# changelog

author: Akemi Yagi <toracat@centos.org> [2.6.32-131.12.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire,
    all serial ATA, BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client.
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - As of 2.6.32-131.12.1.el6, parallel printer support is enabled in distro kernel.
  - Added centos-linux-2.6-vmxnet3-LRO-state-fix-bug5054.patch [bug#5054]


author: Adam Jackson <ajax@redhat.com> 6.9.3-4
changelog:
  - Disable DRI support, we've never built the 3D driver and it's been nuked
    from upstream Mesa anyway.


author: Adam Jackson <ajax@redhat.com> 6.9.3-5
changelog:
  - mach64-6.9.3-shadowfb.patch: Allow Render even when doing ShadowFB.
  - Disable EXA as well, it's completely broken.
  - mach64-6.9.3-fix-no-exa-build.patch: Fix building with neither XAA nor EXA.


author: Nalin Dahyabhai <nalin@redhat.com> 0.57-1
changelog:
  - clarify that the command passed to getcert -C is a "post"-save command
  - add a "pre"-save command option to getcert, specified with the -B flag (#9)
  - after we notify of an impending not-valid-after approaching, don't do it
    again immediately


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a command option (-T) to getcert for specifying which enrollment
    profile to tell a CA that we're using, in case it cares (#10)


author: Nalin Dahyabhai <nalin@redhat.com> 0.58-1
changelog:
  - add a "dogtag-ipa-renew-agent" CA so that we can renew certificates using
    an IPA server's internal Dogtag instance
  - export the requested profile and old certificate to enrollment helpers
  - make libxml and libcurl into hard build-time requirements
  - serialize all pre/save/post sequences to make sure that stop/save/start
    doesn't become stop1/save1/stop2/start1/save2/start2 when we're stopping
    a service while we muck with more than one of its certificates


author: Nalin Dahyabhai <nalin@redhat.com> 0.60-1
changelog:
  - adjust internals of logic for talking to dogtag to at least have a
    concept of non-agent cases
  - when talking to an IPA server's internal Dogtag instance, infer which
    ports the CA is listening on from the "dogtag_version" setting in the
    IPA configuration (Ade Lee)
  - send a notification (or log a message, whatever) when we save a new
    certificate (#766167)


author: Nalin Dahyabhai <nalin@redhat.com> 0.61-1
changelog:
  - fix a regression in reading old request tracking files where the
    request was in state NEED_TO_NOTIFY or NOTIFYING


author: Nalin Dahyabhai <nalin@redhat.com> 0.61-3
changelog:
  - backport changes from 0.63/0.64/0.65 to broaden the scope of locks which
    certmonger uses internally to keep it from doing to much with the outside
    world (#893611)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-10
changelog:
  - Close config file descriptor when finished reading the config file
  - Add support for ENUM domains into jwhois.conf
    Resolves: #465182


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-12
changelog:
  - Large jwhois.conf update
    Resolves: #48677{3,4,5,6,8}, #48678{0,2-9}, #48679{0-9}
    Resolves: #48680{0-3}, #48682{2,3,7}, #48683{0,2-5,7-9}
    Resolves: #48684{0,2,3,5,7,8}, #48685{0,3,7}, #486862


author: Robert Scheck <robert@fedoraproject.org> - 4.0-17
changelog:
  - Update jwhois.conf for .edu.ar, .bs, .by, .dk, .name, .ng, .ps,
    .sg, .sl, .sv, .co.zw domains and handles from .name and .aero


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-19
changelog:
  - Fix IDN encoding failed with error code 5
    Resolves: #682832
  - Update jwhois.conf for dotEmarat extension
    Resolves: #664449


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-4
changelog:
  - Backported turbo detection (turbo patch, #610464)
  - Show all P-states in dump mode (dump-all-pstates patch, accepted by upstream)
  - Backported tty handling for non-interactive mode (notty patch, #628514)
  - Output error in interactive mode if there is no tty (checktty patch,
    posted upstream)
  - Fixed rpmlint warning about mixed tabs and spaces


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-6
changelog:
  - Improved sigwinch handling
    Resolves: rhbz#698422

    * Tue Aug 02 2011 Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-5
  - Fixed sigwinch handling
    Resolves: rhbz#698422


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-1
changelog:
  - Update to upstream version 2.11.0
    Resolves: #633577
  - Improve package to comply multilib policy
    Resolves: #607722
  - Don't strip debug information
    Resolves: #693389
  - Change build options
    Resolves: #694513


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-2
changelog:
  - Add -libs requirement with explicit version to the main package
  - Build with -fno-strict-aliasing
  - Use correct init script
  - Add OpenSLP support
    Resolves: #712525


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-3
changelog:
  - Backport upstream patch which enables the embedded instanaces to have
    correct empty string values
    Resolves: #796191
  - Add "cim-server" to provides
    Resolves: #799040


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-1
changelog:
  - Update to upstream version 2.12.0
    Resolves: #825471, #739118, #716474
  - Change post created symlinks group owner to 'pegasus'
    Resolves: #759064
  - Fix invocation of useradd without specifying a UID
    Resolves: #800319
  - Fix initscript is not world readable
    Resolves: #824297


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-2
changelog:
  - Fix local-or-remote-auth patch to work with IPv6 and with enabled
    privilege separation
    Resolves: #869664


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-4
changelog:
  - Backported and slightly modified sslBackwardCompatibility option for disabling
    unsafe SSLv3 protocol
    Resolves: #1238329


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-22
changelog:
  - Handle unbuffered input in a better way to fix the simulate declined failure
    when using pkcon.
  - Resolves: #811097


author: Jeff Layton <jlayton@redhat.com> 4.8.1-11
changelog:
  - add cifs.idmap, binaries and autoconf goop (bz 843617)
  - add getcifsacl and setcifsacl tools (bz 843612)
  - add more missing mount.cifs options to manpage (bz 843596)
  - enable PIE and RELRO (bz 838606)
  - mount.cifs: handle usernames differently for sec=krb5 (bz 826825)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-15
changelog:
  - fix several issues in cifs.idmap (bz 843617)
  - fix several issues in getcifsacl/setcifsacl (bz 843612)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-16
changelog:
  - fix even more issues in cifs.idmap (bz 843617)
  - fix even more issues in getcifsacl/setcifsacl (bz 843612)
  - fixes for problems in setcifsacl found by coverity (bz 873683)


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-1
changelog:
  - New upstream enhancement and bugfix release
  resolves: #1065067 - Audit package rebase
  resolves: #810749 - audit allows tcp_max_per_addr + 1 connections
  resolves: #869555 - ausearch -i does not interpret execve arguments always
  resolves: #888348 - auditd won't start when some actions send mail
  resolves: #922508 - confusing aulast records for bad logins
  resolves: #950158 - man page unclear wrt num_logs affecting keep_logs setting
  resolves: #967238 - Audit rules are built from a directory of rule files
  resolves: #967240 - ausearch to checkpoint so only reports new events
  resolves: #970675 - auparse is truncating path context after first category
  resolves: #1011052 - Missing text in auditd.conf man page
  resolves: #1022035 - Case values for actions unclear in auditd.conf man page
  resolves: #1029981 - ausearch help typo for "-x" option
  resolves: #1049916 - ausearch issues found by ausearch-test
  resolves: #1053424 - Error in auparse-defs.h
  resolves: #1071580 - audispd config file parser fails on long input
  resolves: #1089713 - limit of 30 for system call in audit.rules


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-4
changelog:
  resolves: #1049916 - Handle i386 session ID's better
  resolves: #1120286 - ausearch -i does not display commas between categories


author: Steve Grubb <sgrubb@redhat.com> 2.4.5-1
changelog:
  - New upstream enhancement and bugfix release
  resolves: #1129076 - auvirt --help shows an incorrect option "--show--uuid"
  resolves: #1138674 - auditd may fail to start if configured to send mail
  resolves: #1144252 - Auditctl should not send warnings to console during boot
  resolves: #1197235 - ausearch can't parse time in non-US locale/UTF-8 encoding
  resolves: #1235457 - Line buffer is too short for plugin config files
  resolves: #1257650 - Rebase audit package


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Resolves: #549329
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html
  Resolves: #565554
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.
  Resolves: #565210


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  Resolves: #565554
  - Remove mysql.info, which is not freely redistributable
  Related: #560181
  - Revert broken upstream fix for their bug 45058
  Related: #566547
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #557711
  Resolves: #562749


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html
    including fixes for CVE-2010-1621, CVE-2010-1626,
    CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #590598
  - Create mysql group explicitly in pre-server script, to ensure correct GID


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #598585
  - Fix broken "federated" storage engine plugin
  Resolves: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Resolves: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-3
changelog:
  - Add -p "$mypidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #596008


author: Tom Lane <tgl@redhat.com> 5.1.47-4
changelog:
  - Add backported patch for CVE-2010-2008 (upstream bug 53804)
  Resolves: #614215
  - Add BuildRequires perl(Time::HiRes) ... seems to no longer be installed
    by just pulling in perl.


author: Tom Lane <tgl@redhat.com> 5.1.52-1.1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652553
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-21
changelog:
  This patch is found broken and duplicated.  Getting rid of it in 1.2.11.15-22.
    commit 2b3a50d55707ffa281c922ec188850576b757934
    Author: Mark Reynolds <mreynolds@redhat.com>
    Date:   Tue Jul 23 10:28:45 2013 -0400
    Add patch 0049 for Tickets-47427-47441


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-22
changelog:
  - Bump version to 1.2.11.15-22
  - Resolves: Bug 923909 - 389-ds-base cannot handle Kerberos tickets with PAC (ticket 632)
  - Resolves: Bug 928159 - CVE-2013-1897 389-ds: unintended information exposure when rootdse is enabled
  - Resolves: Bug 947583 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (ticket 47367)
  - Resolves: Bug 951616 - error syncing group if group member user is not synced (ticket 47327)
  - Resolves: Bug 953052 - DESC should not be empty as per RFC 2252 (ldapv3) (ticket 47376)
  - Resolves: Bug 957305 - DS instance crashes under a high load (ticket 47349)
  - Resolves: Bug 957864 - Simple paged results should support async search (ticket 47347)
  - Resolves: Bug 958522 - loading an entry from the database should use str2entry_fast (ticket 531)
  - Resolves: Bug 962885 - RHEL 6.2 to 6.4 ipa upgrade selinuxusermap data not replicating (ticket 47362)
  - Resolves: Bug 963234 - When integrating with Red Hat IDM/DS, an LDAP protocol error is thrown (ticket 47361)
  - Resolves: Bug 966781 - new ldap connections can block ldaps and ldapi connections (ticket 47359)
  - Resolves: Bug 968383 - Wrong error code return when using EXTERNAL SASL and untrusted certificate (ticket 580)
  - Resolves: Bug 968503 - flush_ber error sending back start_tls response will deadlock (ticket 47375)
  - Resolves: Bug 969210 - make listen backlog size configurable (ticket 47377)
  - Resolves: Bug 970995 - RHDS not shutting down when disk monitoring threshold is reached to half. (ticket 47385)
  - Resolves: Bug 971033 - connections attribute in cn=snmp,cn=monitor is counted twice (ticket 47383)
  - Resolves: Bug 971966 - 389 DS Replication failures due to Fractional updates (ticket 47386)
  - Resolves: Bug 972976 - ldbm errors when adding/modifying/deleting entries (ticket 47392)
  - Resolves: Bug 973583 - ns-slapd instance crashed with signal 11 SIGSEGV (ticket 47391)
  - Resolves: Bug 974361 - Account policy plugin fails to lock user when policy is created for individual users to lock based to createtimestamp. (ticket 47397)
  - Resolves: Bug 974719 - rhds90 crash on tombstone modrdn (ticket 47396)
  - Resolves: Bug 974875 - Attributes fail to be encrypted/decrypted properly when replicated (ticket 47393)
  - Resolves: Bug 975243 - DS9 still observes altStateAttrName as createTimestamp when attribute is removed from the account policy (ticket 47395)
  - Resolves: Bug 975250 - Changelog deadlock replication failures with DNA (ticket 47410)
  - Resolves: Bug 976546 - Attribute names are incorrect in search results (ticket 47402)
  - Resolves: Bug 979169 - allow setting db deadlock rejection policy (ticket 47409)
  - Resolves: Bug 979435 - Replication problem with add-delete requests on single-value (ticket 47424)
  - Resolves: Bug 979515 - CVE-2013-2219 Directory Server: ACLs inoperative in some search scenarios
  - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold (ticket 47427)
  - Resolves: Bug 983091 - Memory leak in 389-ds-base 1.2.11.15 (ticket 47428)
  - Resolves: Bug 986131 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative. (ticket 47435)
  - Resolves: Bug 986424 - fix recent compiler warnings (ticket 47378)
  - Resolves: Bug 986857 - Disk Monitoring not checking filesystem with logs (ticket 47441)
  - Resolves: Bug 987703 - memleaks in set_krb5_creds (ticket 47421)
  - Resolves: Bug 988562 - deadlock after adding and deleting entries (ticket 47449)
  - Resolves: Bug 989692 - Sorting with attributes in ldapsearch gives incorrect result (ticket 543)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-23
changelog:
  - Bump version to 1.2.11.15-23
  - Resolves: Bug 1000632 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN
  - Resolves: Bug 1002260 - server fails to start after upgrade(schema error) (ticket 47318)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-24
changelog:
  - Bump version to 1.2.11.15-24
  - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold; Changed CONFIG_INT to CONFIG_LONG for nsslapd-disk-monioring-threshold (ticket 47427)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-25
changelog:
  - Bump version to 1.2.11.15-25
  - Resolves: Bug 1006846 - 2Master replication with SASL/GSSAPI auth broken (ticket 47523)
  - Resolves: Bug 1007452 - Under specific values of nsDS5ReplicaName, replication may get broken or updates (ticket 47489)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-26
changelog:
  - Bump version to 1.2.11.15-26
  - Resolves: Bug 947583 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (ticket 47534)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-27
changelog:
  - Bump version to 1.2.11.15-27
  - Resolves: Bug 1013735 - CLEANALLRUV doesnt run across all replicas (ticket 47509)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-28
changelog:
  - Bump version to 1.2.11.15-28
  - Resolves: Bug 1016038 - Users from AD sub OU does not sync to IPA (ticket 47488)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-30
changelog:
  - Resolves: bug 1024977 CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches


author: Than Ngo <than@redhat.com> - 6:4.3.4-6
changelog:
  - Redhat branding 
  - make kdeinit4 quiet
  - backport to fix critical performance
  - backport to fix issue in printing on pages with form widgets


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - update to 1.35
  - drop flag and patch for enabling/disabling external tests - patch now upstream
  - external hosts patch no longer needed as we don't do external tests
  - filter out unversioned provide for perl(Net::SSLeay)
  - use the distro openssl flags rather than guessing them


author: Paul Howarth <paul@city-fan.org> - 1.35-7
changelog:
  - update to svn trunk (rev 252), needed due to omission of MD2 functionality
    from OpenSSL 1.0.0 (CPAN RT#48916)


author: Jay Fenlason <fenlason@redhat.com> - 1.5-2
changelog:
  - Build the 1.1 version as well, so we have the old library for backward
    compatability.
    Resolves: rhbz1070347


author: Michal Schmidt <mschmidt@redhat.com> - 1.5-3
changelog:
  - Make libhwloc.so point to the current library version, not the compat one.
    Resolves: rhbz1135040


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New upstream bugfix release 1.2.1
  - Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.
  - Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal
  - Resolves: rhbz#604704 - authconfig should provide error with no trace back
  -                         if disabling sssd when sssd is not enabled
  - Resolves: rhbz#591873 - Connecting to the network after an offline kerberos
  -                         auth logs continuous error messages to sssd_ldap.log
  - Resolves: rhbz#596295 - Authentication fails for user from the second domain
  -                         when the same user name is filtered out from the
  -                         first domain
  - Related:  rhbz#598559 - Update translation files for SSSD before RHEL 6
  -                         final


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-19
changelog:
  - Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6
  -                         final
  - Resolves: rhbz#608661 - SASL with OpenLDAP server fails
  - Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-5
changelog:
  - backport support for the "validnames" option from SVN and use it to allow
    parentheses characters by modifying the default setting (#690870)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-6
changelog:
  - backport patches from 0.7.10 to interpret more types of errors as indicators
    that we need to ask a different server (#692817) and from 0.7.12 to not
    get stuck while cleaning up SSL/TLS encrypted connections


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-8
changelog:
  - switch to only munging the contents of /etc/nslcd.conf on the very first
    install (#706454)
  - make sure that we have enough space to parse any valid GID value when
    parsing a user's primary GID (#716822,#720230)
  - tweak the default "validnames" setting to also allow shorter and shorter
    names to pass muster (#706860)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-9
changelog:
  - include backported enhancement to take URIs in the form "dns:DOMAIN" in
    addition to the already-implemented "dns" (#730309)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-10
changelog:
  - update the validnames changes to the self-tests so that their expectations
    match the modified defaults (#737496)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-11
changelog:
  - do not overflow big UID values, use explicit base when converting UIDs
    and GIDs to integer types (#741362)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-14
changelog:
  - run the config file upgrade in %posttrans to avoid problems on multilib
    (#706454)
  - convert UID to long long on all arches to catch negative values (#741362)


author: Daniel Mach <dmach@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-10
changelog:
  - Related: rhbz#631002 - Synchronize qpid-cpp build to MRG 1.3.
    This build synchronizes with RHEL-{4,5} qpid-cpp-mrg-0.7.946106-26.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-11
changelog:
  - Related: rhbz#631002 - Synchronize qpid-cpp build to MRG 1.3.
    This build synchronizes with RHEL-{4,5} qpid-cpp-mrg-0.7.946106-28 (MRG 1.3.2 RC2).
    Updated lib version numbers for RHEL 6.1.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-12
changelog:
  - Related: rhbz#659098 - QMFv2 API for C++
  - Related: rhbz#617260 - qmf agent crashes broker when queue limits exceeded
  - Related: rhbz#659100 - QMFv2 API for Python
  - Related: rhbz#662826 - Support for federated brokers in QMF
    This build adds QMF v.2 to the previous MRG 1.3.2 RC2 build, and a
    new python-qmf2 subpackage (rpm).


