bz#965152]
  - kvm-dev-smartcard-reader-empty-implementation-for-Mechan.patch [bz#965152]
  - kvm-libcacard-cac-change-big-switch-functions-to-single-.patch [bz#965152]
  - kvm-usb-smartcard-reader-Properly-NAK-interrupt-eps-when.patch [bz#965152]
  - kvm-uhci-Don-t-allow-the-guest-to-set-port-enabled-when-.patch [bz#965152]
  - kvm-usb-ccid-remote-wakeup-support.patch [bz#965152]
  - kvm-uhci-egsm-fix.patch [bz#965152]
  - Resolves: bz#965152
    (Smartcard emulation with Windows guest fails)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.9
changelog:
  - kvm-Fix-off-by-one-error-in-page_l1_map.patch [bz#996791]
  - Resolves: bz#996791
    (Off-by-one error in page_l1_map() can lead to out-of-bounds access)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-27
changelog:
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Dan Horák <dan@danny.cz> - 1.28-1
changelog:
  - update to version 1.28
  - added fixes from RHEL to rescan-scsi-bus.sh
  - added scsi-rescan symlink to the rescan-scsi-bus.sh script


author: Akemi Yagi <toracat@centos.org> [2.6.32-358.11.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, EeePC hotkey, JFS
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Enabled ARPD [bug#5709]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added sysfs-fix-printk-warnings-bug6157.patch [bug#6157]
  - Added correct-tty-buffer-flush-bug6104.patch [bug#6104]
  - Added HyperV-Balloon-Fix-bug6316.patch [bug#6316]
  - Added fix-thermal-shutdown-warns-bug6346.patch [bug#6346]
  - Enabled dpt_i2o [bug#6429]


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-57.el6
changelog:
  - Fix `Backport gdb fix to handle identical binaries via additional build-id
    symlinks' (RH BZ 836966).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-58.el6
changelog:
  - Fix `Cannot find new threads: generic error' (RH BZ 811648).
  - Delete gdb-core-threads-5of5.patch; rename gdb-core-threads-Nof5.patch to gdb-core-threads-Nof4.patch.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-59.el6
changelog:
  - Fix `CVE-2011-4355 gdb: arbitrary code execution via .debug_gdb_scripts'
    (Jan Kratochvil, RH BZ 756116).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6
changelog:
  - Fix `GDB cannot access struct member whose offset is larger than 256MB'
    (Siddhesh Poyarekar, RH BZ 795424).


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-11.el6
changelog:
  - Support vram specification for qxl graphics (rhbz#673578)
  - Fix parsing int options in virsh (rhbz#639587)
  - Use -o encryption=on instead of -e for qemu-img (rhbz#676984)
  - Support domain snapshots with current QMP (rhbz#589076)
  - Update auditing support (rhbz#642785)
  - Only request sound cgroup ACL when required (rhbz#680398)
  - Allow fine-tuning of device ACL permissions (rhbz#683163)
  - Support vhost in attach-interface (rhbz#683276)
  - Don't request cgroup ACL access for /dev/net/tun (rhbz#683305)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-12.el6
changelog:
  - Fix vram settings for qxl graphics (rhbz#673578)
  - Free stream when domain shuts down while its console is open (rhbz#682741)
  - Use hardcoded python path in libvirt.py (rhbz#684204)
  - Add missing checks for read only connections (CVE-2011-1146)
  - Eliminate potential null pointer deref when auditing macvtap devices (rhbz#642785)
  - Insert error messages to avoid a quiet abortion of commands (rhbz#605660)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-13.el6
changelog:
  - Properly report error in virConnectDomainXMLToNative (CVE-2011-1146)
  - Handle DNS over IPv6 (rhbz#687896)
  - Start dnsmasq even if no dhcp ranges/hosts are specified (rhbz#687291)
  - Use a separate dhcp leases file for each network (rhbz#687551)
  - Fix a possible crash in storage driver (rhbz#684712)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-14.el6
changelog:
  - Fix delayed events when SASL is active (rhbz#624252)
  - Fix ref-counting bugs (rhbz#688774)
  - Log an error if on failure to connect to netlink socket (rhbz#689001)
  - Log error and abort network startup when radvd isn't found (rhbz#688957)
  - Add PCI sysfs reset access rights to qemu (rhbz#689002)
  - Fix regression with qemu:///session URI (rhbz#684655)
  - Avoid leaking PCI config fd into qemu (rhbz#687993)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-15.el6
changelog:
  - Fix return value for virJSONValueFromString if it fails (rhbz#688723)
  - Fix positioning to end of qemu log file (rhbz#689986)
  - Initialization error of qemuCgroupData in Qemu host usb hotplug (rhbz#690183)
  - 8021Qbh: Use preassociate-rr during the migration prepare stage (rhbz#684870)
  - Make error reporting in libvirtd thread safe (rhbz#689374)
  - Add missing dependencies (rhbz#690022)
  - Fix restoring a compressed save image (rhbz#691034)
  - Fix label restore bugs in qemu driver (rhbz#690737)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-16.el6
changelog:
  - nwfilter: Enable rejection of packets (rhbz#681948)
  - Revert all previous error log priority hacks (rhbz#587603)
  - Filter out certain expected error messages from libvirtd (rhbz#587603)
  - qemu: Unlock qemu driver before return from domain save (rhbz#688774)
  - Do not send monitor command after monitor meet error (rhbz#688774)
  - qemu: Ignore libvirt debug messages in qemu log (rhbz#681492)
  - virsh: Fix memtune's help message for swap_hard_limit (rhbz#680190)
  - virsh: Fix documentation for memtune command (rhbz#680190)
  - docs: Fix typo (rhbz#680190)
  - Fix typo in systemtap tapset directory name (rhbz#693701)
  - qemu: Ignore unusable binaries (rhbz#676563)
  - qemu: Support for overriding NPROC limit (rhbz#674602)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-17.el6
changelog:
  - Don't return an error on failure to create blkio controller (rhbz#689030)
  - Fix possible infinite loop in remote driver (rhbz#691514)
  - qemu: Remove the managed state file only if restoring succeeded (rhbz#692998)
  - docs: Tweak virsh restore warning (rhbz#692998)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-18.el6
changelog:
  - network: Fix NULL dereference during error recovery (rhbz#696660)
  - virsh: Fix regression in parsing optional integer (rhbz#693963)
  - util: Fix crash when removing entries during hash iteration (rhbz#693385)
  - Experimental libvirtd upstart job (rhbz#678084)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.7-18.el6_1.1
changelog:
  - debug: Avoid null dereference on uuid lookup api (rhbz#728546)
  - Fix auditing of disk hotunplug operations (rhbz#728516)
  - storage: Fix regression with backing format (rhbz#726617)
  - Fix performance problem of virStorageVolCreateXMLFrom() (rhbz#715400)
  - qemu: Translate boot config into bootindex if possible (rhbz#715401)
  - remote: Protect against integer overflow (rhbz#717202)
  Resolves: rhbz#728546, rhbz#728516, rhbz#715400, rhbz#715401, rhbz#717202
  Resolves: rhbz#726617


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.4-8
changelog:
  - read DBPath from SQLite3.conf in abrt1-to-abrt2  rhbz#726122
    Resolves: #726122
  - update man pages
    Resolves: #727569


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.0.4-10
changelog:
  - abrtd daemon need "messagebus" daemon, please update "Required-Start" section of /etc/init.d/abrtd
  - move abrt-action-install-debuginfo-to-abrt-cache to libexec  rhbz#736068
  - fix possible NULL dereference  rhbz#735942
    Resolves: #735942, #736068, #733975


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.4-13
changelog:
  - fixed typo in ccpp_event.conf rhbz#744784
  - fixed return codes in abrt-cli rhbz#742474
  - Resolves: #744784, #742474


author: Jay Fenlason <fenlason@redhat.com> 1.8-2
changelog:
  - Add BuildRequires on flex and bison
  - Add "export AR=ar" to allow builds on RHEL-7 to work.
    Resolves: rhbz822527


author: Jay Fenlason <fenlason@redhat.com> 1.8-3
changelog:
  - Move the module files to the (correct for RHEL-7) mpi/ directory.
  - Add MANPATH to the module files.


author: Jay Fenlason <fenlason@redhat.com> 2.0a-1
changelog:
  - Add Build Requires on autoconf, automake, libtool,
    perl-Digest-MD5, hwloc-devel, and libibmad-devel.
  - remove build requires on java
  - New upstream version, edited so it can pass a license audit.
    (RHEL7) R e s o l v e s: r h b z 1001718


author: Jay Fenlason <fenlason@redhat.com> 2.0rc1-1
changelog:
  - Upgrade to upstream 2.0rc1
  - Backport from RHEL-7 to RHEL-6
  - Include the -free patch (written by me) to prevent errors caused
    by calling the free macro rather than the free() function.
  - Fix the build process to work on RHEL-6, with its ancient
    auto*, libtool, etc.  This requires not rerunning autogen.sh
  - Resolves: rhbz1093454


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 5.3.3-6
changelog:
  - merge Joe's changes:
  - improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740732)


author: Joe Orton <jorton@redhat.com> - 5.3.3-11
changelog:
  - add security fixes for CVE-2012-0781, CVE-2011-4153, CVE-2012-0057,
    CVE-2012-0789, CVE-2012-1172, CVE-2012-2143, CVE-2012-2386


author: Bob Relyea <rrelyea@redhat.com> - 1.1.0-36
changelog:
  - Recognize up to 10 certs and keys on PIV and CAC cards.
  - Allow cards to have no cert in slot '0'.
  - Allow cards to have ECC and RSA certs and keys


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-15.1
changelog:
  - Resolves: rhbz#929101

  - Put handle to hdb in dispatch on unknown message (rhbz#929101)
  - merge upstream commit 5a4610628334b1e02f87b7e6a8946b59b65a1ec1 (rhbz#929101)
  - Properly check result of coroipcc_dispatch_put (rhbz#929101)
  - merge upstream commit dc31a079e8374329f0818f16e74b619f31aa835e (rhbz#929101)
  - coroipcs: Ensure rb data are not overwritten (rhbz#929101)
  - merge upstream commit c7e686181bcd0e975b09725502bef02c7d0c338a (rhbz#929101)
  - Properly lock pending_semops (rhbz#929101)
  - merge upstream commit 4d050cfac3cd30ad60a58e8294298968ee9d89f9 (rhbz#929101)


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.1-1
changelog:
  - Update to 2.1, which fixes a number of bugs.
    See http://jinja.pocoo.org/2/documentation/changelog#version-2-1.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.2.1-1
changelog:
  - Update to 2.2.1, mainly a bugfix release.
  - Remove patch no longer needed.
  - Remove conditional for FC-8.
  - Compilation of speedup module has to be explicitly requested now.


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.1-3
changelog:
  - Require python-setuptools, otherwise jinja2.__version__ evaluates to "unknown"
  Resolves: rhbz#1121241


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.3
changelog:
  - qemu: Fix checking of ABI stability when restoring external checkpoints (rhbz#1180521)
  - qemu: Use "migratable" XML definition when doing external checkpoints (rhbz#1180521)
  - qemu: Fix memleak after commit 59898a88ce8431bd3ea249b8789edc2ef9985827 (rhbz#1180521)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.4
changelog:
  - conf: Don't format actual network definition in migratable XML (rhbz#1203367)
  - util: more verbose error when failing to create macvtap device (rhbz#1203367)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.5
changelog:
  - Create directory for lease files if it's missing (rhbz#1208619)
  - qemu: cgroup: Properly set up vcpu pinning (rhbz#1209891)


author: David Cantrell <dcantrell@redhat.com> - 1.5.0-0.1.20110714-1
changelog:
  - Intel uploaded a new snapshot, fix the version and release to match guidelines
    Related: rhbz#691617


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-26
changelog:
  - backport patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761523)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761523)
  - backport patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761523)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-27
changelog:
  - reintroduce patch to accept keytab entries with vno==0 as matches when
    we're searching for an entry with a specific name/kvno (#782211)


author: Doug Ledford <dledford@redhat.com> - 0.0.4-8.el6
changelog:
  - Update to latest upstream version so we can have an actual URL that works
  - Fix ups for pkgwrangler import and also fix bug reported against rhel5
    version of package (552915)
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 0.0.4-11.el6
changelog:
  - Add the init script even though it isn't enabled by default
  - Fix the init script's usage of srp_daemon.conf
  - Resolves: bz815215, bz815234


author: Doug Ledford <dledford@redhat.com> - 0.0.4-12.el6
changelog:
  - Can't use %{name} macro in the %post and %preun as the service
    name is srpd while the package name is srptools
  - Related: bz815215


author: Doug Ledford <dledford@redhat.com> - 0.0.4-13.el6
changelog:
  - Need to background the srp_daemon.sh script in our init script, as
    srp_daemon.sh doesn't return until killed
  - Resolves: bz816087


