# changelog

author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.2.1.el6]
changelog:
  - [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
  - [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
  - [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
  - [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
  - [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
  - [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
  - [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.1.el6]
changelog:
  - [infiniband] ib/iser: Rewrite bounce buffer code path (Don Dutile) [1585312]
  - [sound] alsa: pcm: prevent UAF in snd_pcm_info (CVE-2017-0861) (Jaroslav Kysela) [1565188] {CVE-2017-0861}
  - [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550176] {CVE-2018-7566}
  - [sound] alsa: seq: Fix use-after-free at creating a port (Jaroslav Kysela) [1503383] {CVE-2017-15265}
  - [sound] alsa: seq: Make ioctls race-free (Jaroslav Kysela) [1537452] {CVE-2018-1000004}
  - [mm] reduce total RAM held in per-CPU pvecs by flushing them on compound/THP page arrival (Larry Woodman) [1575819]
  - [usb] acm: fix the computation of the number of data bits (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner, part 2 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] kvm/vmx: Remove barrier_nospec() in slot_largepage_idx() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kvm] Remove memory alias support (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] posix-timers: Protect posix clock array access against speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [ipc] sysvipc/sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [documentation] Document array_index_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Include <asm/barrier.h> dependency (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589032] {CVE-2018-3693}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.2.el6]
changelog:
  - [kvm] VMX: Fix host GDT.LIMIT corruption (CVE-2018-10301) (Paolo Bonzini) [1601851] {CVE-2018-10901}
  - [x86] Initialize __max_smt_threads to 1 (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: detect SMT disabled by BIOS (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Add topology_max_smt_threads() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix incorrect error return code in vm_insert_pfn() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Don't flush L1D cache if VMENTER_L1D_FLUSH_NEVER (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Take out the unused nosmt module parameter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm/dump_pagetables: Add a check_l1tf debugfs file (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries aganst L1TF for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Make flush_l1d visible in /proc/cpuinfo (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [Documentation] Add section about CPU vulnerabilities (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Expose SMT control init function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Allow runtime control of L1D flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Serialize L1D flush parameter setter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Move l1tf setup function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: Handle EPT disabled state proper (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Drop L1TF MSR list approach (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] litf: Introduce vmx status variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Online siblings when SMT control is turned on (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add find_msr() helper function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush logic (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Make indirect call speculation safe (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Enable acknowledge interupt on vmexit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D MSR based flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush algorithm (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add module argument for L1TF mitigation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] x86: Introducing kvm_x86_ops VM init/destroy hooks (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Boot HT siblings at least once (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] Revert "x86/apic: Ignore secondary threads if nosmt=force" (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpufeatures: Add detection of L1D cache flush support. (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Extend 64bit swap file size limit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] apic: Ignore secondary threads if nosmt=force (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/intel: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/topology: Provide detect_extended_topology_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/common: Provide detect_ht_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Remove the pointless detect_ht() call (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Remove the pointless CPU printout (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Provide knobs to control SMT (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Split do_cpu_down() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Provide topology_smt_supported() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] smp: Provide topology_is_primary_thread() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Move the l1tf function and define pr_fmt properly (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Limit swap file size to MAX_PA/2 (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Add sysfs reporting for l1tf (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries against L1TF (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Change order of offset/type in swap entry (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Fix incorrect vulnerabilities files function prototypes (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Export the internal __cpu_bugs variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] intel-family.h: Add GEMINI_LAKE SOC (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Fix swap entry comment and macro (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Move swap offset/type up in PTE to work around erratum (Waiman Long) [1593376] {CVE-2018-3620}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.3.el6]
changelog:
  - [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
  - [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.4.el6]
changelog:
  - [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.5.el6]
changelog:
  - [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}


author: Jan Horak <jhorak@redhat.com> - 31.3.0-6
changelog:
  - Fixed rhbz#1164855 - firefox.desktop is missing
    x-scheme-handler MimeType entries
  - Fixed problems with dictionaries (mozbz#1097550)


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-67
changelog:
  - dlm_controld: Adjust fence time comparison
    Resolves: #rhbz843160
  - man: update fence_node options
    Resolves: #rhbz886016
  - fenced: Wait for ringid
    gfs_controld: Fix first recovery case
    Resolves: #rhbz982305


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-69
changelog:
  - fsck.gfs2: fix broken i_goal values in inodes
  - gfs2_convert: use correct i_goal values instead of zeros for inodes
  - fsck.gfs2: Reprocess nodes if anything changed - addendum 1 of 2
  - fsck.gfs2: addendum to fix broken i_goal values in inodes - addendum 2 of 2
    Resolves: rhbz#1149516


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-72
changelog:
  - xml: ccs_update_schema: be verbose about extraction fail
    Resolves rhbz#1087286
  - qdiskd: warn if no heuristics defied for >2 node clusters
    Resolves: rhbz#1095418
  - *_controld: better logging if receive_start fails
    Resolves: rhbz#1095657
  - qdiskd: Enable master_wins if votes=1
    Resolves: rbhz#1099223
  - cman: fix cman.5 man page to indicate only 1 altname is allowed
    Resolves: rhbz#1111500
  - cman: Slight fix to message issued for invalid two_node clusters
    Resolves: rhbz#1142947


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-73.1
changelog:
  - gfs_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1234443
  - dlm_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1233535


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-17.el6
changelog:
  - ipa delegation-find --group option returns internal error (#888524)
  - Add missing Requires for python-crypto replacement (#878969)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-19.el6
changelog:
  - Client installation crashes when Kerberos SRV record is not found (#889583)
  - Fix typo in patch 0048 for CVE-2012-5484 (#878220)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-20.el6
changelog:
  - Set maxbersize to a large value to accomondate large CRLs during replica
    installation. (#888956)
  - Set minimum version of pki-ca, pki-slient and pki-setup to 9.0.3-29 to
    pick up default CA validity period of 20 years. (#891980)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-21.el6
changelog:
  - Properly handle migrated uniqueMember attributes (#894090)
  - ipa permission-find using valid targetgroup throws internal error (#893827)
  - Fix migration of CRLs to new directory location (#893722)
  - Installing IPA with a single realm component sometimes fails (#893187)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-22.el6
changelog:
  - Set minimum version of bind-dyndb-ldap to 2.3-2 to pick up missing DNS
    zone SOA serial fix (#894131)
  - Stopped named service crashed ipa-upgradeconfig program (#895298)
  - ipa-replica-prepare crashed when manipulating DNS zone without SOA
    serial (#894143)
  - Use new certmonger locking to prevent NSS database corruption during
    CA subsystem renewal (#883484)
  - Set minimum selinux-policy to 3.7.19-193 to allow certmonger to talk
    to dbus in an rpm scriptlet. (related #883484)
  - Set minimum vresion of certmonger to 0.61-3 for new locking scheme
    (related #883484)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-23.el6
changelog:
  - Installer should not connect to 127.0.0.1. (#895561)
  - Don't initialize NSS if we don't have to. (#878220)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-24.el6
changelog:
  - Add certmonger condrestart to server post scriptlet (#903758)
  - Make certmonger a (pre) Requires (#903758)
  - Add selinux-policy to Requires(pre) to avoid post scriptlet AVCs
    (#903758)
  - Set minimum version of pki-ca to 9.0.3-30 and add to Requires(pre)
    to pick up certmonger upgrade fix (#902474)
  - Update anonymous access ACI to protect secret attributes (#902481)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.18-1
changelog:
  - don't use the ipv6_exec_ip wrapper
  - don't accidentally cause sit module to be loaded on shutdown. (#654098, <ejsheldrake@gmail.com>)
  - simplify various string match constructs. (#558575, <ville.skytta@iki.fi>)
  - explicitly pass both device and dir when remounting read-only (#620461, <phr@doc.ic.ac.uk>)
  - add infiniband mapping (#648524, <monis@voltaire.com>)
  - fix ifdown calling nmcli for NM-managed devices (#612934, <jklimes@redhat.com>)
  - allow 0 as a vlan tag. (#635360)
  - support multiple IP addreses via IPADDRn, PREFIXn (or NETMASKn) (#633984)
  - stop tty and serial also on runlevel 's' (#629257)
  - system z optimized sysctl settings per default (#633323)
  - don't run kexec-disable for runlevels [S016] (#658138)
  - add # as a valid character in network device names (<Matt_Domsch@dell.com>)
  - use SYSCTLDEVICE without . (#667211, <notting@redhat.com>)
  - handle 'MASTER' being quoted. (#651450, <gfidente@redhat.com>)
  - test if there is /dev/rtc before syncing hardware clock (#598850)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.348.el6
changelog:
  - kvm-spice-add-new-spice-server-callbacks-to-ui-spice-dis.patch [bz#879559]
  - kvm-vmmouse-add-reset-handler.patch [bz#884450]
  - kvm-vmmouse-fix-queue_size-field-initialization.patch [bz#884450]
  - kvm-hw-vmmouse.c-Disable-vmmouse-after-reboot.patch [bz#884450]
  - kvm-block-Fix-vpc-initialization-of-the-Dynamic-Disk-Hea.patch [bz#887897]
  - kvm-block-vpc-write-checksum-back-to-footer-after-check.patch [bz#887897]
  - Resolves: bz#879559
    (spice with non-qxl vga dumps core)
  - Resolves: bz#884450
    (after change mac address of guest, mouse inside guest can not be used after system_reset in qemu)
  - Resolves: bz#887897
    (Backport vpc initialization of the Dynamic Disk Header fix)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.349.el6
changelog:
  - kvm-pc-rhel6-compat-enable-S3-S4-for-6.1-and-lower-machi.patch [bz#886798]
  - kvm-e1000-no-need-auto-negotiation-if-link-was-down.patch [bz#890288]
  - kvm-rtl8139-preserve-link-state-across-device-reset.patch [bz#890288]
  - kvm-pci-assign-Enable-MSIX-on-device-to-match-guest.patch [bz#886410]
  - Resolves: bz#886410
    (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)
  - Resolves: bz#886798
    (Guest should get S3/S4 state according to machine type to avoid cross migration issue)
  - Resolves: bz#890288
    (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
  - Resolves: bz#886410
    (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.350.el6
changelog:
  - kvm-raw-posix-add-raw_get_aio_fd-for-virtio-blk-data-pla.patch [bz#877836]
  - kvm-configure-add-CONFIG_VIRTIO_BLK_DATA_PLANE.patch [bz#877836]
  - kvm-vhost-make-memory-region-assign-unassign-functions-p.patch [bz#877836]
  - kvm-dataplane-add-host-memory-mapping-code.patch [bz#877836]
  - kvm-dataplane-add-virtqueue-vring-code.patch [bz#877836]
  - kvm-event_notifier-add-event_notifier_set.patch [bz#877836]
  - kvm-dataplane-add-event-loop.patch [bz#877836]
  - kvm-dataplane-add-Linux-AIO-request-queue.patch [bz#877836]
  - kvm-iov-add-iov_discard_front-back-to-remove-data.patch [bz#877836]
  - kvm-iov-add-qemu_iovec_concat_iov.patch [bz#877836]
  - kvm-virtio-blk-Turn-drive-serial-into-a-qdev-property.patch [bz#877836]
  - kvm-virtio-blk-define-VirtIOBlkConf.patch [bz#877836]
  - kvm-virtio-blk-add-scsi-on-off-to-VirtIOBlkConf.patch [bz#877836]
  - kvm-dataplane-add-virtio-blk-data-plane-code.patch [bz#877836]
  - kvm-virtio-blk-add-x-data-plane-on-off-performance-featu.patch [bz#877836]
  - kvm-virtio-pci-fix-virtio_pci_set_guest_notifiers-error-.patch [bz#877836]
  - Resolves: bz#877836
    (backport virtio-blk data-plane patches)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.351.el6
changelog:
  - kvm-qxl-save-qemu_create_displaysurface_from-result.patch [bz#885644]
  - Resolves: bz#839832
    (qemu-ga: document selinux policy for read/write of guest files)
  - Resolves: bz#885644
    (Memory leak and use after free in qxl_render_update_area_unlocked())


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.352.el6
changelog:
  - kvm-block-make-qiov_is_aligned-public.patch [bz#895392]
  - kvm-dataplane-extract-virtio-blk-read-write-processing-i.patch [bz#895392]
  - kvm-dataplane-handle-misaligned-virtio-blk-requests.patch [bz#895392]
  - Resolves: bz#895392
    (fail to initialize the the data disk specified x-data-plane=on via 'Device Manager' in win7 64bit guest)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.2-7
changelog:
  - Merge from F18 (#835257)
    - disable xorg.conf, enable HAL files instead
    - disable smooth scrolling
    - disable coasting by default to maintain RHEL6.0 behavior


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.5.901-1
changelog:
  - synaptics 1.7.5.901 (#1077486)
  - set secondary top buttons on INPUT_PROP_TOPBUTTONPAD (#1026577)
  - fix bogus changelog date


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.6.1.el6]
changelog:
  - [net] ipv4: add RCU protection to inet->opt (Jiri Pirko) [844274 829109]
  - [net] tun: allow tap iface in netconsole'd bridge (Jiri Benc) [842984 838025]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.8.1.el6]
changelog:
  - [netdrv] e1000e: prevent oops when adapter is being closed and reset simultaneously (Dean Nelson) [847045 826375]
  - [net] tcp: clear hints to avoid a stale one (Andy Gospodarek) [846832 807704]
  - [md] dm-raid1: Fix mirror crash when discard request is sent and sync is in progress (Mikulas Patocka) [846839 837607]
  - [netdrv] bond_alb: don't disable softirq under bond_alb_xmit (Jiri Pirko) [846216 841987]
  - [x86] ioapic: Fix kdump race with migrating irq (Don Zickus) [812962 783322]
  - [net] rds: set correct msg_namelen (Weiping Pan) [822729 822731] {CVE-2012-3430}
  - [x86] amd_iommu: Fix SRIOV and hotplug devices (Stefan Assmann) [846838 832009]
  - [mm] hugetlb: fix resv_map leak in error path (Motohiro Kosaki) [824350 824351] {CVE-2012-2390}
  - [netdrv] dl2k: fix unfiltered netdev rio_ioctl access by users (Jacob Tanenbaum) [818824 818825] {CVE-2012-2313}
  - [drm] i915: fix integer overflow in i915_gem_do_execbuffer() (Jacob Tanenbaum) [824561 824563] {CVE-2012-2384}
  - [virt] kvm: handle last_boosted_vcpu = 0 case (Rik van Riel) [847042 827031]
  - [md] raid5: Reintroduce locking in handle_stripe() to avoid racing (Jes Sorensen) [846836 828065]
  - [kernel] timekeeping: Fix leapsecond triggered load spike issue (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] hrtimer: Provide clock_was_set_delayed() (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] ntp: Add ntp_lock to replace xtime_locking (Prarit Bhargava) [847366 840950 836803 836748]
  - [fs] proc/stat: fix whitespace damage in use arch_idle_time patch (Steve Best) [841579 841149]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.9.1.el6]
changelog:
  - [md] raid1, raid10: avoid deadlock during resync/recovery. (Dave Wysochanski) [845464 835613]
  - [fs] dlm: fix deadlock between dlm_send and dlm_controld (David Teigland) [849051 824964]
  - [ata] libata: Add space to fix 2GB ATA Flash Disk/ADMA428M blacklist (Prarit Bhargava) [851445 843849]
  - [fs] nfs: nfs_attr_use_mounted_on_file() missing return value (Frantisek Hrbata) [847945 842312]
  - [fs] gfs2: Make gfs2_write_end not dirty the inode with every write (Robert S Peterson) [849551 844814]
  - [net] sched/act_mirred: do not drop packets when fails to mirror it (Jason Wang) [851444 846585]
  - [net] sched: fix race in mirred device removal (Jason Wang) [851444 846585]
  - [net] sched: printk message severity (Jason Wang) [851444 846585]
  - [net] sched: act_mirred cleanup (Jason Wang) [851444 846585]
  - [kernel] sched: Fix signed unsigned comparison in check_preempt_tick() (Frederic Weisbecker) [843102 835797]
  - [netdrv] be2net: reduce gso_max_size setting to account for ethernet header (Ivan Vecera) [842757 834185]
  - [powerpc] Fix wrong divisor in usecs_to_cputime backport (Steve Best) [847727 821374]
  - [fs] procfs: do not confuse jiffies with cputime64_t (Frantisek Hrbata) [847727 821374]
  - [kernel] time: Add nsecs_to_cputime64 interface for asm-generic (Steve Best) [847727 821374]
  - [powerpc] Fix wrong divisor in usecs_to_cputime (Steve Best) [847727 821374]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.10.1.el6]
changelog:
  - [mm] hugetlbfs: close race during teardown of hugetlbfs shared page tables (Rafael Aquini) [857334 856325]
  - [mm] hugetlbfs: Correctly detect if page tables have just been shared (Rafael Aquini) [857334 856325]
  - [kernel] sched: fix divide by zero at {thread_group,task}_times (Stanislaw Gruszka) [856703 843771]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.11.1.el6]
changelog:
  - [net] core: Fix napi_gro_frags vs netpoll path (Amerigo Wang) [857854 845347]
  - [netdrv] benet: disable BH in callers of be_process_mcc() (Amerigo Wang) [857854 845347]
  - [net] bonding: remove IFF_IN_NETPOLL flag (Amerigo Wang) [857854 845347]
  - [mm] fix contig_page_data kABI breakage and related memory corruption (Satoru Moriya) [857012 853007]
  - [net] sctp: backport sctp cache ipv6 source after route lookup (Michele Baldessari) [858284 855759]
  - [net] sctp: backport support of sctp multi-homing ipv6 source address selection (Michele Baldessari) [858284 855759]
  - [net] ipv6: backport RTA_PREFSRC ipv6 source route selection support (Michele Baldessari) [858285 851118]
  - [netdrv] sfc: Fix maximum number of TSO segments and minimum TX queue size (Nikolay Aleksandrov) [845556 845557] {CVE-2012-3412}
  - [s390] zfcp: No automatic port_rescan on events (Hendrik Brueckner) [856316 855131]
  - [fs] xfs: push the AIL from memory reclaim and periodic sync (Dave Chinner) [856686 855139]


author: David Knox <dknox@redhat.com> 0:6.0.24-81
changelog:
  - Resolves: rhbz#1183252 Tomcat breaks in serving large files
  - greater than 1.7 mb and under high load and high threading


author: David Knox <dknox@redhat.com> 0:6.0.24-84
changelog:
  - Resolves: rhbz#1022061 Tomcat init script needs to be adjusted to kill tomcat
  - if stop is unsuccessful


author: David Knox <dknox@redhat.com> 0:6.0.24-88
changelog:
  - Related: rhbz#1022061 changed in init file. Remove test
  - in function stop for result after initial command to
  - stop.


author: Peter Robinson <pbrobinson@gmail.com> - 3.2.1-1
changelog:
  - Ekiga 3.2.1 stable - Changelog
    http://mail.gnome.org/archives/ekiga-devel-list/2009-May/msg00054.html


author: Peter Robinson <pbrobinson@gmail.com> - 3.2.4-1
changelog:
  - Ekiga 3.2.4 stable - Changelog
    http://mail.gnome.org/archives/ekiga-devel-list/2009-May/msg00062.html
    http://mail.gnome.org/archives/ekiga-devel-list/2009-May/msg00064.html


author: Milan Crha <mcrha@redhat.com> - 3.2.6-4
changelog:
  - Rebuild against newer evolution-data-server.
  - Add patch to build break (include <bits/wordsize.h> where needed)
  Resolves: #973281


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.8-2
changelog:
  - New upstream version 0.2.8 introducing cache_{check,dump,repair,restore}; missing patch
    Resolves: #1019217


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.6-1
changelog:
  - era_invalidate may be run on live metadata if the --metadata-snap
    option is given.
  - Update man pages to make it clearer that most tools shouldn't
    be run on live metadata.
  - Fixed bugs in the metadata reference counting for thin_check.
  - New thin_delta and thin_trim commands.
  - New --clear-needs-check option for cache_check.
  - Space map checking for thin check.
  - All tools switch to using libaio. This gives a large performance
    boost, especially to the write focused tools like thin_restore.
  - Added progress monitor to thin_restore, cache_restore and era_restore.
  - Added --quiet/-q option to *_restore to turn off the progress bar.
  - Removed variable hint size support from cache tools.
  - Tools are now rolled into a single executable to save space.
  - Fixed bugs when walking bitsets (possibly effecting cache_dump
    and cache_check).


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.1-1
changelog:
  - Install pdata_tools and all its symlinks for various tools to
    /sbin and also provide symlinks for all tools in /usr/sbin
    for backward compatibility.
  - Link with libstdc++ statically.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-0.1.rc7
changelog:
  - Fixes for thin_repair.
  - Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.24.1.el6]
changelog:
  - [alsa] aloop: Close races at restarting the stream (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: Export snd_pcm_constraint_mask64() (Jaroslav Kysela) [1112492 1078592]
  - [alsa] pcm: Warn when buffer preallocation fails (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: Add SNDRV_PCM_STATE_PAUSED case in wait_for_avail function (Jaroslav Kysela) [1112492 1078592]
  - [alsa] jack: Unregister input device at disconnection (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: Optimize module name check (Jaroslav Kysela) [1112492 1078592]
  - [alsa] pcm: Add fallthru comments (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: Fix Oops while PM resume (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: add locking to timer access (Jaroslav Kysela) [1112492 1078592]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.25.1.el6]
changelog:
  - [net] sctp: Fix sk_ack_backlog wrap-around problem (Daniel Borkmann) [1113969 1085932] {CVE-2014-4667}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.26.1.el6]
changelog:
  - [net] gro: fix deliver of trunk packets to VLAN interfaces (Marcelo Ricardo Leitner) [1116231 1112324]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.27.1.el6]
changelog:
  - [scsi] fix performance regression due to inverted blk_get_queue return (Mike Snitzer) [1117582 1098658]
  - [net] openvswitch: fix use-after-free bug in netns (Flavio Leitner) [1120651 1100127]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.28.1.el6]
changelog:
  - [kernel] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102704 1102705] {CVE-2014-3917}
  - [net] ipv4: fix route cache rebuilds (Jiri Pirko) [1113824 1111631]
  - [fs] nfsd: notify_change needs elevated write count (Mateusz Guzik) [1110177 1105057]
  - [fs] nfsv4: close needs to handle NFS4ERR_ADMIN_REVOKED (Dave Wysochanski) [1096397 1082127]
  - [fs] pipe: skip file_update_time on frozen fs (Eric Sandeen) [1114405 1093077]
  - [fs] nfs: Fail the truncate() if the lock/open stateid is invalid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Servers should only check SETATTR stateid open mode on size change (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Fail data server I/O if stateid represents a lost lock (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Fix the return value of nfs4_select_rw_stateid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Use the open stateid if the delegation has the wrong mode (Steve Dickson) [1090613 1075123]
  - [fs] nfs: nfs4_stateid_is_current should return 'true' for an invalid stateid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: fix error return in nfs4_select_rw_stateid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Document the recover_lost_locks kernel parameter (Jeff Layton) [1089359 963785]
  - [fs] nfs: Don't try to recover NFSv4 locks when they are lost (Jeff Layton) [1089359 963785]
  - [fs] nfs: Fix handling of partially delegated locks (Jeff Layton) [1120074 959788]
  - [fs] nfs: Convert the nfs4_lock_state->ls_flags to a bit field (Jeff Layton) [1120074 959788]
  - [x86] Optimize switch_mm() for multi-threaded workloads (Rik van Riel) [1115821 991518]
  - [netdrv] pppol2tp: fail when socket option level is not SOL_PPPOL2TP [1119461 1119462] {CVE-2014-4943}
  - [kernel] utrace: force IRET path after utrace_finish_vfork() (Oleg Nesterov) [1115932 1115933] {CVE-2014-4699}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.29.1.el6]
changelog:
  - [mm] hugetlb: ensure hugepage access is denied if hugepages are not supported (Gustavo Duarte) [1118782 1086450]
  - [security] keys: Increase root_maxkeys and root_maxbytes sizes (Steve Dickson) [1115542 1113607]
  - [fs] lockd: Ensure that nlmclnt_block resets block->b_status after a server reboot (Steve Dickson) [1110180 959006]
  - [net] filter: add vlan tag access (Jiri Benc) [1108526 1082097]
  - [net] filter: add XOR operation (Jiri Benc) [1108526 1082097]
  - [net] filter: add SKF_AD_RXHASH and SKF_AD_CPU (Jiri Benc) [1108526 1082097]
  - [net] filter: Socket filter ancilliary data access for skb->dev->type (Jiri Benc) [1108526 1082097]
  - [net] filter: Add SKF_AD_QUEUE instruction (Jiri Benc) [1108526 1082097]
  - [net] filter: ingress socket filter by mark (Jiri Benc) [1108526 1082097]
  - [netdrv] bonding: look for bridge IPs in arp monitoring (Veaceslav Falico) [1102794 704190]
  - [s390] af_iucv: wrong mapping of sent and confirmed skbs (Hendrik Brueckner) [1112390 1102248]
  - [s390] af_iucv: recvmsg problem for SOCK_STREAM sockets (Hendrik Brueckner) [1112390 1102248]
  - [s390] af_iucv: fix recvmsg by replacing skb_pull() function (Hendrik Brueckner) [1112390 1102248]
  - [s390] kernel: avoid page table walk on user space access (Hendrik Brueckner) [1111194 1099146]
  - [s390] qeth: postpone freeing of qdio memory (Hendrik Brueckner) [1112134 1094379]
  - [s390] qeth: Fix retry logic in hardsetup (Hendrik Brueckner) [1112134 1094379]
  - [s390] qeth: Recognize return codes of ccw_device_set_online (Hendrik Brueckner) [1112134 1094379]
  - [s390] qdio: remove API wrappers (Hendrik Brueckner) [1112134 1094379]
  - [scsi] Ensure medium access timeout counter resets (David Jeffery) [1117153 1036884]
  - [scsi] Fix error handling when no ULD is attached (David Jeffery) [1117153 1036884]
  - [scsi] Handle disk devices which can not process medium access commands (David Jeffery) [1117153 1036884]
  - [fs] nfs: Fix calls to drop_nlink() (Steve Dickson) [1099607 1093819]
  - [mm] swap: do not skip lowest_bit in scan_swap_map() scan loop (Rafael Aquini) [1099728 1060886]
  - [mm] swap: fix shmem swapping when more than 8 areas (Rafael Aquini) [1099728 1060886]
  - [mm] swap: fix swapon size off-by-one (Rafael Aquini) [1099728 1060886]
  - [md] avoid deadlock when dirty buffers during md_stop (Jes Sorensen) [1121541 994724]
  - [x86] hyperv: bypass the timer_irq_works() check (Jason Wang) [1112226 1040349]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.29.2.el6]
changelog:
  - [kernel] futex: Fix errors in nested key ref-counting (Denys Vlasenko) [1094457 1094458] {CVE-2014-0205}
  - [net] vxlan: fix NULL pointer dereference (Jiri Benc) [1114549 1096351] {CVE-2014-3535}


author: Akemi Yagi <toracat@centos.org> [2.6.32-431.29.2.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, all serial ATA, Adaptec I2O,
    ARPD, BusLogic, IPX, Appletalk, ReiserFS, JFS, TOMOYO
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added sysfs-fix-printk-warnings-bug6157.patch [bug#6157]
  - Added correct-tty-buffer-flush-bug6104.patch [bug#6104]
  - Added a fix for virtio_net underestimation [bug#5526]
  - Added revert-improve-queue_should_plug-bug6548.patch [bug#6548]
  - Added fs-tmpfs-add-xattrs-support.patch [bug#4586.18700]
  - Added fix-fadvise-for-tmpfs.patch [bug#6938]
  - Added ipvs-fix-missing-locking patch [bug#6752]
  - DEBUG_KMEMLEAK enabled in config [bug#7055]
  - Added support for Kontron  [bug#7270]
  - Added b43-fix-wrong-frequency-value patch [bug#7519]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-212.el6]
changelog:
  - [net] bridge: fix use after free in __br_deliver() (Amerigo Wang) [730756] {CVE-2011-2942}
  - [scsi] Update lpfc version for 8.3.5.45.4p driver release (Rob Evers) [746668]
  - [scsi] Fix crash when cfg_fcp_eq_count is zero (Rob Evers) [746668]
  - [scsi] Fix kernel crash during boot with SLI4 card installed (Rob Evers) [746668]
  - [scsi] Properly clean up EQ and CQ child lists to prevent kernel crash (Rob Evers) [746668]
  - [kabi] add missing symbols for Emulex be2net driver (Jiri Olsa) [745712]
  - [netdrv] netxen-firmware: Install the 4.0.579 firmware (Kyle McMartin) [741776]
  - [perf] symbols: Treat all memory maps without dso file as loaded (Jiri Olsa) [726582]
  - [debug] increase MAX_STACK_TRACE_ENTRIES (Kyle McMartin) [645777]
  - [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [692709] {CVE-2011-3363}
  - [tpm] Zero buffer after copying to userspace (Jiri Benc) [732633] {CVE-2011-1161 CVE-2011-1162}
  - [pci] intel-iommu: IOTLB hang workaround (Dave Airlie) [728476]
  - [drm] i915: Fix hang on Ironlake mobile GPU with VT-d (Dave Airlie) [728476]
  - [drm] i915: Remove early exit on i915_gpu_idle (Dave Airlie) [728476]
  - [drm] nv50/bios: fixup mpll programming from the init table parser (Ben Skeggs) [744992]
  - [drm] nv50/vram: fix incorrect detection of bank count on newer chipsets (Ben Skeggs) [744992]
  - [drm] radeon: fix llano output setup + memory corruption (Dave Airlie) [747292]
  - [drm] radeon caicos enablement fixes (Dave Airlie) [747291]
  - [pci] Disable SRIOV on powerpc (Prarit Bhargava) [742089]
  - [pci] Add pci=nosriov to disable SRIOV (Prarit Bhargava) [742089]
  - [x86] apic: ack all pending irqs when crashed/on kexec (Takao Indoh) [704142]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-213.el6]
changelog:
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in niu.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in myri10ge.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in igb_main.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in cxgb4_main.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in cxgb3_main.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in bnx2.c (Neil Horman) [742117]
  - [ppc] kabi: add symbol 'paca' to ppc KABI (Jiri Olsa) [737466]
  - [fs] proc: fix oops on invalid /proc/pid/maps access (Johannes Weiner) [746613] {CVE-2011-3637}
  - [nfs] fix pNFS hang and oops on umounts (Steve Dickson) [746861]
  - [scsi] qla4xxx: export address/port of connection (Mike Christie) [728156]
  - [netdrv] Fix pktgen to not oops on unsupported drivers (Neil Horman) [678794]
  - [kernel] tracing: Update the comm field in the right variable in update_max_tr (Jiri Olsa) [736955]
  - [kernel] kabi: Add missing compat_alloc_user_space symbol to kABI (Jiri Olsa) [747047]
  - [kernel] fix taskstats io infoleak (Jerome Marchand) [716848] {CVE-2011-2494}
  - [x86] ACPI, APEI, HEST: Detect duplicated hardware error source ID (Don Zickus) [737189]
  - [netdrv] Add latest cxgb3 firmware (Neil Horman) [742011]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-214.el6]
changelog:
  - [dm] table: add immutable feature (Mike Snitzer) [747438]
  - [mm] reduce overhead on paravirt functions (Larry Woodman) [743554]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-215.el6]
changelog:
  - [virt] index of virtio disk is not decremented when removed (Mark Wu) [692767]
  - [edac] i7core_edac: Initialize memory name with cpu, channel, bank (Mauro Carvalho Chehab) [712957]
  - [kernel] perf: Optimize event scheduling locking (Steve Best) [744986]
  - [drm] i915: set the right SDVO transcoder for CPT (Adam Jackson) [735122]
  - [scsi] libfc: Prevent race that causes panic during FCoE port destroy (Neil Horman) [735959]
  - [scsi] qla4xxx: Update driver version to 5.02.00-k8 (Mike Christie) [732622]
  - [scsi] qla4xxx: updated device id check for BFS (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed target discovery failed issue (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed active session re-open issue (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed device blocked issue on link up-down (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed session destroy issue on link up-down (Mike Christie) [732622]
  - [scsi] qla4xxx: Clear DDB map index on the basis of AEN (Mike Christie) [732622]
  - [scsi] qla4xxx: Free Device Database (DDB) reserved by FW (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix getting BIDI CHAP for boot targets (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix exporting boot targets to sysfs (Mike Christie) [732622]
  - [scsi] qla4xxx: Do not add duplicate CHAP entry in FLASH (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix bidirectional CHAP (Mike Christie) [732622]
  - [scsi] qla4xxx: Add new FLT firmware region (Mike Christie) [732622]
  - [scsi] qla4xxx: Update license (Mike Christie) [732622]
  - [scsi] iscsi class: fix vlan configuration (Mike Christie) [732622]
  - [scsi] qla4xxx: fix data alignment and use nl helpers (Mike Christie) [732622]
  - [scsi] iscsi class: fix link local mispelling (Mike Christie) [732622]
  - [scsi] qla4xxx: Added Get ACB support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Added restore factory defaults support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: added support to update initiator iscsi port (Mike Christie) [732622]
  - [scsi] scsi_transport_iscsi: Added support to update initiator iscsi port (Mike Christie) [732622]
  - [scsi] qla4xxx: Added vendor specific sysfs attributes (Mike Christie) [732622]
  - [scsi] qla4xxx: Add read/update NVRAM support for 40xx adapters using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Add get ACB state support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Code cleanup for read/update flash using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Added support to update mtu (Mike Christie) [732622]
  - [scsi] scsi_transport_iscsi: Added support to update mtu (Mike Christie) [732622]
  - [scsi] libfc: improve flogi retries to avoid lport stuck (Mike Christie) [745667]
  - [scsi] libfc: avoid exchanges collision during lport reset (Mike Christie) [745667]
  - [scsi] libfc: fix checking FC_TYPE_BLS (Mike Christie) [745667]
  - [scsi] libfc: revert fix deadlock bug in fc_exch_abort_locked (Mike Christie) [745667]
  - [dm] log userspace: Allow for 'log device name' response in CTR msg exchange (Jonathan E Brassow) [746254]
  - [dm] kcopyd: fix job_pool leak (Mike Snitzer) [748441]
  - [netdrv] igb: Fix for Alt MAC Address feature on 82580 and later (Andy Gospodarek) [748503]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-216.el6]
changelog:
  - [scsi] lockless queuecommand dispatch fixup (Rob Evers) [749018]
  - [scsi] iscsi class: export pid of process that created session (Mike Christie) [747696]
  - [scsi] qla4xxx: Autologin persisted target entries (Mike Christie) [747696]
  - [netdrv] iwlagn: enable 11n aggregation without checking traffic load (John Linville) [744361]
  - [s390x] qdio: EQBS retry after CCQ 96 (Hendrik Brueckner) [747578]
  - [s390x] dasd: fix UID readout for z/VM (Hendrik Brueckner) [746000]
  - [x86] PCI: irq and pci_ids patch for Intel Panther Point DeviceIDs (Prarit Bhargava) [747638]
  - [netdrv] Help 6.1 out of tree drivers cope with ABI breakage (Thomas Graf) [746570]
  - [mm] shmem: let shared anonymous be nonlinear again (Larry Woodman) [690129]
  - [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [742091] {CVE-2011-3638}
  - [ipc] mqueue: separate mqueue default value from maximum value (Motohiro Kosaki) [746606]
  - [ipc] mqueue: don't use kmalloc with KMALLOC_MAX_SIZE (Motohiro Kosaki) [746606]
  - [ipc] mqueue: revert bump up DFLT_*MAX (Motohiro Kosaki) [746606]
  - [kernel] ipc/mqueue: Up the hard limit on message queues per namespace (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: update maximums for the mqueue subsystem (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: enforce hard limits (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: switch back to using non-max values on create (Doug Ledford) [746606 746898]
  - [kernel] ipc/mqueue: cleanup definition names and locations (Doug Ledford) [746606]
  - [kernel] Revert "Restore max mqueue message size to its previous RHEL 5 value" (Doug Ledford) [746606]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-217.el6]
changelog:
  - [fs] GFS2: rewrite fallocate code to write blocks directly (Benjamin Marzinski) [750208] {CVE-2011-4098}
  - [netdrv] bnx2x: link fixes for 57810 (Andy Gospodarek) [749421]
  - [netdrv] enic: fix accidental GRO off by default (Stefan Assmann) [749390]
  - [scsi] qla2xxx: Correct inadvertent clearing of RISC_INTR status (Chad Dupuis) [748978]
  - [debug] lockdep: double MAX_LOCKDEP_ENTRIES (Kyle McMartin) [748941]
  - [x86] Add missing KERN_DEBUG to x86 module printk (Prarit Bhargava) [747837]
  - [x86] Update module alternatives message (Prarit Bhargava) [745596]
  - [x86] UV: KABI breakage in uv_blade_info (George Beshers) [745253]
  - [net] vlan: fix panic when handling priority tagged frames (Andy Gospodarek) [714936] {CVE-2011-3593}
  - [scsi] qla4xxx: Autologin persisted target entries update (Mike Christie) [747696]
  - [mm] oom: fix integer overflow of points in oom_badness (Frantisek Hrbata) [741207] {CVE-2011-4097}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-218.el6]
changelog:
  - [netdrv] benet: remove bogus "unlikely" on vlan check (Ivan Vecera) [736429] {CVE-2011-3347}
  - [netdrv] be2net: non-member vlan pkts not received in promiscous mode (Ivan Vecera) [736429] {CVE-2011-3347}
  - [netdrv] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736429] {CVE-2011-3347}
  - [mm] fix race between mremap and removing migration entry (Andrea Arcangeli) [751084]


author: Akemi Yagi <toracat@centos.org> [2.6.32-220.el6.centos.ayplus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client, EeePC hotkey.
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - As of 2.6.32-131.12.1.el6, parallel printer support is enabled in distro kernel.
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.


author: Roman Rakus rrakus@redhat.com 4.1.2-1
changelog:
  - rebase to 4.1
  - Patch level 2
    Resolves #542692
  - Include COPYING in bash base rpm
    Resolves #553250


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-4
changelog:
  - don't segfault when trying to bind int variable to array
    with bad array subsrcipt
    Resolves: #618289


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-5
changelog:
  - Builtins like echo and printf won't report errors
    when output does not succeed due to EPIPE
    Resolves: #664468


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-23
changelog:
  - security fix: CVE-2012-1164: assertion failure by processing search queries
    requesting only attributes for particular entry (#813162)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-24
changelog:
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)
  - fix: memberof overlay on the frontend database causes server segfault (#730745)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-26
changelog:
  - fix: MozNSS CA cert dir does not work together with PEM CA cert file (#818844)
  - fix: memory leak: def_urlpre is not freed (#816168)
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-28
changelog:
  - CVE-2012-2668 (#825875)
    + cipher suite selection by name can be ignored
    + default cipher suite is always selected