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.9.1073306-1
changelog:
  - Related: rhbz#675821 - Rebase qpid-cpp to 0.10 for snapshot 3
    Note that the current qpid trunk is still in 0.9, but will branch onto
    the 0.10 release branch soon. This is a test build only.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.9.1078967-1
changelog:
  - Related: rhbz#675821 - First build of 0-10 branch, but because final
    numbering strategy is still undecided, the 0.9.x label persists for this
    build. QMF has been removed entirely and placed into its own package, as
    there were not only inconsistencies in the old packaging, but also name
    clashes.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-1
changelog:
  - Related: rhbz#675821 - Rebase to upstream 0.10 rev 1083082 (store rev
    remains 4446)
  - Removing svn rev no. from the package names


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.59.rc1
changelog:
  - Use /lib or /lib64 only if directory in chroot already exists
  - Tighten NSS library pattern, escape chroot mount path


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-4
changelog:
  - Resolves: rhbz#710298 - fix intel optimized aes code to handle case where input and ouput are in the same buffer


author: Jack Magne <jmagne@redhat.com>= 1.1.0-17
changelog:
  - Resolves: #556657 Enroll button active for an enrolled CAC card.
  - Resolves: #469867 Cannont use arrow keys to move between cards.


author: Jack Magne <jmagne@redhat.com>= 1.1.0-20
changelog:
  - Resolves: #582283 - ESC Enrollment of formatted card fails when more than one card present in usb.


author: Jack Magne <jmagne@redhat.com>= 1.1.0-22
changelog:
  - Resolves: #729027 - Debuginfo package issues in esc
  - Resolves: #253077 - ESC windows should keep the same size if the user resized them
  - Resolves: #682216 - [abrt] esc-1.1.1.0-21.el6 __strcmp_ssse3: Process /usr/lib/esc-1.1.1.0/escd 
  -    was killed by singnal 11 (SIGSEGV)
  - Resolves: #702683 - esc-prefs.js file has a typo


author: Ville Skyttä <ville.skytta at iki.fi> - 0.2.8.4-18
changelog:
  - Split libwmflite (WMF parser) into -lite subpackage (#432651).
  - Build with dependency tracking disabled.
  - Convert docs to UTF-8.


author: Jiri Skala <jskala@rehat.com> - 2.2.2-3
changelog:
  - Resolves: #540818 - Local user access denied by default vsftpd.conf
  - Resolves: #580521 - vsftpd issues in RHEL5.4 (cloned)


author: Jiri Skala <jskala@rehat.com> - 2.2.2-9
changelog:
  - Resolves: #785084 - vsftpd can not handle square brackets in ls
  - Resolves: #785061 - vsftpd child terminates when listing files with UID/GID larger than signed in
  - Resolves: #717411 - Connection failures during upload using PORT not handled cleanly
  - Resolves: #752954 - Disabling Reverse DNS lookups in VSFTPd
  - Resolves: #745133 - vsftpd: documentation for 'max_per_ip' default setting is wrong
  - Resolves: #765757 - SITE HELP offers CHMOD even when it is disabled/unavailable
  - Resolves: #701300 - vsftpd.conf lists incorrect default value for xferlog_file
  - Resolvse: #785642 - Invalid error recovery in vsf_privop_pasv_listen()


author: Jaromir Capik <jcapik@redhat.com> - 6.3.2-63.el6_3.3
changelog:
  - Resolves: rhbz#838998
  - Fixing 'sa -u' SIGSEGVs & wrong UIDs
  - Fixing the ChengeLog version typos ... 6.2.3 -> 6.3.2


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-6
changelog:
  - don't require logrotate (#922769)
  - move pppd database to /var/run/ppp to prevent SELinux AVCs (#968398)


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-7
changelog:
  - ignore unrecognised radiusclient configuration directives (#906912)
  - add missing l2tp support (#815128)


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-8
changelog:
  - prevent running into issues caused by undefined behavior (pointers of incompatible types aliasing the same object)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-25
changelog:
  - migration: Do not restore labels on failed migration (rhbz#895826)
  - qemu: Use default machine type if missing it in qemu command line (rhbz#995312)
  - qemu: Don't leak vm on failure (rhbz#995312)
  - virDomainDefParseXML: Set the argument of virBitmapFree to NULL after calling virBitmapFree (rhbz#1006710)
  - tests: Files named '.*-invalid.xml' should fail validation (rhbz#1006710)
  - tests: Use portable shell code (rhbz#1006710)
  - Add test for the nodemask double free crash (rhbz#1006710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-26
changelog:
  - Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296)
  - Introduce APIs for splitting/joining strings (rhbz#1006266)
  - Rename virKillProcess to virProcessKill (rhbz#1006266)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006266)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006266)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006266)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006266)
  - Include process start time when doing polkit checks (rhbz#1006266)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-28
changelog:
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1011981)
  - qemu: Drop qemuDomainMemoryLimit (rhbz#1013758)
  - docs: Discourage users to set hard_limit (rhbz#1013758)
  - docs: Clean 09adfdc62de2b up (rhbz#1013758)
  - qemuSetupMemoryCgroup: Handle hard_limit properly (rhbz#1013758)
  - qemuBuildCommandLine: Fall back to mem balloon if there's no hard_limit (rhbz#1013758)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29
changelog:
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1014198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1014198)
  - qemu: Generate correct name for hostdev network devices (rhbz#1001881)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.2
changelog:
  - qemuDomainDestroyFlags: Don't allow @vm to disappear while executing API (rhbz#1038816)
  - python: Return dictionary without value in case of no blockjob (rhbz#1038815)
  - remote: Fix regression in event deregistration (rhbz#1038814)
  - Add virtio-scsi to fallback models of scsi controller (rhbz#1040141)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.3
changelog:
  - qemu: Avoid operations on NULL monitor if VM fails early (rhbz#1055578)
  - qemu: Do not access stale data in virDomainBlockStats (CVE-2013-6458)
  - qemu: Avoid using stale data in virDomainGetBlockInfo (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockJobImpl (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockCopy (rhbz#1054804)
  - qemu: Fix job usage in virDomainGetBlockIoTune (CVE-2013-6458)
  - Don't crash if a connection closes early (CVE-2014-1447)
  - Really don't crash if a connection closes early (CVE-2014-1447)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.4
changelog:
  - Block info query: Add check for transient domain (rhbz#1059904)
  - network: Only prevent forwarding of DNS requests for unqualified names (rhbz#1062708)
  - network: Change default of forwardPlainNames to 'yes' (rhbz#1062708)


author: Doug Ledford <dledford@redhat.com> - 1.2-13.el5
changelog:
  - Update to ofed 1.4.1 final bits
  - Rebuild against non-XRC libibverbs
  - Related: bz506097, bz506258


author: Doug Ledford <dledford@redhat.com> - 1.3.0-1
changelog:
  - Update to latest upstream release (1.2.3 -> 1.3.0)
  - Strip rocee related code out of upstream update
  - Add a buildrequires on libibumad because upstream needs it now
  - Fix lack of build on i686
  - Related: bz725016
  - Resolves: bz724896


author: Doug Ledford <dledford@redhat.com> - 1.3.0-2
changelog:
  - Update to latest upstream release
  - No longer strip rocee related code out, we can compile with it now
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 2.0-1
changelog:
  - Update to latest upstream release
  - We had to drop ib_clock_test program as no equivalent exists
    in the latest release
  - Resolves: bz806183, bz806185, bz830099


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Fix rpmdiff detected error.  Upstream overrode our cflags so stack
    protector got turned off.
  - Related: bz806183


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-1
changelog:
  - rebase to 2.4.39 (#923680)
    + drop a lot of upstreamed patches, backport the rest
    + compile in mdb
    + remove automatic slapd.conf -> slapd-config conversion


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-3
changelog:
  - add another missing patch forgotten during the rebase
  - fix: enable dynamic linking - unresolved symbols in the smbk5pwd module


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-4
changelog:
  - Remove spurious error about no value in /sys/dev/block/major:minor/dm/uuid.
  - Fix device mismatch detection for LV if persistent .cache file is used.
  - Fix holder device not being found in /dev while sysfs has it during dev scan.
  - Document that lvmlockd and lvmpolld features are available only if compiled in
    (RHEL6 lvm2 doesn't have lvmlockd and lvmpolld compiled in).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-7
changelog:
  - Workaround for raid leg allocation failure after not-in-sync raid leg failure.
  - Fix flushing of outstanding IO for mirror target (2.02.133).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-8
changelog:
  - Prevent non-synced raid1 repair unless --force
  - Fix automatic updates of PV extension headers to newest version.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-9
changelog:
  - Fix lvchange --discard|--zero for active thin-pool.
  - Fix lock-holder device for thin pool with inactive thin volumes.
  - Use any inherited tags when wiping metadata sub LVs to ensure activation.
  - Do not issue "Failed to create directory" message for dm_create_dir failure.
  - Add Conflicts: lvm2-libs < 2.02.111 to device-mapper-event to prevent
    incorrect package setup if old and new device-mapper/lvm2 packages combined.
  - Move blkdeactivate/blk-availability script from lvm2 to device-mapper package.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-10
changelog:
  - Disable queueing on mpath devs in blk-availability initscript.
  - Add new -m|--mpathoption disablequeueing to blkdeactivate.
  - Prevent only repair for non-synced raid1 unless --force, not other raid types.