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.5
changelog:
  - virCommand: Properly handle POLLHUP (rhbz#783453)
  - virCommandProcessIO(): Make poll() usage more robust (rhbz#783453)
  - qemu: Fix seamless spice migration (rhbz#787620)
  - build: Don't require avahi during install (rhbz#790779)
  - qemu: Unlock monitor when connecting to dest qemu fails (rhbz#787620)
  - qemu: Introduce inactive PCI device list (rhbz#784785)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.6
changelog:
  - fix a regression introduced in previous build when detaching devices
  - qemu: Honor the original properties of PCI device when detaching (rhbz#784785)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.7
changelog:
  - libvirtd: Create run dir when running at non-root user (rhbz#798177)
  - logging: Do not log timestamp through syslog (rhbz#798906)
  - logging: Add date to log timestamp (rhbz#798906)
  - Fix off-by-one printing month in logging code (rhbz#798906)
  - Add internal APIs for dealing with time (rhbz#798906)
  - Make logging async signal safe wrt time stamp generation (rhbz#798906)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.8
changelog:
  - qemu: Add support for domain cleanup callbacks (rhbz#806206)
  - qemu: Avoid dangling migration-in job on shutoff domains (rhbz#806206)
  - qemu: Add connection close callbacks (rhbz#806206)
  - qemu: Make autodestroy utilize connection close callbacks (rhbz#806206)
  - qemu: Avoid dangling migration-out job when client dies (rhbz#806206)


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-1
changelog:
  - Update to snapshot
  - Fix text subtitles causing hangs on startup
  - Fix missing plugins installation requiring a restart
  - Queue2 element moved to gstreamer core


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-2
changelog:
  - Fix theoradec bug with timestamps for Empathy video calls (#537170)
  - Fix text subtitle display regression (#537559)


author: Michal Sekletar <msekleta@redhat.com> - 0.22.2-5
changelog:
  - index zfs filesystems despite the fact they are marked as nodev (#1023779)
  - use more strict permissions for cron script and mark it as config (#1012534)
  - add gpfs to PRUNEFS (#1168301)


author: Michal Sekletar <msekleta@redhat.com> - 0.22.2-6
changelog:
  - mlocate.db is ghost file created with non-default attrs, list them explicitly so rpm --verify doesn't report errors (#1182304)


author: Daniel Veillard <veillard@redhat.com> - 2.48-5
changelog:
  - suppress the no address DHCP warning from logs (rhbz#704073)
  - fixes various small problems in the initscript (rhbz#584009)


author: Marek Grac <mgrac@redhat.com> 0.8.4-15
changelog:
  - Resolves: #522230 - 'service pulse stop' does not kill nanny process
  - Resolves: #533113 - piranha-0.8.4-13.el5 breaks LVS


author: Marek Grac <mgrac@redhat.com> 0.8.5-6
changelog:
  - Resolves: #604741 - piranha does not work with SELinux
  - Resolves: #593730 - LVS rebooted simultaneously cause problems


author: Marek Grac <mgrac@redhat.com> 0.8.5-8
changelog:
  - "service pulse reload" is resulting in lvsd segfaulting
    Resolves: rhbz#703146
  - a failure to start a single nanny kills off *all* running nannys
    Resolves: rhbz#593728


author: Ryan O'Hara <rohara@redhat.com> 0.8.5-9
changelog:
  - Resolves: #628872 - init script searches cwd which can cause SELinux denials
  - Resolves: #706881 - killing nanny/lvsd process should cause pulse to exit
  - Resolves: #708036 - too many VIPs can causes HTTP 414 error
  - Resolves: #729828 - add CIDR /23 netmask to drop-down menus


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-8
changelog:
  - honor the options in [main]  (RHEL 624676) (Fedora 635107)
  - Allow Strata plugin to send original filenames from report to server (Fedora 635118)(RHEL 626994)
  -  add _isa macro to spec file. (RHEL 672647)(Fedora 670215)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-9
changelog:
  - Correct the patch for Allow Strata plugin to send original filenames from report to server (RHEL 626994)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-24
changelog:
  - Apply two patches from upstream
  - Resolves: rhbz#1105382 - nslcd: error reading from client: Success


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-25
changelog:
  - Resolves: rhbz#917876 - [patch] Retry on zero length buffers rather than
                            declaring source unavailable


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-26
changelog:
  - Apply patches in prep
  - Resolves: rhbz#917876 - [patch] Retry on zero length buffers rather than
                            declaring source unavailable


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-27
changelog:
  - Resolves: rhbz#1240388 - nslcd fails to fetch member of group if that
                             members name has 19 or more character in its name


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-30
changelog:
  - Resolves: rhbz#1293564 - Segmentation fault during upstream make check
  - Also fix regressions in the tio.c module revealed by subsequent testing


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-31
changelog:
  - Resolves: rhbz#1293564 - fix doc to describe actual uri format
                             in nslcd.conf


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-32
changelog:
  - Don't double-close the socket
  - Resolves: rhbz#1309364 - Use-after-free in case resolving hosts or
                             networks fail


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 6.17-15
changelog:
  - Handle pending signals before flush so that the the .history file
    does not get truncated
  - Implement file locking using shared readers, exclusive writer
    to prevent any .history file data corruption


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 6.17-16
changelog:
  - Revert exit status regression with it's opt-out variable $anyerror,
    added by "Fix status of pipelined/backquoted/list of commands" and
    opt-in the POSIX-like exit status behaviour by $status_posix_value
    variable instead (#784510)


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-8
changelog:
  - Fix adding of printers without specification of device-uri.
  - Patch by Tim Waugh.
  - Resolves: #526442


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-10
changelog:
  - Fix adding of printers without specification of ppd-name (#545452)
  - Patch by Tim Waugh.
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-12
changelog:
  - Avoid timeout on job-related methods for invalid jobs
  - Make sure to return an error via dbus in case of failure
  - Resolves: #567986


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.6
changelog:
  - Resolves: rhbz#1291158 - Group members are not turned into ghost entries
                             when the user is purged from the SSSD cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.7
changelog:
  - Resolves: rhbz#1298252 - 'filter_users' in conjunction with
                             'default_domain_suffix'


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.8
changelog:
  - Resolves: rhbz#1305447 - sssd_nss memory usage keeps growing on
                             sssd-1.12.4-47.el6.x86_64 (RHEL6.7) when
                             trying to retrieve non-existing netgroups


author: Ben Skeggs <bskeggs@redhat.com> 2.1.18-1
changelog:
  - nv 2.1.18
  - nv-2.1.6-panel-fix.patch: fixup for libcwrapper removal
  - dropped patches for issues now fixed upstream


author: Lukas Berk <lberk@redhat.com> - 3.10.9-1
changelog:
  - Resolve local_sock() double free error (BZ 1258846).
  - Resolve netfilter pmda uses outdated /proc API (BZ 1221653).
  - Update to latest PCP sources (BZ 1248272).
  - Fix pmatop attribute error (BZ 1195429).
  - Fix pmwebd fails when monitoring systems with Vector (BZ 1238863).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-3
changelog:
  - Correct papi version we link against (BZ 1295694)
  - Fix possible overflow with pmdaproc using local context options (BZ 1295801)
  - Dropped pcp-compat package from upstream (BZ 1294390)


author: Lukas Berk <lberk@redhat.com> - 3.10.9-4
changelog:
  - Correct interrupts parsing on s390x platforms (BZ 1297822)
  - Correct papi version we link against for 32 bit arches (BZ 1295694)


author: Lukas Berk <lberk@redhat.com> 3.10.9-6
changelog:
  - Update pmdanamed testcaes (BZ 1303005)
  - Fix possible fd leak in pmdanamed (BZ 1223311)
  - Fix issue with pmdagfs2 installation (BZ 1305939)
  - Address testcase 370 failure on non x86_64 archs (BZ 1305940)
  - Address endian issue with pmdalinux on some platforms (BZ 1298722)


author: Nathan Scott <nathans@redhat.com> 3.10.9-7
changelog:
  - Fix pmlogconf probing of base XFS metrics (BZ 1358972)
  - Resolve SIGFPE in pcp-atop with missing metrics (BZ 1373590)
  - Support pcp-iostat uninterpolated PCP archive replay (BZ 1293661)
  - Resolve several reporting issues in PostgreSQL PMDA (BZ 1304619)


author: Nathan Scott <nathans@redhat.com> 3.10.9-9
changelog:
  - Added pcp-iostat precision reporting capability (BZ 1297498)
  - Fixed a pcp-iostat argument checking stack trace (BZ 1414257)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-57
changelog:
  - Very slow "rpm -q --specfile a.spec" if specfile has thousands of patches (#1383422)
  - Fix refcounting for Python hdr objects (#1438811)
  - Add sources to lua to prevent %autosetup failing in some cases (#1438815)


author: Jakub Jelinek <jakub@redhat.com> 0.4.2-7
changelog:
  - BuildReq libselinux-utils (#571724)
  - handle R_390_{PC32DBL,16,PC16,PC16DBL,8} relocations in 31-bit objects
    (#552635)
  - add prelink.conf(5) man page as a link to prelink(8) (#528933)


author: Jakub Jelinek <jakub@redhat.com> 0.4.3-1
changelog:
  - add support for prelink -u -o - library
  - add DWARF4 support
  - fix up reloc{8,9}.sh for sparc64, reenable testing on sparc64


author: Dave Airlie <airlied@redhat.com> 2.4.20-1
changelog:
  - pull in upstream .20 release - contains pretty much same patches
  - fix includes harder to make mesa build


author: Peter Gordon <peter@thecodergeek.com> - 1.1.15.1-3
changelog:
  - Forcibly disable JIT until we can properly resolve the execmem-caused
    segfaulting. (Temporary workaround until bug #516057 can be properly fixed.)
  - Remove the gnome-keyring build option (no longer used by the build scripts).
  - Correct release value of previous %changelog entry.


author: Matthias Clasen <mclasen@redhat.com> - 1.1.15.2-1
changelog:
  - Update to 1.1.15.2, which has multiple crash and other fixes
  - See https://lists.webkit.org/pipermail/webkit-gtk/2009-October/000040.html


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.42
changelog:
  - Add 0089-RHBZ-694602-RSSM-config.patch
  - Add 0090-RHBZ-700169-fix-nr-active.patch
    * Make sure to always count ghost paths as active
  - Add 0091-RHBZ-699577-manpage-clarification.patch
  - Add 0092-RHBZ-689504-rdac-retry.patch
    * Make the rdac checker retry up to 5 times on errors that are likely
      transient.
  - Add 0093-RHBZ-677449-dont-remove-map-on-enomem.patch
    * Don't remove a multipath device if dm_map_present fails due to lack of
      memory
  - Add 0094-RHBZ-707560-check-return-value.patch
    * Don't try to update path groups on a path priority change if the 
      multipath device has disappeared.
  - Add 0095-RHBZ-678673-no-path-groups.patch
    * Allow multipath devices with no path groups
  - Add 0096-RHBZ-683616-ioship-support.patch
    * Modify the rdac checker to work better storage in IOSHIP mode
  - Add 0097-RHBZ-697386-fix-shutdown-crash.patch
    * Add missing test for thread cancellation to the checker thread.
  - Add 0098-RHBZ-706555-dont-update-pgs-in-manual.patch
    * When failback is set to manual, do not automatically reconfigure the
      pgs when a path changes priority
  - Add 0099-RHBZ-705854-warn-on-bad-dev-loss-tmo.patch
  - Add 0100-RHBZ-710478-deprecate-uid-gid-mode.patch
    * uid, gid and mode are now controlled by udev.
  - Add 0101-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
  - Remove 0082-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
    * multipath and kpartx now have a "-u" option that forces the udev
      dm-disk rules to run.
  - Resolves: bz #694602, #700169, #689504, #677449, #707560, #678673
  - Resolves: bz #683616, #697386, #706555, #705854, #710478, #631009


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.43
changelog:
  - Add 0102-RHBZ-714821-dont-remove-map-twice.patch
    * multipathd was removing a map twice in one code path, causing
      double free errors
  - Add 0103-RHBZ-725541-09-no-partitions.patch
    * if a device has the "no_partitions" feature, kpartx ignores it
  - Add 0104-RHBZ-725541-10-force-devmap.patch
    * override "no_partitions"
  - Add 0105-RHBZ-725541-08-reset-running.patch
    * abort timed-out IO in directio checker
  - Add 0106-RHBZ-725541-07-tur-checker-reservation-conflict.patch
    * don't count a path as down if it has a reservation conflict. The
      kernel should be failing these errors up past multipath now.
  - Add 0107-RHBZ-725541-01-async-tur-checker.patch
    * Make tur checker async
  - Add 0108-RHBZ-725541-06-offline-check.patch
    * Don't get the priority of offline devies.
  - Add 0109-RHBZ-725541-05-only-count-up-and-ghost-paths.patch
    * fix path counting
  - Add 0110-RHBZ-725541-04-serialize-startup.patch
    * add the "show daemon" multipathd command, so users can check
      that the daemon has started up completely.
  - Add 0111-RHBZ-725541-03-handle-LBA_DEPENDENT-state.patch
    * handle LBA_DEPENDENT alua state.
  - Add 0112-RHBZ-725541-02-infinite-dev-loss-tmo.patch
    * allow dev_loss_tmo to be set to "inifinty", which sets it to
      the maximum allowed value.
  - Add 0113-RHBZ-719571-validate-guid-partitions.patch
    * don't build partition devices for invalid gpt's.
  - Add 0114-RHBZ-723168-adjust-messages.patch
  - Add 0115-RHBZ-713754-lower-minio.patch
    * add rr_min_io_rq parmeter, that sets the min_io to 1 for
      request based multipath
  Resolves: bz #699577, #713754, #714821, #719571, #723168, #725541


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-50.el6.3
changelog:
  - Resolves: #1369470 IPA Replica-Install from RHEL6 to RHEL7 Fails
    - Modififed NSSConnection not to shutdown existing database.
    - Do not erroneously reinit NSS in Dogtag interface
    - Make sure replication works after DM password is changed