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-29
changelog:
  - fix: invalid order of TLS shutdown operations (#818572)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#828787)
  - fix: reading pin from file can make all TLS connections hang (#829319)
  - fix: replication with TLS does not work (#707599)
  - fix: some TLS ciphers cannot be enabled (#852339)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#843056)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#811468)
  - fix: MozNSS certificate database in SQL format cannot be used (#857390)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)
  - fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#835012)
  - fix: modification of olcSyncrepl attribute takes server out of MirrorMode (#821848)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-40
changelog:
  - mod_proxy: do not mix workers shared memory during graceful restart (#1149906)
  - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache
    are used and SSL session is resumed (#1149703)
  - mod_ssl: log revoked certificates at the INFO level (#1161328)
  - mod_ssl: use -extensions v3_req for certificate generation (#906476)
  - core: check the config file before restarting the server (#1146194)
  - core: do not match files when using DirectoryMatch (#1016963)
  - core: improve error message for inaccessible DocumentRoot (#987590)
  - rotatelogs: improve support for localtime (#922844)
  - mod_deflate: fix decompression of files larger than 4GB (#1057695)
  - ab: fix integer overflow when printing stats with lot of requests (#1092419)
  - ab: try all addresses instead of failing on first one when not available (#1125269)
  - ab: fix read failure when targeting SSL server (#1045477)
  - apachectl: support HTTPD_LANG variable from /etc/sysconfig/httpd (#963146)
  - do not display "bomb" icon for files ending with "core" (#1069625)


author: Karel Zak <kzak@redhat.com> 2.17.2-12.26
changelog:
  - fix #1320360 - lscpu shows wrong "Virtualization type" on Xen paravirtualization guest (PV)
  - fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
  - fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
  - fix #1310035 - Hostname not being displayed besides the telnet login prompt
  - fix #1310317 - fdisk -l fdisk double open fd
  - fix #1337478 - wrong error handler and/or error message on fdisk call as not root user


author: Karel Zak <kzak@redhat.com> 2.17.2-12.27
changelog:
  - fix #1349192 - RHEL6.8 util-linux-ng requires 642 kernel, but does not specify it as a dependency
  - fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.22.1.el6]
changelog:
  - [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
  - [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
  - [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
  - [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
  - [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
  - [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
  - [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
  - [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
  - [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
  - [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
  - [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.23.1.el6]
changelog:
  - [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
  - [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
  - [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
  - [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
  - [x86] retpoline/efi: Convert stub indirect calls & jumps (Waiman Long) [1543022 1535645]
  - [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
  - [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
  - [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
  - [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
  - [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
  - [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
  - [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
  - [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
  - [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
  - [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
  - [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
  - [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
  - [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
  - [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
  - [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
  - [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
  - [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
  - [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
  - [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
  - [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
  - [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
  - [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
  - [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
  - [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
  - [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
  - [x86] alternative: Add header guards to <asm/alternative-asm.h> (Waiman Long) [1543022 1535645]
  - [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
  - [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
  - [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
  - [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
  - [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.24.1.el6]
changelog:
  - [kernel] sched/core: Rework rq->clock update skips (Lauro Ramos Venancio) [1551475 1212959]
  - [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1551475 1212959]
  - [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1551475 1212959]
  - [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1551475 1212959]
  - [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1551475 1212959]
  - [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1550103 1532167]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.25.1.el6]
changelog:
  - [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1557896 1535024]
  - [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1557896 1535024]
  - [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1557896 1535024]
  - [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1557896 1535024]
  - [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520818 1520817] {CVE-2017-8824}
  - [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447640 1447641] {CVE-2017-7645}
  - [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1552706 1437991]
  - [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1551471 1495167]
  - [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1551471 1495167]
  - [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1540481 1538340]
  - [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1538654 1408108]
  - [s390] fix transactional execution control register handling (Hendrik Brueckner) [1538591 1520862]
  - [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1538586 1518669]
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
  - [net] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
  - [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519627 1519626] {CVE-2017-1000410}


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.26.1.el6]
changelog:
  - [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
  - [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
  - [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Enable IBRS processing on kernel entries & exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.27.1.el6]
changelog:
  - [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
  - [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
  - [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
  - [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
  - [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
  - [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
  - [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
  - [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
  - [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
  - [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
  - [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
  - [x86] mm: Dump both kernel & user page tables at fault (Waiman Long) [1568535 1558845]
  - [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.28.1.el6]
changelog:
  - [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
  - [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.29.1.el6]
changelog:
  - [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: Clean up entry code & remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-25
changelog:
  - pr -n no longer crashes when passed values >= 32.
    Also line numbers are consistently padded with spaces,
    rather than with zeros for certain widths. (#997537)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-29
changelog:
  - CVE-2013-0221 CVE-2013-0223 CVE-2013-0222 - fix various
    segmentation faults in sort, uniq and join(#1015019)


author: David Tardon <dtardon@redhat.com> - 1:4.2.8.2-11
changelog:
  - Resolves: rhbz#1223696 some labels in print dialog are not translated, even
    though the translations exist


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.7.el6]
changelog:
  - [virt] x86: better fix for race between nmi injection and enabling nmi window (Aristeu Rozanski)
  - [virt] x86: revert "fix race between nmi injection and enabling nmi window" (Aristeu Rozanski)


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.8.el6]
changelog:
  - [scsi] mark bfa fc adapters tech preview (Rob Evers) [698384]
  - [virt] Revert pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Aristeu Rozanski) [691310]
  - [i686] nmi watchdog: Enable panic on hardlockup (Don Zickus) [677532]
  - [netdrv] Adding Chelsio Firmware for cxgb4 (Neil Horman) [691929]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.9.el6]
changelog:
  - [net] limit socket backlog add operation to prevent possible DoS (Jiri Pirko) [694396] {CVE-2010-4251}
  - [scsi] mpt2sas: prevent heap overflows and unchecked (Tomas Henzl) [694023] {CVE-2011-1494 CVE-2011-1495}
  - [fs] epoll: prevent creating circular epoll structures (Don Howard) [681683] {CVE-2011-1082}
  - [mm] Prevent page_fault at do_mm_track_pte+0xc when Stratus dirty page tracking is active (Larry Woodman) [693786]
  - [fs] GFS2 causes kernel panic in spectator mode (Steven Whitehouse) [696535]
  - [net] bonding: interface doesn't issue IGMP report on slave interface during failover (Flavio Leitner) [640690]
  - [scsi] isci: validate oem parameters early, and fallback (David Milburn) [698016]
  - [scsi] isci: fix oem parameter header definition (David Milburn) [698016]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.10.el6]
changelog:
  - [netdrv] cnic: fix hang due to rtnl_lock (Mike Christie) [694874]
  - [netdrv] firmware: re-add the recently deleted bnx2x fw 6.2.5.0 (Michal Schmidt) [690470]
  - [netdrv] firmware/bnx2x: add 6.2.9.0 fw, remove unused fw (Michal Schmidt) [690470]
  - [netdrv] bnx2x, cnic: Disable iSCSI if DCBX negotiation is successful (Michal Schmidt) [690470]
  - [netdrv] bnx2x: don't write dcb/llfc fields in STORM memory (Michal Schmidt) [690470]
  - [netdrv] bnx2x: Update firmware to 6.2.9 (Michal Schmidt) [690470]


author: Akemi Yagi <toracat@centos.org> [2.6.32-131.0.15.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire,
    all serial ATA, BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client,
    parallel printer support. 
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]


author: Miroslav Lichvar <mlichvar@redhat.com> 0-0.5.20121109git4e8107
changelog:
  - update to 20121109git4e8107
  - install unchanged default.cfg as ptp4l.conf
  - update phc2sys service description


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2-1.20130625gitfa41be
changelog:
  - update to 20130625gitfa41be
    (#916787, #977258, #910966, #910974, #924041, #966787)
  - improve initial frequency estimation


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2-2.20130719git48f4dc
changelog:
  - update to 20130719git48f4dc (#916787, #985531)
  - add man page link for ptp4l.conf
  - update kernel-headers build requirement
  - change default phc2sys options to use -s


author: Miroslav Lichvar <mlichvar@redhat.com> 1.4-1.20140318git2b099c
changelog:
  - update to 20140318git2b099c (#1067502, #1011022, #1019121, #1004996, #1016356)
  - fix PIE linking (#1094368)
  - include simulation test suite


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.16.1.el6]
changelog:
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981558 981559]
  - [x86] Revert: Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [982703 970735]
  - [x86] Revert: Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [982703 970735]
  - [mm] reinstate the first-fit scheme for arch_get_unmapped_area_topdown() (Rafael Aquini) [982571 980273]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.17.1.el6]
changelog:
  - [net] ipv4: fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980144 979788] {CVE-2013-2224}
  - [net] sctp: Use correct sideffect command in duplicate cookie handling (Daniel Borkmann) [976571 963843] {CVE-2013-2206}
  - [virt] kvm: limit difference between kvmclock updates (Marcelo Tosatti) [979912 952174]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.18.1.el6]
changelog:
  - [x86] perf/x86: Fix offcore_rsp valid mask for SNB/IVB (Nikola Pajkovsky) [971314 971315] {CVE-2013-2146}
  - [net] br: fix schedule while atomic issue in br_features_recompute() (Jiri Pirko) [990464 980876]
  - [scsi] isci: Fix a race condition in the SSP task management path (David Milburn) [990470 978609]
  - [bluetooth] L2CAP - Fix info leak via getsockname() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [bluetooth] HCI - Fix info leak in getsockopt() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [net] tuntap: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [net] af_key: initialize satype in key_notify_policy_flush() (Thomas Graf) [981225 981227] {CVE-2013-2237}
  - [usb] uhci: fix for suspend of virtual HP controller (Gopal) [982697 960026]
  - [usb] uhci: Remove PCI dependencies from uhci-hub (Gopal) [982697 960026]
  - [netdrv] bnx2x: Change MDIO clock settings (Michal Schmidt) [982116 901747]
  - [scsi] st: Take additional queue ref in st_probe (Tomas Henzl) [979293 927988]
  - [kernel] audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE (Oleg Nesterov) [982472 962976]
  - [kernel] audit: avoid negative sleep durations (Oleg Nesterov) [982472 962976]
  - [fs] ext4/jbd2: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] jbd: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix waiting and sending of a barrier in ext4_sync_file() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: fix sending of data flush on journal commit (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [963557 955807]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [963557 955807]
  - [fs] ext4: Rewrite __jbd2_log_start_commit logic to match upstream (Eric Sandeen) [963557 955807]
  - [net] bridge: Set vlan_features to allow offloads on vlans (Vlad Yasevich) [984524 951458]
  - [virt] virtio-net: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [mm] swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion (Rafael Aquini) [977668 827548]
  - [dma] ioat: Fix excessive CPU utilization (John Feeney) [982758 883575]
  - [fs] vfs: revert most of dcache remove d_mounted (Ian Kent) [974597 907512]
  - [fs] xfs: don't free EFIs before the EFDs are committed (Carlos Maiolino) [975578 947582]
  - [fs] xfs: pass shutdown method into xfs_trans_ail_delete_bulk (Carlos Maiolino) [975576 805407]
  - [net] ipv6: bind() use stronger condition for bind_conflict (Flavio Leitner) [989923 917872]
  - [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [977680 894683]
  - [x86] remove BUG_ON(TS_USEDFPU) in __sanitize_i387_state() (Oleg Nesterov) [956054 920445]
  - [fs] coredump: ensure the fpu state is flushed for proper multi-threaded core dump (Oleg Nesterov) [956054 920445]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.19.1.el6]
changelog:
  - [fs] gfs2: Reserve journal space for quota change in do_grow (Robert S Peterson) [988384 976823]
  - [netdrv] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [995458 988460]
  - [fs] nfs4: Fix infinite loop in nfs4_lookup_root (Scott Mayhew) [996014 987426]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.20.1.el6]
changelog:
  - [fs] nfs: Add functionality to allow waiting on all outstanding reads to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Ensure that NFS file unlock waits for readahead to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Convert nfs_get_lock_context to return an ERR_PTR on failure (Dave Wysochanski) [996424 976915]
  - [x86] thermal: Disable power limit notification interrupt (Shyam Iyer) [999328 908990]
  - [x86] thermal: Delete power-limit-notification console messages (Shyam Iyer) [999328 908990]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.21.1.el6]
changelog:
  - [fs] autofs: remove autofs dentry mount check (Ian Kent) [1000314 947275]
  - [net] sctp: Fix list corruption resulting from freeing an association on a list (Jiri Pirko) [1002184 887868]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.22.1.el6]
changelog:
  - [x86] Round the calculated scale factor in set_cyc2ns_scale() (Prarit Bhargava) [1001954 975507]
  - [x86] sched: Fix overflow in cyc2ns_offset (Prarit Bhargava) [1001954 975507]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.23.1.el6]
changelog:
  - [md] raid1, raid10: use freeze_array in place of raise_barrier in various places (Jes Sorensen) [1003765 997845]
  - [scsi] megaraid_sas: megaraid_sas driver init fails in kdump kernel (Nikola Pajkovsky) [1001963 833299]
  - [char] ipmi: eliminate long delay in ipmi_si on SGI UV2 (Nikola Pajkovsky) [988228 876778]
  - [net] bridge: Add multicast_querier toggle and disable queries by default (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Fix fatal typo in setup of multicast_querier_expired (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Restart queries when last querier expires (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Add br_multicast_start_querier (Flavio Leitner) [995334 905561]
  - [kernel] Prevent RT process stall due to missing upstream scheduler bug fix (Larry Woodman) [1006932 1002765]
  - [fs] nfs: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (Dave Wysochanski) [1006956 998752]
  - [firmware] efivars: Use correct efi_pstore_info struct when calling pstore_register (Lenny Szubowicz) [993547 867689]
  - [net] bridge: do not call setup_timer() multiple times (Amerigo Wang) [997746 994430]
  - [fs] lockd: protect nlm_blocked list (David Jeffery) [993544 967095]
  - [net] ipv6: call udp_push_pending_frames when uncorking a socket with AF_INET pending data (Jiri Benc) [987649 987651] {CVE-2013-4162}
  - [fs] fuse: readdirplus sanity checks (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus cleanup (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus change attributes once (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus fix instantiate (Niels de Vos) [988708 981741]
  - [fs] fuse: fix readdirplus dentry leak (Niels de Vos) [988708 981741]
  - [fs] cifs: fix issue mounting of DFS ROOT when redirecting from one domain controller to the next (Sachin Prabhu) [994866 976535]
  - [fs] nfs: Make nfs_readdir revalidate less often (Scott Mayhew) [994867 976879]
  - [fs] nfs: Make nfs_attribute_cache_expired() non-static (Scott Mayhew) [994867 976879]
  - [fs] nfs: set verifier on existing dentries in nfs_prime_dcache (Scott Mayhew) [994867 976879]
  - [fs] nfs: Allow nfs_updatepage to extend a write under additional circumstances (Scott Mayhew) [987262 983288]
  - [fs] nfs: fix a leak at nfs_lookup_revalidate() (Dave Wysochanski) [987261 975211]
  - [acpi] efivars: If pstore_register fails, free unneeded pstore buffer (Lenny Szubowicz) [993547 867689]
  - [acpi] Eliminate console msg if pstore.backend excludes ERST (Lenny Szubowicz) [993547 867689]
  - [acpi] Return unique error if backend registration excluded by kernel param (Lenny Szubowicz) [993547 867689]
  - [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [997745 952012]
  - [net] bridge: send query as soon as leave is received (Amerigo Wang) [997745 952012]
  - [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [997745 952012]
  - [net] bridge: Replace mp->mglist hlist with a bool (Amerigo Wang) [997745 952012]
  - [mm] fadvise: drain all pagevecs if POSIX_FADV_DONTNEED fails to discard all pages (Larry Woodman) [994140 957821]
  - [net] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1003931 955712]
  - [virt] xen-netfront: reduce gso_max_size to account for max TCP header (Andrew Jones) [1004657 957231]
  - [pps] Fix a use-after free bug when unregistering a source (Jiri Benc) [997916 920155]
  - [scsi] fnic: Fix SGEs limit (Chris Leech) [991346 829506]


author: Ray Strode <rstrode@redhat.com> 2.30.4-45
changelog:
  - Fix smartcard crash if coolkey isn't installed
    Resolves: #953552
  - Forward port RHEL5 crasher/hang fixes
    Resolves: #874202


author: Ray Strode <rstrode@redhat.com> 2.30.4-50
changelog:
  - Quietly run headless if the X server isn't installed.
    Prevents warning on s390
    Resolves: #1006947


author: Dan Winship <danw@redhat.com> - 0.3.0-6
changelog:
  - Fix build with xulrunner 17 (#916973)
  - Fix to not look for proxy.conf in current directory (#802765)
  - Fix a crash with webkit and invalid PAC file (#874492)
  - Fix a crash with URLs containing a username but no password (#979356)


author: Joe Orton <jorton@redhat.com> - 1.6.11-5
changelog:
  - add init script for svnserve (#720790, #711904)
  - fix segfault with "AuthzForceUsernameCase lower" (#751321)
  - fix parent directory access with merges (#749494)


author: Radek Vokal <rvokal@redhat.com> - 1.2.8-1
changelog:
  - upgrade to 1.2.8
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.8.html
  - use sitearch instead of sitelib to avoid pyo and pyc conflicts 
  - bring back -pie
  - add patch to allow decode of NFSv4.0 callback channel
  - add patch to allow decode of more SMB FIND_FILE infolevels


author: Radek Vokal <rvokal@redhat.com> - 1.2.9-1
changelog:
  - upgrade to 1.2.9
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.9.html
  - Resolves: #604312


author: Jan Safranek <jsafrane@redhat.com> 1.2.10-1
changelog:
  - upgrade to 1.2.10
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.10.html
  - Resolves: #604312 (proper fix for CVE-2010-2284)


author: Jan Safranek <jsafrane@redhat.com> 1.2.13-1
changelog:
  - upgrade to 1.2.13
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.11.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.12.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.13.html
  - Resolves: #657535 (CVE-2010-4300 CVE-2010-3445)


author: Jan Safranek <jsafrane@redhat.com> 1.2.15-1
changelog:
  - upgrade to 1.2.15
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.14.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html
  - Resolves: CVE-2011-0444 CVE-2011-0538 CVE-2011-0713 CVE-2011-1139
    CVE-2011-1140 CVE-2011-1141 CVE-2011-1143


author: Jan Synáček <jsynacek@redhat.com> 1.2.15-2.1
changelog:
  - security patches
  - Resolves: CVE-2011-1143
              CVE-2011-1590
              CVE-2011-1957
              CVE-2011-1959
              CVE-2011-2174
              CVE-2011-2175 CVE-2011-1958
              CVE-2011-2597 CVE-2011-2698
              CVE-2011-4102
              CVE-2012-0041 CVE-2012-0066 CVE-2012-0067
              CVE-2012-0042
              CVE-2012-1595


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-12
changelog:
  - fix for Java API __repmgr_send crash where eid=SELF_EID,
    don't update master_id so soon after election (upstream bz#16299)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-15
changelog:
  - apply backported patch from 4.8.26 to fix dbverify (#563610, #472131)
    (patch backported by Noriko Hosoi)


author: Laine Stump <laine@redhat.com> - 0.1.6-2
changelog:
  - make miimon/arpmon in bond definitions optional
  - Resolves: rhbz#585108
  - properly deal with initializing a 0 length /etc/sysconfig/iptables file
  - Resolves: rhbz#582905


author: Laine Stump <laine@redhat.com> - 0.1.6-4
changelog:
  - install missing sysconfig.aug file
  - Resolves: rhbz#613886
  - Don't delete the physical interface config when defining a vlan
  - Resolves: rhbz#585112


author: Laine Stump <laine@redhat.com> - 0.1.7-1
changelog:
  - rebase to netcf-0.1.7
    - Resolves: rhbz#651032
    - remove all iptables manipulation
    - Resolves: rhbz#633346
    - Resolves: rhbz#629206


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-39
changelog:
  - Release 1.2.11.15-39
  - Resolves: #1123863
    EMBARGOED CVE-2014-3562 - unauthenticated information disclosure (Bug 1123477)
  - Resolves: #1123863
    High contention on computed attribute lock (DS 616)
  - Resolves: #1062763
    single valued attribute replicated ADD does not work (DS 47692)
  - Resolves: #1121596
    Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (DS 443)
  - Resolves: #1014111
    Repl-monitor.pl ignores the provided connection parameters (DS 47862)
  - Resolves: #1115281
    New defects found in 389-ds-base-1.2.11 (DS 47863)
  - Resolves: #1112729
    paged results control is not working in some cases when we have a subsuffix. (DS 47824)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-40
changelog:
  - Release 1.2.11.15-40
  - Resolves: #1130252 - dirsrv not running with old openldap (DS 47875)
  - Resolves: #1103287 - logconv.pl memory continually grows (DS 47446)
  - Resolves: #1121596 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (DS 443)
  - Resolves: #1109381 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist (DS 415)
  - Resolves: #1128759 - Performance degradation with scope ONE after some load (DS 47874)
  - Resolves: #1127612 - Filter AND with only one clause should be optimized (DS 47872)
  - Resolves: #1014111 - repl-monitor fails to convert "*" to default values (DS 47862)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-42
changelog:
  - Release 1.2.11.15-42
  - Resolves: #1129660 - Adding users to user group throws Internal server error.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-43
changelog:
  - Release 1.2.11.15-43
  - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-44
changelog:
  - Release 1.2.11.15-44
  - Resolves: #1079098 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Simple bind hangs after enabling password policy


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-45
changelog:
  - Release 1.2.11.15-45
  - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-47
changelog:
  - Release 1.2.11.15-47
  - Resolves: #1147479 - Memory leak during Reliab15 execution (6.6.z - #47750)


author: Jay Fenlason <fenlason@redhat.com> 1.5.3-3.el6
changelog:
  - Correct the perldir macro for rhel-6's perl.
  - Remove the unrecognized --with-node-name-map configure option.
  - reorganize the files section to use fewer globs, so that it's less likely
    to pick up files inappropriately.


author: Doug Ledford <dledford@redhat.com> - 1.5.5-1.el6
changelog:
  - Update and rebuild against latest opensm (which was needed for latest
    ibutils, which was needed for licensing issues resolved in new upstream
    tarball, which was needed for pkgwrangler review)
  - Related: bz555835


author: Doug Ledford <dledford@redhat.com> - 1.5.8-1.el6
changelog:
  - Update to latest upstream version
  - Make build work on i686 arch
  - Modify perfquery to be able to loop through all HCAs in a single host
  - Resolves: bz593767
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.5.12-1
changelog:
  - Update to latest upstream release
  - Initial Fedora import
  - Add devel and devel static packages (review item)
  - Make etc file config(noreplace) (review item)
  - Remove no longer support scripts (review item)
  - Related: bz750609


author: Jay Fenlason <fenlason@redhat.com> - 1.5.12-3
changelog:
  - Reorganize this spec file to include /usr/sbin/ibswportwatch.pl
    and remove man pages for programs that aren't included.
    Resolves: bz814518


author: Doug Ledford <dledford@redhat.com> - 1.5.12-4
changelog:
  - Update the all_hcas patch to resolve several problems
  - Give a simple help message to the ibnodes script
  - Resolves: bz818606, bz847129


author: Doug Ledford <dledford@redhat.com> - 1.6.4-1
changelog:
  - Update to latest upstream release
  - Simplify and reduce spec file
  - Ship the various scripts we used to remove, they can be useful
  - Pick up changes from rhel7 and bring them to rhel6
  - Related: bz1082730


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-50
changelog:
  - gfs2_grow: report bad return codes on error
    Resolves: rhbz#886585
  - fsck.gfs2: fix misplaced directory leaf blocks (50 patches)
    Resolves: rhbz#902920


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-52
changelog:
  - fsck.gfs2: Handle multiple occurrences of one leaf in a directory hash table (6 patches)
    Resolves: rhbz#984085
  - fsck.gfs2: Don't rely on cluster.conf when rebuilding sb
    resolves: rhbz#985796


author: Chrissie Caulfield <ccaulfie@redhat.com> - 3.0.12.1-53
changelog:
  - ccs_tool: Fix example fence device in "ccs_tool create" help
    Resolves: rhbz#871603
  - libccs: don't use uninitialized value in xpathlite
    Resolves: rhbz#874538
  - qdiskd: change log level for an error message
    Resolves: rhbz#888318
  - fenced/dlm_controld/gfs_controld: use cluster_dead for corosync connections
    Resolves: rhbz#888857
  - gfs_controld: avoid mismatching messages with old cgs
    Resolves: rhbz#889564
  - cman|fenced: Fix node killing in case of a 2node cluster that suffers brief network out
    Resolves: rhbz#893925
  - config: fix cluster.conf man page to reflect correct syslog_facility default
    Resolves: rhbz#896191
  - qdiskd: Do not count missed updates from offline nodes
    Resolves: rhbz#920358
  - cman: create and destroy lockfile on restart
    Resolves: rhbz#982670


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-55
changelog:
  - Remove .patch from some patch tmp file names
  - gfs2_edit: Fix bug and add functions from upstream (6 patches)
    Resolves: rhbz#987508


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-57
changelog:
  - gfs2_tool: Update /etc/mtab with metafs mounts, handle interrupts (3 patches)
    Resolves: rhbz#996233


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.10.1.el6]
changelog:
  - [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
  - [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
  - [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
  - [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
  - [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
  - [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
  - [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
  - [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
  - [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
  - [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
  - [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.11.1.el6]
changelog:
  - [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
  - [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.13.1.el6]
changelog:
  - [security] Don't leak a key reference if request_key tries to use a revoked keyring (David Howells) [1288095 1188442]
  - [fs] gfs2: Protect freeing directory hash table with i_lock spin_lock (Robert S Peterson) [1288093 1250663]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.14.1.el6]
changelog:
  - [scsi] bfa: Fix incorrect de-reference of pointer (Chad Dupuis) [1292370 1258533]
  - [netdrv] genetlink-compat: register multicast groups (Stanislaw Gruszka) [1291978 1259870]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.16.1.el6]
changelog:
  - [net] bonding: propagate LRO disable to slave devices (Jarod Wilson) [1287993 1259008]
  - [net] Move bonding headers under include/net (Jarod Wilson) [1287993 1259008]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.17.1.el6]
changelog:
  - [kernel] hrtimer: add force_hrtimer_reprogram kernel parameter (Prarit Bhargava) [1292082 1285142]
  - [mm] fix anon_vma->degree underflow in anon_vma endless growing prevention (Jerome Marchand) [1285693 1151823]
  - [mm] fix corner case in anon_vma endless growing prevention (Jerome Marchand) [1285693 1151823]
  - [mm] prevent endless growth of anon_vma hierarchy (Jerome Marchand) [1285693 1151823]
  - [mm] avoid anon_vma_chain allocation under anon_vma lock (Jerome Marchand) [1285693 1151823]
  - [mm] avoid repeated anon_vma lock/unlock sequences in unlink_anon_vmas() (Jerome Marchand) [1285693 1151823]
  - [mm] avoid repeated anon_vma lock/unlock sequences in anon_vma_clone() (Jerome Marchand) [1285693 1151823]
  - [scsi] only re-lock door after EH on devices that were reset (Ewan Milne) [1282464 995234]
  - [fs] fs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1282621 1241030]
  - [fs] revert 'vfs: Unhash and evict unused children dentries after rmdir' (Carlos Maiolino) [1282621 1241030]
  - [netdrv] macvtap: fix network header pointer for VLAN tagged pkts (Ivan Vecera) [1280206 1213846]
  - [net] Fix vlan_get_protocol for stacked vlan (Ivan Vecera) [1280206 1213846]
  - [scsi] ipr: Fix incorrect trace indexing (Gustavo Duarte) [1280211 1209543]
  - [scsi] ipr: Fix invalid array indexing for HRRQ (Gustavo Duarte) [1280211 1209543]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-573.18.1.el6]
changelog:
  - [netdrv] bonding: "primary_reselect" with "failure" is not working properly (Jarod Wilson) [1295924 1290672]
  - [net] netpoll: Close race condition between poll_one_napi and napi_disable (Neil Horman) [1295370 1252212]


author: Akemi Yagi <toracat@centos.org> [2.6.32-573.18.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, all serial ATA, Adaptec I2O,
    ARPD, BusLogic, IPX, Appletalk, ReiserFS, JFS, TOMOYO
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added sysfs-fix-printk-warnings-bug6157.patch [bug#6157]
  - Added fs-tmpfs-add-xattrs-support.patch [bug#4586.18700]
  - Added fix-fadvise-for-tmpfs.patch [bug#6938]
  - DEBUG_KMEMLEAK enabled in config [bug#7055]
  - Added support for Kontron  [bug#7270]
  - Disable BRIDGE_IGMP_SNOOPING [bug#7796] then enable it as of 504.23.4 [bug#8862]
  - Enable IRDA (regression) [bug#8070]
  - Added a patch to fix redefine error in reiserfs
  - Added a patch to fix a 3w-sas issud [bug#10073] 
  - CONFIG_DRM_I915_UMS disabled [bug#9209]


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-4
changelog:
  - Add interface-mtu to the list of default requested DHCP options (#571719)
  - Fix paths in man pages (#571720)
  - Remove odd tests in %preun


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-5
changelog:
  - Discard unicast Request/Renew/Release/Decline message
    (unless we set unicast option) and respond with Reply
    with UseMulticast Status Code option (#554622)
  - Remove DHCPV6 OPERATION section from dhclient.conf.5
    describing deprecated 'send dhcp6.oro' syntax


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-6
changelog:
  - In dhclient-script check whether bound address
    passed duplicate address detection (DAD) (#559403)
  - If the bound address failed DAD (is found to be in use on the link),
    the dhcpv6 client sends a Decline message to the server
    as described in section 18.1.7 of RFC-3315 (#559403)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-7
changelog:
  - In client initiated message exchanges stop retransmission
    upon reaching the MRD rather than at some point after it (#559404)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-9
changelog:
  - If the Reply was received in response to Renew or Rebind message,
    client adds any new addresses in the IA option to the IA (#578098)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-10
changelog:
  - Add domain-search to the list of default requested DHCP options (#588352)
  - Move /etc/NetworkManager/dispatcher.d/10-dhclient script
    from dhcp to dhclient subpackage (#591140).
  - Compile with -fno-strict-aliasing (#594151).


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-12
changelog:
  - add character sequence test to pam_cracklib
  - drop unused difignore option from pam_cracklib (#811243)
  - add enforce_for_root option to pam_cracklib (#588893)
  - mention limits.d in the limits.conf(5) manpage (#723297)
  - add ability to lock out inactive accounts to pam_lastlog
  - fix require_selinux option in pam_namespace (#750601)
  - add mntopts flag for tmpfs polyinstantiation method
  - preserve authtok_type in pam_get_authtok() (#811168)
  - fix username mismatch in pam_unix remember feature (#815516)
  - relax restriction of root in pam_pwhistory
  - relax soft nproc limit for root in 90-nproc.conf


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.61.rc1
changelog:
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.67.rc1
changelog:
  - Change EDNS flags only after successful query (#1416035)
  - Fix crash in ldap driver at bind-sdb stop (#1426626)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-3
changelog:
  - Remove 'ipport' option from WTI fence agent
    (remove_ipport_option_from_wti_fence_agent.patch)
    Resolves: rhbz#579059


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - Rebase on top of new upstream bug fix only release:
    * drop all bug fix patches.
    * Addresses the follwing issues:
      from 3.0.11 release:
    Resolves: rhbz#583019, rhbz#583017, rhbz#583948, rhbz#584003
    * Rebase:
    Resolves: rhbz#582351
  - Stop build on ppc and ppc64.
    Resolves: rhbz#590985
  - Update list of supported agents.


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-2
changelog:
  - Add direct support for WTI VMR
    (add_direct_support_for_wti_vmr.patch)
    Resolves: rhbz#578617
  - Fix changelog for 3.0.12-1 release (add missing bugzilla entries)


author: Marek Grac <mgrac@redhat.com> - 3.0.12-3
changelog:
  - Add support for non-default TCP ports for WTI fence agent
    (add_ipport_to_wti.patch)
  - Resolves: rhbz#579059


author: Marek Grac <mgrac@redhat.com> - 3.0.12-4
changelog:
  - fence_apc fails for some port numbers
    (fence_apc_fails_for_some_port_numbers.patch)
  - Resolves: rhbz#606297


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-6
changelog:
  - Don't truncate fence_scsi log files
    (fence_scsi_do_not_truncate_log_file.patch)
    Resolves: rhbz#608887


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-7
changelog:
  - fence_rsb: Raise exceptions not strings with python 2.6
    (fence_rsb_raise_exceptions.patch)
    Resolves: rhbz#612941
  - fence_ilo: will throw exception if user does not have power priviledges
    (fence_ilo_will_throw_exception_if_user_has_no_power_privs.patch)
    Resolves: rhbz#615255
  - fence agents support clean up:
    drop support for baytech, brocade, mcdata, rackswitch and bullpap
    deprecate rsa and sanbox2
    rename ibmblade to bladecenter_snmp and add compatibility symlink
    (fence_rename_ibmblade_to_bladecenter_snmp_part1.patch)
    (fence_rename_ibmblade_to_bladecenter_snmp_part2.patch)
    Resolves: rhbz#616559
  - spec file changelog cleanup for older releases
  - rename Patch0 to be consistent with the others


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-8
changelog:
  - Fix syntax error in code that opens logfile.
    (fix_syntax_error_in_code_that_opens_logfile.patch)
    Resolves: rhbz#608887


author: Marek Grac <mgrac@redhat.com> - 3.0.12-8.el6_0.1
changelog:
  - Provide fence-rhev agent that uses the RHEV REST API
    (fence_rhevm.patch)
    Resolves: rhbz#642695


author: Marek Grac <mgrac@redhat.com> - 3.0.12-8.el6_0.2
changelog:
  - Support for ilo3 devices using fence_ipmilan
    (fence-agents-Add-power_wait-to-fence_ipmilan.patch)
    Resolves: rhbz#643340


author: Jeff Law <law@redhat.com> - 2.12-1.47.el6_2.4
changelog:
  - Make implementation of ARENAS_TEST and ARENAS_MAX match
    documentation (#769594)
  - Check malloc arena atomically  (#769594)


author: Jeff Law <law@redhat.com> - 2.12-1.47.el6_2.9
changelog:
  - Always use another area after a failed allocation in the
      main arena (#795328)
    - Remove sse3 memcpy (#695812) changes (#799259)


author: Andrew Beekhof <andrew@beekhof.net> - 1.6.5-0.1.git833ca18
changelog:
  - Incorporate review feedback
    + Add calls to ldconfig
    + Fix package group
    + Resolve rpmlint warnings
    + Added LICENSE, NOTICE and AUTHORS to the doc list
    + Document how the tarball was generated
    + Update version number to be a .5 pre-release snapshot


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Use org.freedesktop.sssd.infopipe.GetUserGroups for group lists.
  - Support new org.freedesktop.sssd.infopipe.GetUserAttr parameters /
    return values.
  - Removed LookupOutputGroupsSeparator.
  - LookupOutputGroups and LookupUserAttr now support separator as
    optional second parameter.
  - Added LookupUserGroupsIter and LookupUserAttrIter.
  - Added LookupDbusTimeout.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.8.1-1
changelog:
  - Ensure we run before mod_headers so that our result can be put to
    request headers for mod_proxy.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.0-1
changelog:
  - Add support for '+'-prefixed note/variable names.
  - Silence compile warnings by specifying C99.
  - Fix format of logs of dbus calls.


author: Dmitry Butskoy <Dmitry@Butskoy.name>
changelog:
  - add missed BR for krb5-devel
  - activate IPv6 support
  - change config to /etc/mail.rc for compatibility
  - add triggerpostun scriptlets against previous mailx and nail
    to check and merge (when possible) their user config changes
  - use proper config filename in manuals
  - use "less" instead of non-provided "pg" for nobsdcompat mode


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-1
changelog:
  - Place mailx to /bin/mailx, to avoid extra symlink in redhat-lsb package
  - /bin/mailx is now a base binary, another symlinked to it.


author: Peter Schiffer <pschiffe@redhat.com> - 12.4-7
changelog:
  - resolves: #857120
    fixed incorrect return code when TMPDIR points to invalid path
  - resolves: #845098
    added support for alternatives


author: Dave Anderson <anderson@redhat.com> - 6.0.3-1.el6
changelog:
  - Support sadump dumpfile formats for Fujitsu Stand Alone Dump facility.
    Resolves: rhbz#736884
  - Support s390x ELF-kdump and s390x compressed-kdump dumpfiles.
    Resolves: rhbz#738865 
  - Display an early warning message if any part of the kernel has been 
    erased/filtered by the makedumpfile facility.
    Resolves: rhbz#739096
  - Fix for the "runq" command for kernels that are configured with
    CONFIG_FAIR_GROUP_SCHED.
    Resolves: rhbz#754291
  - Fix for the x86_64 "bt" command to handle a recursive entry into
    the NMI exception stack.
    Resolves: rhbz#768189
  - Fix for an x86_64 "bt" command segmentation violation if the number
    of ELF_PRSTATUS notes in a compressed-kdump do not match the number
    of cpus running when the system crashed.
    Resolves: rhbz#782837 
  - Rebase to upstream version 6.0.3.
    Resolves: rhbz#767257


author: Dave Anderson <anderson@redhat.com> - 6.1.0-6.el6
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1209241