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-193.el6]
changelog:
  - [pci] remove quirk for pre-production systems with Intel 82576 NIC (Prarit Bhargava) [729677]
  - [x86] efi: Revert new_memmap code (Matthew Garrett) [723274]
  - [infiniband] mlx4: add new module parameters (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: Avoid duplicate devices from LUN scan (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: Fix integer -> pointer cast warnings (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: try to use larger FMR sizes to cover  our mappings (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: add support for indirect tables that  don't fit in SRP_CMD (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: rework mapping engine to use multiple  FMR entries (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: allow sg_tablesize to be set for each  target (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: move IB CM setup completion into its  own function (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: always avoid non-zero offsets into an FMR (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: Test only once whether iu allocation  succeeded (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IPoIB: Add GRO support (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IPoIB: Remove LRO support (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: consolidate hot-path variables into  cache lines (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: stop sharing the host lock with SCSI (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] Touch up a merge issue, fixes compilation (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: reduce lock coverage of command completion (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: reduce local coverage for command  submission and EH (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: don't move active requests to their own  list (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: allow lockless work posting (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: consolidate state change code (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/srp: allow task management without a  previous request (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] rds/ib: use system_wq instead of rds_ib_fmr_wq (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [net] rds: Makefile: Remove deprecated items (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] Manual backport of alloc_netdev_mqs (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] Fix a merge issue (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_en: Restoring RX buffer pointer in case of  failure (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4: Sensing link type at device initialization (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4: Fixing bad size of event queue buffer (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_en: Fix loss of promiscuity (Doug Ledford) [612992 688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_en: Removing HW info from ethtool -i report (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_en: updated driver version to 1.5.4.1 (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_en: Using blue flame support (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_core: reserve UARs for userspace consumers (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_core: maintain available field in bitmap  allocator (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4: Add blue flame support for kernel consumers (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_en: Reporting HW revision in ethtool -i (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4: Wake on LAN support (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_en: using new mlx4 interrupt scheme (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4: Changing interrupt scheme (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_en: bringing link up when registering  netdevice (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_en: optimize adaptive moderation algorithm  for better latency (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_en: moderation parameters are not reseted (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_en: going out of range of TX rings when  reporting stats (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/mlx4: Handle protocol field in multicast table (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_core, ib,  en: Fix driver when sizeof phys_addr_t > sizeof long (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/mlx4: Handle -ENOMEM in forward_trap() (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4_core: Avoid vunmap() of invalid pointer if  allocation fails (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/mlx4: Don't call dma_free_coherent() with  irqs disabled (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] mlx4: Call alloc_etherdev to allocate RX and TX  queues (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/nes: Add a check for strict_strtoul() (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/ipath: Use pci_dev->revision, again (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB: Increase DMA max_segment_size on Mellanox  hardware (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/nes: Don't print success message at level  KERN_ERR (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/ipath: Don't reset disabled devices (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/nes: Don't generate async events for  unregistered devices (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/amso1100: Fix compile warnings (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/nes: Fix incorrect SFP+ link status  detection on driver init (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/nes: Fix SFP+ link down detection issue  with switch port disable (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/nes: Generate  IB_EVENT_PORT_ERR/PORT_ACTIVE events (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/nes: Fix bonding on iw_nes (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA: Use vzalloc() to replace vmalloc()+memset(0) (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/mthca: Fix driver when sizeof (phys_addr_t)  > sizeof (long) (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/nes: Fix string continuation line (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/mthca: Handle -ENOMEM in forward_trap() (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/ipath: Use printf extension pR for struct  resource (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA: Check for NULL mode in .devnode methods (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/cma: Save PID of ID's owner (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/cma: Add support for netlink statistics  export (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/cma: Pass QP type into rdma_create_id() (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA: Update exported headers list (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/cma: Export enum cma_state in  <rdma/rdma_cm.h> (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB: Add devnode methods to cm_class and umad_class (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/mad: Return EPROTONOSUPPORT when an RDMA  device lacks the QP required (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/uverbs: Add devnode method to set path/mode (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/ucma: Add .nodename/.mode to tell  userspace where to create device node (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA: Add netlink infrastructure (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] Backports to fix compile of changes that  upstream made but relied on changes that don't exist in rhel6 (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA: Add error handling to ib_core_init() (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/iwcm: Get rid of enum iw_cm_event_status (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/cma: Add an ID_REUSEADDR option (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/cma: Fix handling of IPv6 addressing in  cma_use_port (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/mad: Improve an error message so error code  is included (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/cma: Replace global lock in  rdma_destroy_id() with id-specific one (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] IB/cm: Cancel pending LAP message when exiting  IB_CM_ESTABLISH state (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA: Update missed conversion of  flush_scheduled_work() (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA/ucma: Copy iWARP route information on queries (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] RDMA: Update workqueue usage (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [infiniband] infiniband: remove dev_base_lock use (Doug Ledford) [688944 690152 698275 698279 698283 700277 707092 710159]
  - [virt] vmalloc: eagerly clear ptes on vunmap (Igor Mammedov) [730503]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-194.el6]
changelog:
  - [md] raid5: fix FUA request handling in ops_run_io() (Mike Snitzer) [733527]
  - [md] raid5: fix errant REQ_FUA that should be BIO_FUA (Mike Snitzer) [733527]
  - [perf] report: Use properly build_id kernel binaries (Jiri Olsa) [691343]
  - [ppc] pseries/xics: Use cpu_possible_mask rather than cpu_all_mask (Steve Best) [732357]
  - [drm] i915: Post-3.0 updates from drm-intel-fixes (Adam Jackson) [720702]
  - [scsi] bfa: Update the driver version to 3.0.2.2 (Rob Evers) [725913]
  - [scsi] bfa: Add support to store driver configuration in flash (Rob Evers) [725913]
  - [scsi] bfa: Add support to collect fabric stats (Rob Evers) [725913]
  - [scsi] bfa: Added support to configure QOS and collect stats (Rob Evers) [725913]
  - [scsi] bfa: Add support to configure trunking on Brocade adapter ports (Rob Evers) [725913]
  - [scsi] bfa: Add support to configure and query flash boot partition (Rob Evers) [725913]
  - [scsi] bfa: Added support to collect and reset fcport stats (Rob Evers) [725913]
  - [scsi] bfa: Add support for IO profiling (Rob Evers) [725913]
  - [scsi] bfa: Extend BSG to support more user commands (Rob Evers) [725913]
  - [scsi] bfa: Check supported speed based on port mode (Rob Evers) [725913]
  - [scsi] bfa: Update RME interrupt handling (Rob Evers) [725913]
  - [scsi] bfa: BSG return value fix to be compatible with kernel convention (Rob Evers) [725913]
  - [scsi] bfa: Add FC-transport based Asynchronous Event Notification support (Rob Evers) [725913]
  - [scsi] bfa: Move debugfs initialization before bfa init (Rob Evers) [701485]
  - [scsi] bfa: Update the driver version to 3.0.2.1 (Rob Evers) [701485]
  - [scsi] bfa: Driver and BSG enhancements (Rob Evers) [701485]
  - [scsi] bfa: Added support to query PHY (Rob Evers) [701485]
  - [scsi] bfa: Added HBA diagnostics support (Rob Evers) [701485]
  - [scsi] bfa: Added support for flash configuration (Rob Evers) [701485]
  - [scsi] bfa: Added support to obtain SFP info (Rob Evers) [701485]
  - [scsi] bfa: Added support for CEE info and stats query (Rob Evers) [701485]
  - [scsi] bfa: Extend BSG interface (Rob Evers) [701485]
  - [scsi] bfa: FCS bug fixes (Rob Evers) [701485]
  - [scsi] bfa: DMA memory allocation enhancement (Rob Evers) [701485]
  - [scsi] bfa: Brocade-1860 Fabric Adapter vHBA support (Rob Evers) [701485]
  - [scsi] bfa: Brocade-1860 Fabric Adapter PLL init fixes (Rob Evers) [701485]
  - [scsi] bfa: Added Fabric Assigned Address(FAA) support (Rob Evers) [701485]
  - [scsi] bfa: IOC bug fixes (Rob Evers) [701485]
  - [scsi] bfa: Enable ASIC block configuration and query (Rob Evers) [701485]
  - [scsi] bfa: Update the driver version to 3.0.2.0 (Rob Evers) [701485]
  - [scsi] bfa: Add BSG interface to support ELS, CT and vendor commands (Rob Evers) [701485]
  - [scsi] bfa: Driver initialization and model description fix (Rob Evers) [701485]
  - [scsi] bfa: Enhancement for fcpim and IO tag handling (Rob Evers) [701485]
  - [scsi] bfa: FC credit recovery and misc bug fixes (Rob Evers) [701485]
  - [scsi] bfa: Brocade-1860 Fabric Adapter 16Gbs support and flash controller fixes (Rob Evers) [701485]
  - [scsi] bfa: IOC and PLL init changes for Brocade-1860 Fabric Adapter (Rob Evers) [701485]
  - [scsi] bfa: Changes to support vport disable and enable operations (Rob Evers) [701485]
  - [scsi] bfa: Brocade-1860 Fabric Adapter Hardware Enablement (Rob Evers) [701485]
  - [scsi] bfa: Add pbc port disable check and fix LPS message name (Rob Evers) [701485]
  - [scsi] bfa: Introduce IOC event notification mechanism (Rob Evers) [701485]
  - [scsi] bfa: Introduced generic address len pair to represent DMA memory chunk (Rob Evers) [701485]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-195.el6]
changelog:
  - [drm] radeon/kms: set a default max_pixel_clock (Dave Airlie) [729545]
  - [pci] pciehp: change wait time for valid configuration access (Myron Stowe) [727720]
  - [pci] ACPI: Report ASPM support to BIOS if not disabled from command line (Myron Stowe) [732501]
  - [ppc] pci: Add calls to set_pcie_port_type() and set_pcie_hotplug_bridge() (Steve Best) [734192]
  - [ppc] pci: Add missing hookup to pci_slot (Steve Best) [734192]
  - [ppc] pci: Add missing call to header fixup (Steve Best) [734192]
  - [virt] xen events: implement mask_ack (Andrew Jones) [733672]
  - [virt] Revert "[virt] xen/events: change to using fasteoi" (Andrew Jones) [733672]
  - [scsi] be2iscsi: Add pci_disable device (Mike Christie) [688076]
  - [scsi] be2iscsi: Adding a shutdown Routine (Mike Christie) [688076]
  - [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723433] {CVE-2011-2699}
  - [fs] Ecryptfs: Add mount option to check uid of device being mounted = expect uid (Eric Sandeen) [731176] {CVE-2011-1833}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-196.el6]
changelog:
  - [scsi] qla4xxx: updated device id check for BFS (Chad Dupuis) [732622]
  - [fs] nfsd4: return nfserr_symlink on v4 OPEN of non-regular file (J. Bruce Fields) [697659]
  - [netdrv] bnx2: Fix some late breaking bnx2 bugs (Neil Horman) [728328]
  - [netdrv] e1000: save skb counts in TX to avoid cache misses (Dean Nelson) [690780]
  - [netdrv] bonding: reset queue mapping prior to transmission (Neil Horman) [726688]
  - [netdrv] e1000e: update to upstream version 1.4.4 (Andy Gospodarek) [730607]
  - [netdrv] bonding: add missing xmit_hash_policy=layer2+3 info (Weiping Pan) [706018]
  - [net] vlan: do not transfer real_num_tx_queues (Weiping Pan) [735015]
  - [mm] thp: tail page refcounting fix (Andrea Arcangeli) [732986]
  - [virt] xen: x86_32: do not enable iterrupts when returning from exception in interrupt context (Igor Mammedov) [713399]
  - [mm] oom: task->mm == NULL doesn't mean the memory was freed (Frantisek Hrbata) [734732]
  - [scsi] scsi_dh_rdac: Associate HBA and storage in rdac_controller to support partitions in storage (Mike Snitzer) [733763]
  - [scsi] scsi_dh_rdac: Use WWID from C8 page instead of Subsystem id from C4 page to identify storage (Mike Snitzer) [733763]
  - [scsi] lpfc: Update lpfc version for 8.3.5.45.3p driver release (Rob Evers) [733500]
  - [scsi] lpfc: Fix compiler warning due to uninitialized local variable (Rob Evers) [733500]
  - [scsi] lpfc: Fix bus reset handler fails with bad failure code (Rob Evers) [733500]
  - [scsi] lpfc: Fix proper error code return value for management API (Rob Evers) [733500]
  - [scsi] lpfc: Fixed ctlreg write bug (Rob Evers) [733500]
  - [scsi] lpfc: Fix default adapter name for the OCe15100 (Rob Evers) [733500]
  - [scsi] lpfc: Fix cable pull failure on interface type 2 SLI-4 adapters (Rob Evers) [733500]
  - [scsi] lpfc: Fixed not able to perform firmware reset through sysfs board_mode attribute (Rob Evers) [733500]
  - [scsi] lpfc: Fixed SLI4 device firmware reset with SR-IOV virtual functions (Rob Evers) [733500]
  - [scsi] lpfc: Fixed not recovering SLI port in handling error attention with RN bit set (Rob Evers) [733500]
  - [scsi] lpfc: Fix two crashes when unsolicted ELS ECHO_CMD is received (Rob Evers) [733500]
  - [scsi] lpfc: Fix direct connect does not come up for SLI4 FC ports (Rob Evers) [733500]
  - [scsi] lpfc: Fixed long wait when firmware reset to a SLI port without required privilege (Rob Evers) [733500]
  - [scsi] lpfc: Fix request firmware support for little endian systems (Rob Evers) [733500]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-197.el6]
changelog:
  - [block] blktrace: fix handling of requests with SYNC and META flags (Mike Snitzer) [726437]
  - [block] blktrace: add FLUSH/FUA support (Mike Snitzer) [726437]
  - [kernel] Restore max mqueue message size to its previous RHEL 5 value (Doug Ledford) [730632]


author: Kyle McMartin <kmcmarti@redhat.com> [2.6.32-198.el6]
changelog:
  - [fs] corrupted GUID partition tables can cause kernel oops (Jerome Marchand) [695982] {CVE-2011-1577}
  - [x86] perf: Fix Intel fixed counters base initialization (Don Zickus) [736284] {CVE-2011-2521}
  - [netdrv] iwlagn: use 6000g2b uCode for 130 series devices (Stanislaw Gruszka) [737185]
  - [block] Missing portions of DM/MD RAID1 plugging patch (Jonathan E Brassow) [735124]
  - [net] Compute protocol sequence numbers and fragment IDs using MD5. (Jiri Pirko) [732665] {CVE-2011-3188}
  - [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732665] {CVE-2011-3188}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-199.el6]
changelog:
  - [scsi] libfcoe: fix compilation when fcoe.ko is not used (Mike Christie) [727304]
  - [scsi] bnx2fc: Bumped version to 1.0.6 (Mike Christie) [727304]
  - [scsi] bnx2fc: Fix FW assert during RSCN stress tests (Mike Christie) [727304]
  - [scsi] bnx2fc: Fix panic caused because of incorrect errror handling in create() (Mike Christie) [727304]
  - [scsi] bnx2fc: Avoid calling bnx2fc_if_destroy with unnecessary locks (Mike Christie) [727304]
  - [scsi] bnx2fc: Validate vlan id in NETDEV_UNREGISTER handler (Mike Christie) [727304]
  - [scsi] bnx2fc: No abort issued for REC when it times out (Mike Christie) [727304]
  - [scsi] bnx2fc: Send solicitation only after vlan discovery is complete (Mike Christie) [727304]
  - [scsi] bnx2fc: Reset max receive frame size during link up (Mike Christie) [727304]
  - [scsi] bnx2fc: Do not use HBA_DBG macro when lport is not available (Mike Christie) [727304]
  - [scsi] bnx2fc: increase cleanup wait time (Mike Christie) [727304]
  - [scsi] bnx2fc: Bump version to 1.0.5 (Mike Christie) [727304]
  - [scsi] bnx2fc: Prevent creating of NPIV port with duplicate WWN (Mike Christie) [727304]
  - [scsi] bnx2fc: Obtain WWNN/WWPN from the shared memory (Mike Christie) [727304]
  - [scsi] fcoe: Move common functions to fcoe_transport library (Mike Christie) [727304]
  - [scsi] bnx2fc: Drop incoming ABTS (Mike Christie) [727304]
  - [scsi] bnx2fc: code cleanup in bnx2fc_offload_session (Mike Christie) [727304]
  - [scsi] bnx2fc: Fix NULL pointer deref during arm_cq (Mike Christie) [727304]
  - [scsi] bnx2fc: Do not reuse the fcoe connection id immediately (Mike Christie) [727304]
  - [scsi] bnx2fc: Clear DESTROY_CMPL flag after firmware destroy (Mike Christie) [727304]
  - [scsi] bnx2fc: Handle NETDEV_UNREGISTER for vlan devices (Mike Christie) [727304]
  - [scsi] bnx2fc: Reorganize cleanup code between interface_cleanup and if_destroy (Mike Christie) [727304]
  - [scsi] bnx2fc: Change function names of bnx2fc_netdev_setup/bnx2fc_netdev_cleanup (Mike Christie) [727304]
  - [scsi] bnx2fc: Do not attempt destroying NPIV port twice (Mike Christie) [727304]
  - [scsi] bnx2fc: Remove erroneous kref_get on IO request (Mike Christie) [727304]
  - [scsi] bnx2fc: Enable bsg_request support for bnx2fc (Mike Christie) [727304]
  - [scsi] bnx2fc: Bug fixes in percpu_thread_create/destroy (Mike Christie) [727304]
  - [scsi] bnx2fc: Reset the max receive frame size (Mike Christie) [727304]
  - [netdrv] cnic: Wait for all Context IDs to be deleted before sending FCOE_DESTROY_FUNC (Mike Christie) [727304]
  - [netdrv] cnic: Fix Context ID space calculation (Mike Christie) [727304]
  - [netdrv] cnic: Return proper error code if we fail to send netlink message (Mike Christie) [727304]
  - [netdrv] cnic: Fix ring setup/shutdown code (Mike Christie) [727304]
  - [netdrv] cnic: Fix port_mode setting (Mike Christie) [727304]
  - [netdrv] cnic: Replace get_random_bytes() with random32() (Mike Christie) [727304]
  - [scsi] cnic, bnx2i: Add support for new devices - 57800, 57810, and 57840 (Mike Christie) [727304]
  - [netdrv] cnic: Add VLAN ID as a parameter during netevent upcall (Mike Christie) [727304]
  - [x86] mm: Fix pgd_lock deadlock (Andrew Jones) [691310]
  - [mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Andrew Jones) [691310]
  - [mm] Revert "fix pgd_lock deadlock" (Andrew Jones) [691310]
  - [scsi] libfc: fix referencing to fc_fcp_pkt from the frame pointer via fr_fsp() (Mike Christie) [734961]
  - [scsi] libfc: block SCSI eh thread for blocked rports (Mike Christie) [734961]
  - [scsi] libfc: fix fc_eh_host_reset (Mike Christie) [734961]
  - [scsi] fcoe: Fix deadlock between fip's recv_work and rtnl (Mike Christie) [734961]
  - [scsi] fcoe: add fip retry to avoid missing critical keep alive (Mike Christie) [734961]
  - [scsi] libfc: fix warn on in lport retry (Mike Christie) [734961]
  - [scsi] libfc: Remove the reference to FCP packet from scsi_cmnd in case of error (Mike Christie) [734961]
  - [scsi] libfc: cleanup sending SRR request (Mike Christie) [734961]
  - [scsi] libfc: two minor changes in comments (Mike Christie) [734961]
  - [scsi] libfc, fcoe: ignore rx frame with wrong xid info (Mike Christie) [734961]
  - [scsi] libfc: release exchg cache (Mike Christie) [734961]
  - [scsi] libfc: use FC_MAX_ERROR_CNT (Mike Christie) [734961]
  - [scsi] fcoe: remove unused ptype field in fcoe_rcv_info (Mike Christie) [734961]
  - [scsi] fcoe: Rearrange fcoe port and NPIV port cleanup (Mike Christie) [734961]
  - [x86] intel_idle: Fix mismerge (Matthew Garrett) [733730]
  - [x86] x2apic: enable the bios request for x2apic optout (Prarit Bhargava) [696902]
  - [x86] ACPI: fix ioremap failure regression (Stanislaw Gruszka) [731546]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-200.el6]
changelog:
  - [build] Makefile: update RHEL_MINOR to 2 (Aristeu Rozanski)
  - [scsi] scsi_lib: pause between error retries (Rob Evers) [736812]
  - [kernel] perf tools: do not look at ./config for configuration (Jiri Benc) [730204] {CVE-2011-2905}
  - [scsi] Fix out of spec CD-ROM problem with media change (Rob Evers) [703366]
  - [netdrv] bna: Driver Version changed to 3.0.2.0 (Ivan Vecera) [701486]
  - [netdrv] bna: Remove Obsolete Files (Ivan Vecera) [701486]
  - [netdrv] bna: Remove Unused Code (Ivan Vecera) [701486]
  - [netdrv] bna: ENET and Tx Rx Redesign Enablement (Ivan Vecera) [701486]
  - [netdrv] bna: Add New HW Defs (Ivan Vecera) [701486]
  - [netdrv] bna: Tx and Rx Redesign (Ivan Vecera) [701486]
  - [netdrv] bna: Introduce ENET as New Driver and FW Interface (Ivan Vecera) [701486]
  - [netdrv] bna: MSGQ Implementation (Ivan Vecera) [701486]
  - [netdrv] bna: Remove Obsolete File bfi_ctreg.h (Ivan Vecera) [701486]
  - [netdrv] bna: Consolidated HW Registers for Supported HWs (Ivan Vecera) [701486]
  - [netdrv] bna: Remove get_regs Ethtool Support (Ivan Vecera) [701486]
  - [netdrv] bna: HW Interface Init Update (Ivan Vecera) [701486]
  - [netdrv] bna: Remove Unnecessary CNA Check (Ivan Vecera) [701486]
  - [netdrv] bna: Header File Consolidation (Ivan Vecera) [701486]
  - [netdrv] bna: HW Error Counter Fix (Ivan Vecera) [701486]
  - [netdrv] bna: Add HW Semaphore Unlock Logic (Ivan Vecera) [701486]
  - [netdrv] bna: IOC Event Name Change (Ivan Vecera) [701486]
  - [netdrv] bna: Mboxq Flush When IOC Disabled (Ivan Vecera) [701486]
  - [netdrv] bna: Minor IRQ Index and Definition Change (Ivan Vecera) [701486]
  - [netdrv] bna: State Machine Fault Handling Cleanup (Ivan Vecera) [701486]
  - [netdrv] bna: IOC Event Notification Enhancement (Ivan Vecera) [701486]
  - [netdrv] bna: CheckPatch Cleanup (Ivan Vecera) [701486]
  - [netdrv] bna: Print Driver Version (Ivan Vecera) [701486]
  - [netdrv] bna: use netdev_alloc_skb_ip_align() (Ivan Vecera) [701486]
  - [netdrv] bna: ethtool: cosmetic: Use ethtool ethtool_cmd_speed API (Ivan Vecera) [701486]
  - [netdrv] bna: ethtool: Use full 32 bit speed range in ethtool's set_settings (Ivan Vecera) [701486]
  - [net] bna: fix compile warning of bfa_ioc_smem_pgoff defined but not used (Ivan Vecera) [701486]
  - [netdrv] bna: Fix set-but-unused variables. (Ivan Vecera) [701486]
  - [netdrv] bna: use device model DMA API (Ivan Vecera) [701486]
  - [netdrv] bna: Remove unnecessary memset(,0,) (Ivan Vecera) [701486]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-201.el6]
changelog:
  - [x86] Add rh_kabi.c and protect struct alt_instr under KABI (Prarit Bhargava) [737753]
  - [x86] Fix module alt_instr KABI breakage (Prarit Bhargava) [737753]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-202.el6]
changelog:
  - [net] br_multicast: Ensure to initialize BR_INPUT_SKB_CB(skb)->mrouters_only. (Herbert Xu) [738110]