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-4
changelog:
  - fix exit status of terminated child processes in su with
    pam(#563852)
  - do not depend on selinux patch application in
    _require_selinux tests


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.3-3
changelog:
  - allow 'Open Folder in Tabs' in Konsole to support SSH bookmarks (kde#177637)
    (upstream patch backported from 4.4)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-22
changelog:
  - virsh: Fix change-media bug on disk block type (rhbz#923053)
  - Fix patches for multiple graphics and spice migration (rhbz#975751)
  - Revert "qemu: Remove maximum cpu limit when setting processor count using the API" (rhbz#855296)
  - Remove VIR_DOMAIN_SHUTDOWN_CRASHED from public API (rhbz#822306)
  - Rename VIR_DOMAIN_PAUSED_GUEST_PANICKED to VIR_DOMAIN_PAUSED_CRASHED (rhbz#822306)
  - Improve LXC startup error reporting (rhbz#903092)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#928661)
  - util: Improve user lookup helper (rhbz#964359)
  - util: Add virGetGroupList (rhbz#964359)
  - util: Make virSetUIDGID async-signal-safe (rhbz#964359)
  - Fix potential deadlock across fork() in QEMU driver (rhbz#964359)
  - security: Framework for driver PreFork handler (rhbz#964359)
  - security_dac: Compute supplemental groups before fork (rhbz#964359)
  - security: Fix deadlock with prefork (rhbz#964359)
  - Split TLS test into two separate tests (rhbz#975201)
  - Avoid re-generating certs every time (rhbz#975201)
  - Change data passed into TLS test cases (rhbz#975201)
  - Fix validation of CA certificate chains (rhbz#975201)
  - Fix parallel runs of TLS test suites (rhbz#975201)
  - tests: Fix parallel runs of TLS test suites (rhbz#975201)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-23
changelog:
  - virnettlscontext: Resolve Coverity warnings (UNINIT) (rhbz#975201)
  - Fix qemuProcessReadLog with non-zero offset (rhbz#991334)
  - virSecurityManagerGenLabel: Skip seclabels without model (rhbz#997818)
  - bitmap: Add virBitmapCountBits (rhbz#997367)
  - virbitmap: Refactor virBitmapParse to avoid access beyond bounds of array (rhbz#997367)
  - virbitmaptest: Add test for out of bounds condition (rhbz#997367)
  - network: Allow <vlan> in type='hostdev' networks (rhbz#999107)
  - python: Fix bindings that don't raise an exception (rhbz#912170)
  - storage: Update pool metadata after adding/removing/resizing volume (rhbz#965442)
  - storage: Fix coverity warning (rhbz#965442)
  - storage: Fix the use-after-free memory bug (rhbz#965442)
  - network: Permit upstream forwarding of unqualified DNS names (rhbz#928638)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-124
changelog:
  - Resolves: #1002161 - large number of sudo rules results in error -
                         Unable to create response: Invalid argument


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-125
changelog:
  - Resolves: #997406 - sssd_nss core dumps under load
  - Resolves: #984814 - sssd_nss terminated with segmentation fault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-126
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - A better version of already committed patch
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-128
changelog:
  - More upstream fixes to prevent memcache crashes
  - Related: #997406 - sssd_nss core dumps under load


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129
changelog:
  - Do not crash when LDAP disconnects while a search is still in progress
  - Resolves: #1019979 - sssd_be segfault when authenticating against active
                         directory


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.1
changelog:
  - Inherit UID limits for subdomains
  - Resolves: #1028046 - Creating system accounts on a IdM client takes up
                         to 10 minutes when AD trust is configured in the IdM.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.2
changelog:
  - Allow combination of proxy id backend and LDAP auth backend
  - Resolves: #1032966 - SSSD: Allow for custom attributes in RDN when using
                         id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.3
changelog:
  - Resolves: #1036168 - sssd can't retrieve auto.master when using the
                         "default_domain_suffix" option in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.4
changelog:
  - Resolves: #1044905 - sssd_nss grows memory footprint when netgroups
                         are requested


author: Jan Zeleny <jzeleny@redhat.com> - 1.4-2
changelog:
  - cleanup of spec file (mixed tabs-and-spaces, specific version
    for explicit obsoletes, file attributes)


author: Petr Stodulka <pstodulk@redhat.com> - 1.4-4
changelog:
  - Fixed troubles with SSl connection
  - Fixed adding of broken symlink when 'copy -A'
  - Fixed permissions for */hgk - Thanks to Dave Johanse <davejohansen@gmail.com>
    Resolves: #784079 #928301 #1006457


author: Ian Kent <ikent@redhat.com> - 5.0.5-45
changelog:
  - bz787595 - /bin/ls --color=auto takes very long on dir with lots of symlinks to
    automounted NFS filesystems
    - fix function to check mount.nfs version.
  - Related: rhbz#787595


author: Ian Kent <ikent@redhat.com> - 5.0.5-46
changelog:
  - bz787595 - /bin/ls --color=auto takes very long on dir with lots of symlinks to
    automounted NFS filesystems
    - fix rework error return handling in rpc code.
  - Related: rhbz#787595


author: Ian Kent <ikent@redhat.com> - 5.0.5-47
changelog:
  - bz787595 - /bin/ls --color=auto takes very long on dir with lots of symlinks to
    automounted NFS filesystems
    - allow MOUNT_WAIT to override probe.
    - improve UDP RPC timeout handling.
  - Related: rhbz#787595


author: Ian Kent <ikent@redhat.com> - 5.0.5-48
changelog:
  - bz787595 - /bin/ls --color=auto takes very long on dir with lots of symlinks to
    automounted NFS filesystems
    - use strtok_r() in linux_version_code().
  - Related: rhbz#787595


author: Ian Kent <ikent@redhat.com> - 5.0.5-49
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - fix sss wildcard match.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-50
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - fix dlopen() error handling in sss module.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-51
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - fix configure string length tests for sss library. 
    - add BuildRequires for sssd to ensure sss support is added.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-52
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - also add BuildRequires for libsss_autofs.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-53
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - fix libsss_autofs not available at build.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-54
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - revert fix libsss_autofs not available at build.
  - Related: rhbz#683523


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-22
changelog:
  - Rewrote initscript to become closer to Packaging:SysVInitScript
    Fedora guildeline. The change also fixes bug 523913


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-1
changelog:
  - Resolves: #1265328 - Add new version (3.4.14) of Squid proxy as
    new component
  - removed old Resolves and Related tags from Changelog


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Make pam_authenticate_with_login_password available for other modules.
  - Reformat documentation to make the Basic Auth usage less prominent.


author: Mark Wielaard <mjw@redhat.com> - 0.164-1
changelog:
  - Update to elfutils-0.164 (#1254647)
  - Drop old compat stuff
  - Drop upstreamed patches
    - elfutils-0.161-ar-long-name.patch
    - elfutils-0.161-formref-type.patch
  - Include elfutils/known-dwarf.h


author: Ales Ledvinka <aledvink@redhat.com> - 1.8.11-23
changelog:
  - (#1194420) Fix DDR4 SDR crash.
  - (#1170266) Wrong version reported.
  - (#1162175) Extra dependency.
  - (#1126333) Very slow response from SDR owner type SW ID
  - (#903019)  SDR lists x4600m2 fan units as unspecified


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-12
changelog:
  - Update info about trap in man page
    Resolves: #799958
  - Enable system-wide bash_logout
    Resolves: #677439
  - instead of setting the signal handler to SIG_IGN while installing
    the new trap handler, block the signal and unblock it after the new handler
    is installed
    Resolves: #695656


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-15
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #982610


author: Tomas Tomecek <ttomecek@redhat.com> - 0.7.2-6
changelog:
  - Resolves: rhbz#697530
  - ExcludeArch s390 -- tests fail there
  - ExcludeArch ppc -- package won't build there
  - ExcludeArch s390x -- package won't build there


author: Adam Jackson <ajax@redhat.com> 2.16.0-2
changelog:
  - redhat-intel-crtc-dpms.patch: Fix some multihead transitions when X is
    started with the lid closed. (#692776)


author: Mike Christie <mchristie@redhat.com> - 1.0.4-0
changelog:
  - 587072 Fix tgt-admin logic error with shared accounts in targets.conf 
  - Rebase to 1.0.4 to sync fixes.


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-7.1
changelog:
  - add Siddhesh Poyarekar's patch to ensure that when performing an "mdir"
    or "mls" operation, that the FTP client always passes an actually-terminated
    string as the open mode for fopen() (#816689, RT#7079)


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-3
changelog:
  - Fix bug when setting the CA used for https REST communication
    Resolves: rhbz#1325762
  - Fix parsing of state of storage domain nodes
    Resolves: rhbz#1318672
  - Silence one redundant warning happening during storage domain parsing
    Related: rhbz#1201846


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-1
changelog:
  - create creds before calling krb5_kuserok() so that they're available when
    it goes to look up the target user's home directory (#563442)
  - collapse multiple levels of debugging into a single debug level (#157107)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-2
changelog:
  - backport fixes to make the libdefaults verify_ap_req_nofail setting control
    what happens when we can't read keytabs, and enable TGT validation by
    default, with "novalidate" as an option which takes a list of services for
    which TGT validation shouldn't be attempted (#622938)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-6
changelog:
  - backport the change to prefer krb5_change_password() over krb5_set_password()
    again from 2.3.12 (#690583)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-7
changelog:
  - don't treat setcred() as session open/close in sshd (#720609, #725797)
  - don't create a new ccache when "external" is enabled, as the calling
    application's already managing one (#690832)
  - always re-read "external" creds when possible, and use an in-memory
    ccache when setting up tokens (more of #690832)
  - during password change, if we got creds during the first pass, don't
    ask for the authtok again (#700520)
  - allow things we do to compensate for transplanting in new self-tests to
    fail if the new tests aren't patched in (#708507)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-8
changelog:
  - in a %{_rawbuild} environment, don't run autoconf, because current
    versions will choke on an unpatched configure.ac (more of #708507)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-9
changelog:
  - refuse to supply non-password information via prompter callback when
    obtaining password-changing credentials (#700520)


author: Nikola Pajkovsky <npajkovs@redhat.com> - 3.0.1-12
changelog:
  - add patch 0001-fix-strcpy-overlap-memory.patch
  - Resolves: 595454  - Doesn't detect any ethernet interface


author: Nikola Pajkovsky <npajkovs@redhat.com> - 3.0.1-13
changelog:
  - add patch iptraf-3.0.1-strict-aliasing.patch
  - Resolves: #596173 - RPMdiff run failed for package iptraf-3.0.1-11.el6


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.27.rc1
changelog:
  - sa-update runs in cron automatically if spamd or amavisd is running
    If you use neither, you may force sa-update by editing /etc/sysconfig/sa-update


author: Adam Jackson <ajax@redhat.com> 1.6.0-10
changelog:
  - Don't Require: libao-devel at runtime (#820008)
  - rdesktop-1.6.0-ts2008-licence.patch: Fix licence handling against some
    versions of Terminal Services. (#831095)
  - rdesktop-1.6.0-cursor.patch: Fix cursor rendering for Windows Server 2008
    (#782494)
  - rdesktop-1.6.0-smart-card-lp64.patch: Fix smartcard support on 64-bit
    hosts (#772020, #680917)
  - rdesktop-1.6.0-scard-crash.patch: Fix a crash in smartcard support (#680926)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-13
changelog:
  - RHEL-6.6 erratum
    - don't retry authentication when ctrl-c pressed
    - fix double-quote processing in Defaults options
    - fix sesh login shell argv[0]
    - handle the "(none)" hostname correctly
    - SSSD: fix ipa_hostname handling
    - SSSD: fix sudoUser netgroup specification filtering
    - SSSD: list correct user when -U <user> -l specified
    - SSSD: show rule names on long listing (-ll)
    Resolves: rhbz#1065415
    Resolves: rhbz#1078338
    Resolves: rhbz#1052940
    Resolves: rhbz#1083064
    Resolves: rhbz#1033703
    Resolves: rhbz#1006447
    Resolves: rhbz#1006463
    Resolves: rhbz#1070952


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-14
changelog:
  - RHEL-6.6 erratum
    - SSSD: fixed netgroup filter patch
    - SSSD: dropped serparate patch for #1006463, the fix is now part
      of the netgroup filter patch
    Resolves: rhbz#1006463
    Resolves: rhbz#1083064


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-15
changelog:
  - RHEL-6.6 erratum
    - SSSD: dropped the ipahostnameshort patch, as it is not
      needed. rhbz#1033703 is a configuration issue.
    Related: rhbz#1033703


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-16
changelog:
  - RHEL-6.7 erratum
    - added zlib-devel build required to enable zlib compression support
    - fixed two typos in the sudoers.ldap man page
    - fixed a hang when duplicate nss entries are specified in nsswitch.conf
    - SSSD: implemented sorting of the result entries according to the
            sudoOrder attribute
    - LDAP: fixed logic handling the computation of the "user matched" flag
    - fixed restoring of the SIGPIPE signal in the tgetpass function
    - fixed listpw, verifypw + authenticate option logic in LDAP/SSSD
    Resolves: rhbz#1106433
    Resolves: rhbz#1138267
    Resolves: rhbz#1147498
    Resolves: rhbz#1138581
    Resolves: rhbz#1142122
    Resolves: rhbz#1094548
    Resolves: rhbz#1144448