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-635.el6]
changelog:
  - [mm] backing-dev: ensure wakeup_timer is deleted (Jeff Moyer) [1318930]
  - [hv] vss: run only on supported host versions (Vitaly Kuznetsov) [1319813]
  - [sound] hda: Fix internal speaker for HP Z240 (Jaroslav Kysela) [1316673]
  - [perf] trace: Fix race condition at the end of started workloads (Jiri Olsa) [1302928]
  - [fs] nfsd: Combine decode operations for v4 and v4.1 (J. Bruce Fields) [1314536]
  - [hv] revert "vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: don't loose HVMSG_TIMER_EXPIRED messages" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: remove code duplication in message handling" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: avoid wait_for_completion on crash" (Vitaly Kuznetsov) [1318882]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-636.el6]
changelog:
  - [netdrv] mlx4_en: Choose time-stamping shift value according to HW frequency (Kamal Heib) [1320448]
  - [fs] anon_inodes implement dname (Aristeu Rozanski) [1296019]
  - [net] packet: set transport header before doing xmit (John Greene) [1309526]
  - [net] tuntap: set transport header before passing it to kernel (John Greene) [1309526]
  - [netdrv] macvtap: set transport header before passing skb to lower device (John Greene) [1309526]
  - [net] ipv6: tcp: add rcu locking in tcp_v6_send_synack() (Jakub Sitnicki) [1312740]
  - [net] ipv6: sctp: add rcu protection around np->opt (Jakub Sitnicki) [1312740]
  - [net] ipv6: add complete rcu protection around np->opt (Jakub Sitnicki) [1312740]
  - [net] dccp: remove unnecessary codes in ipv6.c (Jakub Sitnicki) [1312740]
  - [net] ipv6: remove unnecessary codes in tcp_ipv6.c (Jakub Sitnicki) [1312740]
  - [net] ipv6: Refactor update of IPv6 flowi destination address for srcrt (RH) option (Jakub Sitnicki) [1312740]
  - [net] ipv6: protect flow label renew against GC (Sabrina Dubroca) [1313231]
  - [net] ipv6: fix possible deadlock in ip6_fl_purge / ip6_fl_gc (Sabrina Dubroca) [1313231]
  - [perf] annotate: Support full source file paths for srcline fix (Jiri Olsa) [1304472 1304479]
  - [perf] tools: Support full source file paths for srcline (Jiri Olsa) [1304472 1304479]
  - [perf] annotate: Fix -i option, which is currently ignored (Jiri Olsa) [1304472 1304479]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-637.el6]
changelog:
  - [netdrv] mlx4-en: add missing patch to init rss_rings in get_profile (Don Dutile) [1321164]
  - [netdrv] mlx4-en: disable traffic class queueing by default (Don Dutile) [1321164]
  - [netdrv] mlx4_core: Fix mailbox leak in error flow when performing update qp (Don Dutile) [1321164]
  - [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259581] {CVE-2015-5157}
  - [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259581] {CVE-2015-5157}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-638.el6]
changelog:
  - [mm] hugetlb: prevent BUG_ON in hugetlb_fault -> hugetlb_cow (Dave Anderson) [1303495]
  - [mm] hugetlb: fix race condition in hugetlb_fault (Dave Anderson) [1303495]
  - [s390] kdump: fix wrong BUG_ON statement (Hendrik Brueckner) [1321316]
  - [scsi] cxgb4i: Increased the value of MAX_IMM_TX_PKT_LEN from 128 to 256 bytes (Sai Vemuri) [1320193]
  - [fs] nfs: fix a regression causing deadlock in nfs_wb_page_cancel() (Benjamin Coddington) [1135601]
  - [netdrv] cxgb4/ethtool: Get/set rx checksum (Sai Vemuri) [1225167]
  - [netdrv] cxgb4vf:The RX checksum feature was not completely ported to cxgb4vf driver (Sai Vemuri) [1225167]
  - [netdrv] cxgb4/cxgb4vf: Enable GRO (Sai Vemuri) [1225167]
  - [netdrv] cxgb4: Enable RX checksum offload flag (Sai Vemuri) [1225167]
  - [netdrv] cxgb4: Report correct link speed for unsupported ones (Sai Vemuri) [1296467]
  - [netdrv] cxgb4: Use vmalloc, if kmalloc fails (Sai Vemuri) [1296473]
  - [netdrv] cxgb4: Enhance driver to update FW, when FW is too old (Sai Vemuri) [1296472]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-639.el6]
changelog:
  - [input] wacom: fix ExpressKeys remote events (Aristeu Rozanski) [1318027]
  - [fs] revert "writeback: remove wb_list" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: bdi_writeback_task must set task state before calling schedule" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: merge bdi_writeback_task and bdi_start_fn" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: harmonize writeback threads naming" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: fix possible race when creating bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in the forker thread - 1" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in the forker thread - 2" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: simplify bdi code a little" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not remove bdi from bdi_list" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: move last_active to bdi" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: restructure bdi forker loop a little" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: move bdi threads exiting logic to the forker thread" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: prevent unnecessary bdi threads wakeups" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: optimize periodic bdi thread wakeups" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: remove unnecessary init_timer call" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: cleanup bdi_register" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: fix bad _bh spinlock nesting" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wakeup events when forking bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: Fix lost wake-up shutting down writeback thread" (Jeff Moyer) [1322297]
  - [mm] revert "backing-dev: ensure wakeup_timer is deleted" (Jeff Moyer) [1322297]
  - [perf] revert: perf changes out of "sched, perf: Fix periodic timers" (Jiri Olsa) [1322488]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-640.el6]
changelog:
  - [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
  - [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
  - [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
  - [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
  - [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
  - [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.9.1.el6]
changelog:
  - [x86] Fix c-state transitions when !NOHZ (Prarit Bhargava) [798572 767753]
  - [x86] tsc: Skip TSC synchronization checks for tsc=reliable (Prarit Bhargava) [798572 767753]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.11.1.el6]
changelog:
  - [netdrv] igb: reset PHY after recovering from PHY power down (Frantisek Hrbata) [789371 737714]
  - [drm] Ivybridge force wake fixes (Dave Airlie) [790007 786272]
  - [fs] xfs: fix inode lookup race (Dave Chinner) [804961 796277]
  - [kernel] regset: Return -EFAULT, not -EIO, on host-side memory fault (Jerome Marchand) [799212 799213] {CVE-2012-1097}
  - [kernel] regset: Prevent null pointer reference on readonly regsets (Jerome Marchand) [799212 799213] {CVE-2012-1097}
  - [block] Fix io_context leak after failure of clone with CLONE_IO (Vivek Goyal) [796846 791125] {CVE-2012-0879}
  - [block] Fix io_context leak after clone with CLONE_IO (Vivek Goyal) [796846 791125] {CVE-2012-0879}
  - [fs] cifs: fix dentry refcount leak when opening a FIFO on lookup (Sachin Prabhu) [798298 781893] {CVE-2012-1090}
  - [fs] NFSv4: include bitmap in nfsv4 get acl data (Sachin Prabhu) [753231 753232] {CVE-2011-4131}
  - [mm] fix nrpages assertion (Josef Bacik) [797182 766861]
  - [mm] Eliminate possible panic in page compaction code (Larry Woodman) [802430 755885]
  - [mm] Prevent panic on 2-node x3850 X5 w/2 MAX5 memory drawers panics while running certification tests caused by page list corruption (Larry Woodman) [802430 755885]
  - [sched] Fix cgroup movement of waking process (Larry Woodman) [795326 773517]
  - [sched] Fix cgroup movement of forking process (Larry Woodman) [795326 773517]
  - [sched] Fix cgroup movement of newly created process (Larry Woodman) [795326 773517]
  - [sched] Fix ->min_vruntime calculation in dequeue_entity() (Larry Woodman) [795326 773517]
  - [sched] cgroup: Fixup broken cgroup movement (Larry Woodman) [795326 773517]
  - [kernel] Prevent system deadlock when moving tasks between cgroups (Larry Woodman) [789060 773522]
  - [kernel] sched: fix {s,u}time values decrease (Stanislaw Gruszka) [789061 748559]
  - [mm] mempolicy.c: refix mbind_range() vma issue (Motohiro Kosaki) [802379 727700]
  - [mm] mempolicy.c: fix pgoff in mbind vma merge (Motohiro Kosaki) [802379 727700]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.12.1.el6]
changelog:
  - [net] net_sched: qdisc_alloc_handle() can be too slow (Jiri Pirko) [805458 785891]
  - [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770651 770652]
  - [fs] procfs: parse mount options (Jerome Marchand) [770651 770652]
  - [fs] fuse: add O_DIRECT support (Josef Bacik) [800552 753798]
  - [kernel] sysctl: restrict write access to dmesg_restrict (Phillip Lougher) [749248 749251]
  - [block] dm io: fix discard support (Mike Snitzer) [799943 758404]
  - [net] netlink: wrong size was calculated for vfinfo list blob (Andy Gospodarek) [790338 772136]
  - [netdrv] mlx4_en: fix endianness with blue frame support (Steve Best) [789911 750166]
  - [usb] Fix deadlock in hid_reset when Dell iDRAC is reset (Shyam Iyer) [797205 782374]
  - [virt] vmxnet3: Cap the length of the pskb_may_pull on transmit (bz 790673) (Neil Horman) [801723 790673]
  - [scsi] megaraid_sas: Fix instance access in megasas_reset_timer (Tomas Henzl) [790341 759318]
  - [netdrv] macvtap: Fix the minor device number allocation (Steve Best) [796828 786518]
  - [net] tcp: bind() fix autoselection to share ports (Flavio Leitner) [787764 784671]
  - [fs] cifs: change oplock break slow work to very slow work (Jeff Layton) [789373 772874]
  - [net] sunrpc: remove xpt_pool (J. Bruce Fields) [795338 753301]
  - [net] Potential null skb->dev dereference (Flavio Leitner) [795335 769590]
  - [net] pkt_sched: Fix sch_sfq vs tcf_bind_filter oops (Jiri Pirko) [786873 667925]
  - [net] mac80211: cancel auth retries when deauthenticating (John Linville) [797241 754356]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.13.1.el6]
changelog:
  - Revert: [fs] NFSv4: include bitmap in nfsv4 get acl data (Sachin Prabhu) [753231 753232] {CVE-2011-4131}


author: Steven Pritchard <steve@kspei.com> 1:0.4304-1
changelog:
  - Update to DateTime 0.4304.
  - Update to DateTime::TimeZone 0.78.
  - Update to DateTime::Locale 0.41.


author: Steven Pritchard <steve@kspei.com> 1:0.4401-1
changelog:
  - Update to DateTime 0.4401.
  - Update to DateTime::Locale 0.42.
  - Update to DateTime::TimeZone 0.8301.


author: Stepan Kasal <skasal@redhat.com> - 1:0.5300-1
changelog:
  - new upstream version
  - use Build.PL as Makefile.PL no longer exists
  - use iconv to recode to utf-8, not a patch
  - update BuildRequires
  - drop Provides: perl(DateTime::TimeZoneCatalog), it is no longer there
  - use filtering macros


author: Jarod Wilson <jarod@redhat.com> 1.5-13
changelog:
  - Move startup prio so we start after syslog, so any notices during
    system startup actually get logged


author: Petr Sabata <psabata@redhat.com> - 1:1.5-14
changelog:
  - Init script: added the reload function
  - Init script: the service now stops when using p4-clockmod driver
  - Resolves: rhbz#607223


author: Marcela Mašláňová <mmaslano@redhat.com> 1:1.5-16
changelog:
  - Whenever PCC driver is loaded, it loads the “userspace” governor, instead 
    of the “ondemand” governor.
  - Resolves: rhbz#642838


author: Marcela Mašláňová <mmaslano@redhat.com> 1:1.5-17
changelog:
  - Cpuspeed init script still tries to adjust cpufreq sysfiles on a per core 
    basis 738463
  - IGNORE_NICE parameter does opposite of what it says (thanks to Minto Joseph)
    797055
  - Cpuspeed does not reset MIN/MAX values when config file is emptied 616976
  - Resolves: rhbz#738463, rhbz#797055, rhbz#616976


author: Petr Sabata <psabata@redhat.com> - 2.6.32-14
changelog:
  - Fix'd to properly build against xtables interface
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986


author: Petr Sabata <psabata@redhat.com> - 2.6.32-16
changelog:
  - Link and install m_xt.so properly
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986
  - Related: rhbz#678986


author: Petr Sabata <contyk@redhat.com> - 2.6.32-17
changelog:
  - Fix GRED options clearing
  - Resolves: rhbz#709652
  - Add macvlan/macvtap passtru support
  - Resolves: rhbz#692867
  - Resolves: rhbz#693878


author: Petr Šabata <contyk@redhat.com> - 2.6.32-18
changelog:
  - Fix changing of ip6ip6 tunnel hoplimit
  - Resolves: rhbz#730627
  - lnstat -d should dump to stdout
  - Resolves: rhbz#736106


author: Petr Šabata <contyk@redhat.com> - 2.6.32-19
changelog:
  - Adding mqprio qdisc support (#748767)
  - Adding QFQ discipline support (#788120)
  - A required update of include/linux/pkt_sched.h


author: Petr Šabata <contyk@redhat.com> - 2.6.32-20
changelog:
  - Add support for multicast rules, IPv4 only due to kernel limitations;
    see #631984, comment 14 for details (#812779)


author: Tomas Heinrich <theinric@redhat.com> 5.8.7-1
changelog:
  - rebase to rsyslog-5.8.7
    - change license from 'GPLv3+' to '(GPLv3+ and ASL 2.0)'
      http://blog.gerhards.net/2012/01/rsyslog-licensing-update.html
    - remove patches obsoleted by rebase
    - add patches for better sysklogd compatibility (taken from upstream)
    - update included files for the new major version
    Resolves: #672182
    Resolves: #727380
    Resolves: #756664
    Resolves: #767527
    Resolves: #769025
  - add several directories for storing auxiliary data
    Resolves: #740420
  - fix source package URL


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-1
changelog:
  - rebase to rsyslog 5.8.10
    Resolves: #803550
    Resolves: #805424
    Resolves: #813079
    Resolves: #813084
  - consider lock file in 'status' action
    Resolves: #807608
  - add impstats and imptcp modules
  - include new license text files
  - specify which versions of sysklogd are obsoleted


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-2
changelog:
  - add patch to update information on debugging in the man page
    Resolves: #820311
  - add patch to prevent debug output to stdout after forking
    Resolves: #820996
  - add patch to support ssl certificates with domain names longer than 128 chars
    Resolves: #822118


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-5
changelog:
  - add a patch to permit RFC3339 timestamps in messages comming from
    the local log socket, patch taken from upstream - commit:
    bfae69d68b0032a383821a54bc52aeff36a90e52
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-6
changelog:
  - the previous patch to enable RFC3339 timestamps revealed a bug
    in the upstream code - adding another patch
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-7
changelog:
  - add a patch to support large groups in the $FileGroup directive
    resolves: #924754
  - add a patch to fix 'pri-text' property format
    resolves: #951727
  - add a patch to fix the behavior of the *QueueMaxFileSize directives
    resolves: #963942


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-8
changelog:
  - drop patch 5 which introduced a regression
    resolves: #927405
    reverts: #847568
  - add a patch to prevent 'RepeatedMsgReduction' causing missing hostnames
    resolves: #893197
  - add a patch to enable specifying UID/GID as a number
    resolves: #886117
  - add a patch to prevent a segfault in gssapi
    resolves: #862517


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.10.1.el6]
changelog:
  - [scsi] be2iscsi : Fix the NOP-In handling code path (Nikola Pajkovsky) [955504 947550]
  - [scsi] be2iscsi: Fix memory leak in control path of driver (Rob Evers) [955504 947550]
  - [virt] kvm: validate userspace_addr of memslot (Petr Matousek) [950496 950498] {CVE-2013-1943}
  - [virt] kvm: fix copy to user with irq disabled (Michael S. Tsirkin) [949985 906602] {CVE-2013-1935}
  - [net] veth: Dont kfree_skb() after dev_forward_skb() (Jiri Benc) [957712 957713] {CVE-2013-2017}
  - [net] tcp: Reallocate headroom if it would overflow csum_start (Thomas Graf) [954298 896233]
  - [net] tcp: take care of misalignments (Thomas Graf) [954298 896233]
  - [net] skbuff.c cleanup (Thomas Graf) [954298 896233]
  - [idle] intel_idle: Initialize driver_data correctly in ivb_cstates on IVB processor (Prarit Bhargava) [960864 953630]
  - [x86] Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [962482 869736]
  - [mm] enforce mmap_min_addr on x86_64 (Rik van Riel) [961431 790921]
  - [mm] optional next-fit policy for arch_get_unmapped_area (Rik van Riel) [961431 790921]
  - [mm] fix quadratic behaviour in get_unmapped_area_topdown (Rik van Riel) [961431 790921]
  - [scsi] Revert: qla2xxx: Optimize existing port name server query matching (Chad Dupuis) [950529 924804]
  - [scsi] Revert: qla2xxx: Avoid losing any fc ports when loop id's are exhausted (Chad Dupuis) [950529 924804]
  - [fs] defer do_filp_open() access checks to may_open() (Eric Sandeen) [928683 920752]
  - [md] dm thin: bump the target version numbers (Mike Snitzer) [924823 922931]
  - [md] dm-thin: fix discard corruption (Mike Snitzer) [924823 922931]
  - [md] persistent-data: rename node to btree_node (Mike Snitzer) [924823 922931]
  - [md] dm: fix limits initialization when there are no data devices (Mike Snitzer) [923096 908851]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.11.1.el6]
changelog:
  - [kernel] perf: fix perf_swevent_enabled array out-of-bound access (Petr Matousek) [962793 962794] {CVE-2013-2094}


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.12.1.el6]
changelog:
  - [fs] Panic in gfs2_inplace_reserve after fix from BZ#875753 (Robert S Peterson) [924847 922999]
  - [nfs] sunrpc: Prevent an rpc_task wakeup race (Dave Wysochanski) [956979 840860]
  - [nfs] sunrpc: clarify comments on rpc_make_runnable (Dave Wysochanski) [956979 840860]
  - [x86] acpi: Avoid SRAT table checks for Fujitsu Primequest systems (Prarit Bhargava) [973198 966853]
  - [x86] oprofile: Fix crash when unloading module in nmi timer mode (Don Zickus) [972586 828936]
  - [block] propagate proper return codes from blk_get_request callers (Jeff Moyer) [958684 927918]
  - [block] Check the return value from blk_get_request (Jeff Moyer) [958684 927918]
  - [virt] kvm/mmu: fix hashing for TDP and non-paging modes (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Fix free memory accounting race in mmu_alloc_roots() (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Don't flush shadow when enabling dirty tracking (Marcelo Tosatti) [966432 908751]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.13.1.el6]
changelog:
  - [wireless] b43: stop format string leaking into error msgs (John Linville) [971387 971389] {CVE-2013-2852}
  - [pci] make sriov work with hotplug remove (Takahiro MUNEDA) [973555 965002]
  - [net] rtnl: fix info leak on RTM_GETLINK request for VF devices (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] dcbnl: fix various netlink info leaks (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] bonding: fix enslaving in alb mode when link down (Veaceslav Falico) [969306 965132]
  - [net] tcp: Fix oops from tcp_collapse() when using splice() (Nikola Pajkovsky) [968871 863512] {CVE-2013-2128}
  - [usb] uhci: fix IRQ race during initialization (Dave Young) [968557 915834]
  - [netdrv] e1000e: enable VLAN RX/TX in PROMISC mode (Stefan Assmann) [963564 886420]
  - [netdrv] bnx2x: strip VLAN header in PROMISC mode (Stefan Assmann) [963564 886420]
  - [net] vlan: handle packets with empty vlan_group via VLAN code (Stefan Assmann) [963564 886420]
  - [fs] namei.c: Dont allow to create hardlink for deleted file (Brian Foster) [956296 908158]
  - [fs] gfs2: Reinstate withdraw ack system (Robert S Peterson) [927308 908093]
  - [fs] nfs: open a file descriptor for fsync in nfs4 recovery (J. Bruce Fields) [964046 915479]
  - [net] macvlan: remove bogus check in macvlan_handle_frame() (Jiri Pirko) [962370 952785]
  - [net] macvlan: fix passthru mode race between dev removal and rx path (Jiri Pirko) [962370 952785]
  - [kernel] rcu: Replace list_first_entry_rcu() with list_first_or_null_rcu() (Jiri Pirko) [962370 952785]
  - [net] bluetooth/rfcomm: Fix missing msg_namelen update in rfcomm_sock_recvmsg() (Weiping Pan) [955653 955654] {CVE-2013-3225}
  - [net] bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955603 955604] {CVE-2013-3224}
  - [fs] gfs2: Issue discards in 512b sectors (Robert S Peterson) [927317 922779]
  - [fs] udf: avoid info leak on export (Nikola Pajkovsky) [922354 922355] {CVE-2012-6548}
  - [scsi] lpfc: Fixed deadlock between hbalock and nlp_lock use (Rob Evers) [962368 960717]
  - [kernel] tracing: Fix possible NULL pointer dereferences (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [kernel] tracing: Fix panic when lseek() called on "trace" opened for writing (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955224 955225] {CVE-2013-3222}
  - [x86] apic: Work around boot failure on HP ProLiant DL980 G7 Server systems (Prarit Bhargava) [969326 912963]
  - [x86] apic: Use probe routines to simplify apic selection (Prarit Bhargava) [969326 912963]
  - [x86] x2apic: Simplify apic init in SMP and UP builds (Prarit Bhargava) [969326 912963]
  - [kvm] vmx: provide the vmclear function and a bitmap to support VMCLEAR in kdump (Andrew Jones) [962372 908608]
  - [x86] kexec: VMCLEAR VMCSs loaded on all cpus if necessary (Andrew Jones) [962372 908608]
  - [fs] ext3: Fix format string issues (Nikola Pajkovsky) [920784 920785] {CVE-2013-1848}
  - [kernel] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920505 920506] {CVE-2013-0914}


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.15.1.el6]
changelog:
  - [mm] block: optionally snapshot page contents to provide stable pages during write (Rafael Aquini) [981177 951937]
  - [mm] only enforce stable page writes if the backing device requires it (Rafael Aquini) [981177 951937]
  - [mm] bdi: allow block devices to say that they require stable page writes (Rafael Aquini) [981177 951937]
  - [mm] fix writeback_in_progress() (Rafael Aquini) [981177 951937]
  - [kernel] sched: Do not account bogus utime (Stanislaw Gruszka) [959930 912662]
  - [kernel] sched: Avoid cputime scaling overflow (Stanislaw Gruszka) [959930 912662]
  - [char] n_tty: Remove BUG_ON from n_tty_read() (Stanislaw Gruszka) [982496 848085]


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.54-1
changelog:
  - specfile: require newer lvm
  - ifdown-eth: add timeout for when flushing global scope
  - functions: support boolean values in is_true() & is_false()
  - ifup-aliases: do not return with error when arping fails
  - netconsole: resolve domain name via 'getent' instead of 'hosts'


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.55-1
changelog:
  - ipcalc: detect invalid mask
  - ifup-aliases: send gratuitous ARPs when adding addresses
  - network: treat other tunnel interfaces (fixes ifdown stage)
  - kexec-disable.conf: release kexec memory properly
  - network-functions: do not send hostname via dhclient everytime
  - sysconfig/network: NO_DHCP_HOSTNAME option introduced
  - ipv6_add_addr_on_device: replace the existing address on NIC


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-1
changelog:
  - Update to sblim-sfcb-1.3.11
    Resolves: #633580
  - Compile with --enable-uds, i. e. enable unix domain socket local connect functionality
    Resolves: #620303
  - Create sfcb system group (used by basic authentication with PAM) in pre install scriptlet,
    remove it in post uninstall scriptlet
    Resolves: #618081
  - Fix default location where sfcbrepos is looking for schema files
    and simplify sfcbrepos command in post install sciptlet
    Resolves: #618080


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-2
changelog:
  - Checks for valid pointer before calling free() in providerDrv.c,
    result.c and support.c (backported from upstream)


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-4
changelog:
  - Don't call xmlCleanupParser, it breaks other users of thread-private
    storage
    Resolves: #578568


author: Johnny Hughes <johnny@centos.org> - 2.26.0-5.el6_1.1.0.1.centos
changelog:
  - rebuilt due to a bad i386-redhat-linux-gnu variable on the previous build.  This package
    has not been modified in any way and will lose the .centos tag the next
    time upstream releases a new version.


author: Petr Machata <pmachata@redhat.com> - 0.5-15.45svn.1
changelog:
  - Bring over patches from RHEL 5
  - Fix a problem with tracing stripped binary after execl on
    architectures that need PLT reinitalisation breakpoint.
  - Resolves: #528466


author: Petr Machata <pmachata@redhat.com> - 0.5-18.45svn
changelog:
  - Add patches for tracing multi-threaded processes
  - Resolves: #742340
  - Add a patch for tracing calls made from dlopened libraries
  - Resolves: #738254


author: Petr Machata <pmachata@redhat.com> - 0.5-19.45svn
changelog:
  - Add a patch to fix two coverity citations
  - Resolves: #805198
  - Fix a bug in multi-threaded support (ltrace-0.5-pass-leader.patch)
  - Update man page (ltrace-0.5-dlopen-man.patch)


author: Petr Machata <pmachata@redhat.com> - 0.5-20.45svn
changelog:
  - Fix dlopen support when dynamic linker is not prelinked
    (ltrace-0.5-dlopen-double-bias.patch)
  - Fix unexpected breakpoint messages appearing after exec
  - Resolves: #738254


author: Petr Machata <pmachata@redhat.com> - 0.5-22.45svn
changelog:
  - Bias shoud be applied to address read from .opd only if that address
    wasn't yet resolved by the dynamic linker
    (ltrace-0.5-dlopen-opd-bias.patch)
  - Resolves: #738254


author: Petr Machata <pmachata@redhat.com> - 0.5-23.45svn
changelog:
  - Fix the case that a breakpoint is reported by SIGILL instead of
    SIGTRAP, and DECR_PC_AFTER_BREAK is non-zero, as is the case on
    s390 (ltrace-0.5-s390x-sigill.patch)
  - Fix detach from sleeping process (ltrace-0.5-sigint.patch)
  - Resolves: #738254
  - Fix attach test case, patch courtesy of
    Edjunior Barbosa Machado <emachado@br.ibm.com>
    (ltrace-0.5-fix-testcase-attach-process.patch)
  - Resolves: #811088
  - Fix tracing return from functions called using a plain branch
    instead of library call (ltrace-0.5-ppc64-linked-calls.patch)
  - Add a patch for single-stepping over a lwarx/ldarx instruction
    (ltrace-0.5-ppc64-atomic-skip.patch)
  - Resolves: #811184
  - Adjust the code to avoid some warnings (ltrace-0.5-warnings.patch)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.1.9-3
changelog:
  - Resolves: bug #629951
    override LINK_MODE at compile-time to add -pie to linker flags, so that
    radiusd will be built as a PIE


author: John Dennis <jdennis@redhat.com> - 2.1.10-1
changelog:
  - Upgrade to latest upstream release
    Feature improvements
    * Install the "radcrypt" program.
    * Enable radclient to send requests containing MS-CHAPv1
      Send packets with: MS-CHAP-Password = "password".  It will
      be automatically converted to the correct MS-CHAP attributes.
    * Added "-t" command-line option to radtest.  You can use "-t pap",
     "-t chap", "-t mschap", or "-t eap-md5".  The default is "-t pap"
    * Make the "inner-tunnel" virtual server listen on 127.0.0.1:18120
      This change and the previous one makes PEAP testing much easier.
    * Added more documentation and examples for the "passwd" module.
    * Added dictionaries for RFC 5607 and RFC 5904.
    * Added note in proxy.conf that we recommend setting
      "require_message_authenticator = yes" for all home servers.
    * Added example of second "files" configuration, with documentation.
      This shows how and where to use two instances of a module.
    * Updated radsniff to have it write pcap files, too.  See '-w'.
    * Print out large WARNING message if we send an Access-Challenge
      for EAP, and receive no follow-up messages from the client.
    * Added Cached-Session-Policy for EAP session resumption.  See
      raddb/eap.conf.
    * Added support for TLS-Cert-* attributes. For details, see
      raddb/sites-available/default, "post-auth" section.
    * Added sample raddb/modules/{opendirectory,dynamic_clients}
    * Updated Cisco and Huawei, HP, Redback, and ERX dictionaries.
    * Added RFCs 5607, 5904, and 5997.
    * For EAP-TLS, client certificates can now be validated using an
      external command.  See eap.conf, "validate" subsection of "tls".
    * Made rlm_pap aware of {nthash} prefix, for compatibility with
      legacy RADIUS systems.
    * Add Module-Failure-Message for mschap module (ntlm_auth)
    * made rlm_sql_sqlite database configurable.  Use "filename"
      in sql{} section.
    * Added %{tolower: ...string ... }, which returns the lowercase
      version of the string.  Also added %{toupper: ... } for uppercase.

    Bug fixes
    * Fix endless loop when there are multiple sub-options for
      DHCP option 82.
    * More debug output when sending / receiving DHCP packets.
    * EAP-MSCHAPv2 should return the MPPE keys when used outside
      of a TLS tunnel.  This is needed for IKE.
    * Added SSL "no ticket" option to prevent SSL from creating sessions
      without IDs.  We need the IDs, so this option should be set.
    * Fix proxying of packets from inside a TTLS/PEAP tunnel.
      Closes bug #25.
    * Allow IPv6 address attributes to be created from domain names
      Closes bug #82.
    * Set the string length to the correct value when parsing double
      quotes.  Closes bug #88.
    * No longer look users up in /etc/passwd in the default configuration.
      This can be reverted by enabling "unix" in the "authorize" section.
    * More #ifdef's to enable building on systems without certain
      features.
    * Fixed SQL-Group comparison to register only if the group
      query is defined.
    * Fixed SQL-Group comparison to register <instance>-SQL-Group,
      just like rlm_ldap.  This lets you have multiple SQL group checks.
    * Fix scanning of octal numbers in "unlang".  Closes bug #89.
    * Be less aggressive about freeing "stuck" requests.  Closes bug #35.
    * Fix example in "originate-coa" to refer to the correct packet.
    * Change default timeout for dynamic clients to 1 hour, not 1 day.
    * Allow passwd module to map IP addresses, too.
    * Allow passwd module to be used for CoA packets
    * Put boot filename into DHCP header when DHCP-Boot-Filename
      is specified.
    * raddb/certs/Makefile no longer has certs depend on index.txt and
       serial.  Closes bug #64.
    * Ignore NULL errorcode in PostgreSQL client.  Closes bug #39
    * Made Exec-Program and Exec-Program-Wait work in accounting
      section again.  See sites-available/default.
    * Fix long-standing memory leak in esoteric conditions.  Found
      by Jerry Nichols.
    * Added "Password-With-Header == userPassword" to raddb/ldap.attrmap
      This will automatically convert more passwords.
    * Updated rlm_pap to decode Password-With-Header, if it was base64
      encoded, and to treat the contents as potentially binary data.
    * Fix Novell eDir code to use the right function parameters.
      Closes bug #86.
    * Allow spaces to be escaped when executing external programs.
      Closes bug #93.
    * Be less restrictive about checking permissions on control socket.
      If we're root, allow connecting to a non-root socket.
    * Remove control socket on normal server exit.  If the server isn't
      running, the control socket should not exist.
    * Use MS-CHAP-User-Name as Name field from EAP-MSCHAPv2 for MS-CHAP
      calculations.  It *MAY* be different (upper / lower case) from
      the User-Name attribute.  Closes bug #17.
    * If the EAP-TLS methods have problems, more SSL errors are now
      available in the Module-Failure-Message attribute.
    * Update Oracle configure scripts.  Closes bug #57.
    * Added text to DESC fields of doc/examples/openldap.schema
    * Updated more documentation to use "Restructured Text" format.
      Thanks to James Lockie.
    * Fixed typos in raddb/sql/mssql/dialup.conf.  Closes bug #11.
    * Return error for potential proxy loops when using "-XC"
    * Produce better error messages when slow databases block
      the server.
    * Added notes on DHCP broadcast packets for FreeBSD.
    * Fixed crash when parsing some date strings.  Closes bug #98
    * Improperly formatted Attributes are now printed as "Attr-##".
      If they are not correct, they should not use the dictionary name.
    * Fix rlm_digest to be check the format of the Digest attributes,
      and return "noop" rather than "fail" if they're not right.
    * Enable "digest" in raddb/sites-available/default.  This change
      enables digest authentication to work "out of the box".
    * Be less aggressive about marking home servers as zombie.
      If they are responding to some packets, they are still alive.
    * Added Packet-Transmit-Counter, to track detail file retransmits.
      Closes bug #13.
    * Added configure check for lt_dladvise_init().  If it exists, then
      using it solves some issues related to libraries loading libraries.
    * Added indexes to the MySQL IP Pool schema.
    * Print WARNING message if too many attributes are put into a packet.
    * Include dhcp test client (not built by default)
    * Added checks for LDAP constraint violation.  Closes bug #18.
    * Change default raddebug timeout to 60 seconds.
    * Made error / warning messages more consistent.
    * Correct back-slash handling in variable expansion.  Closes bug #46.
      You SHOULD check your configuration for backslash expansion!
    * Fix typo in "configure" script (--enable-libltdl-install)
    * Use local libltdl in more situations.  This helps to avoid
      compile issues complaining about lt__PROGRAM__LTX_preloaded_symbols.
    * Fix hang on startup when multiple home servers were defined
      with "src_ipaddr" field.
    * Fix 32/64 bit issue in rlm_ldap.  Closes bug #105.
    * If the first "listen" section defines 127.0.0.1, don't use that
      as a source IP for proxying.  It won't work.
    * When Proxy-To-Realm is set to a non-existent realm, the EAP module
      should handle the request, rather than expecting it to be proxied.
    * Fix IPv4 issues with udpfromto.  Closes bug #110.
    * Clean up child processes of raddebug.  Closes bugs #108 and #109
    * retry OTP if the OTP daemon fails.  Closes bug #58.
    * Multiple calls to ber_printf seem to work better.  Closes #106.
    * Fix "unlang" so that "attribute not found" is treated as a "false"
      comparison, rather than a syntax error in the configuration.
    * Fix issue with "Group" attribute.


author: John Dennis <jdennis@redhat.com> - 2.1.10-3
changelog:
  - Resolves: #644100, Rebase to current release
  - Fix 666589 - removing freeradius from system does not delete the user "radiusd"
    fix scriptlet argument testing, simplify always exiting with zero


author: John Dennis <jdennis@redhat.com> - 2.1.10-5
changelog:
  - Resolves: #689045 Using rlm_perl cause radiusd failed to start
    Fix configure typo which caused lt_dladvise_* functions to be skipped.
    run autogen.sh because HAVE_LT_DLADVISE_INIT isn't in src/main/autogen.h
    Implemented by: freeradius-lt-dladvise.patch


author: John Dennis <jdennis@redhat.com> - 2.1.12-1
changelog:
  - Upgrade to latest upstream release: 2.1.12
    resolves: bug#736878 Rebase to latest upstream
    resolves: bug#705723 logrotate script does not reload running daemon
    resolves: bug#787116 radtest PPPhint option not parsed correctly
    resolves: bug#700870 freeradius not compiled with --with-udpfromto
    resolves: bug#753764 shadow password expiration does not work
    resolves: bug#712803 radtest script is not working with eap-md5 option
    resolves: bug#690756 errors in raddb/sql/postgresql/admin.sql template


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#855317
    CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
    certain expiration date fields of a certificate during x509 certificate
    validation


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-5
changelog:
  - Add support for microsecond precision of home server's response_window
    option, client's response_window option with the same precision and home
    server's response_timeouts option, backported from v3.0.x.
  - Resolves: bug#1107843


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-6
changelog:
  - Fix missing braces around a condition branch in client response_window
    patch.
  - Resolves: bug#1107843


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-50.P1
changelog:
  - Lease table overflow crash. (#1133917)
  - Add ignore-client-uids option. (#1196768)
  - dhclient-script: it's OK if the arping reply comes from our system. (#1204095)
  - VLAN ID is only bottom 12-bits of TCI. (#1259552)
  - dhclient: Make sure link-local address is ready in stateless mode. (#1263466)
  - dhclient-script: make_resolv_conf(): Keep old nameservers
    if server sends domain-name/search, but no nameservers. (#1269595)


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.14-3
changelog:
  - prevent crmd crash after unexpected Pacemaker Remote connection takeover
   - ensure package URL is displayed correctly

    Resolves: rhbz#1252206


author: Daniel Novotny <dnovotny@redhat.com> 3:2.1.12-9
changelog:
  - regenerated patches so patch fuzz 3 is not needed (bz#513207)
  - mm_cfg.pyc and .pyo are now %verify(not md5 size mtime) (bz#512794)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15
changelog:
  - Restrict debug builds to shipped JIT architectures, excluding unshipped ppc64
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18
changelog:
  - Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes
  - Replace our correct version of 8159244 with the amendment to the 8u version from 8160122.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18
changelog:
  - Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18
changelog:
  - Disable -ffp-no-contract option introduced by 8170873 as not available on RHEL 6 GCC.
  - Resolves: rhbz#1410612


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Fix package description to differentiate the fact that this is for the T4
    Chelsio based adapters instead of the previous T3 generation


author: Doug Ledford <dledford@redhat.com> - 1.2.0-1
changelog:
  - Update to latest upstream release while rebuilding against latest
    libibverbs
  - Related: bz750609


author: Doug Ledford <dledford@redhat.com> - 1.3.3-1
changelog:
  - Bump and rebuild against new libibverbs, update our sources while we
    are at it
  - Related: bz854655


author: Doug Ledford <dledford@redhat.com> - 1.3.5-1
changelog:
  - Update to latest upstream release
  - Move modprobe setup to rdma package
  - Resolves: bz1165842
  - Related: bz1163527


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-25
changelog:
  - Resolves: rhbz#1111528 - Expired shadow policy user(shadowLastChange=0)
                             is not prompted for password change


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-26
changelog:
  - Resolves: rhbz#1130017 - Saving group membership fails if provider is AD,
                             POSIX attributes are used and primary group contains
                             the user as a member


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-28
changelog:
  - Resolves: rhbz#1125187 - simple_allow_groups does not lookup groups from
                             other AD domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-29
changelog:
  - Resolves: rhbz#1103487 - CVE-2014-0249 - sssd: incorrect expansion of group
                             membership when encountering a non-POSIX group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-30.1
changelog:
  - Resolves: rhbz#1146198 - Password expiration policies are not being
                             enforced by SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-30.3
changelog:
  - Resolves: rhbz#1165074 - RHEL6.6 sssd (1.11) doesn't return all group
                             memberships against an IPA server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-30.4
changelog:
  - Relax the libldb requirements
  - Backport removal of unused signal functions to avoid conflict with Samba
  - Resolves: rhbz#1201666 - Relax the libldb requirements to unblock RH Storage


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.6.1.el6]
changelog:
  - [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
  - [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
  - [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
  - [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
  - [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
  - [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
  - [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.7.1.el6]
changelog:
  - [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.13.2.el6]
changelog:
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
  - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
  - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.1
changelog:
  - nwfilter: Avoid failure with noexec /tmp (rhbz#754182)
  - nwfilter: Simplify execution of ebiptables scripts (rhbz#754182)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-9
changelog:
  - make sure conversion between aggregates with different
    sizes is never considered useless (#1113878)
  - fix gfortran ICE on old-style initialization of derived type
    components (#1113793)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-10
changelog:
  - backport two further OpenMP 4.0 libgomp tasking fixes (#1099549)
  - fix scheduler wrong-code with DEBUG_INSNs containing volatile ASM_OPERANDS
    (#1127118, PR rtl-optimization/61801)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-12
changelog:
  - only use PCH in toplevel inclusions (#1177458, PR pch/38987, PR pch/52518)
  - don't vectorize bitfield and boolean types (#1150606,
    PR tree-optimization/43390)
  - fix up a Cray pointer handling bug (#1134560, PR fortran/62174)
  - fix up stdarg optimization when address of a va_list variable escapes
    in a phi node (#1190640, PR target/64979)


author: Akemi Yagi <toracat@centos.org> [2.6.32-220.4.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client, EeePC hotkey, JFS
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - As of 2.6.32-131.12.1.el6, parallel printer support is enabled in distro kernel.
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix for the 208.5-days-and-the-system-reboots issue [bug#5397]
  - Added a fix to compile the jfs module [bug#5453]


author: Patsy Franklin <pfrankli@redhat.com> - 2.12-1.98
changelog:
  - Backport upstream glibc 4f031072a5055abd83717820b59efdaa463d5853
      locale/findlocale.c (_nl_find_locale): Return right away if
      _nl_explode_name failed.
      locale/programs/locarchive.c (add_locale_to_archive): Likewise. (#848082)


author: Jeff Law <law@redhat.com> - 2.12-1.99
changelog:
  - Allow broken code to avoid the 32 bit SSSE3 memcpy implementations
      by setting the environment variable
      32BIT_SSSE3_MEMCPY_VIA_32BIT_SSSE3_MEMMOVE to any value (#846342)


author: Jiri Vanek <jvanek@redhat.com> - 1.6.0.0-1.31.b17
changelog:
  - excluded bin/javaws files
  		exclude  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0/jre/bin/javaws
  		files devel
  		exclude  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0/bin/javaws

  - garbage removed to separated file
  - Resolves: rhbz#639954


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.33.1.b20
changelog:
  - Bump to IcedTea 1.9.3
  - Build with --disable-webstart and remove all javaws and plugin references
  - Moved pre 2009 changelog entries to a separate file to keep spec file small
  - Resolves: rhbz#658208


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-42
changelog:
  - Add an explicit RPATH to _elementtree.so pointing at the directory
  containing system expat
  Resolves: rhbz#962779


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.12
changelog:
  - Back port option handling in semanage to handle semodule module -D correctly
  - Back port manpage from Fedora
  Resolves: #666861


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.13
changelog:
  - Fix spec file to require rsync for sandbox
  Resolves: #734467
  - Fix spec file to require gtkhtml2 for lockdown booleans program
  Resolves: #702860
  - Fix bugs found by Coverity
  Resolves: #717640
  Resolves: #728833


author: Miroslav Grepl <mgrepl@redhat.com> 2.0.83-19.15
changelog:
  - Needs require gnome-python2-gtkhtml2 to make system-config-selinux working
  - Not use open_init_pty by default


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.16
changelog:
  - Restorecon should not be exiting with a 1 when it is successful in relabeling a file
  Resolves: #740699
  Resolves: #739587


author: Miroslav Grepl <mgrepl@redhat.com> 2.0.83-19.18
changelog:
  - Other fix for semanage man page
  Resolves: #677541
  - Don't report error on load_policy when system is disabled.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.83-19.19
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the 
  - parent namesspace.
  - restorecond -u needs to watch terminal for exit if run outside of dbus.
  - Fix unchecked return codes
  Related: #785678


author: Simo Sorce <simo@redhat.com> 2.3.6-0.20131125.3
changelog:
  - Initial packaging
  - Based on the spec file by Jean-Marc Liger <jmliger@siris.sorbonne.fr>
  - Code is updated to latest master via a jumbo patch while waiting for
    official upstream release.
  - Jumbo patch includes also additional patches sent to upstream list)
    to build on Fedora 20
  - Perl bindings are disabled as they fail to build
  - Disable doc building as it doesn't ork correctly for now


author: Simo Sorce <simo@redhat.com> 2.4.0-0
changelog:
  - Update to final 2.4.0 version
  - Drop all patches, they are now included in 2.4.0
  - Change Source URI


author: Simo Sorce <simo@redhat.com> - 2.4.0-5
changelog:
  - Add various fixes from upstream master, mostly memory leaks
  - Change to final covscan fixes as applied upstream


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.15-4
changelog:
  - Related: rhbz#543948
  - TPROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-1
changelog:
  - Resolves: #564296 - Rebase to new upstream tarball (fixes licensing issues)
  - Resolves: #561743 - CVE-2010-0308 squid: temporary DoS (assertion failure) triggered by truncated DNS packet (SQUID-2010:1)
  - fixes rpmlint issues in spec file
  - fixed rpmlint issue initscript file


author: Jiri Skala <jskala@redhat.com> -7:3.1.4-1
changelog:
  - Resolves: #564296 - Rebase squid to stable upstream tarball 3.1.4
  - bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Jiri Skala <jskala@redhat.com> -7:3.1.10-1
changelog:
  - Resolves: #639365 - Rebase squid to version 3.1.10
  - Resolves: #666533 - small memleak in squid-3.1.4