author: Steven dake <sdake@redhat.com> 1.2.3-30
changelog:
  - Resolves: rhbz#684928
  - Resolves: rhbz#684930
  - Fix ttl defaults and range checking.  (rhbz#684928)
  - merge upstream commit c5ee8757eb2a7026b26a6410f3f068c4797abcf8 (rhbz#684928)
  - Remove the ttl option from the udpu code and rely on kernel
    ttl defaults (rhbz#684930)
  - merge upstream commit 48cbb33d11fed7ed9db5e7c723cf84eb35cd9d29 (rhbz#684930)


author: Steven Dake <sdake@redhat.com> 1.2.3-31
changelog:
  - Resolves: rhbz#688691
  - Remove assertion during corosync shutdown.  (rhbz#688691)
  - merge upstream commit 92a3a1aa9d07e769eb6bc59467454e0316549cf6 (rhbz#688691)


author: Steven Dake <sdake@redhat.com> 1.2.3-32
changelog:
  - Resolves: rhbz#629380
  - Resolves: rhbz#688691
  - Resolves: rhbz#675783
  - Only dispatch notification messages one message at a time. (rhbz#629380)
  - merge upstream commit fbae3de885843debe9ccccb363e9ca8e98d5afea. (rhbz#629380)
  - Send confdb notifications from the main thread.  (rhbz#629380)
  - merge upstream commit abeb02277ee374531b910ce793213e60addb0fb5. (rhbz#629380)
  - Remove recv_flush operations from totemsrp to remove recursion
    error.  (rhbz#688691)
  - merge upstream commit 336741ee96caf3ae435b609ee8a76788902c9edf. (rhbz#688691)
  - Only restore old ring id information once before operational
    state.  (rhbz#675783)
  - merge upstream commit 0eabeee63eca7a4cc1d907607057ac668fafbcae.  (rhbz#675783)
  - Free recovery messages during operational enter rather then
    via message_free() call.  (rhbz#675783)
  - merge upstream commit 0fcf760977a73ef78bacff47e61c30ba21929faa.  (rhbz#675783)


author: Steven Dake <sdake@redhat.com> 1.2.3-33
changelog:
  - Resolves: rhbz#629380
  - Fix retrieving application's parent name in notifyd.  (rhbz#629380)
  - merge upstream commit 1b7b4f0f888621aff2f8866ac81b4930b4b07c63 (rhbz#629380)
  - Remove duplicate quarote events (rhbz#629380)
  - merge upstream commit 821e031b925ad3a15ca057f816fecb3568c96cb9 (rhbz#629380)
  - Add the service name to the connection name in statistics (rhbz#629380)
  - merge upstream commit 78ae800f80fa9cd0fe593724f5c64138c205fec5 (rhbz#629380)
  - Fix shutdown when a confdb client is still connected (rhbz#629380)
  - merge upstream commit 8b1492b50b64725d72ae9c301682ad9a489de344 (rhbz#629380) 
  - Fix compiler error with previous commit (rhbz#629380)
  - merge upstream commit 5da31206bbb9bb0d1f80907e53a5798204eaf594 (rhbz#629380)


author: Jan Friesse <jfriesse@edhat.com> 1.2.3-36.1
changelog:
  - Resolves: rhbz#726608
  - Resolves: rhbz#727962

  - Fix problem where corosync will segfault if there are gaps in recovery queue (rhbz#727962)
  - merge upstream commit b8a061ae28e7c874b66fa1d35ab01f53d1d36b42 (rhbz#727962)
  - Revert "totemsrp: Remove recv_flush code" (rhbz#726608)
  - merge upstream commit ee0a0dd75e248d5ad777f0beb77e98baddf0a23f (rhbz#726608)
  - main: let poll really stop before totempg_finalize (rhbz#726608)
  - merge upstream commit b620cd7d562643ec794113f948d6904c29791e21 (rhbz#726608)


author: Jan Friesse <jfriesse@redhat.com> 1.2.3-36.2
changelog:
  - Resolves: rhbz#734997
  - Ignore memb_join messages during flush operations (rhbz#734997)
  - merge upstream commit be608c050247e5f9c8266b8a0f9803cc0a3dc881 (rhbz#734997)


author: Jan Friesse <jfriesse@redhat.com> 1.2.3-36.3
changelog:
  - Resolves: rhbz#727962

  - Deliver all messages from my_high_seq_recieved to the last gap (rhbz#727962)
  - merge upstream commit e530376a60dc862f135bd0d4c52aebb43d948423 (rhbz#727962)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-6
changelog:
  - Bugzilla Bug #746365 - CRLS are not downloaded when mod_revocator module
    is loaded successfully. And no error was thrown in httpd error_log -
    mharmsen
  - Add 'autoreconf -fvi' to build section - mharmsen
  - Fix shutting down Apache if CRLUpdateCritical is on and a CRL
    is not available at startup (#654378) - rcritten@redhat.com
  - Updated mod_revocator-kill patch. The ownership of the semaphore used to
    control access to crlhelper was not always changed to the Apache user
    (#648546) - rcritten@redhat.com
  - Actually apply the patch (#648546) - rcritten@redhat.com
  - Fix killing the web server if updatecritical is set (#648546) -
    rcritten@redhat.com


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-8
changelog:
  - Bugzilla Bug #748577 - mod_revocator does not shut down httpd server if
    expired CRL is fetched
  - Bugzilla Bug #748579 - mod_revocator does not bring down httpd server if
    CRLUpdate fails


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-9
changelog:
  - Bugzilla Bug #749696 - httpd (32 bit) failed to start if mod_revocator
    (32 bit) is installed on ppc64


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-10
changelog:
  - Bugzilla Bug #861999 - mod_revocator exec CLR URIs fail to load: unable to
    load Revocation module, NSS error -8187 - stephen.capstick64@gmail.com
    (mod_revocator-waitpid.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-11
changelog:
  - Backported patch from Rob Crittenden
  - Clean up semaphore in crlhelper on shutdown (#1326841)
  - Update URL to https://fedorahosted.org/mod_revocator/
  - Respin to fix segfault in cleanup call. (#1326841)


author: Jiri Skala <jskala@rehat.com> - 2.2.2-1
changelog:
  - Resolves: #555321 - vsftpd segfaults with passive mode and SSL
  - updated to latest upstream version - fixes the bug #555321


author: Remi Collet <rcollet@redhat.com> - 5.3.3-29
changelog:
  - drop unneeded part of CVE-2006-724.patch and fileinfo.patch
    extension not provided or git binary patches (#1064027)
  - odbc: fix incompatible pointer type (#1053982)
  - mysqli: fix possible segfault in mysqli_stmt::bind_result
    php bug 66762 (#1069167)
  - mysql: fix php_mysql_fetch_hash writes long value into int
    php bug 52636 (#1054953)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-31
changelog:
  - soap: fixRFC2616 transgression (#1045019)
  - fix static calling in non-static method (#953786)
  - fix autoload called from closing session (#954027)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-34
changelog:
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Jan Kaluza <jkaluza@redhat.com> - 5.3.3-35
changelog:
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480


author: Remi Collet <rcollet@redhat.com> - 5.3.3-36
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515


author: Remi Collet <rcollet@redhat.com> - 5.3.3-37
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Miloslav Trmač <mitr@redhat.com> - 0.20.2-5
changelog:
  - Make test suite pass with OpenSSL 1.0.0
  - Don't ship patch backup files in %doc
    Resolves: #565660


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-35
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-37
changelog:
  - drop the AES-GCM restriction of 2^32 operations because the IV is
    always 96 bits (32 bit fixed field + 64 bit invocation field)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-38
changelog:
  - fix CVE-2015-4000 - prevent the logjam attack on client - restrict
    the DH key size to at least 768 bits (limit will be increased in future)


author: Tomas Mraz - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-5
changelog:
  - move library to /lib so the binaries needed when /usr might
    not be mounted can link to it (#669077)


author: Martin Stransky <stransky@redhat.com> - 24.4.0-3
changelog:
  - Added a workaround for Bug 1054242 - RHEVM: Extremely high memory
    usage in Firefox 24 ESR on RHEL 6.5


author: James Antill <james.antill@redhat.com> - 4.3.10-7
changelog:
  - Change {NAME:OFFSET:LENGTH} substitution feature to ignore KSH_ARRAYS option.
  - Fixup tests.
  - Resolves: rhbz#820530


author: Kamil Dudka <kdudka@redhat.com> - 4.3.10-12
changelog:
  - avoid using uninitialised memory after lexer realloc (#1146119)
  - replace an incorrect comment in /etc/zshenv (#1103697)
  - optimize matching of multiple * in wildcards (#1131172)
  - use heap rather than stack allocation for variable length arrays (#567215)
  - prevent jobs -Z from destroying environment variables (#878324)
  - shell emulation doc addition (#1104021)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-47
changelog:
  - fix wrong warning in openssl_encrypt() for missing IV
    when IV is not required #1260315
  - fix segfault's when you try and allocate an SplFixedArray
    with size >= 9999 #1071344
  - segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
  - add options to enable TLS in curl #1255920
  - fix segfault in gc_collect_cycles #1122681


author: Milan Zazrivec <mzazrivec@redhat.com> 2.1.3-0.2
changelog:
  - Rebased XQilla to latest upstream version 2.1.3
  - Fixed files section in spec (documentation was included twice)


author: Kalev Lember <kalev@smartlink.ee> - 2.2.3-8
changelog:
  - Require fully versioned main package for -devel subpackage
  - Don't build static library
  - Removed library Requires which are automatically picked up by rpm
  - Removed spurious BR autoconf automake libtool
  - Build -doc subpackage as noarch
  - Install documentation with %doc macro
  - Use %{_prefix} instead of hardcoding /usr
  - Use parallel make
  - Various other spec file clean ups


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct %changelog
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-4
changelog:
  - Fix text selection
  - Add patch poppler-0.12.3-text-selection.patch by Brian Ewins
  - Add patch poppler-0.12.3-text-selection-tables.patch by Marek Kasik
  - Make Provides/Obsoletes versioned
  - Add requirement of poppler-data
  - Resolves: #557812


author: Ray Strode <rstrode@redhat.com> - 1:1.2.16-9
changelog:
  Resolves: #547808
  - Fix activation of daemons (#545267)
  - Fix reload memleak (fdo #24697)
  - Don't forget about pending activations on reload (fdo #24350)
  - Fix reload race (fdo #21597)


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.20.1.el6]
changelog:
  - [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: ibrs_enabled() is expected to return > 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] Remove __cpuinitdata from some data & function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.21.1.el6]
changelog:
  - [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]


author: Fabiano Fidêncio <fidencio@redhat.com> 0.26-5
changelog:
  - Connecting to VM changes its resolution
    Resolves: rhbz#1242605
  - Cannot enable display 1 when it was disabled in previous session
    Resolves: rhbz#1247920
  - Windows needs to send complete monitors_config message to client
    Resolves: rhbz#1265361
  - Add Client capability for windows monitor_config messsage
    Resolves: rhbz#1265359
  - High Resolution Multi-Monitor Windows Guest freeze
    Resolves: rhbz#1247749
  - Drop isoc packages on low bandwith
    Resolves: rhbz#1276707


author: Ondrej Holy <oholy@redhat.com> - 1.4.3-17
changelog:
  - Check GConf2 key before use to avoid error dialog (#1049232)
  - Fix renaming files on webdav (#1011835)
  - Fix libarchive dependency


author: Ondrej Holy <oholy@redhat.com> - 1.4.3-18
changelog:
  - Fix GConf module building with updated GLib2 (#1118704)
  - Fix SFTP mounting with updated OpenSSH (#1118325)


author: Lawrence Lim <llim@redhat.com> - 4.0-3
changelog:
  - apply redhat-lsb.spec.diff-stewb <Stew Benedict - stewb@linuxfoundation.org>
  - Resolved: Bug 585947


author: Petr Šabata <contyk@redhat.com> - 2.6.32-24
changelog:
  - Don't hang on rtnl_send() in a confined domain (#985526)
  - Run lnstat indefinitely if -c was not specified (#977845)
  - lnstat manpage SEE ALSO path fixes (#974694)
  - Document tc's force and batch options (#950122)
  - Fix include/linux/if_link.h to get in line with upstream again (#903228)
  - Add support for the IPv6 tokenized interface (#950400)
  - Handle ip-route rto_min parameters correctly (#859145)
  - Add VXLAN support (#929313, #908155)
  - Add mdb subcommand to bridge (#885977)
  - tc now supports the -OK option (#851371)


author: Petr Pisar <ppisar@redhat.com> - 2.6.32-29
changelog:
  - Document tc -OK option (#851371)
  - Document "bridge mdb" and "bridge monitor mdb" (#885977)
  - Document bridge unsupported features (#929313)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-31
changelog:
  - Removed the unsporrted features from the bridge(8) manpage and
    document bridge fdb replace (#929313)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-32
changelog:
  - Fix a floating point exception regression introduced with the
    incorrect fix of #859145 (#1045200)