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-17
changelog:
  - RHEL-6.7 erratum
    - added patch for CVE-2014-9680
    - added BuildRequires for tzdata
    Resolves: rhbz#1200253


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-8
changelog:
  - updated man-page
  - fixed handling of RLIMIT_NPROC resource limit
  - fixed alias cycle detection code
  - added debug messages for tracing of netgroup matching
  - fixed aborting on realloc when displaying allowed commands
  - show the SUDO_USER in logs, if running commands as root
  - sssd: filter netgroups in the sudoUser attribute
    Resolves: rhbz#856901
    Resolves: rhbz#947276
    Resolves: rhbz#886648
    Resolves: rhbz#994563
    Resolves: rhbz#848111
    Resolves: rhbz#994626
    Resolves: rhbz#973228
    Resolves: rhbz#880150


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-9
changelog:
  - sssd: match against ipa_hostname from sssd.conf too when
    checking sudoHost
    Resolves: rhbz#853542


author: Michal Sekletar <msekleta@redhat.com> - 14:4.0.0-4.20090921gitdf3cb4.2
changelog:
  - add support for pcap_setdirection, -P commandline flag (#1099701)
  - add support for nano second timestamps, -J flag and --timestamp-preciosion (#1045601)
  - fix cdp dissector, allow zero-length data frames (#1130111)
  - allow specifying NIC names which start with number (#972396)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.0.0-5.20090921gitdf3cb4.2
changelog:
  - regenerate patch for pcap_setdirection support. Added detection of the needed
    libpcap functionality to configure script


author: Nalin Dahyabhai <nalin@redhat.com> 185-9
changelog:
  - add Ross Tyler's patch to always require authentication during password
    change requests for expired passwords, so that modules which check password
    quality (pam_cracklib) will always have the old password on-hand to examine
    as well (#688747, upstream #431)


author: Nalin Dahyabhai <nalin@redhat.com> 185-10
changelog:
  - don't overwrite an explicitly-configured search base when we're using DNS
    to locate the server (#735375)


author: Thomas Woerner <twoerner@redhat.com> - 1.2-10
changelog:
  - Added support for brctl show <bridge> (rhbz#690529)
  - Added multicast option documentation to man page (rhbz#676355)


author: Dan Williams <dcbw@redhat.com> - 0.3-11.git20100502
changelog:
  - core: ignore some failures on disconnect (rh #578280)
  - core: add support for platform serial devices
  - gsm: better Blackberry DUN support
  - gsm: periodically poll access technology
  - cdma: prevent crash on modem removal (rh #571921)
  - mbm: add support for Sony Ericsson MD400, Dell 5541, and Dell 5542 modems
  - novatel: better signal strength reporting on CDMA cards
  - novatel: add access technology and mode preference support on GSM cards
  - zte: fix mode preference retrieval
  - longcheer: add support for Zoom modems (4595, 4596, etc)
  - longcheer: add access technology and mode preference support


author: Dan Williams <dcbw@redhat.com> - 0.3-13.git20100507
changelog:
  - core: fix crash when plugging in some Sierra and Option NV devices (rh #589798)
  - gsm: better compatibility with various Sony Ericsson phones
  - longcheer: better support for Alcatel X060s modems


author: Dan Williams <dcbw@redhat.com> - 0.4.0-0.1
changelog:
  - core: rebuild to fix D-Bus property access (for dbus-glib CVE-2010-1172)
  - mbm: catch E2NAP error codes
  - simtech: plugin for Simtech-based modems (ie Airlink 3GU)
  - sierra: fix CDMA roaming detection


author: Dan Williams <dcbw@redhat.com> - 0.4-1.git20100622
changelog:
  - core: fix occasional crash when device is unplugged (rh #591728)
  - core: ensure errors are correctly returned when device is unplugged
  - core: ensure claimed ports don't fall back to Generic (rh #597296)
  - gsm: better compatibility with various phones
  - mbm: better detection of connection errors
  - simtech: add plugin for Simtech devices (like Airlink 3GU)
  - sierra: fix CDMA roaming detection


author: Dan Williams <dcbw@redhat.com> - 0.4-2.git20100628
changelog:
  - core: fix crash during probing when a plugin doesn't support all ports (rh #603294)
  - gsm: better registration state checking when devices don't support AT+CREG (Blackberries)
  - gsm: add support for getting remaining unlock retry counts


author: Doug Ledford <dledford@redhat.com> - 1.2-7
changelog:
  - Grab the upstream ibutils git repo, find a checkout that supports the
    recent opensm library versions and yet doesn't require graphviz-tcl,
    export that tree to a tarball with a git designation, build from it.
  - Resolves: bz468122


author: Doug Ledford <dledford@redhat.com> - 1.2-8
changelog:
  - Remove ibdiagui from the package entirely since it still doesn't work
    without graphviz-tcl
  - Related: bz468122


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.503.el6_9.6
changelog:
  - qemu-kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574067]
  - Resolves: bz#1574067
    (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-6.9.z])


author: Dave Airlie <airlied@redhat.com> 0.10.6-4
changelog:
  - Add support for default vga arb device selection
  - Update libpciaccess VGA arb code for newer kernel API


author: Adam Jackson <ajax@redhat.com> 0.10.6-5
changelog:
  - libpciaccess-0.10.6-rom-sanity.patch: If we hit the /dev/mem path for
    reading a device's ROM, verify that it looks like it at least might belong
    to the device in question by checking vendor and device ID match.  Fixes
    vbetool post hanging forever (and thus blocking boot) on some dual-gpu
    laptops.


author: Chris Feist <cfeist@redhat.com> - 0.16.2-71
changelog:
  - Added --noenable/--nodisable options when starting/stoping cluster
  - Only propagate/activate cluster on last node when using --activate
  - ccs no longer returns 0 when --startall/--stopall fails on a node
  - If not hostname or filename is specified, use 'localhost'
  - Don't leave tempfiles around from schema tests
  - Resolves: rhbz#1090642 rhbz#917809 rhbz#1062402 rhbz#1024962 rhbz#996196


author: Chris Feist <cfeist@redhat.com> - 0.16.2-72
changelog:
  - Added '-s' option to disable SSLv2 connections to ricci
  - Added ability to configure RICCIOPTS variable in /etc/sysconfig/cluster
    or /etc/sysconfig/ricci
  - Resolves: rhbz#1075176


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-73
changelog:
  - ricci: fix end-use modules do not handle stdin polling correctly
  - ricci: fix missing deployment-time dependencies
  - ricci: prevent possible reboot loop
  - Resolves: rhbz#1076713 rhbz#1106842 rhbz#1044122


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-74
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
  - ricci: enhance possible reboot loop prevention (avoid stale batches)
  - Resolves: rhbz#1055424 rhbz#1044122


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-75
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
    (last-minute revamp)
  - Resolves: rhbz#1055424


author: Kamil Dudka <kdudka@redhat.com> 0.12-0.13.pre3
changelog:
  - use appropriate BuildRequires for nss_compat_ossl (#495532)
  - support for trusted CA certificates loading from file in PEM format


author: Kamil Dudka <kdudka@redhat.com> 0.12-0.15.pre3
changelog:
  - try to load default NSS root certificates if the configuration option
    connection.ssl.trusted_ca_file is set to an empty string (#497788)


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.20.pre5
changelog:
  - remove patch for configure script to find OpenSSL (we use NSS instead)
  - rediffed all patches with non-zero offset
  - add buildrequires for zlib-devel


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-68
changelog:
  - Resolves: #1450298 - when ProxyErrorOverride is On, modcluster
    return 503 status code on subsequent requests (2)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-69
changelog:
  - Resolves: #1471383 - httpd.worker abort()s with misc/apr_reslist.c:159:
    reslist_cleanup: Assertion `rl->ntotal == 0' failed


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.21.b17
changelog:
  - Updated to IcedTea 1.7.4
  - Resolves: rhbz#537121
  - Resolves: rhbz#612467
  - Resolves: rhbz#613824
  - Additionally, fixed rh bugs 616893 and 616895


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.22.b17
changelog:
  - Update to IcedTea 1.7.5
  - Import debuginfo patch from el5
  - Parallelize build
  - Removed systemtap probepoint patch (now upstream)
  - Resolves: bz#639954


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-4
changelog:
  - Fix problem with mdadm large device names overflowing an internal buffer,
    potentially leading to segfaults.
  - Resolves bz1343809


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-5
changelog:
  - Retry reading sync_completed state to avoid a reshape not continuing after
    restarting a reshape
    This is an additional patch to resolve this bug, which was identified
    during the z-stream backport of this bug.
  - Resolves bz1322317


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-6
changelog:
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Resolves bz1340768


author: Xiao Ni <xni@redhat.com> - 3.3.4-8
changelog:
  - Cannot assemble IMSM array with domain policy in mdadm.conf and
    RAID level migration in container with 2 arrays breaks both arrays 
  - Resolves bz1413937 and bz1413615


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-2
changelog:
  - Fix incorrect max cpu frequency
    Resolves: #971053
  - Fix wrong UserModeTime and KernelModeTime
    Resolves: #974071
  - Fix restart of scfbd service in provider-register script
    Resolves: #1179878


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.28.0-10
changelog:
  - Add a patch from upstream to ignore non CPU data from /proc/cpuinfo,
    which would lead to a spurious processor displayed in the application,
    under certain architectures
  Resolves: #682011


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.28.0-11
changelog:
  - Add a patch from upstream that looks for the "clock" line in the
    /proc/cpuinfo output. This fixes missing CPU speed for architectures
    that put such information in the "clock" line, such as Power6
  Resolves: #692956


author: Andreas Schneider <asn@redhat.com> - 3.6.23-29
changelog:
  - resolves: #1322687 - Fix CVE-2015-5370
  - resolves: #1322687 - Fix CVE-2016-2110
  - resolves: #1322687 - Fix CVE-2016-2111
  - resolves: #1322687 - Fix CVE-2016-2112
  - resolves: #1322687 - Fix CVE-2016-2115
  - resolves: #1322687 - Fix CVE-2016-2118 (Known as Badlock)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-34
changelog:
  - resolves: #1329967 - Fix netlogon credential checks
  - resolves: #1329975 - Fix dcerpc trailer verificaton


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.8-3
changelog:
  - Add critical needs_check flag support
  - No support for the cache target in RHEL-6.5, thus avoid packaging cache tools and man pages
    Resolves: #1086824


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error, and hang or crash in the KDC when using
    the LDAP kdb backend (CVE-2010-4022, CVE-2011-0281, CVE-2011-0282, #671101)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.5
changelog:
  - add upstream patches to fix double-free in KDC while returning typed-data
    with errors (CVE-2011-0284, #681564)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.6
changelog:
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (CVE-2011-0284, #681564)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.7
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696341,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-11
changelog:
  - Fix uninitialized variable in virLXCControllerSetupDevPTS (rhbz#880064)
  - storage: Fix device detach regression with cgroup ACLs (rhbz#876828)
  - storage: Fix bug of fs pool destroying (rhbz#878400)
  - qemu: Fix a crash when save file can't be opened (rhbz#880919)
  - bitmap: Fix typo to use UL type of integer constant in virBitmapIsAllSet (rhbz#876415)
  - virsh: Rewrite cmdDomDisplay (rhbz#878779)
  - network: Fix crash when portgroup has no name (rhbz#879473)
  - util: Capabilities detection for dnsmasq (rhbz#882265)
  - util: New virSocketAddrIsPrivate function (rhbz#882265)
  - network: Use dnsmasq --bind-dynamic when available (rhbz#882265)
  - storage: Fix scsi detach regression with cgroup ACLs (rhbz#876828)
  - libssh2_session: Support DSS keys as well (rhbz#878376)
  - virsh: Fix error messages in iface-bridge (rhbz#878376)
  - virsh: Check the return value of virStoragePoolGetAutostart (rhbz#878376)
  - conf: Check the return value of virXPathNodeSet (rhbz#878376)
  - conf: snapshot: Check return value of virDomainSnapshotObjListNum (rhbz#878376)
  - util: Fix virBitmap allocation in virProcessInfoGetAffinity (rhbz#878376)
  - virsh: Use correct sizeof when allocating cpumap (rhbz#878376)
  - rpc: Don't destroy xdr before creating it in virNetMessageEncodeHeader (rhbz#878376)
  - virsh: Do timing even for unusable connections (rhbz#878376)
  - conf: Fix uninitialized variable in virDomainListSnapshots (rhbz#878376)
  - Fix error handling in virSecurityManagerGetMountOptions (rhbz#878376)
  - conf: Prevent crash with no uuid in cephx auth secret (rhbz#878376)
  - conf: Fix virDomainNetGetActualDirect*() and BridgeName() (rhbz#881480)
  - virsh: Report errors if arguments of the schedinfo command are incorrect (rhbz#882915)
  - systemd: Require dbus service (rhbz#830201)
  - spec: Require dbus-daemon when using libvirtd in Fedora (rhbz#830201)
  - qemu: Don't free PCI device if adding it to activePciHostdevs fails (rhbz#877095)
  - util: Slightly refactor PCI list functions (rhbz#877095)
  - qemu: Fix memory (and FD) leak on PCI device detach (rhbz#877095)
  - util: Do not keep PCI device config file open (rhbz#877095)
  - node_memory: Improve the docs (rhbz#872656)
  - node_memory: Do not fail if there is parameter unsupported (rhbz#872656)
  - node_memory: Fix bug of node_memory_tune (rhbz#872656)


author: Roman Kollar <rkollar@redhat.com> 6.17-21
changelog:
  - Fix dosource() calls after history file locking patch, requested release number bump
    Resolves: #847102


author: Roman Kollar <rkollar@redhat.com> 6.17-22
changelog:
  - Fixed .history patch issue breaking upstream multibyte tests
    Resolves: #821796
  - Revert history handling in loops
    Resolves: #814069