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Tomas Mraz <tmraz@redhat.com> 0.75-1
changelog:
  - fix disabling SELinux and audit in spec (#433284)
  - remove obsolete no.po (#332121)
  - updated translations


author: Tomas Mraz <tmraz@redhat.com> 0.77-6
changelog:
  - add -e option to expire the password for user
  - compile the binary with PIE and full RELRO options


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-15
changelog:
  - 1125984 iscsistart vlan support
  - 906242 fix segfault from unexpected netlink event during driver load
  - 1181463 iscsiuio update


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-21
changelog:
  - 1294965 iscsiuio match based on driver to support new hardware without
    adding PCI IDs (still need IDs added to kernel)
  - bnx2i pass through ping support


author: Steven Dak <sdake@redhat.com> 1.2.3-34
changelog:
  - Resolves: rhbz#629380
  - merge non-committed patch which fixes stack protector failure.  (rhbz#629380)


author: Steven Dake <sdake@redhat.com> 1.2.3-35
changelog:
  - Reverts: rhbz#599327
  - revert upstream commit 061b770b83a9533dad527eda5f7d41e763cb40da (rhbz#599327)
  - revert upstream commit 2f1b7a962911670493d0db3695fc9fb91ceb0c82 (rhbz#599327)
  - Display warning and add object database feature to indicate when system
    firewall is enabled. (rhbz#599327)


author: Steven Dake <sdake@redhat.com> 1.2.3-36
changelog:
  - Resolves: rhbz#629380
  - merge upstream commit fd78f27715be326c6fe5439fa7e8d8077642db64 (rhbz#629380)
  - Place statistics changes outside of IPC mutexes to avoid deadlocks (rhbz#629380)


author: Jan Friesse <jfriesse@redhat.com> 1.4.0-1
changelog:
  - Resolves: rhbz#709758
  - Resolves: rhbz#722522
  - Resolves: rhbz#692620
  - Resolves: rhbz#529136
  - Resolves: rhbz#696883
  - Resolves: rhbz#707876
  - Resolves: rhbz#712115
  - Resolves: rhbz#722469
  - Resolves: rhbz#696887
  - Resolves: rhbz#707860
  - Resolves: rhbz#712126
  - Resolves: rhbz#712188
  - Resolves: rhbz#599327
  - Resolves: rhbz#667652
  - Resolves: rhbz#677583
  - Resolves: rhbz#688260
  - Resolves: rhbz#707862
  - Resolves: rhbz#707867
  - Resolves: rhbz#707873
  - Resolves: rhbz#707875
  - Resolves: rhbz#682813
  - Rebase to Corosync 1.4.0


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-2
changelog:
  - Resolves: rhbz#722469
  - Resolves: rhbz#732698
  - rrp: Handle endless loop if all ifaces are faulty (rhbz#722469)
  - merge upstream commit dc862e15cc084926eccc5e1ff3241611c0cb54f0 (rhbz#722469)
  - rrp: Higher threshold in passive mode for mcast (rhbz#722469)
  - merge upstream commit 4e32c3112a2f13a302709d72b0ae989287a48563 (rhbz#722469)
  - Ignore memb_join messages during flush operations (rhbz#732698)
  - merge upstream commit be608c050247e5f9c8266b8a0f9803cc0a3dc881 (rhbz#732698)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-3
changelog:
  - Resolves: rhbz#722469
  - totemconfig: change minimum RRP threshold
  - merge upstream commit b1aba94732edc2ff084b7dd559a08b687f464ed0 (rhbz#722469)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-4
changelog:
  - Resolves: rhbz#722522

  - Deliver all messages from my_high_seq_recieved to the last gap (rhbz#722522)
  - merge upstream commit e530376a60dc862f135bd0d4c52aebb43d948423 (rhbz#722522)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-4.1
changelog:
  - Resolves: rhbz#791236

  - A rare condition can lead to fail to recv (rhbz#791236)
  - merge upstream commit c68fb0caa2e337c6fdebfe564402c6d06b7fb018 (rhbz#791236)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-44
changelog:
  - use only full matches for hosts used as IP address in cookies (CVE-2014-3613)
  - fix handling of CURLOPT_COPYPOSTFIELDS in curl_easy_duphandle (CVE-2014-3707)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-46
changelog:
  - require credentials to match for NTLM re-use (CVE-2015-3143)
  - close Negotiate connections when done (CVE-2015-3148)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-49
changelog:
  - prevent NSS from incorrectly re-using a session (#1269660)
  - prevent test46 from failing due to expired cookie (#1277551)


author: Doug Ledford <dledford@redhat.com> - 3.3.5-1
changelog:
  - Update to latest upstream release.  We need various defines in ib_types.h
    for the latest ibutils package to build properly, and the latest ibutils
    package is needed because we found licensing problems in the older
    tarballs during review.


author: Doug Ledford <dledford@redhat.com> - 3.3.9-1
changelog:
  - Update to latest upstream version (3.3.5 -> 3.3.9)
  - Add /etc/sysconfig/opensm for use by opensm init script
  - Enable the ability to start more than one instance of opensm for multiple
    fabric support
  - Enable the ability to start opensm with a priority other than default for
    support of backup opensm instances
  - Related: bz725016
  - Resolves: bz633392


author: Doug Ledford <dledford@redhat.com> - 3.3.12-1
changelog:
  - Generate the opensm.conf file instead of shipping a static one as a source
  - Update to latest upstream release (FDR link speed support)
  - Resolves: bz750609


author: Doug Ledford <dledford@redhat.com> - 3.3.13-1
changelog:
  - Update to latest upstream release
  - Add patch to support specifying subnet_prefix on command lien
  - Update init script to pass unique subnet_prefix's when using the GUID
    method of starting multiple instances
  - Fix up LSB init script headers
  - Resolves: bz754196


author: Doug Ledford <dledford@redhat.com> - 3.3.15-1
changelog:
  - Update to latest upstream source (adds more SRIOV support)
  - Fix init script when no config files are present
  - Related: bz756396


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-59
changelog:
  - Release 1.2.11.15-59
  - Resolves: #1211006 - start/stop/restart-dirsrv utilities should ignore admin-serv directory (DS 48148)
  - Resolves: #1203338 - ns-slapd double free or corruption crash (DS 48149)
  - Resolves: #1228402 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-60
changelog:
  - Release 1.2.11.15-60
  - Resolves: #1228402 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-62
changelog:
  - Release 1.2.11.15-62
  - Resolves: #1260004 - regression - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-63
changelog:
  - Release 1.2.11.15-63
  - Resolves: #1268204 - ns-slapd crashing frequently cause is unknown (DS 48192)
  - Resolves: #1265972 - Fractional replication evaluates several times the same CSN (DS 48266 48284)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-64
changelog:
  -Release 1.2.11.15-64
  - Resolves: #1268204 - ns-slapd crashing frequently cause is unknown (DS 48192)
  - Resolves: #1268772 - pagedresults - when timed out, search results could have been already freed. (DS 48299)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-65
changelog:
  -Release 1.2.11.15-65
  - Resolves: #1265972 - Fractional replication evaluates several times the same CSN (DS 48266)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-66
changelog:
  -Release 1.2.11.15-66
  - Resolves: #1272327 - CleanAllRUV should completely clean changelog (DS 48208)
  - Resolves: #1273132 - many attrlist_replace errors in connection with cleanallruv (DS 48283)
  - Resolves: #1278696 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-68
changelog:
  -Release 1.2.11.15-68
  - Resolves: #1278696 - SimplePagedResults -- abandon could happen between the abandon check and sending results -- Fixing a regression introduced in 1.2.11.15-68 (DS 48338)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-42
changelog:
  - Resolves: rhbz#1215765 - sssd nss responder gets wrong number of
                             secondary groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-45
changelog:
  - Resolves: rhbz#1226834 - id lookup for non-root domain users doesn't
                             return all groups on first attempt


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-46
changelog:
  - Resolves: rhbz#1227860 - Provide a way to disable the cleanup task
  - Resolves: rhbz#1227863 - ignore_group_members doesn't work for subdomains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47
changelog:
  - Resolves: rhbz#1232738 - Cache is not updated after user is deleted from
                             ldap server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.1
changelog:
  - Resolves: rhbz#1258398 - sysdb sudo search doesn't escape special
                             characters


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-9
changelog:
  - Update translations
    Resolves: rhbz#1194474
  - Add support for proxy-uri libgovirt property
    Resolves: rhbz#1292765


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-10
changelog:
  - Set guest name/uuid when using VNC
    Resolves: rhbz#1293878
  - Fix crash when disabling last enabled display
    Resolves: rhbz#1294937


author: Jonathon Jongsma <jjongsma@redhat.com> - 2.0-12
changelog:
  - The last change was incomplete. We need to define the OSID for the build in
    order for the minum version check to work properly.
    Resolves: rhbz#1295944


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-13
changelog:
  - Use --with-buildid for RHEL6 builds
    Resolves: rhbz#1300639
  - Set useful values for MIM_DISPLAY_{WIDTH,HEIGHT} and use them for
    desktop-{width,height} properties.
    Resolves: rhbz#1296878


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-14
changelog:
  - Monitor mapping doesn't properly adjust resolutions
    Resolves: rhbz#1309234
  - Return early on empty monitor mapping
    Resolves: rhbz#1304648
  - Update translations
    Resolves: rhbz#1194474


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.0-15
changelog:
  - Only use active ISO domains for foreign menu
    Resolves: rhbz#1313376
  - Allow to cancel authentication without showing error dialog
    Resolves: rhbz#1318575
  - Set display menu not sensitive when needed
    Resolves: rhbz#1360253
  - Set toolbar buttons not sensitive when needed
    Resolves: rhbz#1360253
  - Do not show usbredir button without session
    Resolves: rhbz#1360253
  - GtkRecentChooserWidget is not suitable for mnemonic activation
    Related: rhbz#1351562
  - Use a different mnemonic for Connection Address widget
    Related: rhbz#1351562
  - Add some missing mnemonics to menu items
    Resolves: rhbz#1351890
  - Add mnemonics for each display item
    Resolves: rhbz#1351890
  - Avoid crashing when using invalid video config
    Resolves: rhbz#1310974
  - Do not crash on NULL display
    Resolves: rhbz#1310974
  - Do not ignore usb-filter in vv-file
    Resolves: rhbz#1327525
  - Add parameter for client monitors in monitor-mapping
    Resolves: rhbz#1351881
  - Use debug to inform about smartcard shortcuts state
    Related: rhbz#1351876
  - Check validity of hotkey
    Resolves: rhbz#1351876


author: Pavel Grunt <pgrunt@redhat.com> - 2.0-16
changelog:
  - Inform about unix socket connection failure
    Resolves: rhbz#1377214
  - Fix format of displayed string for it_IT
    Resolves: rhbz#1325127


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - Fix the double suspend on lid close issue when not using KMS hardware.
  - Resolves: #543948


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Do not ask the user to look at the help file on suspend failure,
    it is already out of date.
  - Resolves: #640296


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-5
changelog:
  - Reinstate the "Do nothing" option on the lid close combo because
    per-screen DPMS does not work in RHEL6.
  - Resolves: #623674


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Add nss-util portion of a fix for pluggable ecc bug in nss and nss-util
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Apply the patch for the pluggable ecc fix
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - nssutil_growList and nssutil_ReadSecmodDB cleanup
  - Resolves: Bug 1019529 - New defect found in nss-util-3.14.0.0-2.el6


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-4
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Fix the required nspr version to be 4.10.6


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.2-4
changelog:
  - Fix problem where mdadm allowed the creation of more arrays than
    supported by the BIOS.
  - Resolves bz1211564


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-1.el6_8.3
changelog:
  - Retry reading sync_completed state to avoid a reshape not continuing after
    restarting a reshape
    This is an additional patch to resolve this bug.
  - Resolves bz1331331


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-1.el6_8.4
changelog:
  - Fix problem with mdadm large device names overflowing an internal buffer,
    potentially leading to segfaults.
  - Resolves bz1347808


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-1.el6_8.5
changelog:
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Resolves bz1348544


author: Ray Strode <rstrode@redhat.com> 0.8.3-14
changelog:
  - Use dark gray instead of black background in rings theme
    to prevent monitor sync issues on some hardware.
    Resolves: #620414


author: Ray Strode <rstrode@redhat.com> 0.8.3-16
changelog:
  - Fix up problem introduced in previous patch when kernel
    command line has no consoles
    Related: #615912


author: Ray Strode <rstrode@redhat.com> 0.8.3-18
changelog:
  - Handle underpowered video cards that force multiple monitors
    to use one controller
    Resolves: #625209
  - Fix serial console crash
  - Resolves: #631924
  - Remove plymouth-text-and-details-only obsoletes
    Resolves: #638621


author: Harald Hoyer <harald@redhat.com> 0.3.6-5
changelog:
  - don't use '#' in names, use 'p' instead, by popular demand
  - fix segfault when BIOS advertises zero sized PIRQ Routing Table
  - don't build and include dump_pirq
  - add 'bonding' and 'openvswitch' to the virtual devices list
  - fix test for PIRQ table version
  Resolves: rhbz#653901


author: Adam Tkac <atkac redhat com> - 2.0-0.1.20120925git072225
changelog:
  - rebase to the latest 2.0 snapshot
  - patches merged
    - 0001-Fix-ticket-55-BIND-cannot-be-shutdown-correctly-if-p.patch
    - 0001-Fix-crash-on-reload-without-any-zones.patch
    - 0001-Fix-SOA-record-update.patch
    - 0001-Find-A-AAAA-delegation-glue-records-correctly.patch
    - bind-dyndb-ldap11-CVE-2012-2134.patch
    - 0001-Add-proper-DN-escaping-before-LDAP-library-calls.patch
    - bind-dyndb-ldap-CVE-2012-3429.patch


author: Petr Spacek <pspacek redhat com> - 2.3-4
changelog:
  - update-policy with match type 'zonesub' lead to crash (#921167)
  - zones without idnsUpdatePolicy attribute produced error messages (#908780)


author: Tim Waugh <twaugh@redhat.com> 0.0.4-1
changelog:
  - 0.0.4:
    - Fixed initscript so that it will not be reordered to start after
      rpcbind (bug #487250).


author: Tim Waugh <twaugh@redhat.com> 0.0.4-7
changelog:
  - Fix small memory leak and move malloc() check close to call (bug #718176).
  - Requires chkconfig (bug #712362).


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.1.1.el6]
changelog:
  - [fs] call d_op->d_hash on last component of umount path (Abhijith Das) [1145193 1129712]
  - [usb] serial: memory corruption flaw (Jacob Tanenbaum) [1141401 1141402] {CVE-2014-3185}
  - [char] ipmi: Clear drvdata when interface is removed (Tony Camuso) [1149578 1135910]
  - [char] ipmi: init shadow_ipmi_smi_handlers early in ipmi_si_intf (Tony Camuso) [1149580 1139464]
  - [net] ipsec: update MAX_AH_AUTH_LEN to support sha512 (Herbert Xu) [1149083 1140103]
  - [net] revert "bridge: Set vlan_features to allow offloads on vlans" (Vlad Yasevich) [1144442 1121991]
  - [netdrv] virtio-net: fix big buffer receiving (Jason Wang) [1148693 1144073]
  - [netdrv] tg3: prevent ifup/ifdown during PCI error recovery (Ivan Vecera) [1142570 1117009]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.2.1.el6]
changelog:
  - [fs] udf: Avoid infinite loop when processing indirect ICBs (Jacob Tanenbaum) [1142319 1142320] {CVE-2014-6410}
  - [fs] isofs: unbound recursion when processing relocated directories (Jacob Tanenbaum) [1142268 1142269] {CVE-2014-5472 CVE-2014-5471}
  - [net] ipv6: delete expired route in ip6_pmtu_deliver (Hannes Frederic Sowa) [1161418 1156137]
  - [net] sctp: fix remote memory pressure from excessive queueing (Daniel Borkmann) [1155746 1154676] {CVE-2014-3688}
  - [net] sctp: fix panic on duplicate ASCONF chunks (Daniel Borkmann) [1155733 1154676] {CVE-2014-3687}
  - [net] sctp: fix skb_over_panic when receiving malformed ASCONF chunks (Daniel Borkmann) [1147857 1154676] {CVE-2014-3673}
  - [net] sctp: handle association restarts when the socket is closed (Daniel Borkmann) [1147857 1154676]
  - [md] dm-thin: refactor requeue_io to eliminate spinlock bouncing (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: optimize retry_bios_on_resume (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: sort the deferred cells (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: direct dispatch when breaking sharing (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: remap the bios in a cell immediately (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: defer whole cells rather than individual bios (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: factor out remap_and_issue_overwrite (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: performance improvement to discard processing (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: grab a virtual cell before looking up the mapping (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: implement thin_merge (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm: improve documentation and code clarity in dm_merge_bvec (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: adjust max_sectors_kb based on thinp blocksize (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] block: fix alignment_offset math that assumes io_min is a power-of-2 (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: throttle incoming IO (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: prefetch missing metadata pages (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-transaction-manager: add support for prefetching blocks of metadata (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin-metadata: change dm_thin_find_block to allow blocking, but not issuing, IO (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-bio-prison: switch to using a red black tree (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-bufio: evict buffers that are past the max age but retain some buffers (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-bufio: switch from a huge hash table to an rbtree (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-bufio: update last_accessed when relinking a buffer (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-bufio: use kzalloc when allocating dm_bufio_client (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin-metadata: do not allow the data block size to change (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: cleanup noflush_work to use a proper completion (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: fix DMERR typo in pool_status error path (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [fs] xfs: xlog_cil_force_lsn doesn't always wait correctly (Eric Sandeen) [1158325 1133304]
  - [netdrv] ixgbe: allow TXDCTL.WRTHRESH to be 1 will small ITR values (John Greene) [1158326 1132267]
  - [netdrv] ixgbe: Intel Change to allow itr changes without CONFIG_BQL support (John Greene) [1158326 1132267]
  - [video] offb: Fix setting of the pseudo-palette for >8bpp (Gerd Hoffmann) [1158328 1142450]
  - [video] offb: Add palette hack for qemu "standard vga" framebuffer (Gerd Hoffmann) [1158328 1142450]
  - [video] offb: Fix bug in calculating requested vram size (Gerd Hoffmann) [1158328 1142450]
  - [net] sock_queue_err_skb() dont mess with sk_forward_alloc (Jiri Benc) [1155427 1148257]
  - [net] guard tcp_set_keepalive() to tcp sockets (Florian Westphal) [1141744 1141746] {CVE-2012-6657}
  - Revert: [net] revert "bridge: Set vlan_features to allow offloads on vlans" (Vlad Yasevich) [1144442 1121991]
  - [x86] kvm: fix PIT timer race condition (mguzik) [1149592 1149593] {CVE-2014-3611}
  - [x86] kvm: vmx: handle invept and invvpid vm exits gracefull (mguzik) [1144826 1144837 1144827 1144838] {CVE-2014-3646 CVE-2014-3645}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.3.1.el6]
changelog:
  - [s390] zcrypt: toleration of new crypto adapter hardware (Hendrik Brueckner) [1158311 1134984]
  - [s390] zcrypt: support for extended number of ap domains (Hendrik Brueckner) [1158311 1134984]
  - [md] dm-thin: fix potential for infinite loop in pool_io_hints (Mike Snitzer) [1161420 1161421 1142773 1145230]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.4.1.el6]
changelog:
  - [fs] nfs: Make sure pre_change_attr is initialized correctly (Scott Mayhew) [1163214 1160042]
  - [usb] ehci: Fix a regression in the ISO scheduler (Gustavo Duarte) [1162072 1145805]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.5.1.el6]
changelog:
  - [fs] nfsd: don't halt scanning the DRC LRU list when there's an RC_INPROG entry (J. Bruce Fields) [1168129 1150675]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.6.1.el6]
changelog:
  - [fs] ext4: don't count external journal blocks as overhead (Eric Sandeen) [1168504 1163811]
  - [net] sctp: fix NULL pointer dereference in af->from_addr_param on malformed packet (Daniel Borkmann) [1163090 1153980] {CVE-2014-7841}
  - [netdrv] e100: fix typo in MDI/MDI-X eeprom check in e100_phy_init (John Greene) [1165985 1156417]
  - [powerpc] Add smp_mb()s to arch_spin_unlock_wait() (Gustavo Duarte) [1165986 1136224]
  - [powerpc] Add smp_mb() to arch_spin_is_locked() (Gustavo Duarte) [1165986 1136224]
  - [kernel] cpuset: PF_SPREAD_PAGE and PF_SPREAD_SLAB should be atomic flags (Aaron Tomlin) [1165002 1045310]
  - [documentation] cpuset: Update the cpuset flag file (Aaron Tomlin) [1165002 1045310]
  - [alsa] control: Make sure that id->index does not overflow (Jacob Tanenbaum) [1149140 1117312] {CVE-2014-4656}
  - [alsa] control: Handle numid overflow (Jacob Tanenbaum) [1149140 1117312] {CVE-2014-4656}
  - [s390] mm: fix SIGBUS handling (Hendrik Brueckner) [1169433 1145070]
  - [fs] gfs2: fix bad inode i_goal values during block allocation (Abhijith Das) [1165001 1130684]
  - [md] dm-thin: fix pool_io_hints to avoid looking at max_hw_sectors (Mike Snitzer) [1161420 1161421 1142773 1145230]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.7.1.el6]
changelog:
  - [kernel] ipc/sem: Fully initialize sem_array before making it visible (Rik van Riel) [1172029 1165277]
  - [kernel] ipc/sem: synchronize semop and semctl with IPC_RMID (Rik van Riel) [1172029 1165277]
  - [kernel] ipc/sem: update sem_otime for all operations (Larry Woodman) [1172025 1168588]
  - [fs] fuse: prevent null nd panic on dentry revalidate (Brian Foster) [1172022 1162782]
  - [net] netfilter: ipset: timeout values corrupted on set resize (Marcelo Leitner) [1172764 1152754]
  - [net] netfilter: fix xt_TCPOPTSTRIP in forwarding path (Marcelo Leitner) [1172027 1135650]
  - [usb] ehci: Fix panic on hotplug race condition (Don Zickus) [1172024 1107010]
  - [usb] usb_wwan: replace release and disconnect with a port_remove hook (Stanislaw Gruszka) [1172030 1148615]
  - [x86] traps: stop using IST for #SS (Petr  Matousek) [1172810 1172811] {CVE-2014-9322}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.8.1.el6]
changelog:
  - [crypto] crc32c: Kill pointless CRYPTO_CRC32C_X86_64 option (Jarod Wilson) [1175509 1036212]
  - [crypto] testmgr: add larger crc32c test vector to test FPU path in crc32c_intel (Jarod Wilson) [1175509 1036212]
  - [crypto] tcrypt: Added speed test in tcrypt for crc32c (Jarod Wilson) [1175509 1036212]
  - [crypto] crc32c: Optimize CRC32C calculation with PCLMULQDQ instruction (Jarod Wilson) [1175509 1036212]
  - [crypto] crc32c: Rename crc32c-intel.c to crc32c-intel_glue.c (Jarod Wilson) [1175509 1036212]


author: - Bastien Nocera <bnocera@redhat.com> - 0.60-3
changelog:
  - Remove Totem as handling Blu-ray and HD-DVD
  - Use brasero-ncb.desktop instead of nautilus-cd-burner for blank devices
  - Update media mime-types for Rhythmbox/Totem


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.1
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917909)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917909, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.2
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950342)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.4
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#978312)


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-9.el6
changelog:
  - Fix a failure to report xmlreader parsing failures
  - Fix parser local buffers size problems (rhbz#843742)
  - Fix entities local buffers size problems (rhbz#843742)
  - Fix an error in previous commit (rhbz#843742)
  - Do not fetch external parsed entities
  - Impose a reasonable limit on attribute size (rhbz#843742)
  - Impose a reasonable limit on comment size (rhbz#843742)
  - Impose a reasonable limit on PI size (rhbz#843742)
  - Cleanups and new limit APIs for dictionaries (rhbz#843742)
  - Introduce some default parser limits (rhbz#843742)
  - Implement some default limits in the XPath module
  - Fixup limits parser (rhbz#843742)
  - Enforce XML_PARSER_EOF state handling through the parser
  - Avoid quadratic behaviour in some push parsing cases (rhbz#843742)
  - More avoid quadratic behaviour (rhbz#843742)
  - Strengthen behaviour of the push parser in problematic situations (rhbz#843742)
  - More fixups on the push parser behaviour (rhbz#843742)
  - Fix a segfault on XSD validation on pattern error
  - Fix an unimplemented part in RNG value validation


author: Hans de Goede <hdegoede@redhat.com> 6.4.9.6-2
changelog:
  - Fix undefined warning in magick-type.h (#489453)
  - Do not link PerlMagick against system ImageMagick, but against the just
    build one


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.5.4.7-3
changelog:
  - Update to version 6.5.4-7
  - Use lzma-compressed source tarball as sugested by Ville Skyttä (BZ#515319)


author: Olivier Fourdan <ofourdan@redhat.com> - 6.5.4.7-6
changelog:
  - Add fix for CVE-2010-4167
  - Add fix for CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186
  - Add fix for CVE-2012-0259 CVE-2012-0260 CVE-2012-1798


author: Matthias Clasen <mclasen@redhat.com> - 2.18.9-5
changelog:
  - Update Gujarati translation
  - Fix a problem with the location entry in file choosers
  Resolves: #636476, #625440. #647922, #647923


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-7
changelog:
  - Set a wrap width on the type filter combobox to avoid overflowing
    the screen when a very long filter is set on the file chooser.
  Resolves: #689188


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-8
changelog:
  - Apply the show-size-column setting when switching from search to 
    browse mode.
  Resolves: #697437


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-10
changelog:
  - Backport a patch fixing GtkBuilder behavior with construct properties
    initialization.
  Resolves: #801620


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-12
changelog:
  - Additional filechooser patch to make sure the size column is shown
    when switching from Recent Files to Search
  Resolves: #889172


author: Ray Strode <rstrode@redhat.com> 2.30.4-24
changelog:
  - defuzz patches so they're easier to update for upcoming
    errata.
    Related: #670619, #661618, #708430, #688158, #645453, #628462, #622561
  - escape id calls so they don't fail with fully qualified
    network logon ids
    Resolves: #688158


author: Ray Strode <rstrode@redhat.com> 2.30.4-27
changelog:
  - Fix leak in xdmcp chooser
    Resolves: #723515
  - Don't show shutdown/restart buttons when non-functional
    Resolves: #645453


author: Ray Strode <rstrode@redhat.com> 2.30.4-28
changelog:
  - Place pointer thoughtfully, so it doesn't show up on a random
    monitor, or on top of the user list.
    Resolves: #670619


author: Ray Strode <rstrode@redhat.com> 2.30.4-30
changelog:
  - Add small delay between consecutive messages,
    instead of immediately overwriting any previous messages.
    Resolves: #661618, #708430


author: Ray Strode <rstrode@redhat.com> 2.30.4-31
changelog:
  - Rebuild with -fno-strict-aliasing to quiet rpmdiff
    Related: #670619, #661618, #708430, #688158, #645453, #628462, #622561


author: Ray Strode <rstrode@redhat.com> 2.30.4-33
changelog:
  - Increase X server verbosity by default, and increase it even
    more when debug is enabled.
    Resolves: #738462


author: Jiri Skala <jskala@redhat.com> 1.0.9-12
changelog:
  - Resolves: #593599 - corrected man page
  - Resolves: #590683 - replaced symlink devkit-disks by udisks binary
  - Resolvse: #595811 - bltk_plot fails in initialization


author: Jiri Skala <jskala@redhat.com> 1.0.9-13
changelog:
  - Resolves: #598538 - bltk_report_compress fails in initialization
  - extended modification due to unsupported workloads


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812082


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830726


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852021


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017837)


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065843) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.9.1.el6]
changelog:
  - [net] ipv6: increase ip6_rt_max_size to 16384 (Hannes Frederic Sowa) [1177581 1112946]
  - [net] ipv6: don't set DST_NOCOUNT for remotely added routes (Hannes Frederic Sowa) [1177581 1112946]
  - [net] ipv6: don't count addrconf generated routes against gc limit (Hannes Frederic Sowa) [1177581 1112946]
  - [net] ipv6: Don't put artificial limit on routing table size (Hannes Frederic Sowa) [1177581 1112946]
  - [scsi] bnx2fc: fix tgt spinlock locking (Maurizio Lombardi) [1179098 1079656]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.11.1.el6]
changelog:
  - [virt] kvm: excessive pages un-pinning in kvm_iommu_map error path (Jacob Tanenbaum) [1156520 1156521] {CVE-2014-8369}
  - [x86] crypto: Add support for 192 & 256 bit keys to AESNI RFC4106 (Jarod Wilson) [1184332 1176211]
  - [block] nvme: Clear QUEUE_FLAG_STACKABLE (David Milburn) [1180555 1155715]
  - [net] netfilter: conntrack: disable generic tracking for known protocols (Daniel Borkmann) [1182071 1114697] {CVE-2014-8160}
  - [xen] pvhvm: Fix vcpu hotplugging hanging (Vitaly Kuznetsov) [1179343 1164278]
  - [xen] pvhvm: Don't point per_cpu(xen_vpcu, 33 and larger) to shared_info (Vitaly Kuznetsov) [1179343 1164278]
  - [xen] enable PVHVM VCPU placement when using more than 32 CPUs (Vitaly Kuznetsov) [1179343 1164278]
  - [xen] support large numbers of CPUs with vcpu info placement (Vitaly Kuznetsov) [1179343 1164278]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.13.1.el6]
changelog:
  - [netdrv] enic: fix rx skb checksum (Stefan Assmann) [1189068 1115505]
  - [scsi] Revert "fix our current target reap infrastructure" (David Milburn) [1188941 1168072]
  - [scsi] Revert "dual scan thread bug fix" (David Milburn) [1188941 1168072]
  - [net] tcp: do not copy headers in tcp_collapse() (Alexander Duyck) [1188838 1156289]
  - [net] tcp: use tcp_flags in tcp_data_queue() (Alexander Duyck) [1188838 1156289]
  - [net] tcp: use TCP_SKB_CB(skb)->tcp_flags in input path (Alexander Duyck) [1188838 1156289]
  - [net] tcp: remove unused tcp_fin() parameters (Alexander Duyck) [1188838 1156289]
  - [net] tcp: rename tcp_skb_cb flags (Alexander Duyck) [1188838 1156289]
  - [net] tcp: unify tcp flag macros (Alexander Duyck) [1188838 1156289]
  - [net] tcp: unalias tcp_skb_cb flags and ip_dsfield (Alexander Duyck) [1188838 1156289]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.14.1.el6]
changelog:
  - [s390] crypto: kernel oops at insmod of the z90crypt device driver (Hendrik Brueckner) [1191916 1172137]
  - [sound] alsa: usb-audio: Fix crash at re-preparing the PCM stream (Jerry Snitselaar) [1192105 1167059]
  - [usb] ehci: bugfix: urb->hcpriv should not be NULL (Jerry Snitselaar) [1192105 1167059]
  - [mm] mmap: uncached vma support with writenotify (Jerry Snitselaar) [1192105 1167059]
  - [kernel] futex: Mention key referencing differences between shared and private futexes (Larry Woodman) [1192107 1167405]
  - [kernel] futex: Ensure get_futex_key_refs() always implies a barrier (Larry Woodman) [1192107 1167405]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.15.1.el6]
changelog:
  - [netdrv] ixgbe: remove CIAA/D register reads from bad VF check (John Greene) [1196312 1156061]
  - [pci] Make FLR and AF FLR reset warning messages different (Myron Stowe) [1192365 1184540]
  - [pci] Fix unaligned access in AF transaction pending test (Myron Stowe) [1192365 1184540]
  - [pci] Merge multi-line quoted strings (Myron Stowe) [1192365 1184540]
  - [pci] Wrong register used to check pending traffic (Myron Stowe) [1192365 1184540]
  - [pci] Add pci_wait_for_pending() -- refactor pci_wait_for_pending_transaction() (Myron Stowe) [1192365 1184540]
  - [pci] Use pci_wait_for_pending_transaction() instead of for loop (Myron Stowe) [1192365 1184540]
  - [pci] Add pci_wait_for_pending_transaction() (Myron Stowe) [1192365 1184540]
  - [pci] Wait for pending transactions to complete before 82599 FLR (Myron Stowe) [1192365 1184540]
  - [scsi] storvsc: fix a bug in storvsc limits (Vitaly Kuznetsov) [1196532 1174168]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-504.16.1.el6]
changelog:
  - [fs] gfs2: Move gfs2_file_splice_write outside of #ifdef (Robert S Peterson) [1198329 1193559]
  - [security] keys: close race between key lookup and freeing (Radomir Vrbovsky) [1179849 1179850] {CVE-2014-9529}
  - [net] sctp: fix slab corruption from use after free on INIT collisions (Daniel Borkmann) [1196587 1135425] {CVE-2015-1421}
  - [fs] gfs2: Allocate reservation during splice_write (Robert S Peterson) [1198329 1193559]
  - [fs] nfs: Be less aggressive about returning delegations for open files (Steve Dickson) [1196314 1145334]
  - [fs] nfs: Avoid PUTROOTFH when managing leases (Benjamin Coddington) [1196313 1143013]
  - [crypto] testmgr: mark rfc4106(gcm(aes)) as fips_allowed (Jarod Wilson) [1194983 1185395]
  - [crypto] Extending the RFC4106 AES-GCM test vectors (Jarod Wilson) [1194983 1185395]
  - [char] raw: Return short read or 0 at end of a raw device, not EIO (Jeff Moyer) [1195747 1142314]
  - [scsi] hpsa: Use local workqueues instead of system workqueues - part1 (Tomas Henzl) [1193639 1134115]
  - [x86] kvm: vmx: invalid host cr4 handling across vm entries (Jacob Tanenbaum) [1153326 1153327] {CVE-2014-3690}
  - [fs] isofs: Fix unchecked printing of ER records (Radomir Vrbovsky) [1180481 1180492] {CVE-2014-9584}
  - [fs] bio: fix argument of __bio_add_page() for max_sectors > 0xffff (Fam Zheng) [1198428 1166763]
  - [media] ttusb-dec: buffer overflow in ioctl (Alexander Gordeev) [1170971 1167115] {CVE-2014-8884}
  - [kernel] trace: insufficient syscall number validation in perf and ftrace subsystems (Jacob Tanenbaum) [1161567 1161568] {CVE-2014-7826 CVE-2014-7825}
  - [fs] nfs: Fix a delegation callback race (Dave Wysochanski) [1187639 1149831]
  - [fs] nfs: Don't use the delegation->inode in nfs_mark_return_delegation() (Dave Wysochanski) [1187639 1149831]
  - [infiniband] ipoib: don't queue a work struct up twice (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: make sure we reap all our ah on shutdown (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: cleanup a couple debug messages (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: flush the ipoib_workqueue on unregister (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: fix ipoib_mcast_restart_task (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: fix race between mcast_dev_flush and mcast_join (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: remove unneeded locks (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: don't restart our thread on ENETRESET (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: Handle -ENETRESET properly in our callback (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: make delayed tasks not hold up everything (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: Add a helper to restart the multicast task (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: fix IPOIB_MCAST_RUN flag usage (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: Remove unnecessary port query (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [x86] kvm: Avoid pagefault in kvm_lapic_sync_to_vapic (Paolo Bonzini) [1192055 1116398]
  - [s390] kernel: fix cpu target address of directed yield (Hendrik Brueckner) [1188339 1180061]
  - [mm] memcg: do not allow task about to OOM kill to bypass the limit (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: do not declare OOM from __GFP_NOFAIL allocations (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [fs] buffer: move allocation failure loop into the allocator (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: handle non-error OOM situations more gracefully (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: do not trap chargers with full callstack on OOM (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: rework and document OOM waiting and wakeup (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: enable memcg OOM killer only for user faults (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [x86] mm: finish user fault error path with fatal signal (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] pass userspace fault flag to generic fault handler (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [s390] mm: do not invoke OOM killer on kernel fault OOM (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [powerpc] mm: remove obsolete init OOM protection (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [powerpc] mm: invoke oom-killer from remaining unconverted page fault handlers (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [security] selinux: Permit bounded transitions under NO_NEW_PRIVS or NOSUID (Denys Vlasenko) [1104567 1104568] {CVE-2014-3215}
  - [security] Add PR_<GET, SET>_NO_NEW_PRIVS to prevent execve from granting privs (Denys Vlasenko) [1104567 1104568] {CVE-2014-3215}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-504.16.2.el6]
changelog:
  - [infiniband] core: Prevent integer overflow in ib_umem_get address arithmetic (Doug Ledford) [1181173 1179327] {CVE-2014-8159}


author: Adam Tkac <atkac redhat com> 1.0.90-0.6.20100115svn3945
changelog:
  - add server-applet subpackage which contains Java vncviewer applet
  - fix Java applet; it didn't work when run from web browser
  - add xorg-x11-xkb-utils to server Requires


author: Adam Tkac <atkac redhat com> 1.0.90-0.7.20100115svn3945
changelog:
  - make libvnc.so module working again (r4005, r4024, r4025)
  - vncviewer could crash on slow links (r4003, r4004)


author: Adam Tkac <atkac redhat com> 1.0.90-0.8.20100115svn3945
changelog:
  - fix memory leak in Xvnc (#603731)
  - update URL about SSH tunneling in the sysconfig file (#601996)
  - add pam-devel to BuildRequires, X server needs it


author: Adam Tkac <atkac redhat com> 1.0.90-0.11.20110117svn4237
changelog:
  - rebase to r4237
  - patches merged
    - tigervnc11-noexecstack.patch
    - tigervnc11-r3963.patch
    - tigervnc11-r4002.patch
    - tigervnc11-r4014.patch
    - tigervnc11-r4003.patch
    - tigervnc11-r4004.patch
    - tigervnc11-r4005.patch
    - tigervnc11-r4024.patch
    - tigervnc11-r4025.patch
    - tigervnc11-rh603731.patch
    - tigervnc11-options.patch
  - build with TLS support


author: Adam Tkac <atkac redhat com> 1.0.90-0.12.20110117svn4237
changelog:
  - tigervnc-server now requires perl (#634161)
  - use locales specified in sysconfig/i18n (#632530)
  - read password file correctly when fread is interrupted (#645755)


author: Adam Tkac <atkac redhat com> 1.0.90-0.15.20110314svn4359
changelog:
  - flush internal Xvnc event queue early to avoid overflowing
  - improve compatibility with viewers with wrong VeNCrypt implementation
    (vinagre)
  - link libvnc.so with "-z now" to catch all undefined symbols
  - fix undefined symbol "getvnchomedir" in libvnc.so