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593033


author: Tom Lane <tgl@redhat.com> 8.4.4-2
changelog:
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #561010


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #640090
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812081


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830725


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - updated 'delloem setled' command to indicate SES status and drive
    activities for a PCI-e SSD (#727314)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - added -Y option for ipmitool to hide Kg key from cmdline (#698647)
  - added 'channel setkg' command to set Kg encryption key on remote machine
    (#726390)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-11
changelog:
  - fixed delloem powermonitor on bigendian systems (#731718)
  - fixed memory leak in Serial-over-Lan module (#731977)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-1
changelog:
  - rebase to version 1.4.7:
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-2
changelog:
  - fixed initscript to be LSB compliant (rhbz#593228)
    - added euid 0 check
    - reload returns 3 (unimplemented feature)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-4
changelog:
  - added IPv6 transparent proxy support (rhbz#590186)
  - added auditing support (rhbz#642393)
    Thanks to Thomas Graf for the patch
  - init: restore context for save and use /etc/sysconfig for temps (rhbz#644273)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-5
changelog:
  - fixed option parser problem (mark matches with mark options) (rhbz#725879)
    based on upstream commits:
      600f38db82548a683775fd89b6e136673e924097
      59e8114c6792242e80785f4461d5e663fb9a3d64
      d3b2e391e3b944581e20e216af76339cc87d0590
      2d68ae7ce6e40e3977ee11a57296cf76801ae320
      1dc27393b7ba401e6228a5ee2472a6eb72836c43
      1e128bd804b676ee91beca48312de9b251845d09
      fa503ad59f73d20d85f4cdf53324a01d2ad8591e


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-6
changelog:
  - reverted upstream patches, because they are breaking the ABI
  - created new patch based on upstream but without ABI break (rhbz#725879)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-7
changelog:
  - Use alternatives to support other iptables versions for MRG kernels
    (rhbz#747068)
  - Restore sysctl values on service restart (rhbz#800208)
  - Added fallback support in case of error in service start (rhbz#808272)
  - Added AUDIT targets to to man pages (rhbz#809108)
  - Fixed maximum chain name length (rhbz#821441)
  - Added missing dependency for poliycoreutils package (rhbz#836286)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-9
changelog:
  - make alternatives names arch dependant for multilib (rhbz#860148)
  - added virtual provides for base libraries to be able to resolve library file requires


author: Doug Ledford <dledford@redhat.com> - 3.2.3-7
changelog:
  - Fix Monitor mode sometimes crashes when a resync completes
  - Fix missing symlink for mdadm container device when incremental creates
    the array
  - Make sure when creating a second array in a container that the second
    array uses all available space since leaving space for a third array
    is invalid
  - Validate the number of imsm volumes per controller
  - Fix issues with imsm arrays and disks larger than 2TB
  - Add support for expanding imsm arrays/containers
  - Resolves: bz808424, bz808519, bz808492, bz808438, bz808507,
  	    bz808475


author: Doug Ledford <dledford@redhat.com> - 3.2.3-8
changelog:
  - The support for expanding imsm arrays/containers was accepted upstream,
    update to the official patches from there
  - Fix for the issue of --add not being very smart
  - Fix an issue causing rebuilds to fail to restart on reboot (data
    corrupter level problem)
  - Reset the bad flag on map file updates
  - bitmap_offset is signed, treat it as such
  - Related: bz808475
  - Resolves: bz808776, bz812001, bz814743, bz811282


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-11
changelog:
  - Fix case where reshape of IMSM RAID fails because we don't check the
    return value when trying to read the word 'degraded' from sysfs,
    resulting in the use of random stack data.
  - Resolves bz824815


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-1
changelog:
  - Update mdadm to upstream release v3.2.5
    This includes all current patches, except for
    mdadm-3.2.3-imsm-fix-correct-checking-volume-s-degradation.patch
  - Resolved bz812358


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-3
changelog:
  - Avoid corruption by prohibiting an IMSM array from spanning multiple
    controllers (bz878810)
  - Prevent creation of a second IMSM array of size 0 (bz880208)
  - Avoid segfault when running mdadm --detail on an IMSM raid1 array
    where two drives have been disabled (bz880225)
  - Resolves bz878810, bz880208, bz880225


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.1
changelog:
  - Z-Stream fix
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Fix problem with IMSM RAID5 not rebuilding after reboot
  - Resolves bz958024, bz960612


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-6
changelog:
  - apply relro (CFLAGS&DFLAGS) in specfile, because in configure we
   need to call autoreconf.
  - Resolve: rhbz#676040


author: Lukas Berk <lberk@redhat.com> - 2.3-2
changelog:
  - rhbz998595: rpm -V systemtap-server complains
  - rhbz996091: systemtap.syscall/syscall.exp regressed on i686 and x86_64
  - rhbz996084: systemtap.exelib/exelib.exp regressed on s390x and x86_64
  - rhbz996097: systemtap.base/execve.exp fails on i686 and ppc64
  - rhbz996079: systemtap.base/warn_overflow.exp regressed on i686 and ppc64
  - rhbz915180: utrace_syscall_args.exp on s390x: "FAIL: 32_BIT_UTRACE_SYSCALL_ARGS shutdown (eof)"
  - rhbz996065: systemtap.base/bz10078.exp regressed
  - rhbz996072: systemtap.base/kmodule.exp regressed on s390x and ppc64
  - rhbz996080: systemtap.context/fib.exp regressed on s390x
  - rhbz996103: systemtap.base/bad-code.exp regressed on s390x
  - rhbz1008567: broken tapsets on s390x - print_ubacktrace() and print_ubacktrace_brief()
  - rhbz996087: systemtap.server/server_locale.exp regressed on all arches


author: Lukas Berk <lberk@redhat.com> - 2.3-3
changelog:
  - rhbz996084: systemtap.exelib/exelib.exp regressed on s390x and x86_64
  - rhbz996077: systemtap.base/utrace_p5.exp got unstable on i686 and x86_64
  - rhbz874205: [FJ6.2 Bug] systemtap crashes


author: Frank Ch. Eigler <fche@redhat.com> - 2.5-1
changelog:
  - rebase to upstream 2.5 release, including fixes for:
  - rhbz1027459: staprun/stapio fails if trace1 file is in same dir
  - rhbz1074541: kernel crash on netfilter_drop.stp sample
  - rhbz1038692: systemtap missing syscall pwritev


author: Frank Ch. Eigler <fche@redhat.com> - 2.5-4
changelog:
  - added BZ1099133.patch: at_var_cu test
  - added BZ1099472.patch: cast-scope.exp test
  - added BZ1099555.patch: gtod.exp test 
  - added BZ1099757.patch: vars.exp test
  - added BZ1099791.patch: vma_vdso test
  - added BZ1099825.patch: probe_by_pid test
  - added BZ1100813.patch: buildok tests
  - added BZ1109084.patch: initscript name sensitivity


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-6
changelog:
  - add support for joining IPAv2 domains
  - fix exception handling (#689717)
  - drop obsolete configuration files from manual page
  - use krb5_server instead of obsolete krb5_kdcip (#749700)
  - do not signal error on saving backups for missing config files (#755975)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-7
changelog:
  - detect error exit value from ipa-client-install
  - use --noac option with ipa-client-install
  - add sss to the services entry in nsswitch.conf (#804615)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-15
changelog:
  - save backups of password files when toggling shadow support (#852997)
  - read and overwrite only the general ldap base (#912851)
  - use sss for automount
  - more robust initialization of SSSDConfig (#1016404)
  - output error message from write error
  - properly set IPAV2DOMAINJOINED and call ipa client uninstall
    when appropriate (#1023286)
  - add umask=0077 to initial pam_mkhomedir args (#1025065)
  - fix broken --help output (#1066811)
  - check whether ldap URI is valid (#707590)
  - restart only services affected by configuration changes (#1023293, #975203)
  - report error from winbind and ipa domain joins


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-2
changelog:
  - Fix internal package dependancies
  - Resolves: rhbz#816875

  - Update to upstream 0b45588
    + Correctly disable syslog output when requested
    + Warn about node names containing a capital letter
    + Do not start fencing until entire device topology is found or query results timeout.
    + Allow nodes to use a name other than uname()


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-4
changelog:
  - Resolves: rhbz#816875
  - Update to upstream db9410b

    + Cluster: Detect node name collisions in corosync
    + Cluster: Strip domains from node names by default
    + Core: Prevent ordering changes when applying xml diffs
    + Fencing: On failure, only try a topology device once from the remote level.
    + Fencing: Retry stonith device for duration of action's timeout period.
    + Fencing: Support 'on_target' option in fencing device metadata for forcing unfence on target node
    + mcp: Re-attach to existing pacemaker components when mcp fails
    + pengine: Bug cl#5101 - Ensure stop order is preserved for partially active groups
    + pengine: Bug cl#5111 - When clone/master child rsc has on-fail=stop, insure all children stop on failure.
    + pengine: Correctly unpack active anonymous clones
    + pengine: Support a 'requires' resource meta-attribute for controlling whether it needs quorum, fencing or nothing
    + pengine: Support resources that require unfencing before start


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-5
changelog:
  - Resolves: rhbz#877364
  - Update to upstream e69dfc1

    + attrd: Correctly handle deletion of non-existant attributes
    + cib: Do not pass local variables to mainloop_add_fd() when creating remote connections
    + Cluster: Do not strip the domain from node names calculated from uname(2)
    + Core: Supply the correct number of arguments for the format string
    + corosync: Avoid errors when closing failed connections
    + fencing: Automatically append 'nodeid' to fencing agent args if it is detected agent supports 'nodeid' parameter
    + mcp: chmod the correct directory instead of /var/run
    + pengine: Prevent double-free for cloned primitive from template


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-6
changelog:
  - Resolves: rhbz#877364
  - Update to upstream d20d06f

    + cib: Avoid use-after-free by correctly support cib_no_children for non-xpath queries
    + cib: Remove text nodes from cib replace operations
    + Cluster: Preserve corosync membership state when matching node name/id entries
    + cman: Do not wait for unmanaged resources during shutdown
    + cman: Ensure reliable shutdown
    + cman: Ignore qdisk 'nodes'
    + Core: Prevent use-of_NULL in IPC code
    + corosync: Ensure peer state is preserved when matching names to nodeids
    + crmd: Avoid filling the ipc queue with data we don't need
    + crmd: Prevent election storms caused by getrusage() values being too close
    + Fencing: Correctly terminate when all device options have been exhausted
    + Fencing: Record delegated self-fencing operations in case they fail
    + legacy: Re-enable logging from the pacemaker plugin
    + pengine: Bug rhbz#880249 - Ensure orphan masters are demoted before being stopped
    + pengine: Bug rhbz#880249 - Teach the PE how to recover masters into primitives
    + pengine: Ensure previous migrations are completed before attempting another one
    + tools: crm_report - Fix node list detection


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-7
changelog:
  - Resolves: rhbz#880249
  - Update to upstream ca7bf5e

    + Fencing: Only try peers for non-topology based operations once
    + tools: Have crm_resource generate a valid transition key when sending resource commands to the crmd


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-1.el6_4.1
changelog:
  - Update source tarball to revision: Pacemaker-1.1.10
    Resolves: rhbz#1016617
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details
  - Additional patches:
    + Fix: mcp: Remove LSB hints that instruct chkconfig to start pacemaker at boot time
    + Fencing: Support agents that need the host to be unfenced at startup
    + Fix: crm_report: Collect corosync quorum data
    + Fix: systemd: Prevent glib assertion - only call g_error_free with non-NULL arguments
    + Fix: systemd: Prevent additional use-of-NULL assertions in g_error_free
    + Fix: logging: glib CRIT messages should not produce core files in the background
    + Fix: crmd: Correcty update the history cache when recurring ops change their return code
    + Log: crm_mon: Unmangle the output for failed operations
    + Log: cib: Correctly log short-form xml diffs
    + Log: pengine: Better indicate when a resource has failed
    + Fix: crmd: Prevent crash by passing log arguments in the correct order
    + Fix: pengine: Do not re-allocate clone instances that are blocked in the Stopped state
    + Fix: pengine: Do not allow colocation with blocked clone instances
    + Fix: pengine: Do not restart resources that depend on unmanaged resources
    + Fix: crmd: Prevent recurring monitors being cancelled due to notify operations


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-1.el6_4.2
changelog:
  - Fix: xml: Location constraints are allowed to specify a role
  - Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
    Resolves: rhbz#1016617


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-1.el6_4.3
changelog:
  - Log: crmd: Supply arguments in the correct order
  - Fix: Invalid formatting of log message causes crash
  - Fix: cman: Start clvmd and friends from the init script if enabled
  - Fix: Consistently use 'Slave' as the role for unpromoted master/slave resources
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
  - Fix: crm_resource: Observe --master modifier for --move
  - Fix: cman: Do not start pacemaker if cman startup fails
  - Fix: Fencing: Observe pcmk_host_list during automatic unfencing
  - Remove unsupported resource agent
  - Provide a meaningful error if --master is used for primitives and groups
    Resolves: rhbz#1016617


author: Dan Williams <dcbw@redhat.com> - 0.8.1-1
changelog:
  - core: allow S390 subchannels for connection locking (rh #591533)
  - core: don't request wifi scans when connection is BSSID-locked
  - core: handle MAC spoofing/cloning (rh #447827)
  - core: add domain part of hostname to resolv.conf search list (rh #600407)
  - core: protect various network functions via PolicyKit (rh #585182)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-2
changelog:
  - core: fix crash getting IPv6 nameservers via D-Bus
  - core: fix possible crash updating VPN secrets (rh #587784)
  - cli: print IPv6 settings too
  - dhcp: look for interface-specific options in /etc/dhcp too (rh #607759)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12
changelog:
  - Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b13
changelog:
  - Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
  - Resolves: rhbz#1528233


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-2.b10
changelog:
  - Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
  - Resolves: rhbz#1559766


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.10-43
changelog:
  - 630019 set correct (f)pie build flags
  - 615104 fix double echo in initscript
  - 589099 Wrong file permissions for atd configuration
  - Resolves: rhbz#630019, rhbz#615104, rhbz#589099