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-21
changelog:
  - Add notes about offline mode to sssd.conf
  - Related: rhbz#1110226 - Requests queued during transition from offline
                             to online mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-22
changelog:
  - Use the correct sudo iterator
  - Related: rhbz#1118336 - sudo: invalid sudoHost filter with asterisk


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-23
changelog:
  - Resolves: rhbz#1099290: RFE: Be able to configure sssd to honor openldap
                            account lock to restrict access via ssh key


author: Milan Crha <mcrha@redhat.com> - 2.32.3-37.el6
changelog:
  - Add patch for RH bug #1066063 (Use-after-free on a reminder snooze)
  - Add patch for RH bug #1133507 (Calendar event times not drawn with correct font)


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.30
changelog:
  - Fix restorecond init script
  - Make setools.seinfo working only on SELinux enabled systems in seobjet.py
  Resolves:#893065


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.31
changelog:
  - Make setsebool less verbose on errors
  Resolves:#984484
  - Make <<none>> spec working for semanage fcontext
  - Make audit2allow witn o option to append output instead of write


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.33
changelog:
  - Fix semanage
  Resolves:#860506
  - Make semanage man page and help consistent
  - Fix setsebool to give better error message on bad boolean names
  - Add support for exclude dirs in fixfiles
  - Fix semanage boolean to require a value


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.37
changelog:
  - Add workaround to make allow_polyinstantiation=1 directive working for xguest with semanage-booleans
  Resolves:#1008790


author: Christophe Fergeau <cfergeau@redhat.com> - 0.8.2-7.1
changelog:
  - added upstream patches for various zstream RHEL bugs
    - client: add xinerama support
  Resolves: rhbz#771323
    - Don't use "hw:0,0" for recording with alsa
  Resolves: rhbz#790892


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-5
changelog:
  - Make .modulespath a config file (bug #918540)
  - Do not replace modified profile.d scripts (bug #953198)
  - Remove use of test command in csh alias (bug #929007)


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-6
changelog:
  - Call test command in csh alias by its full path (bug #929007)
  - Correctly preserve the target file that the config symlink points to
    (this change makes the previous fix for bug #953198 whole)


author: Jan Synáček <jsynacek@redhat.com> - 3.2.10-2
changelog:
  - fix: SourceVers wrongly sets version in nested directory (#979789)
  - fix: unload from loaded modulefile broken (#1117307)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.23
changelog:
  - Add 0055-RHBZ-602257-update-on-show-topology.patch
    * make multipathd updated state with the kernel before showing topology
  - Add 0056-RHBZ-603812-better-type-check.patch
    * only count files a path devices, if they are block devices, and are not
      device-mapper devices.
  - Add 0057-RHBZ-607869-fix-resize.patch
    * use the resize calls that don't set noflush, when you reload for size
      changes.
  - Add 0058-RHBZ-601665-assemble-features.patch
    * When multipathd reloads paths, add queue_if_no_path to the features
      based on the no_path_retry value.
  - Add 0059-RHBZ-607874-handle-offlined-paths.patch
    * get the sysfs pathinfo in multipath if necessary, and only retry
      failed ev_add_path reloads 3 times.
  - Resolves: bz #602257, #603812, #607869, #601665, #607874


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-15
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #964687


author: Dan Winship <danw@redhat.com> - 2.28.6.1-2.1
changelog:
  - Disable GNOME proxy support since RHEL6 doesn't have gsettings-desktop-schemas
  - Allow building with libproxy 0.3.0


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Recreate lost spec file and patches from memory
  - Add dist tag to release
  - Turn off FORTIFY_SOURCE when building


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-19
changelog:
  - Resolves: Bug 834096 - slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-26
changelog:
  - restorecond: treat root as a regular user
  Resolves: rhbz#1281877
  - semanage: don't skip reserver_port_t
  Resolves: rhbz#1225806
  - semanage: check if a store exists
  Resolves: rhbz#1208801
  - fixfiles: check the SELinux status
  Resolves: rhbz#1240788


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-27
changelog:
  - sandbox: Improve comments in sysconfig file
  Resolves: rhbz#1159336
  - secon, newrole: fix inconsistence between --help and man page
  Resolves: rhbz#1278811, rhbz#1278913


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-51
changelog:
  - Release 1.2.11.15-51
  - Resolves: #1193235 - Fix coverity issues and compiler warnings - 2014/12/16, 2014/11/24, 2015/2/18 (DS 47965)
  - Resolves: #1171308 - Don't add unhashed password mod if we don't have an unhashed value (DS 47752)
  - Resolves: #1167976 - memberof skip nested groups breaks the plugin (DS 47963)
  - Resolves: #1185025 - ldclt needs to support SSL Version range (DS 47996)
  - Resolves: #1183820 - Windows Sync accidentally cleared raw_entry (DS 47989)
  - Resolves: #1155569 - nsslapd-db-locks modify not taking into account. (DS 47934)
  - Resolves: #1145072 - Bad manipulation of passwordhistory (DS 47905)
  - Resolves: #1144092 - During schema reload sometimes the search  returns no results (DS 47973)
  - Resolves: #1145374 - WinSync - manual replica refresh removes AD-only member values from DS and AD in groups (DS 47884)
  - Resolves: #1193243 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV (DS 47659)
  - Resolves: #1150368 - provide enabled ciphers as search result (DS 47880)
  - Resolves: #1153739 - Add SSL/TLS version info to the access log (DS 47945)
  - Resolves: #1118285 - Disable SSL v3, by default [389-ds-base-1.2.11 only] (DS 47928)
  - Resolves: #1193241 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949)
  - Resolves: #1179763 - COS cache doesn't properly mark vattr cache as  invalid when there are multiple suffixes (DS 47981)
  - Resolves: #1175868 - Incorrect assumption in ndn cache (DS 547)
  - Resolves: #1159124 - perl scripts not returning expected error code (DS 47962)
  - Resolves: #1115960 - Nested COS definitions can be incorrectly  processed (DS 47980)
  - Resolves: #1175868 - Backport of Normalized DN Cache (DS 408)
  - Resolves: #1174892 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)
  - Resolves: #1174892 - Need to refresh cache entry after called betxn postop plugins (DS 47750)
  - Resolves: #1193235 - Fix coverity issues (2014/12/16) (DS 47965)
  - Resolves: #1193235 - Fix coverity issues (2014/11/24) (DS 47965)
  - Resolves: #1169974 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970)
  - Resolves: #1169975 - Fix coverity issue (DS 47969)
  - Resolves: #1169975 - COS memory leak when rebuilding the cache (DS 47969)
  - Resolves: #1170706 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967)
  - Resolves: #1167976 - skip nested groups breaks memberof fixup task (DS 47963)
  - Resolves: #1167976 - RFE - memberOf - add option to skip nested group lookups during delete operations (DS 47963)
  - Resolves: #1171357 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950)
  - Resolves: #1162704 - Memory leak in password admin if the admin entry does not exist (DS 47958)
  - Resolves: #1162704 - PasswordAdminDN attribute is not properly returned to client (DS 47952)
  - Resolves: #1145379 - Fix backport issue to 1.2.11 (DS 47900)
  - Resolves: #1145379 - Server fails to start if password admin is set (DS 47900)
  - Resolves: #1145379 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900)
  - Resolves: #1141735 - ldclt: assertion failure with -e "add,counteach" -e "object=<ldif file>,rdn=uid:test[A=INCRNNOLOOP(0;24 (DS 47907)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-52
changelog:
  - Release 1.2.11.15-52
  - Resolves: #1193235 - Fix coverity issues and compiler warnings - 2014/12/16, 2014/11/24, 2015/2/18 (DS 47965)


author: Chris Feist <cfeist@redhat.com> - 0.16.2-70
changelog:
  - Added ability to create/remove uidgid entries for corosync in cluster.conf
  - Resolves: rhbz#1025053


author: Karel Zak <kzak@redhat.com> 2.17.2-12.16
changelog:
  - fix #1033309 - man rename references mmv command which is not available
  - fix #1039187 - taskset man page PERMISSIONS section is incorrect
  - fix #999625 - mount does not appear to be correctly documented for default mount options
  - fix #1004021 - document blkid -w behaviour
  - fix #1011590 - fdisk: Floating point exception on multipath mapped device
  - fix #1031641 - findmnt should handle better trailing "/" in /proc/mounts entries
  - fix #1104575 - kill(1) doesn't check errno after calling strtol()
  - fix #1049055 - backport PID ns support to unshare(1) in util-linux-ng
  - fix #957906 - backport 'nsenter' utility to util-linux
  - fix #619521 - requesting to add logins(1m) command to distribution of Red Hat


author: Ryan O'Hara <rohara@redhat.com> 0.8.5-13
changelog:
  - Resolves: #788541 - add option for sync daemon mcast interface
  - Resolves: #717556 - add option for sync daemon id


author: David Vossel <dvossel@redhat.com> - 3.9.5-16
changelog:
  - Fixes unreliable detection of nic device in IPaddr2
  - Fix fs-lib.sh regression in is_alive write test failure detection
  - Fix properly handle mysql when alternate user is specified.

    Resolves: rhbz#1181187
    Resolves: rhbz#1183735
    Resolves: rhbz#1183148


author: David Vossel <dvossel@redhat.com> - 3.9.5-17
changelog:
  - Fixes rgmanager lvm agent's ability to exclusively activate
    volume groups on nodes with aliases

    Resolves: rhbz#1085109


author: Dan Walsh <dwalsh@redhat.com> - 2.0.38-1
changelog:
  - Update to upstream
    * Change semodule upgrade behavior to install even if the module
      is not present from Dan Walsh.
    * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.2-23
changelog:
  - wacom: fix sysfs pach for status_led?_select/wacom_led (#805064)
  - wacom: fix crash when using a shortcut with the Shift key (#839328)
  - wacom: match builtin monitor if edid-matching fails for screen
    tablets (#826128)
    Resolves: #805064 #839328 #826128


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.10-2
changelog:
  - replace BuildPreReq: with BuildRequires: (rpmlint)
  - fix inadvertent macro use in changelog (rpmlint)
  - drop the final '.' from the package summary (rpmlint)


author: Robin Norwood <rnorwood@redhat.com> - 2.30-3
changelog:
  - fix various issues from package review:
  - remove extra || : from %check
  - add dist tag to release
  - remove BR: perl
  - fix tabs and spacing


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.30-10
changelog:
  - remove the last test, which lead to hang-up of test suite in mock
   Test are non standart, it was need a patch.
  - Resolves: rhbz#558919


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1.2-3
changelog:
  - Drop xorg-x11-util-macros build requires, not needed anymore
  - Don't build on s390 (or ppc, if on RHEL)
  - Force autoreconf to avoid libtool errors


author: Frediano Ziglio <fziglio@redhat.com> 0.1.1-19
changelog:
  - Remove RHEL 7 hack
    Resolves: rhbz#1226723
  - Fix memory leak caused by image cache
    Resolves: rhbz#1221010


author: Daniel Veillard <veillard@redhat.com> - 2.7.4-1
changelog:
  - upstream release 2.7.4
  - symbol versioning of libxml2 shared libs
  - very large number of bug fixes


author: Ade Lee <alee@redhat.com> 9.0.3-31
changelog:
  - Resolves #887305 - /var/run/pki/ca has wrong selinux context
  - Resolves #895702 - pki-cad restart avc denial


author: Ade Lee <alee@redhat.com> 9.0.3-32
changelog:
  - Resolves #999055 - AVC denials during ipa server and replica installs
  - Resolves #998715 - Package Sanity Test Failures


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-33
changelog:
  - Resolves #1051382 - IPA Replica installation fails when using an external CA
  - Test patch to filter out invalid XML and provide additional debugging
    information
  - Resolves #1083170 - Prevent LDAP Attributes from being affected by Locale
  - Resolves #1096142 - IPA replica setup fails during CA setup with
                        "unable to parse xml"
  - Resolves #1061442 - RFE - ipa-server should keep backup of CS.cfg
  - Resolves #1055080 - Giant /var/log/pki-ca/debug


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-39
changelog:
  - Resolves #1144608 - pki-core failed to build with cmake-2.8.12.2-4.el6
    (mharmsen - backport for RHEL 6.6.Z)
  - Resolves #1037248 - pki-core FTBFS if "-Werror=format-security" flag is used
    (mharmsen - backport for RHEL 6.6.Z)
  - Resolves #1243 - Outdated selinux-policy dependency in Dogtag 9
    (mharmsen - backport for RHEL 6.6.Z)
  - Resolves #1229361 - ipa-server-install fails when configuring CA
    (edewata - backport for RHEL 6.6.Z)


author: Steve Grubb <sgrubb@redhat.com> 0.6.4-2
changelog:
  resolves: #593635 - Capabilities can't be set on just a thread
  - Fix requires for the utils subpackage