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-13
changelog:
  - network: Prevent dnsmasq from listening on localhost (rhbz#886821)
  - sanlock: Re-add lockspace unconditionally (rhbz#820173)
  - Fix "virsh create" example (rhbz#887187)
  - docs: Fix some typos in examples (rhbz#887187)
  - network: Don't require private addresses if dnsmasq uses SO_BINDTODEVICE (rhbz#882265)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-14
changelog:
  - util: Add missing error log messages when failing to get netlink VFINFO (rhbz#889319)
  - util: Fix functions that retrieve SRIOV VF info (rhbz#889319)
  - util: Fix botched check for new netlink request filters (rhbz#889319)
  - blockjob: Fix memleak that prevented block pivot (rhbz#888426)
  - sanlock: Chown lease files as well (rhbz#820173)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-15
changelog:
  - snapshot: conf: Make virDomainSnapshotIsExternal more reusable (rhbz#889407)
  - snapshot: qemu: Separate logic blocks with newlines (rhbz#889407)
  - snapshot: qemu: Fix segfault and vanishing snapshots when redefining (rhbz#889407)
  - snapshot: qemu: Allow redefinition of external snapshots (rhbz#889407)
  - util: Prepare helpers for unpriv_sgio setting (rhbz#878578)
  - qemu: Add a hash table for the shared disks (rhbz#878578)
  - docs: Add docs and rng schema for new XML tag sgio (rhbz#878578)
  - conf: Parse and format the new XML (rhbz#878578)
  - qemu: Set unpriv_sgio when starting domain and attaching disk (rhbz#878578)
  - qemu: Check if the shared disk's cdbfilter conflicts with others (rhbz#878578)
  - qemu: Relax hard RSS limit (rhbz#891653)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-16
changelog:
  - qemu_agent: Remove agent reference only when disposing it (rhbz#892079)
  - Add RESUME event listener to qemu monitor. (rhbz#894085)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-17
changelog:
  - storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
  - qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
  - qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18
changelog:
  - rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
  - spec: Disable libssh2 support (rhbz#513363)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.1
changelog:
  - xen: Resolve resource leak with 'cpuset' (rhbz#908836)
  - schema: Make the cpuset type reusable across schema files (rhbz#908836)
  - schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
  - conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
  - capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
  - capabilities: Add additional data to the NUMA topology info (rhbz#908836)
  - test: Add support for thread and core information for the test driver (rhbz#908836)
  - xen: Initialize variable before using (rhbz#908836)
  - xen: Actually fix the uninitialized variable (rhbz#908836)
  - spice: Properly reserve tlsPort when no port specified (rhbz#913624)
  - qemu_agent: Ignore expected EOFs (rhbz#915344)
  - qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
  - qemu: Destroy domain on decompression binary error (rhbz#915347)
  - qemu: Run lzop with '--ignore-warn' (rhbz#915347)
  - Don't ignore return value of qemuProcessKill (rhbz#915353)
  - Fix race condition when destroying guests (rhbz#915353)
  - Log warning if storage magic matches, but version does not (rhbz#915354)
  - Add lots of debugging to storage file probing code (rhbz#915354)
  - Fix probing of QED file format (rhbz#915354)
  - util: Add virendian.h macros (rhbz#915354)
  - util: Use new virendian.h macros (rhbz#915354)
  - storage: Rearrange functions (rhbz#915354)
  - storage: Prepare for refactoring (rhbz#915354)
  - storage: Refactor metadata lookup (rhbz#915354)
  - storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
  - storage: Test backing chain traversal (rhbz#915354)
  - qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
  - python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
  - qemu: Add checking in helpers for sgio setting (rhbz#919504)
  - qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
  - qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
  - qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
  - qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
  - qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
  - qemu: Fix the memory leak (rhbz#919504)
  - Fix crash changing CDROM media (rhbz#919504)
  - qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
  - qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
  - Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
  - util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
  - qemu: Fix QMP detection of QXL graphics (rhbz#915352)
  - qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
  - conf: Add optional attribte primary to video <model> element (rhbz#915352)
  - qemu: Use newer -device video device in qemu commandline (rhbz#915352)
  - tests: Add one -device video device testcase (rhbz#915352)
  - qemu: Detect VGA_QXL capability correctly (rhbz#915352)
  - qemu: Support ram bar size for qxl devices (rhbz#915352)
  - conf: Don't leak 'primary' video property on error (rhbz#915352)
  - storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
  - storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
  - storage: Cleanup logical volume creation code (rhbz#918754)
  - docs: Clarify semantics of sparse storage volumes (rhbz#918754)
  - storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
  - storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
  - interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
  - locking: Resolve resource leaks on non error path (rhbz#922095)
  - selinux: Resolve resource leak using the default disk label (rhbz#922095)
  - storage: Resolve resource leaks with cmd processing (rhbz#922095)
  - domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
  - qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
  - storage: Need to add virCommandFree() (rhbz#922095)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.3
changelog:
  - util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#928881)
  - security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#928879)
  - security: Don't add seclabel of type none if there's already a seclabel (rhbz#928879)
  - libvirt_private.syms: Correctly export seclabel APIs (rhbz#928879)
  - security_manager.c: Append seclabel iff generated (rhbz#928879)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.4
changelog:
  - rpc: Fix client crash when server drops connection (rhbz#950601)
  - storage: Fix volume cloning for logical volume. (rhbz#950604)
  - qemu: Allow migration over IPv6 (rhbz#950597)
  - qemu: Set IPv6 migration capability when dump-guest-core is present (rhbz#950597)
  - remote: Don't call NULL closeFreeCallback (rhbz#950599)
  - libvirt: Increase connection reference count for callbacks (rhbz#950599)
  - virsh: Unregister the connection close notifier upon termination (rhbz#950599)
  - virsh: Move cmdConnect from virsh-host.c to virsh.c (rhbz#950599)
  - virsh: Register and unregister the close callback also in cmdConnect (rhbz#950599)
  - rpc: Fix connection close callback race condition and memory corruption/crash (rhbz#950599)
  - tests: Fix qemumonitorjsontest deadlock when the machine is under load (rhbz#951235)
  - Avoid use of free'd memory in auto destroy callback (rhbz#951073)
  - Fix crash in QEMU auto-destroy with transient guests (rhbz#951073)


author: Jarod Wilson <jarod@redhat.com> [2.6.32-351.el6]
changelog:
  - [kernel] ptrace-utrace: fix PTRACE_GETEVENTMSG(pid) in sub-namespace (Oleg Nesterov) [782330]
  - [scsi] mpt2sas: fix for driver fails EEH recovery from injected pci bus error (Tomas Henzl) [829149]
  - [mm] memcontrol: propagate LRU accounting state when splitting THP (Johannes Weiner) [881714]
  - [net] sctp: proc: protect bind_addr->address_list accesses with rcu_read_lock() (Thomas Graf) [706038]
  - [net] sctp: Add RCU protection to assoc->transport_addr_list (Thomas Graf) [706038]
  - [s390] zfcp: Adapt to new FC_PORTSPEED semantics (Hendrik Brueckner) [855128]
  - [virt] virtio_net: allow to change mac when iface is running (Jiri Pirko) [882868]
  - [virt] kvm: Minimal hyper-v support (Vadim Rozenfeld) [871350]
  - [fs] gfs2: Journal DLM lock has wrong label (Steven Whitehouse) [884822]
  - [mm] huge_memory: fix typo in transparent_hugepage sysfs symlink (Jeremy Eder) [887308]
  - [mm] ksm: numa awareness sysfs knob (Petr Holasek) [743643]
  - [fs] btrfs: handle IS_ERR(inode) in btrfs_lookup() (Zach Brown) [870944]
  - [kernel] sched: Add irq_{enter,exit}() to scheduler_ipi() (Stanislaw Gruszka) [836964]
  - [kernel] panic: fix a possible deadlock in panic() (Tatsuya Kitamura) [871939]


author: Akemi Yagi <toracat@centos.org> [2.6.32-642.1.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, all serial ATA, Adaptec I2O,
    ARPD, BusLogic, IPX, Appletalk, ReiserFS, JFS, TOMOYO
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added sysfs-fix-printk-warnings-bug6157.patch [bug#6157]
  - Added fs-tmpfs-add-xattrs-support.patch [bug#4586.18700]
  - Added fix-fadvise-for-tmpfs.patch [bug#6938]
  - DEBUG_KMEMLEAK enabled in config [bug#7055]
  - Added support for Kontron  [bug#7270]
  - Disable BRIDGE_IGMP_SNOOPING [bug#7796] then enable it as of 504.23.4 [bug#8862]
  - Enable IRDA (regression) [bug#8070]
  - Added a patch to fix redefine error in reiserfs
  - Added a patch to fix a 3w-sas issud [bug#10073]
  - CONFIG_DRM_I915_UMS disabled [bug#9209]


author: David Zeuthen <davidz@redhat.com> - 1.0.0-0.git20100223.1.el6
changelog:
  - Update to git snapshot for LVM2/Multipath support
  - Bump lvm2 version requirement to 2.02.61
  - Don't include compat devkit-disks symlinks
  - Don't advertise remote access support via Avahi
  - Related: rhbz#548874
  - Related: rhbz#548870


author: David Zeuthen <davidz@redhat.com> - 1.0.0-1.el6
changelog:
  - Update to release 1.0.0
  - Build without LVM2 and Multipath support for now (#548870, #548874)
  - Related: rhbz#575889


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-10
changelog:
  - Fix emblem handling in trash (#616145)
  - Require new gnome-disk-utility (#636540)
  - Hide mounts having a path element starting with dot (#624795)
  - Fix SELinux while accessing a leaked /dev/ptmx file descriptor (#616838)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-13
changelog:
  - Fix interaction with LUKS volumes with fstab records (#599055)
  - Fix defects revealed by Coverity scan (#722465)
  - Correct return values on error for programs (#682799)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-15
changelog:
  - Fix several memory leaks (#809708)
  - Fix formatted BD-RE media detection (#669526)
  - Fix gvfs-open exit code on error (#746978)
  - Fix gvfs-info exit code on error (#746977)
  - Fix gvfs-cat exit code on error (#749369)
  - Fix gvfs-ls exit code on error (#749371)
  - Fix gvfs-mount exit code on error (#749372)


author: Brian C. Lane <bcl@redhat.com> 2.1-11
changelog:
  - Document the align-check command
    Resolves: #642476
  - Default to 1MiB partition alignment
    Resolves: #618255


author: Brian C. Lane <bcl@redhat.com> 2.1-13
changelog:
  - Double the buffer for fdasd_check_api_version
    Resolves: #693852
  - Disable tests that fail when run as root


author: Brian C. Lane <bcl@redhat.com> 2.1-14
changelog:
  - Fix scsi_debug race condition in tests
  - turn t9020 and t9030 tests back on
  - Add legacy_boot support to GPT disklabel (#711148)
    Resolves: #711148
  - Remove asserts from CHS guessing code (#692562)
    Resolves: #692562
  - Fix snap radius and don't allow values < 1 (#665496)
    Resolves: #665496


author: Brian C. Lane <bcl@redhat.com> 2.1-17
changelog:
  - Disable t9020 (scsi_debug num_parts is broken)
  - Add a wait loop to t9030 when removing the partition
  - Remove size parameter from scsi_debug in t9030
    Resolves: #746098


author: Brian C. Lane <bcl@redhat.com> 2.1-18
changelog:
  - libparted: copy flags when duplicating GPT partitions
  - test for GPT partition duplicate
    Resolves: #750395
  - Use dm_udev_wait for dm operations
    Resolves: #698121
    Resolves: #751164


author: Brian C. Lane <bcl@redhat.com> 2.1-19
changelog:
  - libparted: HFS/HFS+ probe: don't let a corrupt FS evoke failed assertion
    Resolves: #797979
  - tests: exercise and document the HFS-probe bug fix
    Resolves: #797979
  - libparted: use largest_partnum in dm_reread_part_table
    Resolves: #803108
  - tests: test creating 20 device-mapper partitions
    Resolves: #803108
  - libparted: preserve the uuid on dm partitions
    Resolves: #832145
  - tests: Make sure dm UUIDs are not erased
    Resolves: #832145


author: Michal Sekletar <msekleta@redhat.com> - 147-2.66
changelog:
  - prevent creation of duplicate udev rules by write_net_rules helper (#652499)
  - fix memory leak in scsi_id (#891669)
  - introduce SECLABEL{selinux} for setting explicit SELinux labels on device nodes (#1015300)
  - for ATA disks udev will now also create by-id/wwn-* symlinks when appropriate (#1220617)


author: Michal Luscon <mluscon@redhat.com> - 7:3.1.10-10
changelog:
  - Resolves #798090 - Client timeout uses server-side "read_timeout"
  - Resolves #833086 - Private md5 hash function does not comply FIPS
  - Resolves #782732 - Squid crashes by segfault when it reboots
  - Resolves #797571 - Squid userid is not added to wbpriv group
  - Disable strict-error-checking on account of squid-fips.patch


author: Jay Fenlason <fenlason@redhat.com> 1.4.3-1.1
changelog:
  * Also include 1.5.3 libraries so users of RHEL-6.5+ can run
    programs compiled on RHEL-6.2-
    Resolves: rhbz876315


author: Jay Fenlason <fenlason@redhat.com> 1.4.3-1.2
changelog:
  - Don't bother passing in options that the 1.4.3 configure doesn't
    understand.
  - set XFLAGS on all archs, not just x86_64.
  - Copy requires/provides filtering from openmpi so this will stop
    providing libotf.so.0
    Resolves: rhbz1097290


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-39
changelog:
  - Fix crash when saving a domain with type none dac label (rhbz#1108590)
  - Initialize threading & error layer in LXC controller (rhbz#1109120)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-40
changelog:
  - formatdomain.html.in: Document implementation limitation of QoS (rhbz#980350)
  - Fix error in qemuDomainSetNumaParamsLive (rhbz#857312)
  - cpu: Add new Broadwell CPU model (rhbz#1100381)
  - docs: publish correct enum values (rhbz#1113316)
  - qemu: blockcopy: Don't remove existing disk mirror info (rhbz#1113828)
  - qemu: fix guestfwd chardev option back how it was (rhbz#1112066)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-41
changelog:
  - Add invariant TSC cpu flag (rhbz#996772)
  - Fix segfault when starting a domain with no cpu definition (rhbz#996772)
  - qemu: copy: Accept 'format' parameter when copying to a non-existing img (rhbz#1113828)
  - Bind connection close callback APIs to python binding (rhbz#1114619)
  - qemu: Factor out body of qemuDomainGetMetadata for universal use (rhbz#1115039)
  - qemu: Factor out body of qemuDomainSetMetadata for universal use (rhbz#1115039)
  - conf: Factor out setting of metadata to simplify code (rhbz#1115039)
  - util: Add helper to convert libxml2 nodes to a string (rhbz#1115039)
  - conf: Add support for requesting of XML metadata via the API (rhbz#1115039)
  - conf: allow to add XML metadata using the virDomainSetMetadata api (rhbz#1115039)
  - conf: Avoid false positive of uninitialized variable use (rhbz#1115039)
  - lib: Don't force the key argument when deleting metadata (rhbz#1115039)
  - test: Add <metadata> support into the test drivera (rhbz#1115039)
  - tests: Add metadata tests (rhbz#1115039)
  - conf: Don't corrupt metadata on OOM (rhbz#1115039)
  - Ignore additional fields in iscsiadm output (rhbz#1116741)
  - conf: net: Fix helper for applying new network definition (rhbz#1116754)
  - blockjob: wait for pivot to complete (rhbz#1119385)
  - virsh: Introduce macros to reject mutually exclusive arguments (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDisk (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDevice (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDisk (rhbz#1117177)
  - virsh: Use inactive definition when removing disk from config (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDevice (rhbz#1117177)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-42
changelog:
  - conf: Fix backport of metadata API code (rhbz#1115039)
  - conf: Always format seclabel's model (rhbz#1113860)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-43
changelog:
  - Fix blkdeviotune for shutoff domain (rhbz#1122819)
  - rpc: message related sizes enlarged (rhbz#1126393)
  - Increase the size of REMOTE_MIGRATE_COOKIE_MAX to REMOTE_STRING_MAX (rhbz#1126393)
  - Fix max stream packet size for old clients (rhbz#1126393)
  - Adjust legacy max payload size to account for header information (rhbz#1126393)
  - rpc: Correct the wrong payload size checking (rhbz#1126393)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.2
changelog:
  - qemu: allow restore with non-migratable XML input (rhbz#1155564)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1155564)
  - Make ABI stability issue easier to debug (rhbz#1155564)
  - CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk (CVE-2014-3633)
  - domain_conf: fix domain deadlock (CVE-2014-3657)
  - CVE-2014-7823: dumpxml: security hole with migratable flag (CVE-2014-7823)


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.15.1.el6]
changelog:
  - [net] bonding: prevent oopsing on calling pskb_may_pull on shared skb (Andy Gospodarek) [671342 665110]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.16.1.el6]
changelog:
  - [net] ipsec: fragment locally generated tunnel-mode IPSec6 packets as needed (Herbert Xu) [670421 661113]
  - [net] tcp: Increase TCP_MAXSEG socket option minimum to TCP_MIN_MSS (Frantisek Hrbata) [652510 652511] {CVE-2010-4165}
  - [perf] perf_events: Fix perf_counter_mmap() hook in mprotect() (Oleg Nesterov) [651672 651673] {CVE-2010-4169}
  - [md] dm mpath: revert "dm: Call blk_abort_queue on failed paths" (Mike Snitzer) [658854 636771]
  - [x86] UV: Address interrupt/IO port operation conflict (George Beshers) [662921 659480]
  - [mm] guard page for stacks that grow upwards (Johannes Weiner) [666796 630562]
  - [scsi] enable state transistions from OFFLINE to RUNNING (Mike Christie) [660590 643237]
  - [scsi] set queue limits no_cluster for stacked devices (Mike Snitzer) [662050 658293]
  - [mm] Out-of-memory under memory cgroup can call both of oom-killer-for-memcg and oom-killer-for-page-fault (Larry Woodman) [661732 592879]
  - [scsi] libfc: possible race could panic system due to NULL fsp->cmd (Mike Christie) [662049 638297]
  - [kernel] exec: copy-and-paste the fixes into compat_do_execve() paths (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [kernel] exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [virt] virtio: console: Send SIGIO in case of port unplug (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO on new data arrival on ports (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO to processes that request it for host events (Amit Shah) [652720 624628]
  - [virt] virtio: console: Reference counting portdev structs is not needed (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add reference counting for port struct (Amit Shah) [662721 628805]
  - [virt] virtio: console: Use cdev_alloc() instead of cdev_init() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a find_port_by_devt() function (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a list of portdevs that are active (Amit Shah) [662721 628805]
  - [virt] virtio: console: open: Use a common path for error handling (Amit Shah) [662721 628805]
  - [virt] virtio: console: remove_port() should return void (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make write() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make read() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Unblock poll on port hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Un-block reads on chardev close (Amit Shah) [662721 628805]
  - [virt] virtio: console: Check if portdev is valid in send_control_msg() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Remove control vq data only if using multiport support (Amit Shah) [662721 628805]
  - [virt] virtio: console: Reset vdev before removing device (Amit Shah) [662721 628805]
  - [fs] Fix nfsv4 client lock reclaim behaviour (Sachin Prabhu) [661730 638269]
  - [scsi] scsi_dh_alua: Handle all states correctly (Mike Snitzer) [659610 636994]
  - [kernel] execve: improve interactivity and respond to SIGKILL with large arguments (Dave Anderson) [661731 629178]
  - [virt] xen: handle events as edge-triggered (Andrew Jones) [661737 550724]
  - [virt] xen: use percpu interrupts for IPIs and VIRQs (Andrew Jones) [661737 550724]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.17.1.el6]
changelog:
  - [s390x] kdump: allow zfcpdump to mount and write to ext4 file systems (Amerigo Wang) [661667 628676]
  - [scsi] qla2xxx: Properly set the return value in function qla2xxx_eh_abort (Chad Dupuis) [664398 635710]
  - [scsi] qla2xxx: Drop srb reference before waiting for completion (Chad Dupuis) [664398 635710]
  - [virt] KVM: VMX: Really clear cr0.ts when giving the guest ownership of the fpu (Avi Kivity) [658891 645898]
  - [virt] KVM: SVM: Initialize fpu_active in init_vmcb() (Avi Kivity) [658891 645898]
  - [virt] KVM: x86: Use unlazy_fpu() for host FPU (Avi Kivity) [658891 645898]
  - [virt] KVM: Set cr0.et when the guest writes cr0 (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Give the guest ownership of cr0.ts when the fpu is active (Avi Kivity) [658891 645898]
  - [virt] KVM: Lazify fpu activation and deactivation (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Allow the guest to own some cr0 bits (Avi Kivity) [658891 645898]
  - [virt] KVM: Replace read accesses of vcpu->arch.cr0 by an accessor (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: trace clts and lmsw instructions as cr accesses (Avi Kivity) [658891 645898]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.18.1.el6]
changelog:
  - [netdrv] ixgbe: make sure FCoE DDP user buffers are really released by the HW (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: invalidate FCoE DDP context when no error status is available (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: avoid doing FCoE DDP when adapter is DOWN or RESETTING (Frantisek Hrbata) [674002 617193]
  - [fcoe] libfc: remove tgt_flags from fc_fcp_pkt struct (Mike Christie) [666797 633915]
  - [fcoe] libfc: use rport timeout values for fcp recovery (Frantisek Hrbata) [666797 633915]
  - [fcoe] libfc: incorrect scsi host byte codes returned to scsi-ml (Mike Christie) [666797 633915]
  - [scsi] scsi_dh_alua: fix overflow in alua_rtpg port group id check (Mike Snitzer) [673978 670572]


author: Jindrich Novy <jnovy@redhat.com> 2.4.6-1
changelog:
  - update to 2.4.6
  - new IDs for Kodak V803, M1063, Canon PowerShot A650IS, SD990 (aka IXUS 980IS),
    SD880IS, A480, Canon EOS 50D, Fuji FinePix S1000fd
  - many Canon related fixes


author: David Zeuthen <davidz@redhat.com> 2.4.6-3
changelog:
  - Add patch from http://sourceforge.net/tracker/?func=detail&aid=2801117&group_id=8874&atid=308874
    and generate generic udev rules for device identification (ID_GPHOTO2* properties)


author: Will Cohen <wcohen@redhat.com> - 0.9.6-5
changelog:
  - Handle debuginfo section differences. rhbz #591538
  - Produce a 32-bit ppc oprofile packages for java support. rhbz #463223


author: Will Cohen <wcohen@redhat.com> - 0.9.6-10
changelog:
  - Corrections for i386/arch_perfmon filters.
  - Make nehalem events available.
  - Add AMD family 12/14/15h support. Resolves: rhbz #650126
  - Add Intel westmere support. Resolves: rhbz #643478
  - opcontrol numeric argument checking. Resolves: rhbz #589638


author: Ray Strode <rstrode@redhat.com> 2.28.3-25
changelog:
  - When trying to acquire a contentious keyboard grab, don't
    nuke input focus, but instead move it to new grab window
    before taking grab.
    Resolves: #905935


author: Ray Strode <rstrode@redhat.com> 2.28.3-26
changelog:
  - Fix up fix-fade-on-nvidia patch from -19 to properly
    handle X servers that don't support setting gamma ramp.
    Resolves: #947671


author: Jan Kaluza <jkaluza@redhat.com> 5.04-6
changelog:
  - fix #637782 - identify the zip64 format correctly
  - fix #643046 - recognize volume_key escrow packets
  - fix #594083 - improve Python recognition
  - fix #608686 - mention return code in manpage
  - fix #610795 - recognize webm content
  - fix #670125 - don't identify GFS2 filesystems as GFS1 filesystems


author: Jan Kaluza <jkaluza@redhat.com> 5.04-8
changelog:
  - fix #676045 - detect all RPM architectures
  - fix #712992 - detect noarch RPM packages
  - fix #688700 - detect s390 kernel
  - fix #692098 - do not try to get coredump informations from normal binary
  - fix #712988 - do not handle Python scripts as binary files
  - fix #690801 - fixed grammar mistakes in man page
  - fix #675691 - improve TeX recognition


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-44.P1
changelog:
  - option 97 - pxe-client-id (#1058674)
  - dhclient-script: PREINIT6: make sure link-local address is available (#1130804)
  - dhcpd generates spurious responses when seeing requests
    from vlans on plain interface (#1150587)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-28.el6
changelog:
  - Add patch for RH bug #1012399 (Fails to display task mail attachment)
  - Bump evolution-data-server version requirement (for RH bug #1009426)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-30.el6
changelog:
  - Update patch for RH bug #975409 (Custom message in alarm notification)
  - Add patch for RH bug #1014743 (Use system timezone has no effect)
  - Add patch for RH bug #1014677 (Search filter persists when changing folders)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-32.el6
changelog:
  - Add patch for RH bug #1054865 (Incorrect unref under e_attachment_load_finish())
  - Add patch for RH bug #1054772 (Local addressbooks created without relative_uri set)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-33.el6
changelog:
  - Add patch for RH bug #1080467 (mark-all-read plugin can cause UI freeze)
  - Add patch for RH bug #1052955 (Time format in combo controls is always 24 hrs)


author: Steve Dickson <steved@redhat.com> - 0.2.0-10
changelog:
  - Make is_loopback check more permissive (bz 731542)
  - Removed the rpcbind(3) reference in the man page (bz 813898)


author: Michal Hlavinka <mhlavink@redhat.com> - 39-5
changelog:
  - fix crash when bad substitution is used
  - fix crash when alias contains alias
  - fix crash when xtrace is enabled
  - use alternatives for ksh/mksh selection


author: Michal Hlavinka <mhlavink@redhat.com> - 39-9
changelog:
  - tab completion did not work correctly with files containing multibyte 
    characters in name (#771198)


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.147
changelog:
  - Fix stack overflow due to large AF_INET6 requests (CVE-2013-4458, #1111460).
  - Fix buffer overflow in readdir_r (CVE-2013-4237, #1111460).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.149
changelog:
  - Remove gconv transliteration loadable modules support (CVE-2014-5119,
    - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.149.7
changelog:
  - Fix invalid file descriptor reuse while sending DNS query
    (#1207995, CVE-2013-7423).
  - Fix buffer overflow in gethostbyname_r with misaligned buffer
    (#1209375, CVE-2015-1781).


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-1
changelog:
  Resolves: 642722
  Resolves: 642724
  Resolves: 646718
  Resolves: 628879
  Resolves: 621790
  Resolves: 668785
  Resolves: 658253
  Resolves: 658121


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-4.1
changelog:
  Resolves: #718078: zstream clone of 711975
  Resolves: #712114: zstream clone of 703985
  Resolves: #712112: zstream clone of 703473
  Resolves: #712168: zstream clone of 704548


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.20.1.el6]
changelog:
  - [sched] kernel: sched: Fix nohz load accounting -- again (Rafael Aquini) [1300349 1167755]
  - [sched] kernel: sched: Move sched_avg_update to update_cpu_load (Rafael Aquini) [1300349 1167755]
  - [sched] kernel: sched: Cure more NO_HZ load average woes (Rafael Aquini) [1300349 1167755]
  - [sched] kernel: sched: Cure load average vs NO_HZ woes (Rafael Aquini) [1300349 1167755]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.21.1.el6]
changelog:
  - [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1310148 1302223] {CVE-2016-0774}
  - [fs] gfs2: Add missing else in trans_add_meta/data (Robert S Peterson) [1304332 1267995]
  - [fs] fs-cache: Synchronise object death state change vs operation submission (David Howells) [1308471 1096893]
  - [fs] fs-cache: Reduce cookie ref count if submit fails (David Howells) [1308471 1096893]
  - [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1302763 1294400]
  - [x86] fix corruption of XMM registers when interrupt handlers use FPU (Mikulas Patocka) [1298994 1259023]
  - [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1303044 1292300]
  - [net] add inet_sk_transparent() helper (Florian Westphal) [1303044 1292300]
  - [net] ipv6: tcp_ipv6 policy route issue (Florian Westphal) [1303044 1292300]
  - [net] ipv6: reuse rt6_need_strict (Florian Westphal) [1303044 1292300]
  - [net] tcp: resets are misrouted (Florian Westphal) [1303044 1292300]
  - [net] tcp: tcp_v4_send_reset: binding oif to iif in no sock case (Florian Westphal) [1303044 1292300]
  - [crypto] api: Only abort operations on fatal signal (Herbert Xu) [1296014 1272314]
  - [crypto] testmgr: don't use interruptible wait in tests (Herbert Xu) [1296014 1272314]
  - [kernel] sched: add wait_for_completion_killable_timeout (Herbert Xu) [1296014 1272314]
  - [net] sctp: add routing output fallback (Xin Long) [1307073 1229124]
  - [net] sctp: fix dst leak (Xin Long) [1307073 1229124]
  - [net] sctp: fix src address selection if using secondary addresses (Xin Long) [1307073 1229124]
  - [net] sctp: reduce indent level on sctp_v4_get_dst (Xin Long) [1307073 1229124]
  - [scsi] hpsa: Update driver revision to RH5 (Joseph Szczypek) [1306192 1244959]
  - [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1306192 1244959]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.22.1.el6]
changelog:
  - [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1318364 1309898]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.23.1.el6]
changelog:
  - [x86] perf: Add more Broadwell model numbers (Jiri Olsa) [1320035 1242694]
  - [perf] perf/x86/intel: Remove incorrect model number from Haswell perf (Jiri Olsa) [1320035 1242694]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.24.1.el6]
changelog:
  - [sched] fix KABI break (Seth Jennings) [1314878 1230310]
  - [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1314878 1230310]
  - [sched] sched,perf: Fix periodic timers (Seth Jennings) [1314878 1230310]
  - [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1314878 1230310]
  - [sched] Cleanup bandwidth timers (Seth Jennings) [1314878 1230310]
  - [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1314878 1230310]
  - [sched] fair: Fix unlocked reads of some cfs_b->quota/period (Seth Jennings) [1314878 1230310]
  - [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1314878 1230310]
  - [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq->lock (Seth Jennings) [1314878 1230310]
  - [sched] Fix hrtimer_cancel/rq->lock deadlock (Seth Jennings) [1314878 1230310]
  - [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1314878 1230310]
  - [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
  - [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
  - [block] Fix q_suspended logic error for io submission (David Milburn) [1314209 1227342]
  - [block] nvme: No lock while DMA mapping data (David Milburn) [1314209 1227342]
  - [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1315706 1249244]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.25.1.el6]
changelog:
  - [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
  - [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
  - [fs] anon_inodes implement dname (Aristeu Rozanski) [1322707 1296019]
  - [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1320031 1302777]
  - [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297421 1297422] {CVE-2015-8767}
  - [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1319276 1299975]
  - [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1315696 1309241]
  - [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
  - [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
  - [md] raid10: submit_bio_wait returns 0 on success (Jes Sorensen) [1320863 1273546]
  - [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1320863 1273546]
  - [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1320863 1273546]
  - [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]
  - [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.26.1.el6]
changelog:
  - [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1326043 1324318]
  - [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1326043 1324318]
  - [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1326043 1324318]
  - [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1326043 1324318]
  - [kernel] Revert "fix KABI break" (Jiri Olsa) [1326043 1324318]


author: Petr Oros <poros@redhat.com> - 1:1.17-21
changelog:
  - Update microcode data file to 20151106 revision.
  - Resolves: #1244968
  - Remove bad file permissions on /lib/udev/rules.d/89-microcode.rules
  - Resolves: #1201276


author: Petr Oros <poros@redhat.com> - 1:1.17-24
changelog:
  - Update microcode data file to 20161104 revision.
  - Add workaround for E5-26xxv4
  - Resolves: #1346045


author: Petr Oros <poros@redhat.com> - 1:1.17-25.2
changelog:
  - Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
  - Add amd microcode_amd_fam17h.bin data file
  - Resolves: #1527357


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.132.3
changelog:
  - Don't use alloca in addgetnetgrentX (#1087789).
  - Adjust pointers to triplets in netgroup query data (#1087789).


author: Miroslav Lichvar <mlichvar@redhat.com> 6.0-3
changelog:
  - include patch 004
  - suppress install-info errors (#515910)
  - remove dir* in infodir after install (#492097)


author: Avesh Agrwal <avagarwa@redhat.com> - 4.29-1
changelog:
  - New upstream realease 4.29
  - Updated authpriv and sample patches for the new release
  - Modified spec file to include dist tag


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.5-4
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.4.5-5
changelog:
  - CVE-2015-1802: missing range check in bdfReadProperties (bug 1258892)
  - CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258892)
  - CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258892)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.42-1
changelog:
  - ipcalc: -c allow netmask
  - ipcalc: parse prefix more safely
  - vi.po: fix parentheses
  - network-functions: handle BONDING_OPTS better
  - custom naming for VLAN devices
  - bonding: match whole name of interface
  - network-functions: ETHTOOL_DELAY introduction patch
  - ifup-wireless: add support for wowlan
  - Remove NETWORKING_IPV6 from sysconfig.txt (#918622)
  - bridging: add possibility to set prio and ageing


author: Lukáš Nykrýn - 9.03.43-1
changelog:
  - ifup-aliases: arpcheck - check for parent operstate and carrier
  - ifdown: don't wait for aliases
  - hotplug: don't call ifup when new vlan appears
  - ifup-wireless: add support for wowlan (second part)
  - readonly-root: remount rpc_pipefs if readonly-root is used


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.47-1
changelog:
  - rc.sysinit: be more verbose
  - init.d/functions: rc.debug option to debug initscripts
  - ifup-aliases: inherit ARPCHECK from parent device
  - netfs: don't race NFS umount to network shutdown
  - network: report that we can't shut down network for root on netfs
  - Fix tcsh + grep-2.7. (#636552)
  - sysctl.conf: move bridge setting to module-init-tools
  - rc.sysinit: set affinity also for current shell
  - ifdown-eth: use scope host for lo
  - improve_check_for_bond_master_in_install_bonding_driver
  - network-functions: fix check in install_bonding_driver
  - ifdown-post: remove resolv.conf only in specific cases
  - netconsole: lets run earlier
  - ipcalc: support RFC3021 (#997271)
  - halt: add delay after upsdrvctl shutdown
  - ifup: also set multicast_snooping after the bridge is up


author: Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
changelog:
  - Update to upstream 
  	* Change the AVC to only audit the permissions specified by the
  	policy, excluding any permissions specified via dontaudit or not
  	specified via auditallow.
  	* Fix compilation of label_file.c with latest glibc headers.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
changelog:
  - Update to upstream 
  	* Fix from Eric Paris to fix leak on non-selinux systems.
  	* regenerate swig wrappers
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
changelog:
  - Update to upstream 
  	* Show strerror for security_getenforce() by Colin Waters.
  	* Merged selabel database support by KaiGai Kohei.
  	* Modify netlink socket blocking code by KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-1
changelog:
  * Set errno=EINVAL for invalid contexts from Dan Walsh.
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.
  Resolves: #593788


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.2.1.el6]
changelog:
  - [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
  - [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
  - [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
  - [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.3.1.el6]
changelog:
  - [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
  - [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
  - [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
  - [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
  - [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
  - [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.4.1.el6]
changelog:
  - [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.5.1.el6]
changelog:
  - [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
  - [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.6.2.el6]
changelog:
  - [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-47.el6
changelog:
  - [ifunc] Fix ppc64 function descriptors compatibility.
  - detach-as-stopped kernel workaround is now always active, not just on RHEL-5.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-49.el6
changelog:
  - Support -gdwarf-4 -fdebug-types-section debug info (Tom Tromey, BZ 718141).
  - doc: make gdb's help a bit clearer re: ptype & whatis (BZ 704010).
  - Fix printing of memory statistics (Tom Tromey, BZ 692386).
  - Fix `info sources' output regression (BZ 712117).
  - Support DW_AT_data_member_location even for DWARF <4 (Tom Tromey, BZ 702427).
  - Core files should use linux-thread-db.c also on ppc and s390x (BZ 697900).
  - Fix case insensitive symbols for Fortran by iFort (BZ 669434).
  - Test GDB opcodes/ disassembly of Intel Ivy Bridge instructions (BZ 696890).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-50.el6
changelog:
  - Fix dlopen of libpthread.so, updated glibc required (Gary Benson, BZ 669432).
    - SystemTap probes support (Sergio Durigan Junior, for BZ 669432).
  - Improve GDB performance on inferior dlopen calls (Gary Benson, BZ 698001).
  - Fix runtime evaluation of strings, for gdb -write (Tom Tromey, BZ 730475).
  - Fix dw2-simple-locdesc.S for better arch compatibility  (for BZ 702427).
  - Fix dw2-case-insensitive.exp compatibility with ppc64 (for BZ 669434).
  - Fix backport of core files PID also for s390x (for BZ 697900).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-51.el6
changelog:
  - Fix threading internal error on corrupted memory (BZ 739685).
  - Fix cp_scan_for_anonymous_namespace crash (Aleksandar Ristovski, BZ 750341).
  - testsuite: Fix break-interp.exp expections for updated glibc (BZ 752834).


author: Peter Hatina <phatina@redhat.com> - 1.8.10-8
changelog:
  - security patches
  - Resolves: CVE-2014-6421
              CVE-2014-6423
              CVE-2014-6424
              CVE-2014-6425
              CVE-2014-6426
              CVE-2014-6427
              CVE-2014-6428
              CVE-2014-6429


author: Peter Hatina <phatina@redhat.com> - 1.8.10-16
changelog:
  - security patches
  - Resolves: CVE-2014-8710
              CVE-2014-8711
              CVE-2014-8712
              CVE-2014-8713
              CVE-2014-8714
              CVE-2015-0562
              CVE-2015-0564


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.2.1.el6]
changelog:
  - [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
  - [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
  - [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
  - [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
  - [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
  - [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
  - [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.3.1.el6]
changelog:
  - [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
  - [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.4.1.el6]
changelog:
  - [firmware] add iwlwifi-8000C-13 ucode (Stanislaw Gruszka) [1242969 1134603]
  - [net] Always propagate flag changes to interfaces (Jarod Wilson) [1253734 1222823]
  - [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1253729 1238308]
  - [scsi] zfcp: Use correct length for FCP_RSP_INFO (Hendrik Brueckner) [1253728 1223105]
  - [tools] perf: avoid possible race condition in copyfile (Milos Vyletel) [1253733 1229673]
  - [tools] perf: Introduce copyfile_offset function (Milos Vyletel) [1253733 1229673]
  - [tools] perfs: Add rm_rf utility function (Milos Vyletel) [1253733 1229673]
  - [net] vlan: restore VLAN_GROUP_ARRAY_LEN definition (Michal Schmidt) [1246102 1242145]
  - [md] dm btree remove: fix bug in redistribute3 (Mike Snitzer) [1246105 1242023]
  - [netdrv] vmxnet3: prevent receive getting out of sequence on napi poll (Neil Horman) [1246092 1236564]
  - [kernel] sched, cgroup: replace signal_struct->group_rwsem with a global percpu_rwsem (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu_rw_semaphore: add lockdep annotations (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu_rw_semaphore: kill ->writer_mutex, add ->write_ctr (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu_rw_semaphore: reimplement to not block the readers unnecessarily (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu-rwsem: use synchronize_sched_expedited (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu-rw-semaphores: use rcu_read_lock_sched (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu-rw-semaphores: use light/heavy barriers (Oleg Nesterov) [1246081 1198732]
  - [kernel] blockdev: turn a rw semaphore into a percpu rw semaphore (Oleg Nesterov) [1246081 1198732]
  - [kernel] softirq: Add softirq_2ms_loop and default to existing RHEL6 behaviour (Prarit Bhargava) [1246064 970263]
  - [kernel] softirq: reduce latencies (Prarit Bhargava) [1246064 970263]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.7.1.el6]
changelog:
  - Revert: [kernel] softirq: reduce latencies (Prarit Bhargava) [1246064 970263]
  - Revert: [kernel] softirq: Add softirq_2ms_loop and default to existing RHEL6 behaviour (Prarit Bhargava) [1246064 970263]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.8.1.el6]
changelog:
  - [netdrv] bonding: fix LACP PDU not sent on slave port sometimes (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: fix incorrect lacp mux state when agg not active (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: fix bond_open don't always set slave active flag (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: update bond carrier state when min_links option changes (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: change AD_LINK_SPEED_BITMASK to enum to suport more speed (Jarod Wilson) [1266366 1258446]
  - [virt] kvm: ioapic: conditionally delay irq delivery duringeoi broadcast (Fam Zheng) [1266369 1199155]
  - [kernel] ipc, sem: fix use after free on IPC_RMID after a task using same semaphore set exits (Herton R. Krzesinski) [1266373 1233300]
  - [fs] xfs: extent size hints can round up extents past MAXEXTLEN (Leonardo Menezes Vaz) [1266372 1211110]
  - [fs] Remove BUG_ON in nfs_clear_inode (Frank Sorenson) [1266364 1224343]
  - [net] use address assign type "SET" (Jarod Wilson) [1266374 1225359]
  - [net] ethtool: set addr_assign_type to NET_ADDR_SET when addr is passed on create (Jarod Wilson) [1266374 1225359]
  - [net] rtnl: use dev_set_mac_address() instead of plain ndo_ (Jarod Wilson) [1266374 1225359]
  - [net] ipv4: inet_fragmentation: compute work more accurate (Hannes Frederic Sowa) [1246088 1235465]
  - [netdrv] bna: fix interrupts storm caused by erroneous packets (Ivan Vecera) [1260535 1241287]
  - [edac] pci: avoid negative reference count of edac_class (Herton R. Krzesinski) [1255492 1227845]
  - [kernel] percpu_counter: batch size aware __percpu_counter_compare (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: make percpu_counters_lock irq-safe (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: fix bad percpu counter state during suspend (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: unbreak __percpu_counter_add (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: fix __percpu_counter_add (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: make APIs irq safe (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: __this_cpu_write doesn't need to be protected by spinlock (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: enclose hotplug only variables in hotplug ifdef (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpucounter: Optimize __percpu_counter_add a bit through the use of this_cpu options (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: use this_cpu_ptr instead of per_cpu_ptr (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu: fix list_head init bug in __percpu_counter_init (Hannes Frederic Sowa) [1246088 1235465]