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.8.1.el6]
changelog:
  - [fs] raw: don't call set_blocksize when not changing the blocksize (Jeff Moyer) [951406 909482]
  - [x86] Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [952570 876275]
  - [netdrv] ixgbe: Only set gso_type to SKB_GSO_TCPV4 as RSC does not support IPv6 (Michael S. Tsirkin) [927292 908196]
  - [netdrv] bnx2x: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] qlcnic: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] ixgbe: fix gso type (Michael S. Tsirkin) [927292 908196]
  - [fs] gfs2: Allocate reservation structure before rename and link (Robert S Peterson) [924847 922999]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.9.1.el6]
changelog:
  - [fs] nfs: Fix handling of revoked delegations by setattr (Steve Dickson) [960415 952329]
  - [fs] nfs: Return the delegation if the server returns NFS4ERR_OPENMODE (Steve Dickson) [960415 952329]
  - [fs] nfs: Fix another potential state manager deadlock (Steve Dickson) [960436 950598]
  - [fs] nfs: Fix another open/open_recovery deadlock (Steve Dickson) [960433 916806]
  - [fs] nfs: Hold reference to layout hdr in layoutget (Steve Dickson) [960429 916726]
  - [fs] nfs: add "pnfs_" prefix to get_layout_hdr() and put_layout_hdr() (Steve Dickson) [960429 916726]
  - [fs] nfs: nfs4_open_done first must check that GETATTR decoded a file type (Steve Dickson) [960412 916722]
  - [net] sunrpc: Dont start the retransmission timer when out of socket space (Steve Dickson) [960426 916735]
  - [fs] nfs: Dont use SetPageError in the NFS writeback code (Steve Dickson) [960420 912867]
  - [fs] nfs: Dont decode skipped layoutgets (Steve Dickson) [927294 904025]
  - [fs] nfs: nfs4_proc_layoutget returns void (Steve Dickson) [927294 904025]
  - [fs] nfs: defer release of pages in layoutget (Steve Dickson) [927294 904025]
  - [fs] nfs: Use kcalloc() when allocating arrays (Steve Dickson) [927294 904025]
  - [fs] nfs: Fix an ABBA locking issue with session and state serialisation (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a race in the pNFS return-on-close code (Steve Dickson) [960417 912842]
  - [fs] nfs: Do not accept delegated opens when a delegation recall is in effect (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a reboot recovery race when opening a file (Steve Dickson) [952613 908524]
  - [fs] nfs: Ensure delegation recall and byte range lock removal don't conflict (Steve Dickson) [952613 908524]
  - [fs] nfs: Fix up the return values of nfs4_open_delegation_recall (Steve Dickson) [952613 908524]
  - [fs] nfs: Dont lose locks when a server reboots during delegation return (Steve Dickson) [952613 908524]
  - [fs] nfs: Move nfs4_wait_clnt_recover and nfs4_client_recover_expired_lease (Steve Dickson) [952613 908524]
  - [fs] nfs: Add NFSDBG_STATE (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_inode_return_delegation() should always flush dirty data (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_client_return_marked_delegations cant flush data (Steve Dickson) [952613 908524]
  - [fs] nfs: Prevent deadlocks between state recovery and file locking (Steve Dickson) [952613 908524]
  - [fs] nfs: Allow the state manager to mark an open_owner as being recovered (Steve Dickson) [952613 908524]
  - [kernel] seqlock: Dont smp_rmb in seqlock reader spin loop (Steve Dickson) [952613 908524]
  - [kernel] seqlock: add 'raw_seqcount_begin()' function (Steve Dickson) [952613 908524]
  - [kernel] seqlock: optimise seqlock (Steve Dickson) [952613 908524]
  - [fs] nfs: don't allow nfs_find_actor to match inodes of the wrong type (Jeff Layton) [921964 913660]
  - [net] sunrpc: Add barriers to ensure read ordering in rpc_wake_up_task_queue_locked (Dave Wysochanski) [956979 840860]


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-25
changelog:
  - fix PXE booting on the virtual network
  - Resolves: rhbz#623951
  - fix tunelled migration
  - Resolves: rhbz#624062


author: Dave Allan <dallan@redhat.com> - 0.8.1-26
changelog:
  - Fix problem with capabilities XML generation
  - Resolves: rhbz#620847
  - Correctly reserve and release PCI slots
  - Resolves: rhbz#623877


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-27
changelog:
  - build -26 hit a miscompilation error c.f. 624895 drop -j4
  - Resolves: rhbz#620847
  - Resolves: rhbz#623877


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.1
changelog:
  - Fix JSON migrate_set_downtime command (rhbz#658143)
  - Make SASL work over UNIX domain sockets (rhbz#658144)
  - Let qemu group look below /var/lib/libvirt/qemu/ (rhbz#656972)
  - Fix save/restore on root_squashed NFS (rhbz#656355)
  - Fix race on multiple migration (rhbz#658141)
  - Export host information through SMBIOS to guests (rhbz#652678)
  - Support forcing a CDROM eject (rhbz#658147)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.2
changelog:
  - spec file cleanups (rhbz#662045)
  - Fix deadlock on concurrent multiple bidirectional migration (rhbz#662043)
  - Fix off-by-one error in clock-variable (rhbz#662046)
  - Export host information through SMBIOS to guests (rhbz#652678)
  - Ensure device is deleted from guest after unplug (rhbz#662041)
  - Distinguish between QEMU domain shutdown and crash (rhbz#662042)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.3
changelog:
  - Remove patches not suitable for proper Z-stream:
      - Export host information through SMBIOS to guests (rhbz#652678)
      - Support forcing a CDROM eject (rhbz#658147)
  - Plug several memory leaks (rhbz#672549)
  - Avoid memory overhead of matchpathcon (rhbz#672554)
  - Do not start libvirt-guests if that service is off (rhbz#668694)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.6
changelog:
  - Properly initialize supplementary groups for qemu process (rhbz#668692)
  - Make error reporting in libvirtd thread safe (CVE-2011-1486)


author: Steven Dake <sdake@redhat.com> 1.2.3-15
changelog:
  - Resolves: rhbz#611676
  - Add upstream revision 3000 - ensure aborts happen even if the currently
    running sync engine doesn't have an abort operation.
  - Add upstream revision 2999 - reset internal variable in syncv2 on
    configuration change.


author: Angus Salkeld <asalkeld@redhat.com> 1.2.3-16
changelog:
  - Resolves: rhbz#579126
  - Add upstream revision 3004 - Fix merge error with revision 3001.
  - Add upstream revision 3003 - Fix problem where flow control could lock
    up ipc under very heavy load in very rare circumstances.


author: Steven Dake <sdake@redhat.com> 1.2.3-17
changelog:
  - Resolves: rhbz#618570
  - Add upstream revision 3006 - Remove consensus timeout floor check that leads
    to exit in two node clusters with smaller consensus timeouts.


author: Steven Dake <sdake@redhat.com> 1.2.3-18
changelog:
  - Resolves: rhbz#619565
  - Add upstream revision 3013 - dont cancel token retransmit timeout on receipt
    of a multicast message.


author: Steven Dake <sdake@redhat.com> 1.2.3-19
changelog:
  - Resolves: rhbz#623790
  - Add upstream revision 3023 - Properly detect server failure instead of falsely
    detecting during a configuration change.


author: Steven Dake <sdake@edhat.com> 1.2.3-21.1
changelog:
  - Resolves: rhbz#638592
  - merge upstream commit bab4945b57c150301c034085f3ce7b4187b6c864
  -  Works around problem where some switch hardware delays multicast
  -  packets compared to the unicast token.  This would result in messages
  -  being retransmitted when no retransmission was necessary.


author: Jan Friesse <jfriesse@edhat.com> 1.2.3-21.2
changelog:
  - Resolves: rhbz#696735
  - Resolves: rhbz#696734
  - Resolves: rhbz#681258
  - Resolves: rhbz#696733
  - Resolves: rhbz#696732

  - Remove shared memory leak in clients if corosync faults (rhbz#665165)
  - merge upstream commit b57573b037aa2737aed2ba706bf55a4599884641 (rhbz#665165)
  - Avoid abort if existing ring id file does not contain
    atleast 8 bytes.  (rhbz#696734)
  - merge upstream commit bb35b86fef4f256a21993f73b71fd512d4763e2f (rhbz#696734)
  - Fix problem where objdb handle destroy is not called in
    clear_object.  (rhbz#681258)
  - merge upstream commit ea18c71936edf8cdc647245374f3a7932ac7e686 (rhbz#681258)
  - Fix problem where all items are not iterated in
    object_reload_notification.  (rhbz#681258)
  - merge upstream commit 7f2e1da84d5883176f0f95936b8a4bf21de12a0a (rhbz#681258)
  - Only restore old ring id information once before operational
    state.  (rhbz#696733)
  - merge upstream commit 0eabeee63eca7a4cc1d907607057ac668fafbcae (rhbz#696733)
  - Free recovery messages during operational enter rather then
    via message_free() call.  (rhbz#696733)
  - merge upstream commit 0fcf760977a73ef78bacff47e61c30ba21929faa (rhbz#696733)
  - Fix problem that leads to abort when token lost in
    recovery sate. (rhbz#696733)
  - merge upstream commit 6aa47fde953bf2179f5bd2dd07815fc7d80f47bb (rhbz#696733)
  - Remove recv_flush operations from totemsrp to remove recursion
    error.  (rhbz#696732)
  - backport of upstream commit 336741ee96caf3ae435b609ee8a76788902c9edf (rhbz#696732)
  - Remove assertion during corosync shutdown.  (rhbz#696732)
  - merge upstream commit 92a3a1aa9d07e769eb6bc59467454e0316549cf6 (rhbz#696732)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 2.12.23-21
changelog:
  - Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes
    (#1326389, #1326073, #1323215, #1320982, #1328205, #1321112)
  - Modified gnutls-serv to accept --sni-hostname (#1333521)
  - Modified gnutls-serv to always reply with an alert message (#1327656)
  - Removed support for DSA2 as it causes interoperability issues (#1321112)
  - Allow sending and receiving certificates which were not in the
    signature algorithms extension (#1328205)
  - Removed support for EXPORT ciphersuites (#1337460)
  - Raised the minimum acceptable DH size to 1024 (#1335924)
  - Restricted the number of alert that can be received during handshake (#1388730)
  - Added fixes for OpenPGP parsing issues (CVE-2017-5337, CVE-2017-5336, CVE-2017-5335)
  - The exposed (but internal) crypto back-end registration API is deprecated and no
    longer functional. The ABI is kept compatible (#1415682)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-29
changelog:
  - gssapi: pull in upstream fix for a possible NULL dereference in spnego
    (CVE-2014-4344, #1121510)
  - gssapi: pull in proposed-and-accepted fix for a double free in initiators
    (David Woodhouse, CVE-2014-4343, #1121510)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-30
changelog:
  - ksu: when evaluating .k5users, treat lines with just a principal name as if
    they contained the principal name followed by '*', and don't throw away data
    from .k5users when we're not passed a command to run, which implicitly means
    we're attempting to run the target user's shell (#1026721, revised)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-31
changelog:
  - ksu: when evaluating .k5users, don't throw away data from .k5users when we're
    not passed a command to run, which implicitly means we're attempting to run
    the target user's shell (#1026721, revised)


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-34
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-37
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-1
changelog:
  - Re-based to 3.10.9 with fixes from Fedora (bug #652255).
  - Change shebang /usr/bin/env python -> /usr/bin/python (bug #608003).
  - Added COPYING to common sub-package (bug #613707).
  - Call cupsSetUser in cupsext's addPrinter method before connecting so
    that we can get an authentication callback (bug #616569).
  - Fixed "CUPS Web Interface" button (bug #633899).


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-4
changelog:
  - The hpijs sub-package no longer requires cupsddk-drivers (which no
    longer exists as a real package), but cups >= 1.4 (bug #829453).


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-1
changelog:
  - Re-based to 3.12.4 with fixes from Fedora (bug #731900).  No longer
    need no-system-tray, openPPD, addgroup, emit-SIGNAL, fab-root-crash,
    newline, hpaio-segfault, dbus-threads, or cups-web patches.


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-4
changelog:
  - Applied patch to fix CVE-2013-0200, temporary file vulnerability
    (bug #902163).
  - Fixed hpijs-marker-supply patch.


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-4:.1
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Rafael Aquini <aquini@redhat.com> [2.6.32-426.el6]
changelog:
  - [block] loop: unplug_fn only when backing file is attached (Lukas Czerner) [1022997]
  - [fs] ext4: Remove warning from ext4_da_update_reserve_space() (Lukas Czerner) [1011876]
  - [kernel] async: Revert MAX_THREADS to 256 (Neil Horman) [1021705]
  - [net] ipv6: restrict neighbor entry creation to output flow (Jiri Pirko) [997103]
  - [net] ipv6: udp packets following an UFO enqueued packet need also be handled by UFO (Jiri Pirko) [1011930] {CVE-2013-4387}
  - [net] ipv4: blackhole route should always be recalculated (Herbert Xu) [1010347]
  - [net] unix: revert/fix race in stream sockets with SOCK_PASS* flags (Daniel Borkmann) [1019343]
  - [net] Loosen constraints for recalculating checksum in skb_segment() (Vlad Yasevich) [1020298]
  - [drm] nouveau: fix vblank deadlock (Rob Clark) [1013388]
  - [usb] xhci: refactor EHCI/xHCI port switching (Don Zickus) [970715]
  - [fs] compat_ioctl: VIDEO_SET_SPU_PALETTE missing error check (Phillip Lougher) [949573] {CVE-2013-1928}
  - [fs] vfs: fix d_mountpoint() (Ian Kent) [1011337]
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [999708]
  - [fs] nfs: Remove the 'FIFO' behaviour for nfs41_setup_sequence (Steve Dickson) [1022257]
  - [fs] nfs: Record the OPEN create mode used in the nfs4_opendata structure (Steve Dickson) [1019439]
  - [fs] nfs: Simulate the change attribute (Steve Dickson) [1018653]
  - [scsi] megaraid_sas: Fix synchronization problem between sysPD IO path and AEN path (Tomas Henzl) [1019811]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-427.el6]
changelog:
  - [tools] perf: Add ref-cycles into array of tested events (Jiri Olsa) [968806]
  - [pci] Revert "make SRIOV resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "ability to relocate assigned pci-resources" (Myron Stowe) [1022270]
  - [pci] Revert "honor child buses add_size in hot plug configuration" (Myron Stowe) [1022270]
  - [pci] Revert "make cardbus-bridge resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "code and comments cleanup" (Myron Stowe) [1022270]
  - [pci] Revert "make re-allocation try harder by reassigning ranges higher in the heirarchy" (Myron Stowe) [1022270]
  - [pci] Revert "Calculate right add_size" (Myron Stowe) [1022270]


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.117-1
changelog:
  - Update to latest upstream release with various fixes and
    enhancementsdetailed in WHATS_NEW and WHATS_NEW_DM file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-1
changelog:
  - Fix LV processing with selection to always do the selection on initial state.
  - Store metadata size + checksum in lvmcache and add struct lvmcache_vgsummary.
  - Remove inaccessible clustered PVs from 'pvs -a'.
  - Don't invalidate cached orphan information while global lock is held.
  - Avoid rescan of all devices when requested pvscan for removed device.
  - Measure configuration timestamps with nanoseconds when available.
  - Disable lvchange of major and minor of pool LVs.
  - Fix pvscan --cache to not scan and read ignored metadata areas on PVs.
  - Disallow vgconvert from changing metadata format when lvmetad is used.
  - Don't do a full read of VG when creating a new VG with an existing name.
  - Reduce amount of VG metadata parsing when looking for vgname on a PV.
  - Avoid reparsing same metadata when reading same metadata from multiple PVs.
  - Save extra device open/close when scanning device for size.
  - Fix seg_monitor field to report status also for mirrors and thick snapshots.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-2
changelog:
  - Don't skip invalidation of cached orphans if vg write lck is held (2.02.118).
  - Add --enable-halvm and --disable-halvm options to lvmconf script.
  - Add --services, --mirrorservice and --startstopservices option to lvmconf.
  - Use proper default value of global/use_lvmetad when processing lvmconf script.
  - Set correct vgid when updating cache when writing PV metadata.
  - Don't silently accept lvcreate -m with raid4/5/6.
  - Add A_PARTITION_BY_TAGS set when allocated areas should not share tags.
  - Respect allocation/cling_tag_list during intial contiguous allocation.
  - Don't skip invalidation of cached orphans if vg write lck is held (2.02.118).
  - Log relevant PV tags when using cling allocation.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-3.el6_7.2
changelog:
  - Fix alloc segfault when extending LV with fewer stripes than in first seg.
  - Fix regression in cache causing some PVs to bypass filters (2.02.105).


author: Tomas Bzatek <tbzatek@redhat.com> - 1.0.1-8.el6
changelog:
  - Allow extra mount options from udev rules (#673102, #681875)
  - Do not force-unmount devices marked as DM_SUSPENDED (#1121742)


author: Tomas Smetana <tsmetana@redhat.com> - 1.0.1-11.el6
changelog:
  - Fix LUKS errors on re-inserting the encrypted disk
  - Plug a memory leak
  - Related: rhbz#1183131
  - Related: rhbz#965206