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.2.1-8
changelog:
  - fix `--copy' option behaviour to unlink sedXXX temp files,
    clean-up the copy-option patch and merge it with the
    `-i/--in-place' docs/manpage patch (#709956)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.16.0
changelog:
  - Bump to 2.6.16 and u201b00.
  - Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
  - Resolves: rhbz#1633817


author: Jaromir Capik <jcapik@redhat.com> 22.6-18
changelog:
  - Dropping the previously applied fuser patch (#787776)
  - The patch has a negative performance and reliability impact
  - Related: rhbz#787776


author: Jan Rybar <jrybar@redhat.com> - 22.6-20
changelog:
  - fuser manpage: note about handling not-owned processes moved from BUGS to RESTRICTIONS
  - Resolves: rhbz#1211743


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.138-1
changelog:
  - Rebased to latest upstream packages
  - Fixed creating default resource operations
  - Added support for RRP and corosync options for cman based clusters
  - Allowed scope=configuration in cib commands
  - Added support for configuring a cluster remotely using pcsd
  - Fixed globally-unique clone resources in pcsd
  - Added resource location to resources / stonith devices list
  - Fixed formatting of resource / fence agent description
  - Fence agent description now contains information about the agent
  - Parallelized cluster start and cluster stop
  - Added warning when nodes stop will cause a loss of the quorum
  - pcs status --full now displays Node attributes and Migration summary
  - Resolves: rhbz#1185738 rhbz#1031141 rhbz#1121769 rhbz#1126835 rhbz#1160359 rhbz#1168986 rhbz#1174244 rhbz#1174793 rhbz#1174798 rhbz#1174801 rhbz#1184763 rhbz#1184922


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-13
changelog:
  - Add nfsrestart option to fs and clustefs agents as last resource to umount the filesystem
  - Resolves: rhbz#822053


author: Chris Feist <cfeist@redhat.com> - 3.9.2-14
changelog:
  - Fixed issue causing fs.sh to fail when a device is still mounted
  - Fixed random servie failures when starting multiple HA LVM services
  - Tomcat resource now uses the proper defaults
  - The pacemaker SAPInstance and SAPDatabase resources were updated to their
    latest version
  - Updated lvm resource agent to not produce errors when used with pacemaker
  - oracledb.sh script now properly checks the status of the Oracle database
  - HA-LVM now supports RAID logical volumes
  - ip.sh now properly assignes the ip address to the correct interface on
    hosts with multiple interfaces on the same network
  - Stopping a filesystem when a device doesn't exist no longer results in
    failure
  - Log output from the 'status' action from netfs is now properly logged
  - In HA LVM clusters using tags, changing the lvm.conf file is now possible
  - Using rg_test with HA LVM resources no longer results in a
    "too many arguments" error 
  - Resolves: rhbz#728365 rhbz#714156 rhbz#853249 rhbz#843049 rhbz#817550 rhbz#729812 rhbz#839181 rhbz#824153 rhbz#822244 rhbz#860328 rhbz#847335 rhbz#834293


author: Chris Feist <cfeist@redhat.com> - 3.9.2-15
changelog:
  - Fixes issue with rgmanager not recognizing a mounted cifs share due to
    trailing slashes
  - Resolves: rhbz#848642


author: Chris Feist <cfeist@redhat.com> - 3.9.2-16
changelog:
  - Add support for 'volume group per service HA-LVM support for RAID logical
    volumes'
  - Resolves: rhbz#824153


author: Chris Feist <cfeist@redhat.com> - 3.9.2-17
changelog:
  - HA LVM is now able to properly shutdown when device failures cause LVs
    to go missing which allows the service to migrate to another machine
  - Resolves: rhbz#860981


author: Chris Feist <cfeist@redhat.com> - 3.9.2-19
changelog:
  - Better error messages for the script resource have been added to aid
    debugging
  - Resolves: rhbz#773478


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-1
changelog:
  - New upstream version, which includes the changeset_r22324 patch.
  - Correct a typo in the Source0 line in this spec file.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-74.el6
changelog:
  - Improve fix for 'gdb crashes while thread apply all bt is run on the core
    file' (RH BZ 1104587).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-75.el6
changelog:
  - Additional fixes needed by 'gdb crashes while thread apply all bt is
    run on the core file' (Jan Kratochvil, Tom Tromey, Paul Pluzhnikov,
    RH BZ 1104587).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-78.el6
changelog:
  - Fix '`catch syscall' doesn't work for parent after `fork' is called'
    (Philippe Waroquiers, RH BZ 1149205).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-79.el6
changelog:
  - Fix 'gdb has a bug that prevents it from breaking in anonymous
    namespace functions.' (Keith Seitz, RH BZ 1139405).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-81.el6
changelog:
  - Fix 'backport GDB 7.4 fix to RHEL 6.6 GDB' [Original Sourceware bug
    description: 'C++ (and objc): Internal error on unqualified name
    re-set', PR 11657] (RH BZ 1186476).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-82.el6
changelog:
  - Fix 'gdb/linux-nat.c:1411: internal-error:
   linux_nat_post_attach_wait: Assertion `pid == new_pid' failed.'
   (Pedro Alves, RH BZ 1162264).


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.6.895736-5
changelog:
  - Related: rhbz#554415
    Changed name of fedora_lib_patch flag to simply fedora
    Added rhel_5 flag, and put in switches for rhel-5 libs
    Added new boost libs for RHEL-6/Fedora


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.6.895736-5
changelog:
  - Related: rhbz#569937
    Adds missing post actions to set up openais/corosync.
    Fixed up numerous inconsistencies and small discreppanecies in spec file.
    More efficient build which limits the packages built when building only
    core rpms.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.935473-1
changelog:
  - Related: rhbz#574416
    Updated SELinux handling - remove qpidd.pp
    Rebase sources on svn r.935473/r.3913 (initial build for MRG 1.3)


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-1
changelog:
  - Related: rhbz#574881
  - Rebase to qpid r.946106 / store r.3975
  - New build process: building all packages for RHEL-6 in one build; relying
    on compose to split the rpms amongst core RHEL-6 and MRG channels.
  - Removed the qpidd.sasldb file; this caused a multi-lib problem, and is used for
    testing only (BZ587226).
  - Added new client lib libqpidmessaging.so.
  - Limited examples to the messaging dir only.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-3
changelog:
  - Related: rhbz#602696 - removed post script 'semodule -r qpidd' and
             deps on semodule.
  - Related: rhbz#587226 - removed qpidd.sasldb which is causing multilib
             conflict.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-3
changelog:
  - Related: rhbz#604173 - Added patch set for MRG 1.3. Modified spec file
    to set the lib versions for each of the libs produced by the build
    independently of each other and pass that info as params to make.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-5
changelog:
  - Related: rhbz#609298 - ruby QMF bindings can't query agents
    Fix in undelying c++ code for ruby QMF bindings.


author: Karel Zak <kzak@redhat.com> 2.17.2-12.13
changelog:
  - fix #816342 - agetty: improve CLOCAL flag management
  - fix #846790 - missing information about threads in kill(2) man page
  - fix #864585 - "mount -av" displays "nothing was mounted" when a /sbin/mount.<fs> successed
  - fix #868850 - sfdisk man pages should refer block devices as "block devices" rather than disks.
  - fix #870128 - improve blkid documentation
  - fix #870854 - Cannot use user@domain format for console logins
  - fix #872291 - "man hwclock" says to run non-existent "adjtimex" utility
  - fix #958313 - Add /bin/logger symlink
  - fix #885313 - hexdump segfault
  - fix #915844 - mount man page incorrectly describes behaviour of "relatime" mount option
  - fix #947062 - blkdiscard command support
  - fix #966735 - CPU add/delete util-linux-ng patch
  - fix #859523 - fallocate: add punch hole support


author: Peter Jones <pjones@redhat.com> - 7.0.13-1
changelog:
  - Strip boot partition prefix from initrd path if present during --update.
  - add host only support for local kernel compiles (airlied)


author: Peter Jones <pjones@redhat.com> - 7.0.15-3
changelog:
  - Ensure that all stanzas are fixed with --update-kernel=ALL (patch from bcl)
    Resolves: rhbz#696960


author: Jan Grulich <jgrulich@redhat.com> 1.1.0-17
changelog:
  - Rebuild against xorg-x11-server-1.17
    Resolves: bz#1248637
  - Added Requires: libXfont
    Resolves: bz#1011315
  - Remove lock file after stopping vncserver service
    Resolves: bz#1236559


author: Deepak Bhole <dbhole@redhat.com> 1.0.2-1
changelog:
  - Resolves rhbz#693601 
  - Update to IcedTea-Web 1.0.2
  - Dropped patch0 (instance validity check). Now part of 1.0.2
  - Also resolves #682674 by adding a javaws Provides


author: Phil Sutter - 2.6.32-48
changelog:
  - Resolves: #1269814 - [6wind 6.8 Feat]: implement support for basic bridge IFA_INFO_DATA
  - Resolves: #1276591 - iproute: 'ip addr flush' failed to send flush request: Cannot assign requested address


author: Phil Sutter - 2.6.32-54
changelog:
  - Resolves: #1086512 - "ip link show" commands display Message Truncated
  - Resolves: #1301148 - [RFE] Monitoring per connection TCP retransmission


author: Marek Grac <mgrac@redhat.com> - 3.0.15-40
changelog:
  - fencing: Add option --ssh-options
    Resolves: rhbz#1069618
  - fence_vmware_soap: python exception when user does not have privileges
    Resolves: rhbz#1018263
  - fence_wti: Add support for delay
    Resolves: rhbz#1079291
  - fence_ilo: Unable to enter password with "
    Resolves: rhbz#990537
  - fencing: Fence agent uses key authentication when it should use password
    Resolves: rhbz#1048842


author: Marek Grac <mgrac@redhat.com> - 3.0.15-41
changelog:
  - fence_brocade ported to fencing library
    Resolves: rhbz#641632 rhbz#642232 rhbz#841556
  - fence_rsb fails to power devices on with certain firmwares
    Resolves: rhbz#1110428


author: Marek Grac <mgrac@redhat.com> - 3.0.15-43
changelog:
  - fix quoes in fence_ilo
    Resolves: rhbz#990537
  - fix delay support for agents without off/reboot
    Resolves: rhbz#641632


author: Marek Grac <mgrac@redhat.com> - 3.0.15-44
changelog:
  - fence_brocade: fix default action
    Resolves: rhbz#1114559
  - fence_brocade: add support for list to allow monitor
    Resolves: rhbz#1114528


author: Stepan Kasal <skasal@redhat.com> - 1.2.3-21
changelog:
  - consolidate the autoconfiscation patches into one and clean it up
  - consequently, clean up the %build and %install sections
  - zconf.h includes unistd.h again (#479133)


author: Peter Vrabec <pvrabec@redhat.com> 4.6.2-3.el6_1.3
changelog:
  - provide configuration directive for sysklogd message format compatibility
  - provide log format template for sysklogd message format compatibility
    Resolves: #742275


author: Jindrich Novy <jnovy@redhat.com> 4.999.9-0.3.20091007.beta
changelog:
  - move xz man pages to main package, leave lzma ones where they belong
  - remove URL from Source0, it is a git snapshot


author: Pavel Raiskup <praiskup@redhat.com> - 4.999.9-0.4.beta.20091007git
changelog:
  - fix 'xzgrep -h' to behave as expected (#850898)
  - fix 'xzgrep -l' to behave as expected (#863024)
  - fix 'xzfgrep -F' to behave as expected (#988703)


author: Honza Horak <hhorak@redhat.com> - 2.9-11
changelog:
  - Added YP_PASSWD_HASH environment variable to set default 
    algorithm for hashing a new password
    Resolves: #699666


author: Honza Horak <hhorak@redhat.com> - 2.9-12
changelog:
  - Fixed -hash patch to omit an old password check when shadow 
    passwords or passwd.adjunct enabled and use correct password length
    Resolves: #699666


author: Bill Nottingham <notting@redhat.com> 1.3.44-1
changelog:
  - alternatives: update symlinks if they exist on installation (#104940)
  - alternatives: clarify error messages with more context (#441443)
  - alternatives: fix removal of manual links (#525021, <dtardon@redhat.com>)
  - translation updates: ml, mr, pl, ta, uk


author: Bill Nottingham <notting@redhat.com> 1.3.45-1
changelog:
  - add support for Should-Start, Should-Stop (#98470, <iarnell@gmail.com>)
  - ntsysv: don't drop initscripts with '.' in the name (#556751)
  - translation updates: el, id


author: Remi Collet <Fedora@famillecollet.com>
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-17
changelog:
  - fix #841520 - do not try to change owner of log if it is not needed
  - fix #848131 - fix bad umask value while creating temp file
  - fix #920030 - set SELinux context before compress files creation
  - fix #922169 - remove temp files on error
  - fix #847338 - do not overwrite create directive value by ACL setting
  - fix #847339 - fix race condition between fchmod and acl_set_fd


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-18
changelog:
  - fix #722209 - do not redirect output of logrotate to /dev/null, mark
    logrotate.conf as config
  - fix #1117189 - sort logs according to dateformat when removing the old one
  - fix #625034 - update logrotate.status atomically
  - fix #984965 - fix possible overflow in "create" directive parsing
  - fix #1012485 - use permissions 0700 for cron.daily script


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.1
changelog:
  - Rebase to Ruby 1.8.7.  Based on Mohammed Morsi's port of the 1.9.1
    spec file to Fedora 11: <http://mo.morsi.org/blog/node/318>.
    * ruby-multilib.patch (aka patch23): Rewrite the mkconfig.rb patch so that
    it may be applied unconditionally.  This addresses an rpmlint complaint
    about the arch-dependent patch.  Now, the script itself tests the target
    architecture.  Remove the ".ifarch ppc64 s390x sparc64 x86_64" conditional.