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-21
changelog:
  - Resolves: rhbz#975550 ikev2 md5 hash results in incorrect policy
  - Resolves: rhbz#985596 openswan does not allow SHA2 auth algorithms under FIPS mode 
  - Resolves: rhbz#881914 openswan doesn't support SHA2 certificates
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#960235 CVE-2013-2053: remote buffer overflow in atodn()
  - Resolves: rhbz#963833 Abort pluto on crypto failure to prevent plaintext / nonce leak
  - Resolves: rhbz#771612 ipsec barf should not grep sparse file
  - Resolves: rhbz#841325 leftmodecfgclient=no causes rekey failure [Avesh]
  - Resolves: rhbz#848132 dpdaction=restart can cause full phase1 timeout after DPD [Avesh]
  - Resolves: rhbz#880004 Backported libreswan IKE fragmentation support 
  - Resolves: rhbz#908476 Backported libreswan INITIAL-CONTACT Notify support
  - Resolves: rhbz#796683 Backported libreswan USERCOMPILE with -fno-strict-aliasing
  - Resolves: rhbz#959568 Backported libreswan nat_keepalive=yes|no (default yes) option
  - Resolves: rhbz#916743 Backported libreswan control transmission delay timing
  - Resolves: rhbz#959566 Backported libreswan ikeping compile warnings
  - Resolves: rhbz#957400 Openswan did not load aesni_intel kernel module
  - Resolves: rhbz#960171 Initial loading of CRL always fails on pluto startup [Matt Rogers]
  - Resolves: rhbz#958969 Crl signature verification failure in when input signature is stripped of all leading zeros
  - Resolves: rhbz#868986 Fix for RDN values containing a comma [Matt Rogers]
  - Resolves: rhbz#747966 Missing else keyword


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-23
changelog:
  - Resolves: rhbz#998587 underspecific build requires (of nss)
  - Resolves: rhbz#1002312 IKEv2 skeyseed calculation only succeeds because of unspecified compiler behaviour
  - Resolves: rhbz#1002633 openswan needs -fips subpackage that would provide the FIPS hmac files


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Restore patch for certutil man page
  - supply missing options descriptions to the man page
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-3
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove unused indentation pseudo patch
  - require nss util 3.16.2.3


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-1
changelog:
  - Rebase to NSS 3.18
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]
  - Keep the same cipher suite order as we had in NSS_3_15_3_RTM
  - Resolves: Bug 1202488 - openldap-2.4.23-34.el6_5.1.i686 fails after updating nss to nss-3.16.1-4.el6_5.i686
  - Resolves: Bug 1182902 - rhel65 ns-slapd crash, segfault error 4 in libnss3.so in PK11_DoesMechanism at pk11slot.c:1824


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1207052 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Restore a patch that had been mistakenly disabled
  - Resolves: Bug 1207052 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Fix shell syntax error in nss/tests/all.sh
  - Resolves: Bug 1207052 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-5
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Resolves: Bug 1207052 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Kai Engert <kaie@redhat.com> - 3.18.0-5.1
changelog:
  - Require softokn build 22 to ensure runtime compatibility.
  - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-9
changelog:
  - Fix scaling for spice (bz 750225)
  - Don't allow a busted iface to break other iface details page (bz
    786694)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-11
changelog:
  - Don't switch page every time lxc guest is updated (bz 796570)
  - Don't blacklist disk device if we grab stats for shutdown guest (bz
    796092)
  - Add QED to disk format list (bz 795323)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-12
changelog:
  - Fix reopening a remote graphical console (bz 811316)
  - Fix app crash when deleting multiple storage volumes (bz 803600)


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.0-15
changelog:
  - Only reboot VM if it had an install phase (rhbz#824275)
  - Match usb device with vendorID, productID, bus, device (rhbz#820303)
  - Change Mbps to MB/s in migration dialog (rhbz#802639)


author: Akemi Yagi <toracat@centos.org> [2.6.32-504.30.3.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, all serial ATA, Adaptec I2O,
    ARPD, BusLogic, IPX, Appletalk, ReiserFS, JFS, TOMOYO
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added sysfs-fix-printk-warnings-bug6157.patch [bug#6157]
  - Added fs-tmpfs-add-xattrs-support.patch [bug#4586.18700]
  - Added fix-fadvise-for-tmpfs.patch [bug#6938]
  - DEBUG_KMEMLEAK enabled in config [bug#7055]
  - Added support for Kontron  [bug#7270]
  - Added a patch to fix [bug#7051]
  - Added a patch to fix [bug#7538]
  - Added a patch to fix [bug#7882]
  - Disable BRIDGE_IGMP_SNOOPING [bug#7796] then enable it as of 504.23.4 [bug#8862]
  - Enable IRDA (regression) [bug#8070]


author: Bastien Nocera <bnocera@redhat.com> 0.10.17-2
changelog:
  - Update Farsight plugins to 0.10.17
  - Disable LADSPA plugins, they should be in -bad (#540198)
  - Add support for authenticating RTSP sources
  Related: rhbz#543948


author: Wim Taymans <wtaymans@redhat.com> 0.10.23-2
changelog:
  - add patch to post provide-clock message to fix a major regression
    in 0.10.23
  - bump version to rebuild for fastrack
  Resolves: rhbz#622776


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-7
changelog:
  - Add dummy sources file to test for and prevent breaking rhpkg commands
  - Enable testing for 'rhpk upload' and 'rhpk new-sources' breakage such as hangs
  - Related: rhbz#837089


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-8
changelog:
  - PEM peminit returns CKR_CANT_LOCK when needed to inform caller module isn't thread safe
  - Resolves: rhbz#555019 - [PEM] invalid writes in multi-threaded libcurl based application


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-9
changelog:
  - Fix locking issue causing curl hangs and authenticate to the correct session
  - Resolves: rhbz#872838


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-12
changelog:
  - Recreate the distrust patch by backporting the upstream one
  - Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate


author: Alasdair Kergon <agk@redhat.com> - 2.02.109-1
changelog:
  - Allow approximate allocation with +%FREE in lvextend.
  - Fix a segfault in lvscan --cache when devices were already missing. (2.02.108)
  - Display actual size changed when resizing LV.
  - Remove possible spurious "not found" message on PV create before wiping.
  - Handle upgrade from 2.02.105 when an LV now gaining a uuid suffix is active.
  - Remove lv_volume_type field from reports. (2.02.108)
  - Fix incorrect persistent .cache after vgcreate with PV creation. (2.02.108)
  - Add dm_tree_set_optional_uuid_suffixes to libdevmapper to handle upgrades.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.109-2
changelog:
  - Fix pvcreate_check() to update cache correctly after signature wiping.
  - Fix primary device lookup failure for partition when processing mpath filter.
  - Remove spurious "Skipping mirror LV" message on pvmove of clustered mirror.
  - If LV inactive and non-clustered, do not issue "Cannot deactivate" on -aln.
  - Cleanly error when creating RAID with stripe size < PAGE_SIZE.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.110-1
changelog:
  - Fix manipulation with thin-pools which are excluded via volume_list.
  - Support lv/vgremove -ff to remove thin vols from broken/inactive thin pools.
  - Fix typo breaking configure --with-lvm1=shared.
  - Modify lvresize code to handle raid/mirrors and physical extents.
  - Don't allow pvcreate to proceed if scanning or filtering fails.
  - Print name of LV which on activation triggers delayed snapshot merge.
  - Add lv_layout and lv_role LV reporting fields.
  - Properly display lvs lv_attr volume type and target type bit for cache origin.
  - Improve libdevmapper-event select() error handling.
  - Add extra check for matching transation_id after message submitting.
  - Add dm_report_field_string_list_unsorted for str. list report without sorting.
  - Support --deferred with dmsetup remove to defer removal of open devices.
  - Update dm-ioctl.h to include DM_DEFERRED_REMOVE flag.
  - Add support for selection to match string list subset, recognize { } operator.
  - Fix string list selection with '[value]' to not match list that's superset.
  - Fix string list selection to match whole words only, not prefixes.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-1
changelog:
  - Reinstate nosync logic when extending mirror. (2.02.110)
  - Fix total area extent calculation when allocating cache pool. (2.02.110)
  - Pass properly sized char buffers for sscanf when initializing clvmd.
  - Restore proper buffer size for parsing mountinfo line (1.02.89)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-2.el6_6.1
changelog:
  - Fix configure script to detect that systemd environment is not used and
    generate proper udev rules for lvmetad notification based on this information.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-2.el6_6.3
changelog:
  - Fix regression in vgimportclone script that caused failures on
    any duplicate PVs found, hence making the script unusable.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-2.el6_6.4
changelog:
  - Fix regression in cache causing some PVs to bypass filters (2.02.105).
  - Fix incorrect persistent .cache after report with label fields only (2.02.106).
  - Reinstate PV tag recognition for pvs if reporting label fields only (2.02.105).


author: Daniel Veillard <veillard@redhat.com> - 0.6.1-2.el6
changelog:
  - do not require specifically tog-pegasus server (rhbz#799037)
  - (de)register the schemas with sblim-sfcb if found


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.1-4.el6
changelog:
  - Fix an incomplete substitution in Makefile (rhbz#805892)
  - Only deregister cim classes on uninstall (rhbz#864096)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-5
changelog:
  - Distinguish running or inactive state (rhbz#913164)
  - Only support script on bridge for xen domains (rhbz#908083)


author: Michal Privoznik <mprivozn@redhat.com> - 0.6.1-7.el6
changelog:
  - libvirt-cim-get_dominfo-Use-VIR_DOMAIN_XML_SECURE-more-wisely.patch (rhbz#826179)
  - Don't install open-pegasus' specific providers (rhbz#859122)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6
changelog:
  - Add shareable property to disk and dumpCore tag support (rhbz#1000937)
  - Update spec file to more closely match upstream
  - Fixed dates in changelog


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6_5.1
changelog:
  - VSSD: Add properties for arch and machine (rhbz#1055626)
  - libxkutil: Improve domain.os_info cleanup
  - Coverity: Resolve RESOURCE_LEAK - parse_os()


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-21
changelog:
  - mod_proxy_ajp: ignore flushing if headers have not been sent (#853160)
  - mod_proxy_ajp: do not mark worker in error state when one request
    timeouts (#864317)
  - mod_ssl: do not run post script if all files are already created (#752618)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-22
changelog:
  - mod_cache: fix header merging for 304 case, thanks to Roy Badami (#868283)
  - mod_cache: fix handling of 304 responses (#868253)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-25
changelog:
  - htcacheclean: exit with code 4 if nonprivileged user runs initscript (#805810)
  - rotatelogs: omit the second arg when invoking a post-rotate program (#876923)


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.2
changelog:
  - Fixes for the iwpmd start-up scripts with systemd
  - A change to enable multi devices per port mapper client
  - Releasing libiwpm-1.0.2 to be included in OFED-3.18


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.3rc1
changelog:
  - Adding iwpmd.conf file to enable changing the size
    of the netlink socket receive buffer
  - Including a fix for failing to send netlink messages


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.3
changelog:
  - Fix for the init script to enable the service to start automatically
    after boot on SLES11 SP4
  - Releasing libiwpm-1.0.3 to be included in OFED-3.18-1


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - fixed border at insertion cursor if XmNmarginWidth is set (rhbz#796014)
    (MotifZone bug #1552)
  - fixed use after free with comboboxes and XIM (rhbz#836892)
    (MotifZone bug #1559)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-7.1
changelog:
  - added lost patch for #647411: openmotif-2.3.3-motifzone_1529.patch
    (rhbz#1096315)
  - fixed missing outline in mwm while moving window (rhbz#1000343)
    (copy of rhbz#997241)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-8
changelog:
  - fixed Label size computed wrong within a Form (rhbz#869782) (rhbz#953938)
    (copy of rhbz#980577)
    (MotifZone bug #1612 final upstream patch with white space changes)
  - fixed segmentation violation in XmList after calling XmListDeleteAllItems 
    and clicking on a new item with left-shift left-button click (rhbz#1058644)
    (MotifZone bug #1636)


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-2
changelog:
  - Pass timeouts to resource agents
    (pass_timeouts_to_resource_agents.patch)
    Resolves: rhbz#606480


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-7
changelog:
  - Fix rgmanager init script to be more LSB compliant
    (rgmanager_init_lsb_compliant.patch)
    Resolves: rhbz#612110


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-9
changelog:
  - Make clulog filter correctly based on cluster.conf
    (make_clulog_filter_correctly.patch)
    Resolves: rhbz#609866


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-10
changelog:
  - Add failover domain documentation and other improvements
    (man_page_improvements.patch)
    Resolves: rhbz#557563


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-11
changelog:
  - rgmanager: Present flags in clustat output
    (present_flags_in_clustat_output.patch)
    Resolves: rhbz#634298
  - rgmanager: Fix clustat return code
    (fix_clustat_return_code.patch)
    Resolves: rhbz#621562
  - rgmanager: Honor restricted FDs during migrations
    (honor_restricted_fds_during_migrations.patch)
    Resolves: rhbz#621694
  - rgmanager: Add non-critical flag to resources
    (add_non_critical_flag_to_resources.patch)
    rgmanager: Add non-critical base behavior
    (add_non_critical_base_behavior.patch)
    rgmanager: Header cleanup
    (header_cleanup.patch)
    rgmanager: Use rg_strings.c for flags
    (use_rg_strings_c_for_flags.patch)
    rgmanager: Present all flags in clustat output
    (present_all_flags_in_clustat_output.patch)
    rgmanager: Mark non-critical resources disabled
    (mark_non_critical_resources_disabled.patch)
    rgmanager: Add convalesce operation
    (add_convalesce_operation.patch)
    rgmanager: Allow restart,disable recovery policy
    (allow_restart,disable_recovery_policy.patch)
    rgmanager: Ensure state is preserved across config changes
    (ensure_state_is_preserved_across_config_changes.patch)
    rgmanager: Fix handling of independent subtrees
    (fix_handling_of_independent_subtrees.patch)
    rgmanager: Do not fail service if non-critical resources fail to stop
    (do_not_fail_service_if_non_critical_resources_fail_to_stop.patch)
    rgmanager: Add -c option to man page & clusvcadm -h
    (add_c_option_to_man_page_clusvcadm_h.patch)
    rgmanager: Add independent subtree restart thresholds
    (add_independent_subtree_restart_thresholds.patch)
    rgmanager: clean up independent subtree restart handling
    (clean_up_independent_subtree_restart_handling.patch)
    rgmanager: Fix corner case in critical/non-critical handling
    (fix_corner_case_in_critical_non_critical_handling.patch)
    rgmanager: Support convalesce w/ central_processing
    (support_convalesce_w_central_processing.patch)
    Resolves: rhbz#634277
  - rgmanager: Update last_owner on failover
    (update_last_owner_on_failover.patch)
    Resolves: rhbz#639103
  - rgmanager: DBus notifications for service state changes
    (dbus_notifications_for_service_state_changes.patch)
    rgmanager: Clean up dbus notifications
    (clean_up_dbus_notifications.patch)
    rgmanager: Retry dbus if we get disconnected
    (retry_dbus_if_we_get_disconnected.patch)
    rgmanager: minor dbus cleanups
    (minor_dbus_cleanups.patch)
    rgmanager: Match fenced's option to disable DBus
    (match_fenced_s_option_to_disable_dbus.patch)
    rgmanager: allow dbus notification code to be disabled
    (allow_dbus_notification_code_to_be_disabled.patch)
    Resolves: rhbz#657756
  - rgmanager: Make clufindhostname -i predictable
    (make_clufindhostname_i_predictable.patch)
    Resolves: rhbz#661881
  - rgmanager: Fix nofailback when service is in 'starting' state
    (fix_nofailback_when_service_is_in_starting_state.patch)
    Resolves: rhbz#672841


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.1.1-1
changelog:
  - New upstream release.
  - spec file updates:
    * Cleanup macro usage
    * Drop Conflict: in favour of correct Requires:
    * Whitespace cleanup


author: Ryan O'Hara <rohara@redhat.com> - 1.1.1-2
changelog:
  - Resolves: rhbz#555164
  - Resolves: rhbz#557275
  - Resolves: rhbz#557622
  - Add upstream revision 2104 - Fix saCkptDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2105 - Fix saTmrDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2106 - Fix saLckDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2107 - Fix saClmDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2108 - Fix saMsgDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2109 - Prevents iteration of a checkpoint section during synchronization.
  - Add upstream revision 2111 - Update to openais.spec.in to fix URL and File location.


author: Dan Williams <dcbw@redhat.com> - 1:0.6.8-3
changelog:
  - Ensure the supplicant starts and ends with clean driver state
  - Handle driver disconnect spammage by forcibly clearing SSID
  - Don't switch access points unless the current association is dire (rh #493745)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-2
changelog:
  - Fix wrong usage of libcurl API, which caused segfaults when wbemcli was used
    with https scheme (patch by kdudka@redhat.com)
    Resolves: #868905
  - Remove tog-pegasus requires
    Resolves: #745264


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-14
changelog:
  - Update to upstream 2.0.0rc3 (#680993)
  - Set minimum version of sssd to 1.5.1-12
  - Remove SuitespotGroup patch
  - Rebase remove-pkinit patch


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-16
changelog:
  - Use realm provided by installer in LDAP Updater (#684744)
  - Use args for domain and server when doing DNS discovery in client (#684780)
  - Fix 2 SELinux issues in dogtag replication (#684269)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-17
changelog:
  - Wait for Directory Service ports to open (#688934)
  - Mixed case hostname can cause issues and confusion (#688622)
  - Wrong timeout parameter in ipapython (#684273)
  - Run ipa-ldap-updater on upgrades (#688931)
  - Internal Error and trace back when adding DNS AAAA record (#689452)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-19
changelog:
  - Port 7390 is managed by selinux-policy-3.7.19-80. Update
    ipa-repl_selinux.patch to not manage it any more. (#691883)
  - Patch to fix setting gidnumber when a user is created. (#692168)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-20
changelog:
  - Set min version of 389-ds-base to 1.2.8.0-1 for fix in BZ 693466.
  - Fix some problems in IPA schema (#692978)
  - postalCode should be a string not an integer (#692945)


author: Parag <paragn@fedoraproject.org> - 4.0.3-9
changelog:
  - Merge-Review #226071
  - Removed XFree86-libs, xorg-x11-libs, XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - spec cleanups


author: Ray Strode <rstrode@redhat.com> 2.30.2-7
changelog:
  - Drop panel names from default config so they don't override
    translated fallback names
    Resolves: #633853


author: Ray Strode <rstrode@redhat.com> 2.30.2-10
changelog:
  - Fix monitor naming problem noticed by QE when testing fix
    that went in 2.30.2-8
    Related: #585312


author: Ray Strode <rstrode@redhat.com> 2.30.2-11
changelog:
  - Fix size negotiation problem noticed by QE and GSS when
    testing fix that went in 2.30.2-9
    Resolves: #671088
    Related: #607665


author: Ray Strode <rstrode@redhat.com> 2.30.2-12
changelog:
  - Fix positioning negotiation problem noticed by QE when
    testing fix that went in 2.30.2-11
    Resolves: #671088
  - Improve monitor labeling heuristics
    Related: #585312


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.14.1.el6]
changelog:
  - [net] fix vlan gro path (Jiri Pirko) [810454 720611]
  - [virt] VMX: vmx_set_cr0 expects kvm->srcu locked (Marcelo Tosatti) [808206 807507] {CVE-2012-1601}
  - [virt] KVM: Ensure all vcpus are consistent with in-kernel irqchip settings (Marcelo Tosatti) [808206 807507] {CVE-2012-1601}
  - [scsi] fcoe: Move destroy_work to a private work queue (Neil Horman) [809388 806119]
  - [fs] jbd2: clear BH_Delay & BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [749727 748713] {CVE-2011-4086}
  - [net] af_iucv: offer new getsockopt SO_MSGSIZE (Hendrik Brueckner) [804547 786997]
  - [net] af_iucv: performance improvements for new HS transport (Hendrik Brueckner) [804548 786996]
  - [s390x] af_iucv: remove IUCV-pathes completely (Hendrik Brueckner) [807158 786960]
  - [x86] iommu/amd: Fix wrong shift direction (Don Dutile) [809376 781531]
  - [x86] iommu/amd: Don't use MSI address range for DMA addresses (Don Dutile) [809374 781524]
  - [fs] NFSv4: Further reduce the footprint of the idmapper (Steve Dickson) [802852 730045]
  - [fs] NFSv4: Reduce the footprint of the idmapper (Steve Dickson) [802852 730045]
  - [scsi] fcoe: Make fcoe_transport_destroy a synchronous operation (Neil Horman) [809372 771251]
  - [net] ipv4: Constrain UFO fragment sizes to multiples of 8 bytes (Jiri Benc) [809104 797731]
  - [net] ipv4: Don't use ufo handling on later transformed packets (Jiri Benc) [809104 797731]
  - [net] udp: Add UFO to NETIF_F_GSO_SOFTWARE (Jiri Benc) [809104 797731]
  - [fs] nfs: Try using machine credentials for RENEW calls (Sachin Prabhu) [806205 795441]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.15.1.el6]
changelog:
  - [net] SUNRPC: We must not use list_for_each_entry_safe() in rpc_wake_up() (Steve Dickson) [811299 809928]
  - [char] ipmi: Increase KCS timeouts (Matthew Garrett) [806906 803378]
  - [kernel] sched: Fix ancient race in do_exit() (Frantisek Hrbata) [805457 784758]
  - [scsi] sd: Unmap discard alignment needs to be converted to bytes (Mike Snitzer) [810322 805519]
  - [scsi] sd: Fix VPD buffer allocations (Mike Snitzer) [810322 805519]
  - [x86] Ivy Bridge kernel rdrand support (Jay Fenlason) [800268 696442]
  - [scsi] fix system lock up from scsi error flood (Frantisek Hrbata) [809378 800555]
  - [sound] ALSA: pcm midlevel code - add time check for (Jaroslav Kysela) [801329 798984]
  - [pci] Add pcie_hp=nomsi to disable MSI/MSI-X for pciehp driver (hiro muneda) [807426 728852]
  - [sound] ALSA: enable OSS emulation layer for PCM and mixer (Jaroslav Kysela) [812960 657291]
  - [scsi] qla4xxx: Fixed BFS with sendtargets as boot index (Chad Dupuis) [803881 722297]
  - [fs] nfs: Additional readdir cookie loop information (Steve Dickson) [811135 770250]
  - [fs] NFS: Fix spurious readdir cookie loop messages (Steve Dickson) [811135 770250]
  - [x86] powernow-k8: Fix indexing issue (Frank Arnold) [809391 781566]
  - [x86] powernow-k8: Avoid Pstate MSR accesses on systems supporting CPB (Frank Arnold) [809391 781566]
  - [redhat] spec: Add python-perf-debuginfo subpackage (Josh Boyer) [806859 806859]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.9.1.el6]
changelog:
  - [mm] hugetlb: fix race in region tracking (Herton R. Krzesinski) [1274599 1260755]
  - [mm] hugetlb: improve, cleanup resv_map parameters (Herton R. Krzesinski) [1274599 1260755]
  - [mm] hugetlb: unify region structure handling (Herton R. Krzesinski) [1274599 1260755]
  - [mm] hugetlb: change variable name reservations to resv (Herton R. Krzesinski) [1274599 1260755]
  - [fs] dcache: Log ELOOP rather than creating a loop (Benjamin Coddington) [1272858 1254020]
  - [fs] dcache: Fix loop checks in d_materialise_unique (Benjamin Coddington) [1272858 1254020]


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.207-1
changelog:
  - Remove firmware from the boot image that does not apply to ppc64 (dcantrell)
    Resolves: rhbz#1006043
  - fcoe: adapt bnx2fc detection to changed sysfs path structure (rvykydal)
    Resolves: rhbz#1008731
  - Do not select FS packages over and over (vpodzime)
    Resolves: rhbz#994504
  - Check size of images/netboot/ppc64.img to see if it's larger than 32M.
    (dcantrell)
    Related: rhbz#1006043


author: David Cantrell <dcantrell@redhat.com> - 13.21.208-1
changelog:
  - Catch BUILDARCH set to 'ppc' or 'ppc64' when trimming down the image.
    (dcantrell)
    Related: rhbz#1014719
  - Move and fix the ppc64 image size check (dshea)
    Resolves: rhbz#1014719
  - Whitespace changes for mk-images.ppc (dshea)
    Related: rhbz#1014719


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.209-1
changelog:
  - Forced removal of some kernel modules in the ppc64 ramdisk (dcantrell)
    Resolves: rhbz#1014719
  - Add some more safety checks for the initrd.img size check on ppc64.
    (dcantrell)
    Related: rhbz#1014719


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.210-1
changelog:
  - Fix bootloader issues on s390x. (sbueno+anaconda)
    Resolves: rhbz#1008941
    Resolves: rhbz#875644
    Resolves: rhbz#894050


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.211-1
changelog:
  - Do not limit swap size to 10 % of disk space for hibernation (vpodzime)
    Resolves: rhbz#1003844
  - Fix the display of multipath devices (dshea)
    Related: rhbz#914637
    Resolves: rhbz#1007641
  - Fix traceback in s390x bootloader code. (sbueno+anaconda)
    Resolves: rhbz#1017068
  - Support bonding in %pre section (rvykydal)
    Resolves: rhbz#971961


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.212-1
changelog:
  - Fix getDiskPart for nvme devices (vpavlin)
    Resolves: rhbz#1018703
  - fcoe: rise fipvlan timeout to 100 (rvykydal)
    Resolves: rhbz#1009691
  - Revert "Check if disklabel is set (mkolman)"
    Resolves: rhbz#1007683
  - Check if disklabel is set (mkolman)
    Resolves: rhbz#1007683


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.213-1
changelog:
  - Remove manual call to recreate initrd if installing on iSCSI.
    (sbueno+anaconda)
    Resolves: rhbz#1007884
  - Some devices may not be present during kickstart parse, so when there is no
    match revert to previous behavior and just use the name as-is. (bcl)
    Resolves: rhbz#1014658


author: Ryan McCabe <rmccabe@redhat.com> - 0.16.2-14
changelog:
  - Fix bz733798 (modclusterd service start doesn't obey failover domain ordering)
  - Fix bz736818 (fix potential deadlocks when calling the execute() function)


author: Richard Hughes <richard@hughsie.com> - 010-4
changelog:
  - Continue to poll when we guessed a status value, and only stop when the
    kernel says definitively that we are fully charged.


author: Richard Hughes <rhughes@redhat.com> - 011-0.1.20090914git
changelog:
  - Update to todays git snapshot to fix the session exploding when a USB UPS is
    inserted then removed a few times.


author: Richard Hughes <richard@hughsie.com> - 012-1
changelog:
  - Update to 012
  - Detect encrypted swap and prevent hibernate in this case.
  - When we do a delayed refresh, actually do 5 x 1 second apart rather
    than 1 x 3 seconds which should fix some slow battery devices.


author: Richard Hughes <rhughes@redhat.com> - 013-0.1.20091118git
changelog:
  - Update to a git snapshot
  - Don't crash the daemon if the battery is broken. Fixes #533654
  - Avoid going from discharging to pending-discharge when the battery is very low
  - Fix the toshiba battery recall notices


author: Richard Hughes <richard@hughsie.com> - 013-1
changelog:
  - Update to 013
  - Detect more supported UPS devices.
  - Fix the Toshiba battery recall data.
  - Fix a crash when the battery NVRAM is invalid.
  - Add a couple of fixes for very new battery support.


author: Richard Hughes <rhughes@redhat.com> - 014-1
changelog:
  - Check if swap exists before determining how much is free
  - Prevent segfault if connection to system dbus fails
  - Fix segfault in the history code.
  - Resolves: #553589


author: Richard Hughes <rhughes@redhat.com> - 014-3
changelog:
  - Fix the multilib file conflict when installing DeviceKit-power-devel
    by splitting out a noarch DeviceKit-power-devel-docs subpackage.
  - The reason this is required is that gtk-doc generates random link
    targets in the autogenerated documentation which upsets rpm as the
    files no longer have the same checksum.
  - Resolves: #727544


author: Brian C. Lane <bcl@redhat.com> - 13.21.188-1
changelog:
  - Revert "Reserve 50% of VG for interactive installs (bcl)"
    Resolves: rhbz#875918
    Resolves: rhbz#884761
  - Fix fipvlan -f argument once more and for good (rvykydal)
    Related: rhbz#836321
  - Generate kickstart fcoe commands for devices added in UI (rvykydal)
    Related: rhbz#813998
    Resolves: rhbz#813998


author: Brian C. Lane <bcl@redhat.com> - 13.21.190-1
changelog:
  - Don't perform unnecessary str formatting on boot dev name (sbueno+anaconda)
    Resolves: rhbz#875652
  - Generate kickstart fcoe commands for devices added in UI (rvykydal)
    Related: rhbz#813998
    Resolves: rhbz#813998


author: Brian C. Lane <bcl@redhat.com> - 13.21.191-1
changelog:
  - include .ssh.hmac in image (bcl)
    Resolves: rhbz#886479
  - Pass lv name sans vg name to safeLvmName. (dlehman)
    Resolves: rhbz#886150
  - Validate and correct vg names as needed. (dlehman)
    Related: rhbz#747278


author: Brian C. Lane <bcl@redhat.com> - 13.21.193-1
changelog:
  - catch runtime errors and display message to user (sbueno+anaconda)
    Resolves: rhbz#730023
  - raise OSError with an error code and error string (sbueno+anaconda)
    Resolves: rhbz#730023


author: Brian C. Lane <bcl@redhat.com> - 13.21.195-1
changelog:
  - Disconnect active slaves before activating bond (rvykydal)
    Related: rhbz#662007
    Resolves: rhbz#662007
  - Some modules for Microsoft PV have different names (vpodzime)
    Related: rhbz#834689


author: Bob Relyea <rrelyea@redhat.com> - 0.6.2-1
changelog:
  - Pick up the latest pam_pkcs11 from upstream

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-11.1
changelog:
  - Silence expected errors from the console
  - make sure change log has correct dates and email
    Resolves: #654460, #586149


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.5.1.el6]
changelog:
  - [kernel] cgroupfs: use init_cred when populating new cgroupfs mount (Eric Paris) [713135 700538]
  - [netdrv] ixgbe: adding FdirMode module option (Andy Gospodarek) [711550 707287]
  - [crypto] testmgr: add xts-aes-256 self-test (Jarod Wilson) [711548 706167]
  - [fs] ext3: Fix lost extented attributes for inode with ino == 11 (Eric Sandeen) [712413 662666]
  - [mm] Prevent Disk IO throughput degradation due to memory allocation stalls (Larry Woodman) [711540 679526]
  - [net] sock: adjust prot->obj_size always (Jiri Pirko) [709381 704231]
  - [fs] GFS2: resource group bitmap corruption resulting in panics and withdraws (Robert S Peterson) [711528 702057]
  - [x86] kprobes: Disable irqs during optimized callback (Jiri Olsa) [711545 699865]
  - [mm] slab, kmemleak: pass the correct pointer to kmemleak_erase() (Steve Best) [712414 698023]
  - [net] fix netns vs proto registration ordering (Wade Mealing) [702305 702306] {CVE-2011-1767 CVE-2011-1768}
  - [ppc] Fix oops if scan_dispatch_log is called too early (Steve Best) [711524 696777]
  - [virt] i8259: initialize isr_ack (Avi Kivity) [711520 670765]
  - [virt] VMX: Save and restore tr selector across mode switches (Gleb Natapov) [711535 693894]
  - [virt] VMX: update live TR selector if it changes in real mode (Gleb Natapov) [711535 693894]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.6.1.el6]
changelog:
  - [audit] ia32entry.S sign extend error codes when calling 64 bit code (Eric Paris) [713831 703935]
  - [audit] push audit success and retcode into arch ptrace.h (Eric Paris) [713831 703935]
  - [x86] intel-iommu: Flush unmaps at domain_exit (Alex Williamson) [713458 705441]
  - [x86] intel-iommu: Only unlink device domains from iommu (Alex Williamson) [713458 705441]
  - [virt] x86: Mask out unsupported CPUID features if running on xen (Igor Mammedov) [711546 703055]
  - [block] fix accounting bug on cross partition merges (Jerome Marchand) [682989 669363]
  - [net] vlan: remove multiqueue ability from vlan device (Neil Horman) [713494 703245]
  - [net] Fix netif_set_real_num_tx_queues (Neil Horman) [713492 702742]
  - [scsi] mpt2sas: move event handling of MPT2SAS_TURN_ON_FAULT_LED in process context (Tomas Henzl) [714190 701951]
  - [mm] thp: simple fix for /dev/zero THP mprotect bug (Andrea Arcangeli) [714762 690444]


author: Akemi Yagi <toracat@centos.org> [2.6.32-131.6.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire,
    all serial ATA, BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client,
    parallel printer support.
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-7
changelog:
  - pam_console: fix memory corruption when executing handlers (patch by
    Stas Sergeev) and a few more fixes in the handler execution code (#532302)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.5
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #1000313)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.6
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #1002179)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-6
changelog:
  - Resolves: Bug 811291 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - typo in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-9
changelog:
  - Resolves: Bug 815991 - crash in ldap_initialize with multiple threads
  -  previous fix was still crashing in ldclt


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-11
changelog:
  - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress
  - 1.2.10.2-10 was built from the private branch


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-12
changelog:
  - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress
  - Resolves: Bug 821542 - letters in object's cn get converted to lowercase when renaming object


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-14
changelog:
  - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress
  -- patch 0015 fixes a small memleak in previous patch


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Update to NSS_3_15_1_RTM
  - Resolves: rhbz#1002644 - Rebase RHEL 6 to NSS-UTIL 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Preserve existing permissions when replacing existing pkcs11.txt file, but keep strict default permissions for new files
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS


author: Honza Horak <hhorak@redhat.com> - 7.1-6
changelog:
  - Allow buffer length of the block to be shorter than multiple of 16,
    even in case of DAO writing
    Resolves: #807474


author: Adam Jackson <ajax@redhat.com> 1.4.13-6
changelog:
  - Fix rendering corruption on RANDR-enabled setups (#814381)
  - Fix display setup on G200ER (#810224)


author: Warren Togami <wtogami@redhat.com> - 2.6.6-2
changelog:
  - Upstream backports:
      0e3079d15adeb12c1e57ceaf5bf037f9b71c8abd Fix AIM SSL clientLogin
      b14ee507e932a395a0e1f29298af162c8614ca0f Fix AIM clientLogin with proxy


author: Ray Strode <rstrode@redhat.com> 2.28.2-13
changelog:
  - GDM doesn't handle keyboard selection for the session anymore,
    yet it still claims to.  Ignore what it says.
    Resolves: #693843


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.2-17
changelog:
  - wacom: add support for NV-CONTROL extension (#805036)
  - wacom: fix button mapping (#805042)
  - wacom: add LED support from upstream (#805064)
    Resolves: #805036 #805042 #805064


author: Michal Luscon <mluscon@redhat.con> - 7:3.1.10-8
changelog:
  - Resolves: #844723 - NTLM pass-through authentication does not work
  - Resolves: #832484 - Squid exits when IPv6 is disabled and request contains IPv6 address


author: Stepan Kasal <skasal@redhat.com> - 0.9.7-4
changelog:
  - repack the tarball, there are .jar files without any source
  - do not BR findutils, they are guaranteed in Fedora mock
  - fix obsolete, so that it covers only packages created before this
    spec was added to Fedora


author: Petr Pisar <ppisar@redhat.com> - 0.9.7-7
changelog:
  - Revert CVE-2011-0904 and CVE-2011-0905 patch because libvncserver is not
    vulnerable (bug #696767)


author: Petr Pisar <ppisar@redhat.com> - 0.9.7-7.1
changelog:
  - Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157668)
  - Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
    (bug #1157668)
  - Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
    handling) (bug #1157668)
  - Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
    (bug #1157668)
  - Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
    handling) (bug #1157668)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.5-1
changelog:
  - avoid premature exit on CA data analysis failures (should fix an issue
    reported by Natxo Asenjo)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.7-1
changelog:
  - correctly read CA not-valid-after dates on 32-bit machines (also reported by
    Natxo Asenjo), so that we don't spin on polling them (#1163023)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.8-1
changelog:
  - dogtag-submit: accept additional options to pass to the server when
    approving requests using agent creds (#1165155, patch by Jan Cholasta)
  - getcert: print help output when 'status' isn't given any args (#1163541)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.1-1
changelog:
  - update to 0.77
    - add initial, still rough, SCEP support (#1140241,#1161768)
      - add an scep-submit helper to handle part of it
    - getcert: add add-ca/add-scep-ca/modify-ca/remove-ca commands
    - getcert: add -l, -L flags to request/resubmit/start-tracking commands
      to provide a way to set a ChallengePassword in signing requests
    - lay some groundwork for rekeying support
    - bundled dogtag enrollment helpers now output debugging info to stderr (#)
    - ipa-getcert: fix a crash when using DNS discovery to locate servers (#39)
    - getcert: fix displaying of pre-request pre-/post-save commands (#1178190,
        - use Zanata for translations
    - getcert list: list the certificate's profile name, if it contains one


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.2-1
changelog:
  - expose the certificate's not-valid-before and not-valid-after dates as a
    property over D-Bus (ticket #41)
  - give the local signer its own configuration option to set the lifetime
    of its signing certificate, falling back to the lifetime configured for
    the self-signer as a default to match the previous behavior
  - fix a potential read segfault parsing the output of an enrollment helper,
    introduced in 0.77 (thanks to Steve Neuharth)
  - read the ns-certtype extension value in certificates
  - request an enrollment certtype extension to CSRs if we have a profile name
    that we want to use (ticket #17, possibly part of IPA ticket #57)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.3-1
changelog:
  - fix a data loss bug when saving renewed certificates to NSS databases - the
    private key could be removed in error since 0.77
  - fixes for bugs found by static analysis
  - fix self-tests when built with OpenSSL 1.0.2


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.4-1
changelog:
  - don't display PINs in "getcert list" output (ticket #42, #1222595)
  - clean up launching of a private instance in "getcert"
  - expand on the don't-delete-private-key fix from 0.77.3 by letting NSS's
    own safety checks have an effect
  - backport record-keeping of key generation dates and counts of how many
    times we've gotten certificates using a given key pair


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.5-1
changelog:
  - pass $CERTMONGER_REQ_IP_ADDRESS to enrollment helpers if the signing request
    includes IP address subjectAltName values
  - correctly verify signatures on SCEP server replies when the signer is neither
    the top-level CA nor the RA (feedback in #1161768)
  - correctly verify signatures on SCEP server replies when there is more than
    one certificate in the chain between the RA and the top-level CA (feedback in


author: Jan Cholasta <jcholast@redhat.com> 0.77.5-2
changelog:
  - Accept cases where NSS insists on 2048-bit DSA
  - Drop workarounds for DSA keygen with NSS
  - Get vague about what we expect from certutil
  - Accept 1016 instead of 1024 bit for DSA keygen
  - Add an alternate accepted result for DSA keygen
  - Fix a possible uninitialized memory read


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-38
changelog:
  - refresh expired cookie in test172 from upstream test-suite (#1069271)
  - fix a memory leak caused by write after close (#1078562)
  - nss: implement non-blocking SSL handshake (#1083742)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-40
changelog:
  - fix re-use of wrong HTTP NTLM connection (CVE-2014-0015)
  - fix connection re-use when using different log-in credentials (CVE-2014-0138)


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-45
changelog:
  - Don't create zero-length request files (bug #740093).
  - The lp and lpr commands did not cancel jobs queued from stdin on an error
    (STR #4015, bug #738914).
  - Fixed condition in textonly filter to create temporary file
    regardless of the number of copies specified. (bug #738410)


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-51
changelog:
  - Applied patch to fix CVE-2012-5519 (privilege escalation for users
    in SystemGroup or with equivalent polkit permission).  This prevents
    HTTP PUT requests with paths under /admin/conf/ other than that for
    cupsd.conf, and also prevents such requests altering certain
    configuration directives such as PageLog and FileDevice (bug #875898).