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-10
changelog:
  - New reload action for ip*tables services (rhbz#928812)
    It tries to reload the firewall rules from /etc/sysconfig/ip*tables. If this
    failes, it does not load the fallbacks and the old firewall rules are still
    there.
  - Use /lib*/xtables without version and not linked by alternatives again for 
    compatibility to older versions (rhbz#924362)
    The symlink for /lib*/xtables with the previous version will be cleaned up
    in a pre script.
  - Backport of --queue-bypass (rhbz#845435)
    Thanks to Florian Westphal and kay
  - Make ip*tables-save consistent to man page (rhbz#983198)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-11
changelog:
  - fixed shutdown hang if root filesystem is network based (rhbz#1007632)
    Thanks to Rodrigo A B Freire for the patch


author: Peter Hutterer <peter.hutterer@redhat.com> 1.10.3-2
changelog:
  - xserver-1.10.3-Initialize-the-fd-to-1-for-xorg.conf-input-devices.patch:
    avoid erroneously closing the log on some drivers (e.g. wacom)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.10.3-3
changelog:
  - Fix xserver-1.10-2-xfree86-duplicate-xorg.conf-device-information-befor.patch,
    fd must be reset to -1, otherwise drivers may close the log file early.


author: Adam Jackson <ajax@redhat.com> 1.10.4-4
changelog:
  - xserver-1.10.4-lid-hack.patch: Revive. (#740581)
  - Conflict against older gnome-screensaver to avoid a deadlock condition
    more easily triggered with the above patch.


author: Dave Airlie <airlied@redhat.com> 1.10.4-6
changelog:
  - fix etracer crashes server with no modes (#746926)
  - don't allow rightof with single crtc (#738724)


author: Chris Feist <cfeist@redhat.com> - 0.16.2-48
changelog:
  - Added ipv6 support (#724014)
  - Providing a useful error when passed a bad cluster.conf (#731113)
  - --checkconf on a local file now works (#738567)
  - Fixed issue with ccs backtrace with bad response (#721113)
  - Error gracefully when given a directory with '-f' (#734910)
  - Updated usage and man page for --start/--stop (#729168)
  - Show virtual machines when using --lsservices (#770637)
  - Added --getschema command and use remote schema for validation (#726722)
  - Log exec path and arguments when fork()/execv()ing in ricci and modcluster
  - Fixed ccs_sync to build with '-g' option.
  - If ricci user password isn't set, log a warning message
  - ccs_sync now returns 1 when there is an error syncing the file
  - Prevent deadlock when executing external programs such as yum
  - Resolves: rhbz#724014 rhbz#731113 rhbz#738567 rhbz#721113 rhbz#734910 rhbz#729168 rhbz#770637 rhbz#726722 rhbz#738797 rhbz#729011 rhbz#773383 rhbz#738008 rhbz#rhbz#736795


author: Chris Feist <cfeist@redhat.com> - 0.16.2-53
changelog:
  - --createcluster now verifies that a cluster.conf doesn't already exist.
  - Added support for altname & altmulticast to support RRP
  - Resolves: rhbz#797292 rhbz#758823


author: Chris Feist <cfeist@redhat.com> - 0.16.2-54
changelog:
  - Fix issue with non english languages with ricci detecting if a passwd
    is set
  - Resolves: rhbz#773383


author: mruprich <mruprich@redhat.com> - 4.0.9-10
changelog:
  - Resolves: #1364524 -  lftp command SIZE on non-existing file is executed in a loop instead of return


author: Michal Ruprich <mruprich@redhat.com> - 4.0.9-14
changelog:
  - Related: #1228484 - lftp hangs after dowloading one file during a mirror
  - Related: #1305235 - lftp not following symlinks through sftp


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - Include a pair of small patches from upstream to improve
    handling of lro options
    Resolves: bz#1010843
  - Include a pair of small patches to improve dumping of
    registers on ixgbe devices
    Resolves: bz#1018367


author: Jay Fenlason <fenlason@redhat.com> 3.5-4
changelog:
  - Include the backported -kr patch from upstream to close
    Resolves: bz#1003891
    the rest of the way.


author: Baoquan He <bhe@redhat.com> - 2.0.0-301
changelog:
  - mkdumprd: Allow findmodule() to add dependency for lsmod output, resolves bug 1343282
  - mkdumprd: Kill useless code in moduledep(), resolves bug 1343282
  - mkdumprd: skip logical interfaces for bridge, resolves bug 1356615


author: Baoquan He <bhe@redhat.com> - 2.0.0-303
changelog:
  - mkdumprd: Remove load_selinux_policy script, resolves bug 1323086
  - mkdumprd: pass the value of DEV_ID to kdump, resolves bug 1322802


author: Baoquan He <bhe@redhat.com> - 2.0.0-306
changelog:
  - mkdumprd: fix env for mdadm, resolves bug 1404263
  - mkdumprd: create node for partition within RAID device, resolves bug 1404263
  - mkdumprd: refactor block_mknod(), resolves bug 1404263
  - uefi: Pass efi_smbios_addr to 2nd kernel, resolves bug 1404552


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-504.18.1.el6]
changelog:
  - [fs] cifs: Use key_invalidate instead of the rh_key_invalidate() (Sachin Prabhu) [1203366 885899]
  - [fs] KEYS: Add invalidation support (Sachin Prabhu) [1203366 885899]
  - [infiniband] core: Prevent integer overflow in ib_umem_get address arithmetic (Doug Ledford) [1181173 1179327] {CVE-2014-8159}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.20.1.el6]
changelog:
  - [fs] exec: do not abuse ->cred_guard_mutex in threadgroup_lock() (Petr Oros) [1208620 1169225]
  - [kernel] cgroup: always lock threadgroup during migration (Petr Oros) [1208620 1169225]
  - [kernel] threadgroup: extend threadgroup_lock() to cover exit and exec (Petr Oros) [1208620 1169225]
  - [kernel] threadgroup: rename signal->threadgroup_fork_lock to ->group_rwsem (Petr Oros) [1208620 1169225]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.21.1.el6]
changelog:
  - [netdrv] ixgbe: Fix memory leak in ixgbe_free_q_vector, missing rcu (John Greene) [1210901 1150343]
  - [netdrv] ixgbe: Fix tx_packets and tx_bytes stats not updating (John Greene) [1210901 1150343]
  - [netdrv] qlcnic: Fix update of ethtool stats (Chad Dupuis) [1210902 1148019]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.22.1.el6]
changelog:
  - [kernel] hrtimer: Prevent hrtimer_enqueue_reprogram race (Prarit Bhargava) [1211940 1136958]
  - [kernel] hrtimer: Preserve timer state in remove_hrtimer() (Prarit Bhargava) [1211940 1136958]
  - [crypto] testmgr: fix RNG return code enforcement (Herbert Xu) [1212695 1208804]
  - [net] netfilter: xtables: make use of caller family rather than target family (Florian Westphal) [1212057 1210697]
  - [net] dynticks: avoid flow_cache_flush() interrupting every core (Marcelo Leitner) [1210595 1191559]
  - [tools] perf: Fix race in build_id_cache__add_s() (Milos Vyletel) [1210593 1204102]
  - [infiniband] ipath+qib: fix dma settings (Doug Ledford) [1208621 1171803]
  - [fs] dcache: return -ESTALE not -EBUSY on distributed fs race (J. Bruce Fields) [1207815 1061994]
  - [net] neigh: Keep neighbour cache entries if number of them is small enough (Jiri Pirko) [1207352 1199856]
  - [x86] crypto: sha256_ssse3 - also test for BMI2 (Herbert Xu) [1204736 1201560]
  - [scsi] qla2xxx: fix race in handling rport deletion during recovery causes panic (Chad Dupuis) [1203544 1102902]
  - [redhat] configs: Enable SSSE3 acceleration by default (Herbert Xu) [1201668 1036216]
  - [crypto] sha512: Create module providing optimized SHA512 routines using SSSE3, AVX or AVX2 instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha512: Optimized SHA512 x86_64 assembly routine using AVX2 RORX instruction (Herbert Xu) [1201668 1036216]
  - [crypto] sha512: Optimized SHA512 x86_64 assembly routine using AVX instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha512: Optimized SHA512 x86_64 assembly routine using Supplemental SSE3 instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha512: Expose generic sha512 routine to be callable from other modules (Herbert Xu) [1201668 1036216]
  - [crypto] sha256: Create module providing optimized SHA256 routines using SSSE3, AVX or AVX2 instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha256: Optimized sha256 x86_64 routine using AVX2's RORX instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha256: Optimized sha256 x86_64 assembly routine with AVX instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha256: Optimized sha256 x86_64 assembly routine using Supplemental SSE3 instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha256: Expose SHA256 generic routine to be callable externally (Herbert Xu) [1201668 1036216]
  - [crypto] rng: RNGs must return 0 in success case (Herbert Xu) [1201669 1199230]
  - [fs] isofs: infinite loop in CE record entries (Jacob Tanenbaum) [1175243 1175245] {CVE-2014-9420}
  - [x86] vdso: ASLR bruteforce possible for vdso library (Jacob Tanenbaum) [1184896 1184897] {CVE-2014-9585}
  - [kernel] time: ntp: Correct TAI offset during leap second (Prarit Bhargava) [1201674 1199134]
  - [scsi] lpfc: correct device removal deadlock after link bounce (Rob Evers) [1211910 1194793]
  - [scsi] lpfc: Linux lpfc driver doesn't re-establish the link after a cable pull on LPe12002 (Rob Evers) [1211910 1194793]
  - [x86] switch_to(): Load TLS descriptors before switching DS and ES (Denys Vlasenko) [1177353 1177354] {CVE-2014-9419}
  - [net] vlan: Don't propagate flag changes on down interfaces (Jiri Pirko) [1173501 1135347]
  - [net] bridge: register vlan group for br ports (Jiri Pirko) [1173501 1135347]
  - [netdrv] tg3: Use new VLAN code (Jiri Pirko) [1173501 1135347]
  - [netdrv] be2net: move to new vlan model (Jiri Pirko) [1173501 1135347]
  - [net] vlan: mask vlan prio bits (Jiri Pirko) [1173501 1135347]
  - [net] vlan: don't deliver frames for unknown vlans to protocols (Jiri Pirko) [1173501 1135347]
  - [net] vlan: allow nested vlan_do_receive() (Jiri Pirko) [1173501 1135347]
  - [net] allow vlan traffic to be received under bond (Jiri Pirko) [1173501 1135347]
  - [net] vlan: goto another_round instead of calling __netif_receive_skb (Jiri Pirko) [1173501 1135347]
  - [net] bonding: fix bond_arp_rcv setting and arp validate desync state (Jiri Pirko) [1173501 1135347]
  - [net] bonding: remove packet cloning in recv_probe() (Jiri Pirko) [1173501 1135347]
  - [net] bonding: Fix LACPDU rx_dropped commit (Jiri Pirko) [1173501 1135347]
  - [net] bonding: don't increase rx_dropped after processing LACPDUs (Jiri Pirko) [1173501 1135347]
  - [net] bonding: use local function pointer of bond->recv_probe in bond_handle_frame (Jiri Pirko) [1173501 1135347]
  - [net] bonding: move processing of recv handlers into handle_frame() (Jiri Pirko) [1173501 1135347]
  - [netdrv] revert "bonding: fix bond_arp_rcv setting and arp validate desync state" (Jiri Pirko) [1173501 1135347]
  - [netdrv] revert "bonding: check for vlan device in bond_3ad_lacpdu_recv()" (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Always untag vlan-tagged traffic on input (Jiri Pirko) [1173501 1135347]
  - [net] Make skb->skb_iif always track skb->dev (Jiri Pirko) [1173501 1135347]
  - [net] vlan: fix a potential memory leak (Jiri Pirko) [1173501 1135347]
  - [net] vlan: fix mac_len recomputation in vlan_untag() (Jiri Pirko) [1173501 1135347]
  - [net] vlan: reset headers on accel emulation path (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Fix the ingress VLAN_FLAG_REORDER_HDR check (Jiri Pirko) [1173501 1135347]
  - [net] vlan: make non-hw-accel rx path similar to hw-accel (Jiri Pirko) [1173501 1135347]
  - [net] allow handlers to be processed for orig_dev (Jiri Pirko) [1173501 1135347]
  - [net] bonding: get netdev_rx_handler_unregister out of locks (Jiri Pirko) [1173501 1135347]
  - [net] bonding: fix rx_handler locking (Jiri Pirko) [1173501 1135347]
  - [net] introduce rx_handler results and logic around that (Jiri Pirko) [1173501 1135347]
  - [net] bonding: register slave pointer for rx_handler (Jiri Pirko) [1173501 1135347]
  - [net] bonding: COW before overwriting the destination MAC address (Jiri Pirko) [1173501 1135347]
  - [net] bonding: convert bonding to use rx_handler (Jiri Pirko) [1173501 1135347]
  - [net] openvswitch: use rx_handler_data pointer to store vport pointer (Jiri Pirko) [1173501 1135347]
  - [net] add a synchronize_net() in netdev_rx_handler_unregister() (Jiri Pirko) [1173501 1135347]
  - [net] add rx_handler data pointer (Jiri Pirko) [1173501 1135347]
  - [net] replace hooks in __netif_receive_skb (Jiri Pirko) [1173501 1135347]
  - [net] fix conflict between null_or_orig and null_or_bond (Jiri Pirko) [1173501 1135347]
  - [net] remove the unnecessary dance around skb_bond_should_drop (Jiri Pirko) [1173501 1135347]
  - [net] revert "bonding: fix receiving of dups due vlan hwaccel" (Jiri Pirko) [1173501 1135347]
  - [net] uninline skb_bond_should_drop() (Jiri Pirko) [1173501 1135347]
  - [net] bridge: Set vlan_features to allow offloads on vlans (Jiri Pirko) [1173501 1135347]
  - [net] bridge: convert br_features_recompute() to ndo_fix_features (Jiri Pirko) [1173501 1135347]
  - [net] revert "bridge: explictly tag vlan-accelerated frames destined to the host" (Jiri Pirko) [1173501 1135347]
  - [net] revert "fix vlan gro path" (Jiri Pirko) [1173501 1135347]
  - [net] revert "bridge: do not learn from exact matches" (Jiri Pirko) [1173501 1135347]
  - [net] revert "bridge gets duplicate packets when using vlan over bonding" (Jiri Pirko) [1173501 1135347]
  - [net] llc: remove noisy WARN from llc_mac_hdr_init (Jiri Pirko) [1173501 1135347]
  - [net] bridge: stp: ensure mac header is set (Jiri Pirko) [1173501 1135347]
  - [net] vlan: remove reduntant check in ndo_fix_features callback (Jiri Pirko) [1173501 1135347]
  - [net] vlan: enable soft features regardless of underlying device (Jiri Pirko) [1173501 1135347]
  - [net] vlan: don't call ndo_vlan_rx_register on hardware that doesn't have vlan support (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Fix vlan_features propagation (Jiri Pirko) [1173501 1135347]
  - [net] vlan: convert VLAN devices to use ndo_fix_features() (Jiri Pirko) [1173501 1135347]
  - [net] revert "vlan: Avoid broken offload configuration when reorder_hdr is disabled" (Jiri Pirko) [1173501 1135347]
  - [net] vlan: vlan device is lockless do not transfer real_num_<tx|rx>_queues (Jiri Pirko) [1173501 1135347]
  - [net] vlan: consolidate 8021q tagging (Jiri Pirko) [1173501 1135347]
  - [net] propagate NETIF_F_HIGHDMA to vlans (Jiri Pirko) [1173501 1135347]
  - [net] Fix a memmove bug in dev_gro_receive() (Jiri Pirko) [1173501 1135347]
  - [net] vlan: remove check for headroom in vlan_dev_create (Jiri Pirko) [1173501 1135347]
  - [net] vlan: set hard_header_len when VLAN offload features are toggled (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Calling vlan_hwaccel_do_receive() is always valid (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Centralize handling of hardware acceleration (Jiri Pirko) [1173501 1135347]
  - [net] vlan: finish removing vlan_find_dev from public header (Jiri Pirko) [1173501 1135347]
  - [net] vlan: make vlan_find_dev private (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Avoid hash table lookup to find group (Jiri Pirko) [1173501 1135347]
  - [net] revert "vlan: Add helper functions to manage vlans on bonds and slaves" (Jiri Pirko) [1173501 1135347]
  - [net] revert "bonding: assign slaves their own vlan_groups" (Jiri Pirko) [1173501 1135347]
  - [net] revert "bonding: fix regression on vlan module removal" (Jiri Pirko) [1173501 1135347]
  - [net] revert "bonding: Always add vid to new slave group" (Jiri Pirko) [1173501 1135347]
  - [net] revert "bonding: Fix up refcounting issues with bond/vlan config" (Jiri Pirko) [1173501 1135347]
  - [net] revert "8021q/vlan: filter device events on bonds" (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Use vlan_dev_real_dev in vlan_hwaccel_do_receive (Jiri Pirko) [1173501 1135347]
  - [net] gro: __napi_gro_receive() optimizations (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Rename VLAN_GROUP_ARRAY_LEN to VLAN_N_VID (Jiri Pirko) [1173501 1135347]
  - [net] vlan: make vlan_hwaccel_do_receive() return void (Jiri Pirko) [1173501 1135347]
  - [net] vlan: init_vlan should not copy slave or master flags (Jiri Pirko) [1173501 1135347]
  - [net] vlan: updates vlan real_num_tx_queues (Jiri Pirko) [1173501 1135347]
  - [net] vlan: adds vlan_dev_select_queue (Jiri Pirko) [1173501 1135347]
  - [net] llc: use dev_hard_header (Jiri Pirko) [1173501 1135347]
  - [net] vlan: support "loose binding" to the underlying network device (Jiri Pirko) [1173501 1135347]
  - [net] revert "net: don't set VLAN_TAG_PRESENT for VLAN 0 frames" (Jiri Pirko) [1173501 1135347]
  - [net] bridge: Add support for TX vlan offload (Jiri Pirko) [1173562 1146391]
  - [net] revert "bridge: Set vlan_features to allow offloads on vlans" (Vlad Yasevich) [1144442 1121991]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.23.1.el6]
changelog:
  - [x86] crypto: sha256_ssse3 - fix stack corruption with SSSE3 and AVX implementations (Herbert Xu) [1218681 1201490]
  - [scsi] storvsc: ring buffer failures may result in I/O freeze (Vitaly Kuznetsov) [1215754 1171676]
  - [scsi] storvsc: get rid of overly verbose warning messages (Vitaly Kuznetsov) [1215753 1167967]
  - [scsi] storvsc: NULL pointer dereference fix (Vitaly Kuznetsov) [1215753 1167967]
  - [netdrv] ixgbe: fix detection of SFP+ capable interfaces (John Greene) [1213664 1150343]
  - [x86] crypto: aesni - fix memory usage in GCM decryption (Kurt Stutsman) [1213329 1213330] {CVE-2015-3331}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.23.2.el6]
changelog:
  - [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Seth Jennings) [1202860 1185166] {CVE-2015-1805}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.23.3.el6]
changelog:
  - [netdrv] bonding: fix locking in enslave failure path (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: primary_slave & curr_active_slave are not cleaned on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: vlans don't get deleted on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: mc addresses don't get deleted on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: IFF_BONDING is not stripped on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: fix error handling if slave is busy v2 (Nikolay Aleksandrov) [1222483 1221856]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.23.4.el6]
changelog:
  - [crypto] drbg: fix maximum value checks on 32 bit systems (Herbert Xu) [1225950 1219907]
  - [crypto] drbg: remove configuration of fixed values (Herbert Xu) [1225950 1219907]