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.2
changelog:
  - Integrate addition of patch101 by Mohammed Morsi.  This fixes
    the segv-inducing marshaling bug affecting rails-3.0.0.
  - Integrate Mamoru Tasaka's path-fixing feedback, including
    updates to ruby-1.8.7-lib-paths.patch


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.3
changelog:
  - split some long lines; as in Mamoru Tasaka's 1.8.7.x spec file
  - don't require emacs; remove vestiges of emacs


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-1
changelog:
  - Resolves: rhbz#602435
  - (sitelib2): remove unused definition
  - correct search path, using changes from Mohammed Morsi's
    http://mo.morsi.org/files/ruby-1.8.7.249-5.fc13.src.rpm


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-5
changelog:
  - avoid thread-related segfault on powerpc64
    * ruby-ppc64-segv-fix.patch: New file.
    Do not ignore test failure on ppc64.
  - Resolves: rhbz#653824


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-10
changelog:
  - don't set xterm function keys in default config (#151556)
  - always return 0 in scriptlet (#433882)
  - fix pty permissions
  - enable utempter support
  - link with libtinfo, don't link with libutil
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-15
changelog:
  - fix crash when resizing (#515055)
  - try to improve default config (#523647, #506256, #492729)
  - suppress install-info errors (#515999)


author: Tim Jackson <rpm@timj.co.uk> - 3.0.19-1
changelog:
  - Update to 3.0.19
  - Fix PHP Zend API/ABI dependencies to work on EL-4/5
  - Fix "License" tag
  - Fix encoding of "NOTICE" file
  - Add registration via PECL


author: Remi Collet <Fedora@FamilleCollet.com> - 3.1.3p1-1
changelog:
  - update to 3.1.3 patch1 (beta, for PHP 5.3 support)
  - add test suite (disabled for http://pecl.php.net/bugs/bug.php?id=16793)
  - add use_request_time, lazy_classes, lazy_functions options (apc.ini)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.1.9-1
changelog:
  - update to 3.1.9 (bugfix, stable) (#662655)
  - create -devel subpackage with header files
  - ship apc.php for easier referral in the config files


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.470.el6
changelog:
  - kvm-vnc-sanitize-bits_per_pixel-from-the-client.patch [bz#1157644]
  - Resolves: bz#1157644
    (CVE-2014-7815 qemu-kvm: qemu: vnc: insufficient bits_per_pixel from the client sanitization [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.471.el6
changelog:
  - kvm-aio-switch-aiocb_size-type-int-size_t.patch [bz#1069519]
  - kvm-aio-use-g_slice_alloc-for-AIOCB-pooling.patch [bz#1069519]
  - kvm-aio-rename-AIOPool-to-AIOCBInfo.patch [bz#1069519]
  - kvm-ide-ahci-Check-for-ECANCELED-in-aio-callbacks.patch [bz#1069519]
  - kvm-block-Add-refcnt-in-BlockDriverAIOCB.patch [bz#1069519]
  - kvm-block-Add-bdrv_aio_cancel_async.patch [bz#1069519]
  - kvm-block-Drop-bdrv_em_co_aiocb_info.cancel.patch [bz#1069519]
  - kvm-block-Drop-bdrv_em_aiocb_info.cancel.patch [bz#1069519]
  - kvm-posix-aio-Remove-raw_aiocb_info.cancel.patch [bz#1069519]
  - kvm-linux-aio-Convert-laio_aiocb_info.cancel-to-.cancel_.patch [bz#1069519]
  - kvm-dma-Convert-dma_aiocb_info.cancel-to-.cancel_async.patch [bz#1069519]
  - kvm-blkdebug-Drop-blkdebug_aiocb_info.cancel.patch [bz#1069519]
  - kvm-curl-Drop-curl_aiocb_info.cancel.patch [bz#1069519]
  - kvm-qed-Drop-qed_aiocb_info.cancel.patch [bz#1069519]
  - kvm-rbd-Drop-rbd_aiocb_info.cancel.patch [bz#1069519]
  - kvm-vdi-Drop-vdi_aio_cancel.cancel.patch [bz#1069519]
  - kvm-gluster-Drop-gluster_aiocb_info.cancel.patch [bz#1069519]
  - kvm-block-Drop-AIOCBInfo.cancel.patch [bz#1069519]
  - kvm-block-Rename-qemu_aio_release-qemu_aio_unref.patch [bz#1069519]
  - kvm-scsi-Drop-scsi_req_abort.patch [bz#1069519]
  - kvm-scsi-generic-Handle-canceled-request-in-scsi_command.patch [bz#1069519]
  - kvm-scsi-Unify-request-unref-in-scsi_req_cancel.patch [bz#1069519]
  - kvm-scsi-Drop-SCSIReqOps.cancel_io.patch [bz#1069519]
  - kvm-scsi-Introduce-scsi_req_cancel_complete.patch [bz#1069519]
  - kvm-scsi-Introduce-scsi_req_cancel_async.patch [bz#1069519]
  - kvm-virtio-scsi-Handle-TMF-request-cancellation-asynchro.patch [bz#1069519]
  - kvm-scsi-fix-cancellation-when-I-O-was-completed-but-DMA.patch [bz#1069519]
  - kvm-block-Fix-bdrv_aio_co_cancel_em-RHEL-only.patch [bz#1069519]
  - kvm-qcow2-Zero-write-support.patch [bz#1130014]
  - Resolves: bz#1069519
    ([FJ6.5 Bug] A KVM guest hangs up for about 30 seconds after issuing SG_IO ioctl to a virtio-scsi device.)
  - Resolves: bz#1130014
    (test case 033 and 034 of qemu-iotests fail for vmdk)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.472.el6
changelog:
  - kvm-virtio-pci-avoid-repeatedly-deassigning-notifers-of-.patch [bz#1124311]
  - Resolves: bz#1124311
    (Qemu-kvm aborted when boot with 232 virtio NICs (multiple function is on))


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.473.el6
changelog:
  - kvm-blockdev-preserve-I-O-throttling-across-drives_reope.patch [bz#1211513]
  - Resolves: bz#1211513
    (IO throttling doesn't work after migration)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6
changelog:
  - kvm-posix-aio-compat-fix-acb-ev_signo-race-condition.patch [bz#1233292]
  - Resolves: bz#1233292
    ()


author: William Cohen <wcohen@redhat.com> - 5.1.1-1
changelog:
  - Rebase to 5.1.1 for:
    - rhbz726798: Support for Sandy Bridge in PAPI
    - rhbz785258: FP event on Sandy Bridge when HT enabled
    - rhbz743648: Support for access to various energy and perf registers via papi 
    - rhbz831751: Ivy Bridge: support PAPI 
    - rhbz740909: Allow parallel builds
    - rhbz785975: Correct use of apostrophes in PAPI documentation


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-6
changelog:
  - stop overriding the system-wide UMASK default in our default
    oddjobd-mkhomedir.conf file (#1150607)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Remove upstreamed patch for RH1151372.
  - Regenerate add-final-location-rpaths patch against new release.
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Add US_export_policy.jar and local_policy.jar to packages.
  - Resolves: rhbz#1180291


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Regenerate add-final-location-rpaths patch against new release.
  - Resolves: rhbz#1180291


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-3
changelog:
  - Resolves: rhbz #1288477 - mod_nss: detect and fail for colons in
    credentials with FakeBasicAuth 
  - Patch created by jkaluza@redhat.com for 'mod_ssl' in rhbz #1027442 -
    mod_ssl: detect and fail for colons in credentials with FakeBasicAuth


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-4
changelog:
  - Resolves: rhbz #1280276 - Relocate and downgrade NSSProxyNickname error
    message to a warning (removed error message)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.10-5
changelog:
  - Resolves: rhbz #1295490 - Add server-side Server Name Indication
    (SNI) support
  - Resolves: rhbz #1277613, #1295976 - Always shut down the SSL
    session cache when killing the module. This was the source of a
    rather large memory leak and potential crash in the case of
    SIGHUP or service reload.


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.1.rc1
changelog:
  - update to 9.8.2rc1
  - patches merged
    - bind97-rh754398.patch
    - bind97-rh700097.patch
    - bind97-rh734502.patch
    - bind97-rh746694-1.patch
    - bind97-rh746694-2.patch
    - bind97-rh739406-1.patch
    - bind97-rh739406-2.patch
  - ship DNSKEY for root zone in default configuration


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.2.rc1
changelog:
  - harden dns_zone_setmasterswithkeys() to avoid INSIST failures
  - build with '--enable-fixed-rrset'
  - fix potential memory leak in code which processes rndc authentication
    (#749582)
  - generate rndc.key during `service named start` (#768798)
  - nslookup: improve handling of AA responses with recursion off
  - removed obsolete bind97-rh714049.patch patch


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-26
changelog:
  - Resolves: rhbz#694444 - Unable to resolve SRV record when called with
  -                         _srv_,<fixed ldap uri> in ldap_uri
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Nalin Dahyabhai <nalin@redhat.com> 0.44-1
changelog:
  - check specifically for cases where a specified token that we need to
    use just isn't present for whatever reason (#697058)


author: Nalin Dahyabhai <nalin@redhat.com> 0.46-1
changelog:
  - treat the ability to access keys in an NSS database without using a PIN,
    when we've been told we need one, as an error (#692766, really this time)


author: Nalin Dahyabhai <nalin@redhat.com> 0.47-1
changelog:
  - getcert: distinguish between {stat() succeeds but isn't a directory} and
    {stat() failed} when printing an error message (#739903)
  - getcert resubmit/start-tracking: when we're looking for an existing request
    by ID, and we don't find one, note that specifically (#741262)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-2
changelog:
  - incorporate patch from Rob Crittenden to start supplying Referer:
    headers when we submit XML-RPC requests (#750617)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-3
changelog:
  - tweak the patch for #750617 to handle the case where xmlrpc-c doesn't
    offer dont_advertise as an option (Rob Crittenden)


author: Vojtech Vitek <vvitek@redhat.com> - 3.0.6-5.1
changelog:
  - Add upstream patch to fix CVE-2011-1097 - Incremental file-list
    corruption due to temporary file_extra_cnt increments
    Resolves: #684932


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-26
changelog:
  - Fix a python traceback when the comps groups cannot be loaded
  - Do not substitute '%' in error messages as this is misleading
  - Do not ever run the transaction plugins even for modified configs
  - Resolves: #1268932, #984836, #1204932


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-44.1
changelog:
  - Don't create zero-length request files (STR #4015, bug #803419).
  - The lp and lpr commands did not cancel jobs queued from stdin on an error
    (STR #4015, bug #803419).


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Nalin Dahyabhai <nalin@redhat.com> 0.42-1.1
changelog:
  - backport support for enabling delegation of GSSAPI credentials when we
    use Negotiate authentication for XML-RPC (#729804), and backport the
    option for making the ipa-submit helper use the current ccache, which
    makes it easier to test


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-21
changelog:
  - Added signalstate patch, which fixes compilation with
    NetworkManaged-devel headers installed. Resolves 537064.
    Related: rhbz#543948


author: Martin Nagy <mnagy@redhat.com> - 1.1.36-1
changelog:
  - update to new upstream release
  - use our own faxq-helper man page now that we updated
  - fix -t flag of faxspool so it now accepts time ranges as it should (#171280)
  - fix mgetty and vgetty logrotate configuration files (#436727)
  - faxspool will handle spaces in file names better (#46697)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.7-18.el6_1.4
changelog:
  - stream: Avoid use-after-free (rhbz#749531)
  - storage: Avoid memory leak (rhbz#749531)
  - Add missing error reporting when loading mac filter config for QEMU (rhbz#749531)
  - qemu: Avoid memory leaks (rhbz#749531)
  - storage: Plug iscsi memory leak (rhbz#749531)


author: Adam Tkac <atkac redhat com> 1:0.17-46
changelog:
  - changes related package review (#226484)
  - remove unused patches
    - telnet-0.17-linemode.patch
    - telnet-0.17-env-5x.patch


author: Michal Sekletar <msekleta@redhat.com> 1:0.17-48
changelog:
  - reuse utmp entries correctly
  - break out from infinite loop if we tried to bind to non-existing address (#772912)
  - mitigate possibility of self-deadlock while updating utmp or wtmp (#832059)


author: Johnny Hughes <johnny@centos.org>
changelog:
  - removed Obsoletes and Provides nxclient and set it to conflicts instead.
    Nomachine's nxclient must be removed instead to install.


author: Victor Toso <victortoso@redhat.com> 0.14.0-12
changelog:
  - Do not allow file-transfer on locked session
    Resolves: rhbz#1323630
  - Do not allow file-transfer on login screen
    Resolves: rhbz#1323640


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.3-28
changelog:
  - resolves: #823007
    optimized deflate function on s390(x)
  - resolves: #754694
    added zlib.map file to provide better version information


author: Marek Kasik <mkasik@redhat.com> - 0.12.4-3.el6.1
changelog:
  - Add poppler-0.12.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.12.4-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.12.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639859


author: Petr Šabata <contyk@redhat.com> - 1.0.28-1
changelog:
  - Update to 1.0.28 (#829793)
  - Include a fix for #903099, destroying vports first to avoid a hang
  - Fix an old bogus date in the changelog


author: Petr Šabata <contyk@redhat.com> - 1.0.28-2
changelog:
  - Don't build on s390x (#693443)
  - Add a note to README about EL6 service already implementing the
    suggested function (#981062)
  - Use rtgenmsg when requesting RTM_GETLINK (#882139)