author: Peter Hutterer <peter.hutterer@redhat.com> 0.16.1-2
changelog:
  - Fix crash for xorg.conf devices with same device node (#862939)
  - Fix spurious cursor jump when using I5 express keys (#859851)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-2
changelog:
  - Don't fail on invalid action properties, just ignore them. g-s-d can't
    handle that, see #1095019. (#1077478)
  - Drop all now unused patches


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-3
changelog:
  - Merge RHEL7 extra patches, add RHEL6 compat patch to enable INPUT_PROP
    checking
  - Grab the event device by default for backwards-compat (#1077478)


author: David Howells <dhowells@redhat.com> - 1.3-1
changelog:
  - Fix compiler warnings in request-key.
  - Expose the kernel function to get a key's security context.
  - Expose the kernel function to set a processes keyring onto its parent.
  - Move libkeyutils library version to 1.3.


author: David Howells <dhowells@redhat.com> - 1.4-5
changelog:
  - Make keyctl show handle deeply nested keyrings [BZ 1075652].
  - The key serial ID field displayed by keyctl show may be up to 10 digits [BZ 1075652].
  - Make keyctl padd & co. handle binary data containing NUL chars [BZ 1075652].
  - The input buffer for keyctl padd & co. should be 1MB-1 in size [BZ 1075652].


author: Florian Festi <ffesti@redhat.com> - 4.8.0-28
changelog:
  - Handle identical binaries for debug-info (#727872)
  - Fix typos in Japanese rpm man page (#845065)
  - Document -D and -E options in man page (#845063)
  - Add --setperms and --setuids to the man page (#839126)
  - Update man page that SHA256 is also used for file digest (#804049)
  - Remove --fileid from man page to get rid of md5
  - Remove -s from patch calls (#773503)
  - Force _host_vendor to redhat to better match toolchain (#743229)
  - Backport reloadConfig for Python API (#825147)
  - Support for dpkg-style sorting of tilde in version/release (#825087)
  - Fix explicit directory %attr() when %defattr() is active (#730473)
  - Don't load keyring if signature checking is disabled (#664696)
  - Retry read() to fix rpm2cpio with pipe as stdin (#802839)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-33
changelog:
  - Fix build-time double-free on file capability processing (#904818)
  - Fix include-directive getting processed on false branch (#920190)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-38
changelog:
  - mod_cgid: add security fix for CVE-2014-0231
  - mod_deflate: add security fix for CVE-2014-0118
  - mod_status: add security fix for CVE-2014-0226


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-20.P1
changelog:
  - The 'hardware [ethernet|etc] ...;' parameter in host records has been
    extended to attempt to match DHCPv6 clients by the last octets
    of a DUID-LL or DUID-LLT provided by the client. (#706974)
  - Explicitly clear the ARP cache and flush all addresses & routes
    instead of bringing the interface down (#694799)
  - Use PID for seeding the random number generator in dhclient (#694798)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-21.P1
changelog:
  - A pair of defects cause the server to halt upon processing certain packets
    (CVE-2011-2748, CVE-2011-2749, #729885)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-7
changelog:
  - Update expired PayPayEE.cert test certificate
  - Conditionalize some database tests on user not being root


author: Sumit Bose <sbose@redhat.com> - 1.0.112-2
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 17,
     git commit c07cd2cb042d62ee4adcfa1b75dd423424ca681b


author: Sumit Bose <sbose@redhat.com> - 1.0.112-3
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 18,
     git commit de49edcc0dfea7c4396cdbd9e4897358b5474100


author: Sumit Bose <sbose@redhat.com> - 1.0.114.3-2
changelog:
  - Resolves: rhbz#728545 - ctdbd leaks a file descriptor
   - Resolves: rhbz#727913 - Coverity scan revealed defects


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-1
changelog:
  - Updated to ctdb version 1.0.114.5
   - Resolves: rhbz#821715 - ctdbd on a node crashes when another node in the
     cluster is brought down
   - Resolves: rhbz#758367 - ctdb w/ GFS2: A stable node gets banned
   - Resolves: rhbz#838885 - Rebase ctdb to version 1.0.114.5 in RHEL 6.4


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-2
changelog:
  - Increased release number to be able to update RHS version of ctdb
   - Related: rhbz#838885 - Rebase ctdb to version 1.0.114.5 in RHEL 6.4


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-3
changelog:
  - Improve output of ctdb status by adding the number of deleted nodes
   - Fix a memory and an unchecked return value found by coverity
   - Resolves: rhbz#866670 - ctdb status reports more nodes then available
   - Resolves: rhbz#874058 - One resource leak && unchecked return value


author: Sumit Bose <sbose@redhat.com> - 2.5.1-1
changelog:
  - Update to ctdb version 2.5.1
   - Resolves: rhbz#1061630
   - Resolves: rhbz#1085447
   - Resolves: rhbz#987099
   - Resolves: rhbz#1085413


author: John Kacur <jkacur@redhat.com> - 1.0.5-8
changelog:
  - trace-cmd: Use splice to filter out rest of buffer {746656}
  - trace-cmd: Do not use threads for extract {746656}
  Resolves:bz746656


author: John Kacur <jkacur@redhat.com> - 1.0.5-11
changelog:
  - Rework spec to use apply patches separate from upstream
  - trace-cmd-Add-checks-for-invalid-pointers-to-fix-seg.patch (879814)
  Resolves:bz879814


author: John Kacur <jkacur@redhat.com> - 2.2.4-3
changelog:
  - trace-cmd-don-t-call-free-on-tracing-and-path-more-t.patch
  - trace-cmd-trace-cmd.c-Don-t-deref-re-if-it-is-NULL.patch
  - trace-cmd-trace-recorder.c-Prevent-free-of-unitializ.patch
  - trace-cmd-trace-util.c-Prevent-resource-leak-by-clos.patch
  Resolves: rhbz#1288579


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.25
changelog:
  - Add 0061-RHBZ-620479-find-rport.patch
    * multipath now will correctly set the dev_loss_tmo and fast_io_fail_tmo
      for setups where a devices rport id doesn't match its target id.
  - Resolves: bz #620479


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.27
changelog:
  - Add 0063-RHBZ-595719-udev_link_priority.patch
     * Increase the priority of multipath symlinks
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.28
changelog:
  - Add 0064-RHBZ-612173-fix-reverse-lookup.patch
     * Fix multipath's wwid bindings file reverse lookup
  - Resolves: bz #612173


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.29
changelog:
  - Modify 0063-RHBZ-595719-udev_link_priority.patch
      * Change link priority from 5 to 10
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.30
changelog:
  - Modify 0063-RHBZ-595719-udev_link_priority.patch
      * move link_priority line up in the udev rules. Hopefully this is the
        actual fix.
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.31
changelog:
  - Modify 0063-RHBZ-595719-udev_link_priority.patch
      * make link_priority only work on multipath devices and partitions.
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.31.el6_0.1
changelog:
  - Add 0065-RHBZ-635088-update-priority.patch
      * refresh all priorities when a new path comes online
  - Resolves: bz #658937


author: Benjamin Marzinski <bmarizns@redhat.com> -0.4.9.31.el6_0.2
changelog:
  - Add 0066-RHBZ-672151-fix-sysfs-caching.patch
      * Remove attribute value caching, and free cached parent devices on remove
  - Resolves: bz #672151


author: Benjamin Marzinski <bmarizns@redhat.com> -0.4.9.31.el6_0.3
changelog:
  - Add 0067-RHBZ-684684-sysfs-device-cleanup.patch
     * Make sure to remove the sysfs device from cache when the path is
       removed. Also, only search the sysfs device cache under the vecs lock
  - Resolves: bz #684684


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-5
changelog:
  - spec cleanup
  - simplified packaging (merge -perl in -utils)
  - remove obsoleted and/or unmaintained additional sources/patches
  - remove long time not used files from the cvs/srpm
  - update additional sources/patches from their upstream


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-6.4
changelog:
  - fix CVE-2011-3481: NULL pointer dereference via crafted 
    References header in email (#738391)
  - fix CVE-2011-3372: nntpd authentication bypass (#740822)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.3-5
changelog:
  - libopenjpeg has undefined references (#467661)
  - openjpeg.h is installed in a directory different from upstream's default (#484887)
  - drop -O3 (#504663)
  - add %check section
  - %files: track libopenjpeg somajor (2)


author: Tom Lane <tgl@redhat.com> 1.3-7
changelog:
  - Apply two upstream fixes for crasher bugs
  Resolves: #609389
  - Fix FTBFS: ImplicitDSOLinking (see Fedora bug 564783)


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831562
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038987 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.10-8
changelog:
  - Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
  - Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-1
changelog:
  - upgrade to new upstream stable version 4.4.2
    Resolves: #554998
  - add support for arbitrary number of open file descriptors
  - run libtoolize to avoid errors due mismatching libtool version
  - change exec-prefix to /


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-3
changelog:
  - remove '_smp_mflags' make argument as it seems to be
    producing corrupted builds
    Resolves: #556522


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-1
changelog:
  - upgrade to new upstream stable version 4.6.2
    Resolves: #554998
  - correct the default value of the OMFileFlushOnTXEnd directive
  - add upstream fix for message-induced off-by-one error
  - change the default value of the HUPisRestart directive to enabled
  - remove autoconf, automake, libtool from BuildRequires
  - change exec-prefix to nil
  - redefine _libdir as it doesn't use _exec_prefix
    Resolves: #591860


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-2
changelog:
  - Fix a potential segfault upon SIGHUP induced restart
    Resolves: #598421
  - Add Obsoletes: sysklogd
    Resolves: #513277


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-3
changelog:
  - build rsyslog with PIE and RELRO
    Resolves: #642994
  - add ChangeLog file to documentation
  - add /etc/pki/rsyslog directory


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6
changelog:
  - Resolves: #556398
  - Directly included relevant patches, scripts and man pages from Debian
  - Removed rpath
  - rpmlint is silent now


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6.1
changelog:
  - Fixed CVE-2010-2642, CVE-2011-0433, CVE-2011-0764, CVE-2011-1552, CVE-2011-1553, CVE-2011-1554
    Resolves: rhbz#772900


author: Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
changelog:
  - drop s390 specific ifnarchs as all the previously missing dependencies
    are now there
  - split out gpgsm into a smime subpackage to reduce main package dependencies


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.13-4
changelog:
  - Explicitly BR libassuan-static in accordance with the Packaging
    Guidelines (libassuan-devel is still static-only).


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
changelog:
  - initialize small amount of secmem for list of algorithms in help (#598847)
    (necessary in the FIPS mode of libgcrypt)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-5
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.14-8
changelog:
  - fix aborts and default algorithms when running in FIPS mode (#1078957, #966493)
  - add missing initialization of libgcrypt in gpgv
  - properly encode s2k iteration count in gpg-agent (#638635)


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-11
changelog:
  - removed joyos2.h from source archive, because of licensing issues
    Resolves: rhbz#537918
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-13
changelog:
  - added repackage.sh script to remove joyos2,h and symbian.zip (really)
  - added comment about riva_mmio.h license


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-1
changelog:
  - rebase to 1.2.14
  - fixed build for libtool 2.2.6 and newer
  - fix from Josh Boyer <jwboyer@gmail.com>:
    - disable ps3 video support that was added in 2.14.  It fails to
      build on ppc/ppc64


author: Petr Pisar <ppisar@redhat.com> - 1.2.14-3
changelog:
  - Fix left button press event in windowed mode (sdl894, Resolves: #640682)
  - Remove invalid configure arguments (Resolves: #640687)
  - Kernel joystick structure has grown in unknown 2.6 Linux version (sdl900,
    Resolves: #640694)
  - Do not call memcpy() on overlapping areas (sdl1090, Resolves: #678569)
  - Don't block SDL_WM_GrabInput() if window is not viewable (sdl1155,
    Resolves: #733605)


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.12.1.el6]
changelog:
  - [netdrv] mlx4: check promisc on proper port (Doug Ledford) [858955 854052]
  - [netdrv] mlx4: attach multicast with correct flag (Doug Ledford) [858956 854376]
  - [netdrv] mlx4: remove redundant adding of steering type to gid (Doug Ledford) [859436 854053]
  - [netdrv] Revert: Fix a merge issue (Doug Ledford) [859436 854053]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.13.1.el6]
changelog:
  - [net] sctp: Implement quick failover draft from tsvwg (Neil Horman) [861953 830716]
  - [net] sctp: be more restrictive in transport selection on bundled sacks (Neil Horman) [861953 830716]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.14.1.el6]
changelog:
  - [usb] usbhid: Fix use-after-free in USBHID (James Paradis) [864827 857518]
  - [usb] Add kernel parameter to force io_watchdog for Intel EHCI HCD (James Paradis) [865713 846024]
  - [block] Fix hanging kernel threads in blk_execute_rq() (James Paradis) [865308 855984]
  - [mm] hugetlb: do not use vma_hugecache_offset() for vma_prio_tree_foreach (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugepages: fix use after free bug in "quota" handling (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugetlb: fix pgoff computation when unmapping page from vma (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugetlb: fix ENOSPC returned by handle_mm_fault() (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [fs] gfs2: Write out dirty inode metadata in delayed deletes (Frantisek Hrbata) [859326 748827]
  - [usb] core: Fix device removal race condition (James Paradis) [864821 849188]
  - [mm] x86_32: fix SHLIB_BASE address typo (Aristeu S. Rozanski F) [804955 804956] {CVE-2012-1568}
  - [hid] hidraw: fix window in hidraw_release (Don Zickus) [841824 839973]
  - [hid] hidraw: protect hidraw_disconnect() better (Don Zickus) [841824 839973]
  - [hid] hidraw: remove excessive _EMERG messages from hidraw (Don Zickus) [841824 839973]
  - [hid] hidraw: fix hidraw_disconnect() (Don Zickus) [841824 839973]
  - [hid] fix a NULL pointer dereference in hidraw_write (Don Zickus) [841824 839973]
  - [hid] fix a NULL pointer dereference in hidraw_ioctl (Don Zickus) [841824 839973]
  - [hid] remove BKL from hidraw (Don Zickus) [841824 839973]
  - [mm] x86_32: randomize SHLIB_BASE (Aristeu Rozanski) [804955 804956] {CVE-2012-1568}
  - [block] fix up use after free in __blkdev_get (Jeff Moyer) [853943 847838]
  - [scsi] remove no longer valid BUG_ON in scsi_lld_busy (Jeff Garzik) [860640 842881]
  - [scsi] fix NULL request_queue in scsi_requeue_run_queue() (Jeff Garzik) [860640 842881]
  - [net] svcrpc: fix BUG() in svc_tcp_clear_pages (J. Bruce Fields) [856106 769045]
  - [scsi] lpfc: Fixed SCSI device reset escalation (Rob Evers) [861390 827566]
  - [scsi] lpfc: Fix abort status (Rob Evers) [861390 827566]
  - [kernel] cgroup: add cgroup_root_mutex (Frederic Weisbecker) [858954 844531]
  - [mm] Hold a file reference in madvise_remove (Jerome Marchand) [849738 849739] {CVE-2012-3511}
  - [base] driver-core: fix device_register race (Rob Evers) [860784 833098]
  - [netdrv] e1000e: drop check of RXCW.CW to eliminate link going up and down (Dean Nelson) [857055 847310]
  - [scsi] be2iscsi: Format the MAC_ADDR with sysfs (Rob Evers) [863147 827594]
  - [usb] usbdevfs: Add a USBDEVFS_GET_CAPABILITIES ioctl (Don Zickus) [841667 828271]
  - [fs] udf: fix retun value on error path in udf_load_logicalvol (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Avoid run away loop when partition table length is corrupted (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Use 'ret' instead of abusing 'i' in udf_load_logicalvol() (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [netdrv] bnx2x: Add remote-fault link detection (Michal Schmidt) [852450 814877]
  - [net] sunrpc: svc_xprt sends on closed socket should stop immediately (J. Bruce Fields) [853257 849702]
  - [mm] Never OOM kill tasks outside of memory cgroup when memory.limit_in_bytes is exceeded by a Transparent Huge Page (Larry Woodman) [860942 811255]
  - [powerpc] pseries: Support lower minimum entitlement for virtual processors (Steve Best) [860165 822651]
  - [usbhid] hiddev: Consolidate device existence checks in hiddev_ioctl (Don Zickus) [841824 839973]
  - [usbhid] hiddev: Fix race between disconnect and hiddev_ioctl (Don Zickus) [841824 839973]
  - [usbhid] hiddev: protect against disconnect/NULL-dereference race (Don Zickus) [841824 839973]
  - [crypto] algapi: Move larval completion into algboss (Herbert Xu) [854476 832135]
  - [fs] xfs: disable xfsaild idle mode (Brian Foster) [860787 813137]
  - [fs] xfs: fix the logspace waiting algorithm (Brian Foster) [860787 813137]
  - [fs] xfs: add AIL pushing tracepoints (Brian Foster) [860787 813137]
  - [fs] xfs: force the log if we encounter pinned buffers in .iop_pushbuf (Brian Foster) [860787 813137]
  - [fs] xfs: do not update xa_last_pushed_lsn for locked items (Brian Foster) [860787 813137]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.17.1.el6]
changelog:
  - [mm] Prevent kernel panic in NUMA related system calls after memory hot-add (Larry Woodman) [875382 870350] {CVE-2012-5517}
  - [md] Don't truncate size at 4TB for RAID0 and Linear (Jes Sorensen) [866470 865637]
  - [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Lukas Czerner) [809690 809691] {CVE-2012-2100}
  - [fs] ext4: fix undefined behavior in ext4_fill_flex_info() (Lukas Czerner) [809690 809691] {CVE-2012-2100}
  - [kernel] sched_rt: Ignore RT queue throttling if idle task has RT policy (Igor Mammedov) [853950 843541]
  - [kernel] sched: Create special class for stop/migrate work (Igor Mammedov) [853950 843541]
  - [net] ipv6: fix overlap check for fragments (Amerigo Wang) [874550 819952] {CVE-2012-4444}
  - [net] ipv6: discard overlapping fragment (Jiri Pirko) [874550 819952] {CVE-2012-4444}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.18.1.el6]
changelog:
  - [scsi] sd: fix crash when UA received on DIF enabled device (Ewan Milne) [876487 865682]
  - [mm] hugetlb: fix non-atomic enqueue of huge page (Rafael Aquini) [876101 869750]
  - [x86] amd_iommu: attach device fails on the last pci device (Don Dutile) [876493 861164]
  - [net] nfs: Fix buffer overflow checking in __nfs4_get_acl_uncached (Frantisek Hrbata) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix the acl cache size calculation (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix range checking in __nfs4_get_acl_uncached and __nfs4_proc_set_acl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: nfs_getaclargs.acl_len is a size_t (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Don't use private xdr_stream fields in decode_getacl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix pointer arithmetic in decode_getacl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Simplify the GETATTR attribute length calculation (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Add the helper xdr_stream_pos (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Don't decode beyond the end of the RPC reply message (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Clean up xdr_set_iov() (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: xdr_read_pages needs to clear xdr->page_ptr (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [fs] nfs: Avoid beyond bounds copy while caching ACL (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [fs] nfs: Avoid reading past buffer when calling GETACL (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [scsi] ibmvfc: Fix double completion on abort timeout (Steve Best) [876088 865115]
  - [net] core: allocate skbs on local node (Andy Gospodarek) [876491 843163]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.19.1.el6]
changelog:
  - [drm] i915: don't clobber the pipe param in sanitize_modesetting (Frantisek Hrbata) [876549 857792]
  - [drm] i915: Sanitize BIOS debugging bits from PIPECONF (Frantisek Hrbata) [876549 857792]
  - [net] fix divide by zero in tcp algorithm illinois (Flavio Leitner) [871920 866514] {CVE-2012-4565}
  - [fs] xfs: fix reading of wrapped log data (Dave Chinner) [876499 874322]
  - [x86] mm: fix signedness issue in mmap_rnd() (Petr Matousek) [876496 875036]
  - [net] WARN if struct ip_options was allocated directly by kmalloc (Jiri Pirko) [877950 872799]
  - [fs] block_dev: Fix crash when block device is read and block size is changed at the same time (Frantisek Hrbata) [864826 855906]
  - [mm] tracing: Move include of trace/events/kmem.h out of header into slab.c (Jeff Moyer) [864826 855906]
  - [mm] slab: Move kmalloc tracepoint out of inline code (Jeff Moyer) [864826 855906]
  - [netdrv] bnx2x: organize BDs calculation for stop/resume (Frantisek Hrbata) [874022 819842]
  - [netdrv] bnx2x: fix panic when TX ring is full (Michal Schmidt) [874022 819842]


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-20.1
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-8
changelog:
  + Fix: mcp: Remove LSB hints that instruct chkconfig to start pacemaker at boot time
      Resolves: rhbz#997346


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-9
changelog:
  + Fix: xml: Location constraints are allowed to specify a role
    + Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
      Resolves: rhbz#902407


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-10
changelog:
  - Remove unsupported resource agent
      Resolves: rhbz#1005678
  - Provide a meaningful error if --master is used for primitives and groups


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-11
changelog:
  + Fix: cman: Do not start pacemaker if cman startup fails
    + Fix: Fencing: Observe pcmk_host_list during automatic unfencing
      Resolves: rhbz#996850


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-12
changelog:
  - Fix: Consistently use 'Slave' as the role for unpromoted master/slave resources
      Resolves: rhbz#1011618
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
      Resolves: rhbz#902407
  - Fix: crm_resource: Observe --master modifier for --move
      Resolves: rhbz#902407


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-14
changelog:
  - Log: crmd: Supply arguments in the correct order
      Resolves: rhbz#996850
  - Fix: Invalid formatting of log message causes crash
      Resolves: rhbz#996850


author: David Vossel <dvossel@redhat.com> - 1.1.10-14.2
changelog:
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1052346


author: David Vossel <dvossel@redhat.com> - 1.1.10-14.3
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1087754


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.181-2.6.14.12
changelog:
  - jsa files changed to 444 to pass rpm verification
  - Add reg-ex for filtering private libraries' provides/requires.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.12
changelog:
  - Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.12
changelog:
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - ABS_JAVA_HOME_DIR is no longer used in the latest tapsets
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.191-2.6.15.0
changelog:
  - Bump to 2.6.15 and u191b00.
  - Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
  - Resolves: rhbz#1594249


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115875


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.65-2.5.3pre01.1
changelog:
  - Bump to 2.5.3pre01.
  - Remove obsolete patches, which are now included upstream.
  - Disable LCMS via environment variables rather than maintaining a patch.
  - Resolves: rhbz#1148309


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.71-2.5.3.2
changelog:
  - added and applied patch407, bug1146622-fix.patch
  - removed chrpath (sync with 6.7)
  - Resolves: rhbz#1173706


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.0
changelog:
  - Bump to 2.5.4 using OpenJDK 7u75 b13.
  - Remove earlier temporary patch for RH1146622 (included upstream)
  - Fix elliptic curve list as part of fsg.sh
  - Resolves: rhbz#1180295
  - Resolves: rhbz#1173706


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.2
changelog:
  - Add backports of PR2233, PR2161, PR1661 (GConf changeset) and PR2320 from IcedTea 2.6.x
  - No longer set SYSTEM_GIO to false as we can link against it now GSettings is not required
  - Add test case to ensure file type detection works
  - Add build dependency on GConf2-devel for native proxy support.
  - Remove outdated dependencies on mercurial, redhat-lsb and libxslt from IcedTea builds.
  - Remove python dependency introduced for rpath rewrite script, which has now been removed.
  - Add build dependency on redhat-lsb-core to provide lsb_release for jdk_generic_profile.sh
  - Apply PR2323 to fix building of networking support with system GConf on and system GIO off
  - Revise PR2323 to use header defines to mark whether GLib types have been defined or not
  - Revise PR2323 to account for different glibconfig.h define used on RHEL 6
  - Use installed directory in check section and remove duplicate tests in build
  - Resolves: rhbz#1217984


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Doug Ledford <dledford@redhat.com> - 0.4.6-5
changelog:
  - Fix the fact that qperf was using the wrong PF_RDS define now that RDS
    is integrated upstream and its assigned number is no longer temporary
  - Resolves: bz808673


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.24
changelog:
  - Modify 0055-RHBZ-602257-update-on-show-topology.patch
    * fix patch so that multipath only syncs with the kernel, and doesn't
      update other features
  - Add 0060-RHBZ-606420-fix-remove-map.patch
    * multipathd will now only report a success for remove map when it
      actually succeeds.
  - Resolves: bz #602257, #606420


author: Matthew Harmsen <mharmsen@redhat.com> 1.3.0-2
changelog:
  - Bugzilla Bug #521983 -  New package for Dogtag PKI: osutil
  - Complied with Fedora JNI packaging logic


author: Matthew Harmsen <mharmsen@redhat.com> 1.3.0-3
changelog:
  - Bugzilla Bug #521983 -  New package for Dogtag PKI: osutil
  - Removed LICENSE logic from installation section
  - Take ownership of library directory


author: Matthew Harmsen <mharmsen@redhat.com> 2.0.1-1
changelog:
  - Removed version information from NSPR and NSS build/runtime requires
  - Bugzilla Bug #638377 - Generate PKI UI components which exclude
    a GUI interface
  - Bugzilla Bug #643206 - New CMake based build system for Dogtag
  - Bugzilla Bug #644056 - CS build contains warnings
  - Bugzilla Bug #667556 - Consolidate 'osutil' SVN source code with
    'osutil' GIT source code


author: Remi Collet <rcollet@redhat.com> - 5.3.3-38
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670


author: Remi Collet <rcollet@redhat.com> - 5.3.3-39
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.3.3-41
changelog:
  - core: fix double in zend_ts_hash_graceful_destroy CVE-2014-9425
  - core: fix use-after-free in unserialize CVE-2015-2787
  - exif: fix free on unitialized pointer CVE-2015-0232
  - gd: fix buffer read overflow in gd_gif.c CVE-2014-9709
  - date: fix use after free vulnerability in unserialize CVE-2015-0273
  - enchant: fix heap buffer overflow in enchant_broker_request_dict
    CVE-2014-9705
  - phar: use after free in phar_object.c CVE-2015-2301
  - soap: fix type confusion through unserialize


author: Remi Collet <rcollet@redhat.com> - 5.3.3-43
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4026, #1213407
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: more fix type confusion through unserialize #1222538


author: Steve Dickson <steved@redhat.com> 1.2.3-65
changelog:
  - nfsidmap: make sure give arguments are valid (bz 1230600)
  - nfsidmap: Display the effective NFSv4 domain name (bz 948680)
  - gssd: allow gssd and svcgssd to set the libtirpc debug level (bz 1273161)
  - gssd: select non-conventional principal (bz 1268031)
  - gssd:  Don't assume the machine account will be in uppercase (bz 1273166)
  - sm-notify: delete files in sm.bak after a NOTIFY reply (bz 1278921)


author: Steve Dickson <steved@redhat.com> 1.2.3-66
changelog:
  - svc_create: Make sure errors are logged (bz 1156647)
  - gssd: suppress error message if rpc_pipefs dir disappears (bz 1220156)
  - gssd: set $HOME to prevent recursion (bz 1223661)
  - statd: Update existing record if we receive SM_MON... (bz 1280024)
  - mountstats.man: fixed typo in man page (bz 1263968)


author: Steve Dickson <steved@redhat.com> 1.2.3-67
changelog:
  - mount.nfs: Fix fallback from tcp to udp (bz 1287894)
  - exportfs: escape path for function test_export (bz 735696)
  - nfs-utils.spec: No verification on runtime configuration files (bz 1118176)
  - idmapd: added usage statement (bz 1001439)
  - mountd: fix netgroup lookup for short hostnames (bz 1231998)
  - mountd: fix bug affecting exports of dirs with 64bit inode number (bz 994564)


author: Aristeu S. Rozanski F. <arozansk@redhat.com> 0.10-2
changelog:
  - Fixing the problems found by Jarod Wilson:
  - Fixing make install target
  - Fixing Makefile so it honors the provided CFLAGS
  - not using makeinstall macro
  - installing is_uinput.sh as 755 instead of changing later with attr


author: Aristeu S. Rozanski F. <arozansk@redhat.com> 0.10-3
changelog:
  - More problems found by Jarod Wilson fixed:
  - Removing exclusive architectures, it used to be in sync with linuxwacom
    package
  - marking udev rules as non-replaceable config files
  - using install on makefile


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-45
changelog:
  - fixed potential memory leak on realloc failure when processing 'extend'
    option (#893119)
  - added precise enumeration of configuration files searched to
    snmp_config(5) man page (#907571)
  - set permissions of snmpd.conf and snmptrapd conf to 0600 (#919239)
  - fixed kernel threads in hrSWRunTable (#919952)
  - fixed various error codes in Python module (#955771)
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#955511)
  - allow 'includeFile' and 'includeDir' options in configuration files
    (#917816)
  - fixed netlink message size (#927474)
  - fixed IF-MIB::ifSpeedHi on systems with non-standard interface speeds
    (#947973)
  - fixed BRIDGE-MIB::dot1dBasePortTable not to include the bridge itself
    as a port (#960568)
  - fixed snmpd segfault when 'agentaddress' configuration options is used
    and too many SIGHUP signals are received (#968898)
  - updated UCD-SNMP-MIB::dskTable to dynamically add/remove disks
    if 'includeAllDisks' is specified in snmpd.conf (#922691)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-46
changelog:
  - fixed parsing of bulk responses (#983116)
  - added support of vzfs filesystem in hrStorageTable (#989498)
  - fixed endless loop when parsing sendmail configuration file with
    queue groups (#991213)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49.1
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073222)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49.2
changelog:
  - added cache to hrSWRunTable to provide consistent results (#1085315)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1086683)


author: Martin Sivak <msivak@redhat.com> - 3.9-18
changelog:
  - Fix a segfault when overrides line was incomplete
    Resolves: rhbz#673100
  - Added backports directory to depmod search path
    Resolves: rhbz#761511


author: Akemi Yagi <toracat@centos.org> [2.6.32-279.2.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client, EeePC hotkey, JFS
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - As of 2.6.32-131.12.1.el6, parallel printer support is enabled in distro kernel.
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix for the 208.5-days-and-the-system-reboots issue [bug#5397]
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Enabled ARPD [bug#5709]
  - Added a patch for PCIe PME issue [bug#5383]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-634.el6]
changelog:
  - [scsi] cxgbi: Convert over to dst_neigh_lookup (Sai Vemuri) [1296461]
  - [netdrv] cxgb4: For T4, don't read the Firmware Mailbox Control register (Sai Vemuri) [1296469]
  - [netdrv] cxgb4: Use ACCES_ONCE macro to read queue's consumer index (Sai Vemuri) [1296484]
  - [netdrv] cxgb4: prevent simultaneous execution of service_ofldq (Sai Vemuri) [1296483]
  - [netdrv] cxgb4: Adds PCI device id for new T5 adapters (Sai Vemuri) [1296481]
  - [netdrv] cxgb4: Don't disallow turning off auto-negotiation (Sai Vemuri) [1296476]
  - [mm] check if section present during memory block registering (Xunlei Pang) [1297840]
  - [tty] ldisc: Close/Reopen race prevention should check tty->ldisc (Denys Vlasenko) [1312383]
  - [fs] proc-vmcore: wrong data type casting fix (Baoquan He) [1312206]
  - [infiniband] iw_cxgb3: Ignore positive return values from the ofld send functions (Sai Vemuri) [1296999]
  - [netdrv] cxgb4: Deal with wrap-around of queue for Work request (Sai Vemuri) [1296482]
  - [infiniband] iw_cxgb4: detect fatal errors while creating listening filters (Sai Vemuri) [1296480]
  - [md] dm snapshot: suspend merging snapshot when doing exception handover (Mike Snitzer) [1177389]
  - [md] dm snapshot: suspend origin when doing exception handover (Mike Snitzer) [1177389]
  - [md] dm snapshot: allocate a per-target structure for snapshot-origin target (Mike Snitzer) [1177389]
  - [md] dm: fix a race condition in dm_get_md (Mike Snitzer) [1177389]
  - [infiniband] iw_cxgb4: pass the ord/ird in connect reply events (Sai Vemuri) [1296478]
  - [infiniband] iw_cxgb4: fix misuse of ep->ord for minimum ird calculation (Sai Vemuri) [1296478]
  - [infiniband] iw_cxgb4: reverse the ord/ird in the ESTABLISHED upcall (Sai Vemuri) [1296478]
  - [usb] Revert "Revert 'Update USB default wakeup settings'" (Torez Smith) [1319081]
  - [netdrv] ibmveth: add support for TSO6 (Gustavo Duarte) [1318412]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919174 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-2
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#918136 - nss 3.14 - MD5 hash algorithm disabled


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-39
changelog:
  - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on
    read in multithreaded applications


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-40
changelog:
  - fix CVE-2014-8176 - invalid free in DTLS buffering code
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-1791 - race condition handling NewSessionTicket
  - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-41
changelog:
  - improved fix for CVE-2015-1791
  - add missing parts of CVE-2015-0209 fix for corectness although unexploitable


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-43
changelog:
  - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
  - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
  - fix CVE-2015-3196 - race condition when handling PSK identity hint


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-46
changelog:
  - fix 1-byte memory leak in pkcs12 parse (#1229871)
  - document some options of the speed command (#1197095)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48
changelog:
  - fix CVE-2016-0702 - side channel attack on modular exponentiation
  - fix CVE-2016-0705 - double-free in DSA private key parsing
  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.498.el6
changelog:
  - kvm-virtio-introduce-virtqueue_unmap_sg.patch [bz#1392520]
  - kvm-virtio-introduce-virtqueue_discard.patch [bz#1392520]
  - kvm-virtio-decrement-vq-inuse-in-virtqueue_discard.patch [bz#1392520]
  - kvm-balloon-fix-segfault-and-harden-the-stats-queue.patch [bz#1392520]
  - kvm-virtio-balloon-discard-virtqueue-element-on-reset.patch [bz#1392520]
  - kvm-virtio-zero-vq-inuse-in-virtio_reset.patch [bz#1392520]
  - kvm-PATCH-1-4-e1000-pre-initialize-RAH-RAL-registers.patch [bz#1300626]
  - kvm-net-update-nic-info-during-device-reset.patch [bz#1300626]
  - kvm-net-e1000-update-network-information-when-macaddr-is.patch [bz#1300626]
  - kvm-net-rtl8139-update-network-information-when-macaddr-.patch [bz#1300626]
  - Resolves: bz#1300626
    (e1000/rtl8139: qemu mac address can not be changed via set the hardware address in guest)
  - Resolves: bz#1392520
    ([RHEL6.9] KVM guest shuts itself down after 128th reboot)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.499.el6
changelog:
  - kvm-rename-qemu_aio_context-to-match-upstream.patch [bz#876993]
  - kvm-block-stop-relying-on-io_flush-in-bdrv_drain_all.patch [bz#876993]
  - kvm-block-add-bdrv_drain.patch [bz#876993]
  - kvm-block-avoid-very-long-pauses-at-the-end-of-mirroring.patch [bz#876993]
  - Resolves: bz#876993
    (qemu-kvm: vm's become non-responsive during migrate disk load from 2 domains to a 3ed)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.500.el6
changelog:
  - kvm-qcow2-Free-allocated-L2-cluster-on-error.patch [bz#1405882]
  - kvm-qcow2-Support-exact-L1-table-growth.patch [bz#1405882]
  - kvm-iotests-Fix-026-s-reference-output.patch [bz#1405882]
  - kvm-iotests-Fix-049-s-reference-output.patch [bz#1405882]
  - kvm-iotests-Disable-086.patch [bz#1405882]
  - kvm-block-commit-speed-is-an-optional-parameter.patch [bz#1405882]
  - kvm-iotests-Use-_img_info.patch [bz#1405882]
  - Resolves: bz#1405882
    (test cases 026 030 049 086 and 095 of qemu-iotests fail for qcow2 with qemu-kvm-rhev-0.12.1.2-2.498.el6)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.501.el6
changelog:
  - kvm-Revert-iotests-Use-_img_info.patch [bz#1405882]
  - kvm-Revert-block-commit-speed-is-an-optional-parameter.patch [bz#1405882]
  - kvm-Revert-iotests-Disable-086.patch [bz#1405882]
  - kvm-Revert-iotests-Fix-049-s-reference-output.patch [bz#1405882]
  - kvm-Revert-iotests-Fix-026-s-reference-output.patch [bz#1405882]
  - kvm-Revert-qcow2-Support-exact-L1-table-growth.patch [bz#1405882]
  - kvm-Revert-qcow2-Free-allocated-L2-cluster-on-error.patch [bz#1405882]
  - kvm-net-check-packet-payload-length.patch [bz#1398214]
  - Resolves: bz#1398214
    (CVE-2016-2857 qemu-kvm: Qemu: net: out of bounds read in net_checksum_calculate() [rhel-6.9])
  - Reverts: bz#1405882
    (test cases 026 030 049 086 and 095 of qemu-iotests fail for qcow2 with qemu-kvm-rhev-0.12.1.2-2.498.el6)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.502.el6
changelog:
  - kvm-cirrus_vga-fix-division-by-0-for-color-expansion-rop.patch [bz#1418231 bz#1419417]
  - kvm-cirrus_vga-fix-off-by-one-in-blit_region_is_unsafe.patch [bz#1418231 bz#1419417]
  - kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch [bz#1418231 bz#1419417]
  - kvm-display-cirrus-ignore-source-pitch-value-as-needed-i.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-handle-negative-pitch-in-cirrus_invalidate_re.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-allow-zero-source-pitch-in-pattern-fill-rops.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-fix-blit-address-mask-handling.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch [bz#1418231 bz#1419417]
  - Resolves: bz#1418231
    (CVE-2017-2615 qemu-kvm: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.9])
  - Resolves: bz#1419417
    (CVE-2017-2615 qemu-kvm-rhev: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.9])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.503.el6
changelog:
  - kvm-cirrus-fix-patterncopy-checks.patch [bz#1420487 bz#1420489]
  - kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1420487 bz#1420489]
  - kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1420487 bz#1420489]
  - Resolves: bz#1420487
    (EMBARGOED CVE-2017-2620 qemu-kvm: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.9])
  - Resolves: bz#1420489
    (EMBARGOED CVE-2017-2620 qemu-kvm-rhev: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.9])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.503.el6_9.1
changelog:
  - kvm-vns-tls-don-t-use-depricated-gnutls-functions.patch [bz#1428750]
  - kvm-vnc-apply-display-size-limits.patch [bz#1400438 bz#1425943]
  - Resolves: bz#1400438
    (qemu-kvm coredump in vnc_refresh_server_surface [rhel-6.9.z])
  - Resolves: bz#1425943
    (CVE-2017-2633 qemu-kvm-rhev: Qemu: VNC: memory corruption due to unchecked resolution limit [rhel-6.9.z])
  - Resolves: bz#1428750
    (Fails to build in brew)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.503.el6_9.2
changelog:
  - kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1443447 bz#1443449]
  - kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1443447 bz#1443449]
  - Resolves: bz#1443447
    (CVE-2017-7718 qemu-kvm: Qemu: display: cirrus: OOB read access issue [rhel-6.9.z])
  - Resolves: bz#1443449
    (CVE-2017-7718 qemu-kvm-rhev: Qemu: display: cirrus: OOB read access issue [rhel-6.9.z])
  - Resolves: bz#1447544
    (CVE-2016-9603 qemu-kvm-rhev: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.9.z] )
  - Resolves: bz#1447540
    (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.9.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.503.el6_9.3
changelog:
  - kvm-cirrus-avoid-write-only-variables.patch [bz#1444377 bz#1444379]
  - kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1444377 bz#1444379]
  - kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1444377 bz#1444379]
  - kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1444377 bz#1444379]
  - kvm-cirrus-fix-PUTPIXEL-macro.patch [bz#1444377 bz#1444379]
  - Resolves: bz#1444377
    (CVE-2017-7980 qemu-kvm: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.9.z])
  - Resolves: bz#1444379
    (CVE-2017-7980 qemu-kvm-rhev: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.9.z])


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-2
changelog:
  - Remove README and LICENSE from docs on -devel package
  - Remove -static package and merge contents into the -devel package


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-4
changelog:
  - Minor tweaks to spec file
  - Enable %check section
  - Thanks Gareth Armstrong <gareth.armstrong@hp.com>