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.1-7
changelog:
  - Fix initial window title when waiting for guest (rhbz #744374)
  - Fix detection of SPICE pointer grabs to update title (rhbz #744377)
  - Fix incorrect key sequence for C-A-F9/10/11/12 (rhbz #744370)


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - No longer call lookup_identity_hook explicitly, hook order does
    the same.
  - Silence compile warnings by specifying C99.


author: Carlos Soriano <csoriano@redhat.com> - 2.28.4-20
changelog:
  - Fix crashes accessing files over sftp (#1072272)
  - Fix crashes on folder removal in browser mode (#1026561)
  Resolves: #1072272 #1026561


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.5-2.5
changelog:
  - Forward-porting fixes from RHEL6.
  - Enlarge buffer used for formatting date in a string format.
  - Resolves: rhbz#891938.
  - Allow configuration of the maximum number of open files.
  - Resolves: rhbz#738967.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-0
changelog:
  - Updated to latest ustream release of 1.2 branch - 1.2.3
   - Security Updates
    - CVE-2013-1927, RH884705 - fixed gifar vulnerability
    - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
   - Common
    - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7
   - Plugin
    - PR1157: Applets can hang browser after fatal exception
  - Removed upstreamed patch 0- icedtea-web-PR1161.patch
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-1
changelog:
  - fixed postun - removal of alternatives for plugin restricted to 
    (correct) removal process only
  - fixed date in changelog previous entry
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-2
changelog:
  - Added (temporally!) posttrans forcing creation of symlinks
    - should be removed next release
  - Resolves: rhbz#949094


author: Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
changelog:
  - get more aggressive about skipping unnecessary calculations (most of
    the problem in #771444, though not the approach described there)


author: Pingfan Liu <piliu@redhat.com> - 2.0.0-309
changelog:
  - mkdumprd: Fix mkdumprd fail when cluster node uses ipv6
  - mkdumprd: fix the search criteria for detection of RAID devices


author: Jon McCann <jmccann@redhat.com> 2.28.3-6
changelog:
  - Properly handle monitor configuration changes
    Resolves: #594696
  - Remove the leave a message feature
    Resolves: #559652


author: Andrew Beekhof <andrew@beekhof.net> 0.4.1-1
changelog:
  - New upstream relase
  - New package structure
  - Remove stale dependancy on hal
  - Do not start services by default


author: Russell Bryant <rbryant@redhat.com> 0.4.7-0.2.94a4de1.git
changelog:
  - Only depend on dmidecode on architectures that include it (i386 and x86_64)
  - Resolves: rhbz#745386


author: Steven Fernandez <steve@lonetwin.net> - 3.0-7
changelog:
  - Modified the %files sections for both packages to only include the link in
    the devel package and the .so in the main package.
  - Added %pre and %post sections


author: Petr Pisar <ppisar@redhat.com> - 3.0-12
changelog:
  - Install wishwn(1) manual page
  - Remove libX11-devel and libXft-devel BuildRequires as they are inherited
    from tk-devel. Keep tcl-devel as tcl.h is included directly.
  - Devel subpackage requires tcl-devel and tk-devel.


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.10
changelog:
  - qemu: Properly format the uuid string in error messages (rhbz#1110185)
  - qemu: Use maximum guest memory size when getting NUMA placement advice (rhbz#1112819)
  - qemu: fix live pinning to memory node on NUMA system (rhbz#1112820)
  - qemu: Clean up qemuDomainSetNumaParameters (rhbz#1112820)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.11
changelog:
  - virsh: Introduce macros to reject mutually exclusive arguments (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDisk (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDevice (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDisk (rhbz#1120669)
  - virsh: Use inactive definition when removing disk from config (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDevice (rhbz#1120669)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.12
changelog:
  - rpc: message related sizes enlarged (rhbz#1128603)
  - Increase the size of REMOTE_MIGRATE_COOKIE_MAX to REMOTE_STRING_MAX (rhbz#1128603)
  - Fix max stream packet size for old clients (rhbz#1128603)
  - Adjust legacy max payload size to account for header information (rhbz#1128603)
  - rpc: Correct the wrong payload size checking (rhbz#1128603)


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.5.el6_3
changelog:
  - Bumped to 2.3.5
  - Changed BR to java7-devel >= 1:1.7.0 as required by CORBA changes in 2.3.5
  - Resolves: rhbz#906707


author: Kalev Lember <kalev@smartlink.ee> - 4.4.1-1
changelog:
  - Update to gcc 4.4.1 20090818 svn 150873.
  - Patches taken from native Fedora gcc-4.4.1-6.
  - Replaced %define with %global and updated %defattr.
  - Changed license to match native Fedora gcc package.


author: Kalev Lember <kalev@smartlink.ee> - 4.4.1-2
changelog:
  - Update to gcc 4.4.1 20090902 svn 151328.
  - Patches taken from native Fedora gcc-4.4.1-8.
  - Another license update to keep it in sync with native gcc package.


author: Kalev Lember <kalev@smartlink.ee> - 4.4.2-1
changelog:
  - Update to gcc 4.4.2 20091114 svn 154179, which includes
    VTA backport from 4.5 branch.
  - Patches taken from native Fedora gcc-4.4.2-10.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-6.1
changelog:
  - Backported patch to use long integers for message_size_limit,
    mailbox_size_limit and virtual_mailbox_limit
    Resolves: rhbz#1263265


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-37.el6
changelog:
  - group-add-member command reported wrong error on duplicates (#970541)
  - ipa-client installation succeeding in ipa server instance (#1011044)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-38.el6
changelog:
  - ipa-server-install intermittently crashed with "Unable to find
    preop.pin" (#905064)
  - Disabled sudo rules were still active in the sudoers tree (#1022199)
  - Replica installation fails if forward zone is not present (#1034478)
  - Administrative password change did not respect user password
    policy (#1029921)
  - Re-initializing a winsync connection exits with "Can't contact
    LDAP server" (#1016042)
  - Server checked for unknown attributes before "ipa" tool version
    check (#1015481)
  - CA subsystem certificate renewal was broken on CA clones (#1040009)
  - Lockout plugin worked inconsistently compared to KDC lockout
    mechanism. Also, default user policy may not have been applied if
    krbPwdPolicyReference was missing (#1088772)
  - ipa-client-automount was not backwards compatible (#1082590)
  - Increase service timeout from 120s to 300s as some services are
    known to start for more than 120s (#1060639)
  - Proxy calls to /ca/ee/ca/profileSubmit to PKI to enable installation
    of replicas with Dogtag 10 PKI (#1083878)


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-1
changelog:
  - Rebase to 3.28.3
  - Remove upstreamed moz-1282627-rh-1294606.patch,
    moz-1312141-rh-1387811.patch, moz-1315936.patch, and
    moz-1318561.patch
  - Remove no longer necessary nss-duplicate-ciphers.patch
  - Disable X25519 and exclude tests using it
  - Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-36
changelog:
  - Release 1.2.11.15-36
  - Resolves: bug 1088171 - revert - 7-bit check plugin does not work for userpassword attribute (DS 47423)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.10
changelog:
  - fix CVE-2014-8176 - invalid free in DTLS buffering code
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-1791 - race condition handling NewSessionTicket
  - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function
  - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on
    read in multithreaded applications


author: David Tardon <dtardon@redhat.com> - 1:4.0.4.2-10
changelog:
  - Resolves: rhbz#1012379 sound file included in presentation displayed
    as a gray sqaure
  - Resolves: rhbz#1012390 CRITICAL **: AtkObject* atk_object_wrapper_ref
  - Resolves: rhbz#1038189 libreoffice does not recognize new printer
  - Resolves: rhbz#1085420 LO incorrectly provides liblcms2.so.2
  - Resolves: rhbz#1065629 RTF import probable regression with non-english
    BigMachines exports
  - Resolves: rhbz#1020712 No Default Font showing when write in text
    boxes at first, behaving unusual
  - Resolves: rhbz#1021915 Menu drop-down list overlapping with other menu
    items
  - Resolves: rhbz#1035298 Transaction check errors due to file conflicts
  - Related: rhbz#1035298 provide non-arch variants of openoffice.org
    provides too


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-63
changelog:
  - qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748)
  - qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-64
changelog:
  - cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
  - cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-7
changelog:
  + Fencing: Support agents that need the host to be unfenced at startup
      Resolves: rhbz#996850
    + Fix: crm_report: Collect corosync quorum data
      Resolves: rhbz#989292


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-23.el6_1.1
changelog:
  - Wait for 389-ds tasks to complete (#709329)
  - Set replica to restart ipa on boot (#709330)
  - Managed Entries not configured on replicas (#709331)
  - Don't create bogus aRecord when creating new zone (#709332)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-23.el6_1.2
changelog:
  - Use updated xmlrpc-c API to do GSSAPI ticket delegation (#729805) 
  - Set minimum requires of xmlrpc-c to 1.16.24-1200.1840.el6_1.4
  - Set minimum requires of libcurl to 7.19.7-26.el6_1.2


author: - John Eckersberg <jeckersb@redhat.com> - 3.08-5
changelog:
  - Minor tweaks to spec file aligning with latest Fedora packaging guidelines
  - Enforce inclusion of libyaml in build with --with-libyaml option to setup.py
  - Deliver to %{python_sitearch} instead of %{python_sitelib} due to _yaml.so
  - Thanks to Gareth Armstrong <gareth.armstrong@hp.com>


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6
changelog:
  - Fix `gdb/findvar.c:417: internal-error: read_var_value: Assertion `frame'
    failed.' (Tom Tromey, RH BZ 954300).


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git07202010.1
changelog:
  - Update to latest git repo (3.1.2 plus pending changes, bz617280)
  - Remove mdadm.static as its no longer used in initrd creation
  - Remove glibc-static buildreq
  - Resolves: bz617280


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100722.1
changelog:
  - Change git date format to the correct format (YYYYMMDD)
  - Update to latest upstream push (fixes bz604023)
  - Resolves: bz604023


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.23-1
changelog:
  - New upstream release
  - Supports smartcards now
  - Supports PSK with NSS
  - Supports libcap-ng for lowering capabilities of pluto process 
  - Updated README.nss


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-1
changelog:
  - New upstream release
  - Cisco interop patches
  - Improved init script
  - Fix to allow ";" in the ike/esp parameters
  - Fix to unset IKEv2 Critical flag for payloads defined in RFC 4306
  - Fix to Zeroize ISAKMP and IPsec SA's when in FIPS mode
  - Fix to the issue where Some programs were installed
    twice causing .old files
  - lwdns.req.log moved from /var/tmp/ to /var/run/pluto/ .
    This is to avoid an SElinux AVC Denial
  - Fix for the issueo where ipsec help shows the list twice
  - Fix for compile time warnings


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-2
changelog:
  - Modified summary in spec file
  - Replaced buildroot with RPM_BUILD_ROOT in spec file
  - Included html files in the doc package
  - Patch for disabling openswan startup at the system
    boot by default


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-3
changelog:
  Resolves: #568355 Implementation of new Diffie-Hellman groups 
                    described in RFC 5114
  Resolves: #568493 Pluto's child process can not add routes
  Resolves: #568648 some subcommand doesn't work
  Resolves: #568652 the transport mode doesn't work
  Resolves: #574833 Openswan client can not interop with 
                    Cisco VPN servers
  Resolves: #574839 ImplicitDSOLinking
  Resolves: #574841 Openswan Implementation issue related to 
                    hardcoded length of hash algorithms


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-4
changelog:
  Resolves: #579629
  Resolves: #584224
  Resolves: #586420
  Resolves: #592630
  Resolves: #594767
  Resolves: #579747
  Resolves: #587669


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-197
changelog:
  - Add coordination between kdump and cluster fencing for long
    kernel panic dumps, resolve bug 585332. From Ryan O'Hara.


author: Milan Broz <mbroz@redhat.com> - 1.2.0-7
changelog:
  - Fix device lookup function.
  - Fix duplicate directories displayed in status output.
    Resolves: #755478 #746648


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.3-11
changelog:
  - Additional PAM config fixes
    (use pam_cracklib.so instead of pam_pwcheck.so,
    remove "none" option from session type check - pam_unix.so desn't have it)
    Related: #1152654


author: <jsafrane@redhat.com> - 1:5.5-44.4
changelog:
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#955511)


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-5
changelog:
  + Fix: systemd: Prevent glib assertion - only call g_error_free with non-NULL arguments
    + Fix: systemd: Prevent additional use-of-NULL assertions in g_error_free
    + Fix: logging: glib CRIT messages should not produce core files in the background
    + Fix: crmd: Correcty update the history cache when recurring ops change their return code
    + Log: crm_mon: Unmangle the output for failed operations
    + Log: cib: Correctly log short-form xml diffs
    + Log: pengine: Better indicate when a resource has failed


author: Chris Feist <cfeist@redhat.com> - 3.9.2-12.2
changelog:
  - Fixed an issue causing HA LVM to be unable to shutdown when device failures
    cause LVs to go missing
  - Resolves: rhbz#878023


author: Daniel Novotny <dnovotny@redhat.com> 3.2.8-9
changelog:
  - fix #581547 - add vmstat -w option for wider output
  - fix #583629 - pmap does not display RSS values for a pid
  - fix #583625 - document that usernames exceeding column width are substituted with user ID