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-55
changelog:
  - Fine-tune update-downgrade-uninstall scriptlets as changed in rhbz#991575 fix
    and modify new suggested value in sysconfig file
    Related: rhbz#991575


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-56
changelog:
  - luci: Update the fence_kdump config forms
    Resolves: rhbz#918795
  - luci: Move sort arrows for resources
    Resolves: rhbz#919225
  - luci: Cope better with editing services containing VM
    Resolves: rhbz#1100817
  - luci: Add support for the bind-mount resource
    luci: Update fence_brocade
    luci: Add support for the reboot_on_pid_exhaustion
    luci: Remove mention of fenced skip_undefined
    luci: Add support for the postgres-8 startup_wait attr
    luci: Add the ssh_options attribute to applicable fence
    luci: Add support for the no_kill attribute of the VM
    luci: Add support for the use_findmnt attribute
    Resolves: rhbz#1117398


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-57
changelog:
  - Fix luci unable to handle node name ending with recognized filetype extension
    Resolves: rhbz#999324
  - Add a custom luci launcher allowing sane Python runtime + SELinux coexistence
    Resolves: rhbz#1026374
  - Fix privilege escalation through cluster with specially crafted configuration
    Resolves: rhbz#1127286 (CVE-2014-3593)


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-59
changelog:
  - luci: Allow & in XML attribute values
    Resolves: rhbz#855112
  - luci: Fix positioning of sort arrows
    Resolves: rhbz#919225
  - luci: Allow nfsclient to be a child of nfsserver
    Resolves: rhbz#919243
  - luci: Remove bad default values for startup_wait and
    luci: Remove ssh_options fields from fence agents that do
    luci: Support newly added bind-mount "name" attribute
    Resolves: rhbz#1117398


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-61
changelog:
  - Resolve newly introduced issue with doubled Edit Fence Instance forms
    Related: rhbz#1127286 (CVE-2014-3593)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-3
changelog:
  - fix file io race condition when file was created, but still does not exist (#660319)
  - use 'alternatives' for (m)ksh switching (#659658)
  - do not forget to restore file handles after execution of sourced script (#651888)
  - fix bug when here document got sometimes truncated (#644362)
  - do not forget to close autoloaded file with function definition (#643811)
  - fix wrong typeset handling of arrays that could caused a crash (#637052)
  - fix minor issues in man page (#619692)
  - fix crash when ksh get SIGPIPE while already executing signal handler (#616691)
  - fix wrong output redirection in SIGPIPE trap (#616684)
  - add RLIMIT_RTPRIO and RLIMIT_NICE support to ulimit (#582690)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-7
changelog:
  - ksh did not wait for pipeline to complete when pipefail option was used (#702016)
  - completion used after an environment variable reported bad susbstituion error (#702015)
  - ksh child exit code not preserved correctly (#702013)
  - do not change $0 in posix function (#702011)
  - fix man page information about default value for PATH variable (#702008)
  - do not use invalid PID values in ksh kill built-in (#701890)
  - fix crashe when IFS is unset inside a function (#683734)
  - do not count empty array elements (#702014)


author: Jeff Garzik <jgarzik@redhat.com> - 2-6
changelog:
  - Resolves: bz#576678
  - increase version number of rng-utils that we obsolete
  - use global rather than define, for sbindir (Fedora pkg review)
  - improve BuildRoot (Fedora pkg review)


author: David Howells <dhowells@rehdat.com> - 2-7
changelog:
  - Resolves: bz#597221
  - Fix some compiler warnings thus dealing with the SEGV
  - Make do_loop() correctly interpret the result of iter->xread()


author: Jay Fenlason <fenlason@redhat.com> - 2-9
changelog:
  - Add patch from James M. Leddy <james.leddy@redhat.com> to add
    an option to ignore FIPS failures.
    Resolves: bz#733452


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-71
changelog:
  - enable aes-ctr ciphers use the EVP engines from OpenSSL such as the AES-NI (#756929)
  - add CAVS test driver for the aes-ctr ciphers (#782091)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-73
changelog:
  - remove openssh-4.3p2-no-v6only.patch (#732955)
  - adjust Linux out-of-memory killer (#744236)
  - fix sshd init script - check existence of crypto (#797384)
  - add RequiredAuthentications[12] (#657378)
  - run privsep slave process as the users SELinux context (#798241)


author: Parag Nemade <pnemade AT redhat DOT com>- 1.3.13-1
changelog:
  - Resolves:rh#752667 - iok looks for ~/.m17n not ~/.m17n.d
  - Resolves:rh#752668 - input fail on touch-screen with finger, while mouse click is working for iok
  - Resolves:rh#736992 - iok crashed and segfaults occurred while selecting xkb-Hindi Wx keyboard
  - Update to 1.3.13 release


author: Parag Nemade <pnemade AT redhat DOT com>- 1.3.13-2
changelog:
  - Resolves:rh#798592 - iok crashed while selecting 'xkb-Malayalam (enhanced Inscript with Rupee Sign)'


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-26
changelog:
  - force NSS to ask for a new client certificate when connecting second time
    to the same host (#694294)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-26.el6_2.3
changelog:
  - initialize NSS with no database if the selected database is broken (#800903)
  - use NSS_InitContext() to avoid a collision with OpenLDAP (#800904)


author: Adam Jackson <ajax@redhat.com> 7.11-2
changelog:
  - mesa-7.11-b9c7773e.patch: Sync with 7.11 branch
  - mesa-7.11-gen6-depth-stalls.patch: Fix GPU hangs on gen6+ in openarena
    and others (#741806)
  - Drop tdfx_dri.so, as there's no glide3 package or drm support in el6.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-5
changelog:
  - script-login did not drop privileges correctly (#709095)
  - fix directory traversal due to not obeying chroot directive (#709097)
  - check proxy destination host against SSL certificate name (#754980)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-8.3
changelog:
  - mention it in config file, that we disabled SSLv2 and SSLv3
    by default (#1174158)
  - add ssl_protocols configuation option and disable SSLv2 and SSLv3
    by default (#1174158)


author: Takao Fujiwara <takao.fujiwara1@gmail.com> - 1.2.0.20091127-1
changelog:
  - Update to 1.2.0.20091127
  - Fix bug 520989 - ibus-anthy icon enhancement
  - Fix bug 531696 - ibus-anthy KeyError is still reported by abrt
  - Fix bug 536716 - ibus-anthy: Symbol type change support in ibus-anthy


author: Takao Fujiwara <takao.fujiwara1@gmail.com> - 1.2.1-3
changelog:
  - Fixed Bug 661597 - the latest page_size for ibus.LookupTable.
  - Added -fno-strict-aliasing option in CFLAGS for rpmdiff


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-11
changelog:
  - use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK (#821976)
    Resolves: rhbz#821976


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-1
changelog:
  - rebase to 1.8.6p3
  - new -devel subpackage
  - new configuration file: /etc/sudo.conf
    Resolves: rhbz#852045 - ulimit -c got Operation not permitted
    Resolves: rhbz#804123 - sudo does not call pam_close_session() or pam_end()
    Resolves: rhbz#828707 - sudo fails to report error correctly when execv(3) fails
    Resolves: rhbz#844691 - Cannot set RLIMIT_NPROC to unlimited via pam_limits when running sudo
    Resolves: rhbz#759480 - Rebase sudo to 1.8 in RHEL 6.4
    Resolves: rhbz#846117 - Sudo interpretation of wildcard command arguments is more lenient providing a security risk
    Resolves: rhbz#789937 - [RFE] Add ability to treat files authoritatively in sudoers.ldap
    Resolves: rhbz#836242 - sudo -s -u USERNAME can't change ulimit -c


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-2
changelog:
  - extended the default sudo-ldap.conf file
  - corrected default file permissions on sudo.conf, sudo-ldap.conf
  - added patch that introduces the cmnd_no_wait Defaults option
    Resolves: rhbz#840980 - sudo creates a new parent process
    Resolves: rhbz#860397 - new /etc/sudo-ldap.conf configuration file problems


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-5
changelog:
  - Include just one sample plugin in the documentation for the -devel
    subpackage. Don't include architecture specific files.
  - patch: Do not inform the user that the command was not permitted by
    the policy if they do not successfully authenticate.
    Resolves: rhbz#759480
    Resolves: rhbz#871303
    Resolves: rhbz#872740


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-6
changelog:
  - added patches to address a number of issues in ldap & sssd plugins
  - fixed README.LDAP updating in the spec file
    Resolves: rhbz#860397
    Resolves: rhbz#876208
    Resolves: rhbz#876578
    Resolves: rhbz#879675
    Resolves: rhbz#879633


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-7
changelog:
  - doublequote LS_COLORS in colorls.*sh scripts to speedup
    shell start(#586949)
  - update /etc/DIR_COLORS* files
  - move readlink from /usr/bin to bin, keep symlink in
    /usr/bin(#586948)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-10
changelog:
  - compile coreutils su with RELRO and PIE again(#630017)
  - document rare usefulness of tail options --sleep-interval
    and --max-unchanged-stats with inotify support(#662900)
  - fix double free error in tac for input line longer
    than 16KiB(#628212)
  - fix segfault in sort if LC_TIME differs from the rest
    of locales(#649224)
  - fix support for DTR/DSR control flow in stty(#598631)
  - clarify mkdir --mode behaviour in info documentation
    (#609262)
  - inform about dropped ninth bit of 3-digit octal values in byte
    representations in info documentation(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-11
changelog:
  - adjust the wording in the octal value byte representation
    documentation to match with upstream(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-12
changelog:
  - document that dd's iflag=fulblock prevents dd's oflag=direct
   automatic turn off when reading via pipe(#614605)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-14
changelog:
  - tweak documentation of tail --sleep-interval (#725618)
  - prevent build failure on system with mock>=1.1.9 (#691292)
  - su: fix shell suspend in tcsh (#703712)
  - ls: use acl_extended_file_nofollow() to prevent unnecessary
    autofs mounts(#720325)
  - fix cp -Z functionality if the destination exists(#715557)


author: Adam Jackson <ajax@redhat.com> 1.6.0-18
changelog:
  - Silence amazing amounts of log spam in the i2c code (#888607)
  - Fix a crash in DDC fetch (#888607)


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-28
changelog:
  - Fix cluster-snmp module causes net-snmp to SEGV when told to reload
    Resolves: rhbz#888543
  - Fix modclusterd crashes with segfault in IPv4 only environment
    Resolves: rhbz#951470


author: Roman Rakus <rrakus@redhat.com> - 3.10.13-1
changelog:
  - Update to 3.10.13 release
    Resolves: #621567, #627901, #667363
  - Signal handler for SIGILL
    Resolves #646429


author: Warren Togami <wtogami@redhat.com> - 2.6.6-1
changelog:
  - 2.6.6 with security and numerous minor bug fixes
    CVE-2010-0277 CVE-2010-0420 CVE-2010-0423
  - Bug #528796: Get rid of #!/usr/bin/env python


author: Ian Kent <ikent@redhat.com> - 5.0.5-124
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - wait for master map available at start.
    - add master read wait option.
  - Resolves: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-125
changelog:
  - bz703846 - Incorrect autofs.schema
    - update and add README for old autofs schema
  - Resolves: rhbz#703846


author: Ian Kent <ikent@redhat.com> - 5.0.5-126
changelog:
  - bz1384404 - Automounter does not fetch maps from AD
    - work around sss startup delay.
    - add sss master map wait config option.
  - Resolves: rhbz#1384404


author: Ian Kent <ikent@redhat.com> - 5.0.5-127
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - fix included master map not found return.
    - dont exit on master map read fail timeout.
    - set sane default master read wait timeout.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-128
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - don't return until after master map retry read.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-129
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - make lookup_nss_read_master() return nss status.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-130
changelog:
  - bz703846 - Incorrect autofs.schema
    - fix autofs.schema.new not copied to package.
  - Resolves: rhbz#703846


author: Ian Kent <ikent@redhat.com> - 5.0.5-131
changelog:
  - bz1396403 - Trying to access a non-existent directory using automount
                results in 4 minute hang with nfs-utils-1.2.3-73.el6
    - fix inconsistent signed usage for __rpc_ping().
    - check NFS server availability on local mount fallback
  - Resolves: rhbz#1396403


author: Ian Kent <ikent@redhat.com> - 5.0.5-132
changelog:
  - bz1277033 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - make set_direct_mount_catatonic() more general.
    - set autofs mounts catatonic at exit
  - Related: rhbz#1277033


author: Ian Kent <ikent@redhat.com> - 5.0.5-133.el6_9
changelog:
  - bz1501922 - Autofs processes hung while waiting for the release of an
    entry master_lock that is held by another thread waiting on a bind mount
    - only take master map mutex for master map update.
  -Resolves: rhbz#1501922


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-16
changelog:
  - ABRT won't install debuginfos from rhn repository rhbz#759443
  - Brewtap reports LibMissingRELRO rhbz#812283
  - libreport attached sosreport into bugzilla with bad mimetype rhbz#885509
  - reporter-rhtsupport on RHEL6.4 unable to open cases in RHT customer center rhbz#896090
  - Change default set of reporters shown by CLI/GUI rhbz#948286
  - [RFE] add the console notification to RHEL6 rhbz#961231
  - Resolves: #885509, #812283, #961231, #961231, #961231, #948286, #759443, #896090, #875260


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-17
changelog:
  - updated translation rhbz#993626
  - fixed bugs doscovered by coverity rhbz#905051
  - Resolves: #993626, #905051


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-19
changelog:
  - updated transaltion (ko) rhbz#993626
  - fixed bugzilla reporter to work with the new xmlrpc api rhbz#991088
  - Resolves: #991088, #993626


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-20
changelog:
  - Bugzilla: pass Bugzilla_token in all XML RPC calls
  - mailx: improve notification e-mail headers
  - mailx: include hostane in notification e-mail
  - Resolves: #989530, #997871, #1090466, #1093375


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-23
changelog:
  - resolve symbolic and hard link vulnerabilities
  - defend against directory traversal attack
  - Resolves: #1212095


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-24
changelog:
  - switch ownership of new directories from "abrt:user" to "user:abrt"
  - fix a bug allowing libreport to read files outside dump directories
  - Related: #1212095


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.1-1
changelog:
  - Update to sblim-cmpi-fsvol-1.5.1
    Resolves: #694506
  - Add Linux_Ext4FileSystem class support
    Resolves: #663833


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-53
changelog:
  - Release 1.2.11.15-53
  - Resolves: #1202502 - memory leak in new_passwdPolicy (1.2.11 only) (DS 48135)
  - Resolves: #1202062 - Non tombstone entry which dn starting with "nsuniqueid=...," cannot be deleted (DS 48133)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-54
changelog:
  - Release 1.2.11.15-54
  - Resolves: #1207983 - disable writing unhashed#user#password to changelog (DS 561)
  - Resolves: #1207024 - IPA Replicate creation fails with error "Update failed! Status: [10 Total update abortedLDAP error: Referral]" (DS 47942)
  - Resolves: #1211077 - nsslapd-ndn-cache-enabled returns 1 or 0 instead of "on" or "off" (DS 408)
  - Resolves: #1211006 - start/stop/restart-dirsrv utilities should ignore admin-serv directory (DS 48148)
  - Resolves: #1210996 - Disable SSL v3, by default [389-ds-base-1.2.11 only] (DS 47928)
  - Resolves: #1214074 - Need a way to abort a cleanallruv abort task (DS 48154)
  - Resolves: #1212657 - Password is not correctly passed to perl command line tools if it contains shell special characters. (DS 48143)
  - Resolves: #1218341 - ns-slapd crash related to paged results (DS 48146)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-55
changelog:
  - Release 1.2.11.15-55
  - Resolves: #1118285 - Lowering the log level of "Configured SSL version range" message (1.2.11 only) (DS 48180)
  - Resolves: #1211006 - start/stop/restart-dirsrv utilities should ignore admin-serv directory (DS 48148)
  - Resolves: #1219208 - Remove cleanAllRUV task limit of 4 (DS 48158)
  - Resolves: #1219218 - Improve CleanAllRUV logging (DS 48151)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-57
changelog:
  - Release 1.2.11.15-57
  - Resolves: #1223068 - ldapdelete fails with -r option to delete a sub suffix (DS 48146)
  - Resolves: #1219990 - bind on db chained to AD returns err=32 (DS 48183)
  - Resolves: #1219208 - cleanAllRUV task limit not being enforced correctly (DS 48158)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-58
changelog:
  - Release 1.2.11.15-58
  - Resolves: #1223068 - Regression introduced by the simple paged results fixes. (DS 48146)
  - Resolves: #1203338 - ns-slapd double free or corruption crash (DS 48149)


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.8.1.el6]
changelog:
  - [fs] GFS2: force a log flush when invalidating the rindex glock (Benjamin Marzinski) [717018 702263]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.9.1.el6]
changelog:
  - [scsi] cciss: Annotate cciss_kdump_soft_reset and cciss_sent_reset as __devinit (Tomas Henzl) [715397 698268]
  - [scsi] cciss: Don't wait forever for soft reset to complete, give up after awhile (Tomas Henzl) [715397 698268]
  - [scsi] cciss: use cmd_alloc not cmd_special_alloc for the kdump soft reset command (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do not use bit 2 doorbell reset (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do not attempt PCI power management reset method if we know it won't work (Tomas Henzl) [715397 698268]
  - [scsi] cciss: increase timeouts for post-reset no-ops (Tomas Henzl) [715397 698268]
  - [scsi] cciss: remove superfluous sleeps around reset code (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do soft reset if hard reset is broken (Tomas Henzl) [715397 698268]
  - [scsi] cciss: clarify messages around reset behavior (Tomas Henzl) [715397 698268]
  - [scsi] cciss: increase time to wait for board reset to start (Tomas Henzl) [715397 698268]
  - [scsi] cciss: factor out irq_request code (Tomas Henzl) [715397 698268]
  - [scsi] cciss: factor out scatterlist allocation functions (Tomas Henzl) [715397 698268]
  - [scsi] cciss: factor out command pool allocation functions (Tomas Henzl) [715397 698268]
  - [scsi] cciss: use new doorbell-bit-5 reset method (Tomas Henzl) [715397 698268]
  - [scsi] cciss: wait longer for no-op to complete after resetting controller (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do a better job of detecting controller reset failure (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do not attempt PCI PM reset if we know it will not work (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: remove superfluous sleeps around reset code (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do soft reset if hard reset is broken (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: clarify messages around reset behavior (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: factor out irq request code (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: factor out cmd_pool allocation functions (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do not use bit 2 doorbell reset, it causes NMIs (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: wait longer for no-op to complete after resetting controller (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: use new doorbell-bit-5 reset method (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: adjust timing of post-reset sleeps (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do a better job of detecting controller reset failure (Tomas Henzl) [715397 698268]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.10.1.el6]
changelog:
  - [virt] ksm: fix race between ksmd and exiting task (Andrea Arcangeli) [710340 710341] {CVE-2011-2183}
  - [kernel] proc: signedness issue in next_pidmap() (Jerome Marchand) [697824 697825] {CVE-2011-1593}
  - [net] bluetooth: Prevent buffer overflow in l2cap config request (Jiri Pirko) [716809 716810] {CVE-2011-2497}
  - [fs] NLM: Don't hang forever on NLM unlock requests (Jeff Layton) [709548 709549] {CVE-2011-2491}
  - [fs] NFS: Fix NFSv3 exclusive open semantics (Jeff Layton) [719925 694210]
  - [fs] GFS2: Incorrect inode state during deallocation (Steven Whitehouse) [714982 712139]
  - [virt] KVM: Fix register corruption in pvclock_scale_delta (Avi Kivity) [719910 712102]
  - [netdrv] ehea: Fix memory hotplug oops (Steve Best) [720914 702036]
  - [net] Fix memory leak/corruption on VLAN GRO_DROP (Herbert Xu) [695175 695176] {CVE-2011-1576}
  - [md] Fix resync hang after surprise removal (James Paradis) [719928 707268]
  - GFS2: make sure fallocate bytes is a multiple of blksize (Benjamin Marzinski) [720863 695763] {CVE-2011-2689}
  - [kernel] Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal code (Oleg Nesterov) [715521 690033] {CVE-2011-1182}
  - [redhat] config: enable parallel port printer support (Aristeu Rozanski) [713827 635968]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.11.1.el6]
changelog:
  - [mm] hold the page lock until after set_page_stable_node (Andrea Arcangeli) [726095 683658]
  - [netdrv] be2net: remove certain cmd failure logging (Ivan Vecera) [725329 719304]
  - [net] nl80211: missing check for valid SSID size in scan operation (Stanislaw Gruszka) [718157 718158] {CVE-2011-2517}
  - [net] bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace. (Thomas Graf) [703022 703023] {CVE-2011-2492}
  - [net] inet_diag: fix validation of user data in inet_diag_bc_audit() (Thomas Graf) [714540 714541] {CVE-2011-2213}
  - [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716829 716830] {CVE-2011-2495}
  - [fs] validate size of EFI GUID partition entries (Anton Arapov) [703029 703030] {CVE-2011-1776}
  - [fs] ext4: Fix max file size and logical block counting of extent format file (Lukas Czerner) [722568 722569] {CVE-2011-2695}
  - [virt] kvm: Disable device assignment without interrupt remapping (Alex Williamson) [716306 711504] {CVE-2011-1898}
  - [virt] iommu-api: Extension to check for interrupt remapping (Alex Williamson) [716306 711504] {CVE-2011-1898}
  - [netdrv] r8169: fix Rx checksum offloading bugs (Ivan Vecera) [723807 635596]
  - [netdrv] be2net: changes for BE3 native mode support (Ivan Vecera) [723820 695231]


author: Akemi Yagi <toracat@centos.org> [2.6.32-279.11.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client, EeePC hotkey, JFS
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - As of 2.6.32-131.12.1.el6, parallel printer support is enabled in distro kernel.
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix for the 208.5-days-and-the-system-reboots issue [bug#5397]
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Enabled ARPD [bug#5709]
  - Added a patch for PCIe PME issue [bug#5383]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added patch fix-ptrace-getventmsg-pid-in-lxc-bug5424 [bug#5424]
  - Added a patch for fsync() tid wraparound bug [bug#5955]
  - Added patches to fix e1000e-related network crash [bug#6018]


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672635


author: Tom Lane <tgl@redhat.com> 8.4.7-2
changelog:
  - Add fix to make plpgsql cope with dropped columns in rowtypes
  Resolves: #694249
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines,
    and add explicit dependencies on the -libs subpackage to pacify rpmdiff


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740736


author: Marek Kasik <mkasik@redhat.com> 2.3.11-4
changelog:
  - Add freetype-2.3.11-CVE-2010-2498.patch
      (Assure that `end_point' is not larger than `glyph->num_points')
  - Add freetype-2.3.11-CVE-2010-2499.patch
      (Check the buffer size during gathering PFB fragments)
  - Add freetype-2.3.11-CVE-2010-2500.patch
      (Use smaller threshold values for `width' and `height')
  - Add freetype-2.3.11-CVE-2010-2519.patch
      (Check `rlen' the length of fragment declared in the POST fragment header)
  - Add freetype-2.3.11-CVE-2010-2520.patch
      (Fix bounds check)
  - Add freetype-2.3.11-CVE-2010-2527.patch
      (Use precision for `%s' where appropriate to avoid buffer overflows)
  - Add freetype-2.3.11-axis-name-overflow.patch
      (Avoid overflow when dealing with names of axes)
  - Resolves: #613298


author: Marek Kasik <mkasik@redhat.com> 2.3.11-5
changelog:
  - Add freetype-2.3.11-CVE-2010-1797.patch
      (Check stack after execution of operations too.
       Skip the evaluations of the values in decoder, if
       cff_decoder_parse_charstrings() returns any error.)
  - Resolves: #621624


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_0.1
changelog:
  - Add freetype-2.3.11-CVE-2010-2805.patch
      (Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2806.patch
      (Protect against negative string_size. Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2808.patch
      (Check the total length of collected POST segments.)
  - Add freetype-2.3.11-CVE-2010-3311.patch
      (Don't seek behind end of stream.)
  - Resolves: #638838


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_0.2
changelog:
  - Add freetype-2.3.11-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651761


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_1.3
changelog:
  - Add freetype-2.3.11-CVE-2011-0226.patch
      (Add better argument check for `callothersubr'.)
      - based on patches by Werner Lemberg,
        Alexei Podtelezhnikov and Matthias Drochner
  - Resolves: #723467


author: Akemi Yagi <toracat@centos.org> [2.6.32-220.13.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client, EeePC hotkey, JFS
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - As of 2.6.32-131.12.1.el6, parallel printer support is enabled in distro kernel.
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix for the 208.5-days-and-the-system-reboots issue [bug#5397]
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]


author: Stepan Kasal <skasal@redhat.com> - 1.8.0-31
changelog:
  - drop *-cflags.patch, move all makefile fixes to *-fhs.patch
  - propagate libdir to Makefile; no need to set it on cmdline


author: Karel Klic <kklic@redhat.com> - 1.8.0-34
changelog:
  - -jbj patch replaced with -zeroheaders, which extends the header zeroing
    and also zeroes the buckets (#572601)
  - Fixed a memory leak in gdbm_reorganize(gdb) (rhbz#572598)
  - Handle read() returning less data than it was asked for (rhbz#572900)
  - Remove static builds from the devel package (#556050)
  - Moved autotools reinitialization from %build to %prep section


author: Marek Skalicky <mskalick@redhat.com> - 1.8.0-39
changelog:
  - dbm_* calls should call the underlying gdbm_* calls using then
    GDBM_NOLOCK flag
    Resolves: #668702


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #721306


author: Than Ngo <than@redhat.com> - 6:4.3.4-15
changelog:
  - Resolves: bz#587016, print dialogue does not remember previous settings
  - Resolves: bz#682611, Konqueror splash page in zh_TW is wrong
  - Resolves: bz#734734, plasma eating up cpu-time when systemtray some icon
  - Resolves: bz#826114, konqueror crash when trying to add "Terminal Emulator" to main menu bar


author: Lukáš Tinkl <ltinkl@redhat.com> - 6:4.3.4-22
changelog:
  - Resolves rhbz#1088925 - Opening a terminal in Konqueror / Dolphin does not 
    inherit environment variables


author: Joe Orton <jorton@redhat.com> - 1.6.11-4
changelog:
  - add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 (#709221)
  - add security fix for CVE-2011-0715 (#681174)
  - add security fixes for CVE-2010-4644, CVE-2010-4539 (#672679)


author: David Sommerseth <davids@redhat.com> - 3.10.7-3
changelog:
  - Fixed even more .spec file issues and removed explicit mentioning
    of /usr/share/python-dmidecode/pymap.xml


author: Nima Talebi <nima@it.net.au> - 3.10.8-1
changelog:
  - New Upstream release.
  - Big-endian and little-endian approved.
  - Packaged unit-test to tarball.
  - Rewritten unit-test to be able to run as non-root user, where it will not
    try to read /dev/mem.
  - Added two dmidump data files to the unit-test.


author: David Cantrell <dcantrell@redhat.com> - 13.21.141-1
changelog:
  - grub: write 'ip=eth0:dhcp,auto6' instead of 'ip=eth0:dhcp ip=eth0:auto6'
    (akozumpl)
    Resolves: rhbz#740222


author: David Cantrell <dcantrell@redhat.com> - 13.21.143-1
changelog:
  - Remove references to 'ku', 'lo', and 'my' languages. (dcantrell)
    Related: rhbz#744094
  - Ignore po/*.po (dcantrell)
    Related: rhbz#744094
  - Remove po/*.po files as we are using transifex now. (dcantrell)
    Related: rhbz#744094
  - Use transifex to pull translations for rhel6-branch (dcantrell)
    Related: rhbz#744094
  - Update ja translations (dcantrell)
    Resolves: rhbz#744094
  - fcoe: modprobe the VLAN layer module. (akozumpl)
    Related: rhbz#641420
  - Wait after udev settles in DD code as usb has hardcoded timeout in kernel
    module (msivak)
    Related: rhbz#732496
  - Fix intendation error (dcantrell)
    Resolves: rhbz#740870
  - Only check relevant devices for dirty filesystems. (dlehman)
    Resolves: rhbz#741206


author: David Cantrell <dcantrell@redhat.com> - 13.21.147-1
changelog:
  - Make sure to clean up temp vg paths after lvm edit. (dlehman)
    Resolves: rhbz#747606
  - Add xenfs module to initrd.img (dcantrell).
    Resolves: rhbz#747388


author: Chris Lumens <clumens@redhat.com> - 13.21.148-1
changelog:
  - Support prefix length in ipv6= cmdline option (rvykydal)
    Resolves: rhbz#679108
    Related: rhbz#679108


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-26
changelog:
  - #1089817 - Return value of pgrep is incorrect
  - #950748 - /lib64/libproc.so package both in procps and procps-devel
  - #1011216 - Backport man page fix of top utility - RES = CODE + DATA
  - #1082877 - top/man: RES - physical memory a task 'has used'->'is using'
  - #1034337 - Include man pages for openproc(), readproc() and readproctab()
  - Resolves: rhbz#1089817 rhbz#950748 rhbz#1011216 rhbz#1082877 rhbz#1034337


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-27
changelog:
  - #1060681 - ps -p cycles over all PIDs instead of just one
  - #963799 - Should shared memory be accounted in cached in free output?
  - Resolves: rhbz#1060681 rhbz#963799


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-28
changelog:
  - #1105125 - Locale dependent float delay in top and watch utilities
  - #1039013 - Include an API in RHEL to return the number of opened file descriptors for a process
  - Resolves: rhbz#1105125
  - Related: rhbz#1034337


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-31
changelog:
  - #993072 - Make the "free" command a little more human friendly
  - #1172059 - ps coredump in stat2proc()
  - #1120580 - [RFE] Have sysctl -p read info from /etc/sysctl.d
  - #1123311 - RFE: "w" should have "-n" flag to suppress reverse name resolution of IP addresses
  - #1163404 - [procps] find_elf_note invalid read if setenv has been called before libproc init
  - Resolves: rhbz#993072 rhbz#1172059 rhbz#1120580 rhbz#1123311 rhbz#1163404


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-13
changelog:
  - Resolves: #1230753 - insufficient check for running service in condrestart
    and try-restart actions


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-14
changelog:
  - Related: #1248855 - After updating to squid-3.1.23-9.el6,
    service squid {reload,restart} fails with "Operation not permitted"
  - Related: #1230753 - insufficient check for running service in condrestart 
    and try-restart actions


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-16.1
changelog:
  - Resolves: #1330572 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-16.2
changelog:
  - Related: #1330572 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-16.3
changelog:
  - Resolved: #1334489 - CVE-2016-4554 CVE-2016-4556 squid: various flaws
  - Related: #1330572 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #721305


author: Than Ngo <than@redhat.com> - 4.3.4-22
changelog:
  - Resolves: bz#666295, Missing help page(s) for Plasma workspace
  - Resolves: bz#587917, gnome/kde system monitor tool use same icon


author: Jarod Wilson <jarod@redhat.com> [2.6.32-272.el6]
changelog:
  - [md] bitmap: ensure to load bitmap when creating via sysfs (Jes Sorensen) [821329]
  - [infiniband] mlx4: fix RoCE oops (Doug Ledford) [749059]
  - [x86] setup: Add rh_check_supported() (Prarit Bhargava) [821561]
  - [mm] read_pmd_atomic: fix pmd_populate SMP race condition (Andrea Arcangeli) [820762] {CVE-2012-1179}
  - [drm] i915: add Ivy Bridge GT2 Server entries (Dave Airlie) [817926]


author: Akemi Yagi <toracat@centos.org> [2.6.32-279.1.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client, EeePC hotkey, JFS
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - As of 2.6.32-131.12.1.el6, parallel printer support is enabled in distro kernel.
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix for the 208.5-days-and-the-system-reboots issue [bug#5397]
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Enabled ARPD [bug#5709]
  - Added a patch for PCIe PME issue [bug#5383]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added patches that fix vlan/bonding issue [Bugzilla834764]


author: Mark Wielaard <mjw@redhat.com> - 1:1.6.0.0-1.45.1.11.1
changelog:
  - Resolves: rhbz#804632
  - Tweak java-1.6.0-openjdk-jstack.patch stack to remove two uses of sprintf
    to make it work against systemtap 1.7.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.46.1.11.3
changelog:
  - Updated to IcedTea6 1.11.3
  - Removed upstreamed patch8 - java-1.6.0-openjdk-jirafix_2820_2821.patch
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added to patch
  - Resolves: rhbz#828752


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.47.1.11.3
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828752


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.51.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Access gnome bridge jar is forced to have 644 permissions
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.53.1.11.6
changelog:
  - added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.54.1.11.6
changelog:
  - removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch8:   7201064.patch to be reverted
  - added patch9:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but working
  - Resolves: rhbz#911525


author: Ian Kent <ikent@redhat.com> - 5.0.5-67
changelog:
  - bz880242 - autofs service status fails on rhel 6.4 with version
    autofs-5.0.5-64.el6.x86_64
    - fix pid file substitution in init script.
  - Resolves: rhbz#880242


author: Ian Kent <ikent@redhat.com> - 5.0.5-68
changelog:
  - bz880242 - autofs service status fails on rhel 6.4 with version
    autofs-5.0.5-64.el6.x86_64
    - remove pid file substution patch.
    - add backported upstream patch to add piddir to configure.
  - Related: rhbz#880242


author: Ian Kent <ikent@redhat.com> - 5.0.5-69
changelog:
  - bz880242 - autofs service status fails on rhel 6.4 with version
    autofs-5.0.5-64.el6.x86_64
    - actually add the backported patch.
  - Related: rhbz#880242


author: Ian Kent <ikent@redhat.com> - 5.0.5-70
changelog:
  - bz880242 - autofs service status fails on rhel 6.4 with version
    autofs-5.0.5-64.el6.x86_64
    - update configure of back ported patch.
  - Related: rhbz#880242


author: Ian Kent <ikent@redhat.com> - 5.0.5-71
changelog:
  - bz836422 - autofs /net maps do not refresh list of shares exported on
    the NFS server
    - fix submount offset delete.
  - Related: rhbz#836422


author: Ian Kent <ikent@redhat.com> - 5.0.5-72
changelog:
  - bz889055 - RHEL6.4 autofs initscript not LSB compliant
    - fix init script status return.
  - Resolves: rhbz#889055


author: Ian Kent <ikent@redhat.com> - 5.0.5-74.el6_4
changelog:
  - bz921147 - autofs mount failures when mounting multiple nfs mounts at
    the same time
    - use numeric protocol ids instead of protoent structs.
  - Resolves: rhbz#921147


author: Ian Kent <ikent@redhat.com> - 5.0.5-74.el6_4
changelog:
  - bz921147 - autofs mount failures when mounting multiple nfs mounts
    at the same time
    - correct patch name in spec file.
  - Related: rhbz#921147


author: Ian Kent <ikent@redhat.cem> - 5.0.5-75.el6_4
changelog:
  - bz1006163 - Race condition or other deadlocking issue on expire code path
    - expire thread use pending mutex.
  - Resolves: rhbz#1006163


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.6.1.el6]
changelog:
  - [mm] memcg: fix oom schedule_timeout() (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: change memcg_oom_mutex to spinlock (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: fix hierarchical oom locking (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: make oom_lock 0 and 1 based rather than counter (Ulrich Obergfell) [1054072 1034237]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.7.1.el6]
changelog:
  - [char] n_tty: Fix unsafe update of available buffer space (Jiri Benc) [1060491 980188]
  - [char] n_tty: Fix stuck throttled driver (Jiri Benc) [1060491 980188]
  - [char] tty: Add safe tty throttle/unthrottle functions (Jiri Benc) [1060491 980188]
  - [char] tty: note race we need to fix (Jiri Benc) [1060491 980188]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.10.1.el6]
changelog:
  - [fs] xfs: xfs_remove deadlocks due to inverted AGF vs AGI lock ordering (Brian Foster) [1067775 1059334]
  - [x86] apic: Map the local apic when parsing the MP table (Prarit Bhargava) [1063507 1061873]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.1.el6]
changelog:
  - [net] netpoll: take rcu_read_lock_bh() in netpoll_send_skb_on_dev() (Florian Westphal) [1063271 1049052]
  - [fs] cifs: sanity check length of data to send before sending (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [fs] cifs: ensure that uncached writes handle unmapped areas correctly (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [infiniband] ipoib: Report operstate consistently when brought up without a link (Michal Schmidt) [1064464 995300]
  - [security] selinux: fix broken peer recv check (Paul Moore) [1059991 1043051]
  - [fs] GFS2: Fix slab memory leak in gfs2_bufdata (Robert S Peterson) [1064913 1024024]
  - [fs] GFS2: Fix use-after-free race when calling gfs2_remove_from_ail (Robert S Peterson) [1064913 1024024]
  - [fs] nfs: always make sure page is up-to-date before extending a write to cover the entire page (Scott Mayhew) [1066942 1054493]
  - [fs] xfs: ensure we capture IO errors correctly (Lachlan McIlroy) [1058418 1021325]
  - [mm] get rid of unnecessary pageblock scanning in setup_zone_migrate_reserve (Motohiro Kosaki) [1062113 1043353]
  - [security] selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: look for IPsec labels on both inbound and outbound packets (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output() (Paul Moore) [1055364 1024631]
  - [edac] e752x_edac: Fix pci_dev usage count (Aristeu Rozanski) [1058420 1029530]
  - [s390] mm: handle asce-type exceptions as normal page fault (Hendrik Brueckner) [1057164 1034268]
  - [s390] mm: correct tlb flush on page table upgrade (Hendrik Brueckner) [1057165 1034269]
  - [net] fix memory information leaks in recv protocol handlers (Florian Westphal) [1039868 1039869]
  - [usb] cdc-wdm: fix buffer overflow (Alexander Gordeev) [922000 922001] {CVE-2013-1860}
  - [usb] cdc-wdm: Fix race between autosuspend and reading from the device (Alexander Gordeev) [922000 922001] {CVE-2013-1860}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.2.el6]
changelog:
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-12
changelog:
  - Add a zero default value to the DISABLETEST and TEST_FAILURES checks
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-13
changelog:
  - Add zero default value to DISABLETEST check and fix the TEST_FAILURES check and reporting
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS
  - Related: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-14
changelog:
  - Add s390x and ia64 to the %define multilib_arches list used for defining alt_ckbi
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-15
changelog:
  - Using export NSS_DISABLE_HW_GCM=1 to deal with some problemmatic build systems
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Enable patch with fix for deadlock in trust domain lock and object lock
  - Resolves: Bug 1036477 - deadlock in trust domain lock and object lock
  - Disable hw gcm on rhel-5 based build environments where OS lacks support
  - Rollback changes to build nss without softokn until Bug 689919 is approved
  - Cipher suite was run as part of the nss-softokn build


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042685 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Resolves: Bug 1048713 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - Make pem's derEncodingsMatch function work with encrypted keys
  - Resolves: Bug 1048713 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - When we ask to logout, actually logout, rather than shutdown
  - Don't hide the restart status icon just because the daemon exited
  - Don't check for updates every day when the user had specified 'Never'
  - Allow the user to select the GPG key information to be able to verify it
  - Fix the error when the user clicks the about menu item
  - Fix a crash where the desktop file that was installed has no root directory
  - Fix a crash when the process-working icon has zero height
  - Resolves: #585086


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-2
changelog:
  - Backport a patch from upstream that adds support for support media repos
    such as those found on additional CDs or DVDs.
  - This patch just calls GetUpdates after a detected media repo is inserted,
    which is enough for PackageKit to add the repo to the default set, and for
    the repo to be used in all the GNOME and KDE tools.
  - This patch will not add explicit support for media repos in client programs,
    so the media is not requested if it is not inserted when the package tools
    are open. This functionality can be backported at a later time if required.
  - Resolves: #591534


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Don't allow shutting down when a transaction is active and cannot
    be cancelled.
  - Resolves: #669798


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-6
changelog:
  - Fix the progress update of the update viewer when multiarch packages
    are installed.
  - Resolves: #744906


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-7
changelog:
  - Do not attempt to refresh the updates list when a transaction is in
    progress. This prevents the update UI from going blank.
  - Resolves: #744980


author: Marek Kasik <mkasik@redhat.com> - 0.12.4-4
changelog:
  - Add poppler-0.12.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.12.4-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.12.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639860