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.32-1
changelog:
  - check an IP address for existence in ifup-alias
  - remount /dev/shm in sysinit to apply attributes from fstab
  - sets BONDING_OPTS before interface is brougth up and checks if it is not already added
  - Add support for setting random bridge options via BRIDGING_OPTS
  - use vgchange -aay in rc.sysinit and netfs init script
  - script should not kill itself during shutdown
  - fix the NIS domain setting
  - be less strict about VLAN name
  - clarification of work with white spaces in crypttab manpage
  - re-read sysctl values for VLANs on ifup
  - pass useful arguments to halt.local
  - start serial console when we return from runlevel1
  - move VLAN= docs to the interface configuration section, rather than /etc/sysconfig/network.
  - don't accidentally match other bonding devices
  - add usage stanzas for tty.conf and serial.conf
  - rename_device: skip VLAN=yes configuration files
  - allow duplicate address dectection to be disabled


author: Václav Pavlín <vpavlin@redhat.com> - 9.03.34-1
changelog:
  - there should be crypttab instead of crypptab in man page (#870025)
  - sysconfig.txt advised saslauthd -a instad of -v (#869075)


author: Don Zickus <dzickus@redhat.com> - 2-8.1
changelog:
  - Resolves: bz#749183
    Add patch from James M. Leddy <james.leddy@redhat.com> to add
    an option to ignore FIPS failures.
  - Resolves: bz#751356
    add ignorefail option to manpage


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Adam Tkac <atkac redhat com> - 1.7.1-1
changelog:
  - update to 1.7.1 (#585990)
  - Use %{gitcoredir}/git-daemon as xinetd server (#529682) [Todd Zullinger]
  - Remove long fixed xinetd IPv6 workaround (#557528) [Todd Zullinger]
  - Make %{_var}/lib/git the default gitweb root (#556299) [Todd Zullinger]
  - Include gitweb/INSTALL file as documentation [Todd Zullinger]
  - Ship example gitweb config (%{_sysconfdir}/gitweb.conf) [Todd Zullinger]
  - Install missing gitweb.js (#558740) [Todd Zullinger]
  - Only BR perl(Error) [Todd Zullinger]
  - Use config.mak to set build options [Todd Zullinger]
  - Disable building of unused python remote helper libs [Todd Zullinger]
  - Comply with Emacs add-on packaging guidelines (#573423) [Jonathan Underwood]
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros
  - Replace $RPM_BUILD_ROOT with %{buildroot} [Todd Zullinger]


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6-1
changelog:
  - fix 'make check' by using binaries built with a different path for their
    own check files
  - add a non-fips compile-time option, which we don't use


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.9-1
changelog:
  - look for prelink at compile-time, and if we find it try to invoke it
    using a full pathname before trying with $PATH (#512275)
  - buildrequires: prelink so that it will be found at compile-time


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.10-1
changelog:
  - refuse to truncate output below half the size of the hash length, or 80
    bits, whichever is higher, in case we get used in a situation where
    not doing so would make us vulnerable to CVE-2009-0217, in which an
    attacker manages to convince a party doing verification to truncate
    both the just-computed value and the value to be checked before
    comparing them, as comparing just 1 bit would make detecting forgeries
    close to impossible


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.11-1
changelog:
  - error out when we previously skipped a check entry because the value to be
    checked is the wrong size
  - fix estimation of the expected length for truncated values


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.12-1
changelog:
  - fix regression of #512275 -- we looked for prelink, but didn't record
    its location properly (#548438)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.12-2
changelog:
  - backport fix to treat unexpected command-line arguments as an error to
    avoid setting incorrect expectations, and warn when a check file doesn't
    appear to contain anything for us to check (#1016706)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.43.1.10.6
changelog:
  - Updated to IcedTea6 1.10.6
  - Resolves: rhbz#787144
  - Security fixes
    - S7082299: Fix in AtomicReferenceArray
    - S7088367: Fix issues in java sound
    - S7110683: Issues with some KeyboardFocusManager method
    - S7110687: Issues with TimeZone class
    - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
    - S7110704: Issues with some method in corba
    - S7112642: Incorrect checking for graphics rendering object
    - S7118283: Better input parameter checking in zip file processing
    - S7126960: Add property to limit number of request headers to the HTTP Server
  - Bug fixes
    - RH580478: Desktop files should not use hardcoded path
  - Removed upstreamed patch7 - java-1.6.0-openjdk-6_2-Z-rmi-fix.patch


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.46.1.11.3
changelog:
  - Sync with 6.3:
  - Bump to IcedTea6 1.11.3
  - With removed patch8 - java-1.6.0-openjdk-jirafix_2820_2821.patch
  - Including patch7 - java-1.6.0-openjdk-jstack.patch
  - Including patch3, java-1.6.0-openjdk-java-access-bridge-security.patch modification
  - Resolves: rhbz#828751


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.47.1.11.3
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828751


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.7.3.el6
changelog:
  - bumped release
  - changed  buildoutputdir to contains "-debug" in case of debug on
  - rewritten (long unmaintained) java-1.7.0-openjdk-debugdocs.patch and 
    java-1.7.0-openjdk-debuginfo.patch
  - debug turned on (1)
  - Resolves: rhbz#1092063


author: Omair Majid <omajid@redhat.com> - 1.7.0.51-2.4.7.5.el6
changelog:
  - Work when capabilities are set on the binary
  - Include hardcoded install path as well as $ORIGIN in RPATH
  - Resolves: rhbz#1105293


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.50-1
changelog:
  - functions: improve killing loops
  - netfs: tweak nfs umount
  - sysctl.conf: mention sysctl -a
  - sysconfig.txt: document PPPOE_EXTRA and PPPD_EXTRA
  - spec: require plymouth
  - fix mangled sysconfig/init.s390
  - rc.sysinit: don't perform fsck twice with /.autorelabel
  - ifdown-eth: fix comparison
  - ifup-eth: if arping fails, output responding MAC
  - network-functions: fix change_resolv_conf after grep update
  - spec: add sysctl.d dir
  - rc.sysinit: fix typo in fs
  - rename_devices: comments need to have a blank before them
  - rename_device: remove comments and trailing whitespaces
  - bonding: warn if the ifup for slave device failed
  - clarify daemon() usage message
  - ifdown: clean ipv4 localhost addresses
  - ifup-post: check resolve.conf also with DNS2
  - ifup: add missing quotes
  - ifup-eth: some bridge options are applied later
  - init.d/halt: give init some time to reexecute
  - network-scripts: DEVICE and HWADRR could be quoted by apostrophe
  - ifup-wireless: fix calling of phy_wireless_device
  - rc.sysinit: apply quotas after system is relabeled


author: Daniel Novotny <dnovotny@redhat.com> 5.0.0-4
changelog:
  - removed wxWidgets version of the administration frontend (#564091)
    please use bacula-console-bat instead


author: Jan Görig <jgorig@redhat.com> 5.0.0-6
changelog:
  - initscripts improvements
  - fixed consolehelper settings and menu entries
  - Resolves: rhbz#587254 rhbz#587924


author: Jan Görig <jgorig@redhat.com> 5.0.0-7
changelog:
  - fixed multilib issue (#594115)
  - removed hostnames from bconsole.config (#603052)
  - fixed desktop files (#603061)
  - unconfigured service now returns correct return code


author: Jan Görig <jgorig@redhat.com> 5.0.0-8
changelog:
  - added applybaculadate (#651776)
  - fixed umask in make_catalog_backup.pl (#651780)
  - added support for changing bacula user and group in syconfig files
    and changed privilegies of bacula-dir.conf (#651786)
  - fixed bscan alternatives links (#651787)
  - fixed tray monitor default config (#657297)
  - fixed showing wrong size of incremental backup (#689400)


author: Jan Görig <jgorig@redhat.com> 5.0.0-9
changelog:
  - upgrade scriptlet for (#651787)
  - added chkconfig dependency (#712804)
  - added shadow-utils dependency (#712794)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 5.0.0-10
changelog:
  - put correct port in my.cnf (#756803)
  - shows correct job and file retention periods (#802158)
  - build with $RPM_OPT_FLAGS, show compiler commands in build log (#729008)
  - include /var/log/bacula.log and /var/log/bacula/ in logwatch (#728693)
  - ensure that /var/spool/bacula/log has correct selinux context (#728697)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-16
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  - Resolves: Bug 830256 - Audit log - clear text password in user changes


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-17
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  -- patch 0019 fixes deref issue.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-18
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  -- patch 0020 disallows users' direct modify on unhashed#user#password


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.55.0-3
changelog:
  - auto-generate SEE ALSO sections for the man pages
  - utilize test suite in the check phase of the build process
  - bump upstream package (intentional jump on upstream front),
    see https://github.com/jnpkrn/clufter/releases/tag/v0.55.0


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.56.0-1
changelog:
  - general spec file refresh (pagure.io as a default project base, etc.)
  - bump upstream package, see
    https://github.com/jnpkrn/clufter/releases/tag/v0.56.0


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.56.2-1
changelog:
  - move entry_points.txt to clufter-cli sub-package
  - bump upstream package, see
    https://github.com/jnpkrn/clufter/releases/tag/v0.56.2


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.4-1
changelog:
  - New version: grep-2.5.4
  - Fixed typos in %description
  - Updated utf-8 patch
  - Added dfa-optional patch (#538423)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6-1
changelog:
  - New version: grep-2.6
  - Added sigsegv patch (after release patch from upstream)
  - Dropped obsoleted patches: fedora-tests, pcrewrap, case, egf-speedup,
    bz460641, utf8, dfa-optional, w


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-2
changelog:
  - Added dfa-optimize-period patch (speedup for . patterns in UTF-8)
  - Added glibc-matcher-fallback patch (speedup for [a-z] patterns in UTF-8)
  - Added mmap-option-fix patch
  - Added dfa-convert-to-wide-char patch (speedup for -m and remove quadratic
    complexity when going to glibc)
  - Added dfa-speedup-digit-xdigit patch (speedup for [[:digit:]] [:xdigit:]])


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-4
changelog:
  - Fixed crash on grep -Fif /dev/null (fif-null-fix patch)
    Resolves: rhbz#797934
  - Fixed heap overrun on specific REs (dfa-heap-overrun-fix patch)
    Resolves: rhbz#715295
  - Fixed -i (case insensitive matching)
    Resolves: rhbz#826997


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.13.1.el6]
changelog:
  - [net] af_packet: prevent information leak (Jiri Pirko) [728032 728033] {CVE-2011-2898}
  - [net] gro: Only reset frag0 when skb can be pulled (Jiri Pirko) [726555 726556] {CVE-2011-2723}
  - [fs] FS-Cache: Only call mark_tech_preview() when caching is actually begun (David Howells) [713463 696396]
  - [fs] Fix mark_tech_preview() to not disable lock debugging (David Howells) [713463 696396]
  - [fs] ext4: Rewrite ext4_page_mkwrite() to use generic helpers (Eric Sandeen) [723551 692167]
  - [fs] vfs: Block mmapped writes while the fs is frozen (Eric Sandeen) [723551 692167]
  - [fs] vfs: Create __block_page_mkwrite() helper passing error values back (Eric Sandeen) [723551 692167]
  - [mm] avoid wrapping vm_pgoff in mremap() and stack expansion (Jerome Marchand) [716540 716541] {CVE-2011-2496}
  - [pci] MSI: Restore read_msi_msg_desc(); add get_cached_msi_msg_desc() (Don Zickus) [728522 696511]
  - [pci] MSI: Remove unsafe and unnecessary hardware access (Don Zickus) [728522 696511]
  - [net] sock: do not change prot->obj_size (Jiri Pirko) [726626 725711]
  - [virt] x86: report valid microcode update ID (Marcelo Tosatti) [727838 694747]
  - [agp] fix arbitrary kernel memory writes (Jerome Marchand) [699307 699308] {CVE-2011-2022 CVE-2011-1745}
  - [agp] fix OOM and buffer overflow (Jerome Marchand) [699305 699306] {CVE-2011-1746}
  - [kernel] taskstats: don't allow duplicate entries in listener mode (Jerome Marchand) [715447 715448] {CVE-2011-2484}
  - [netdrv] bnx2x: remove a log-spamming message (Michal Schmidt) [732379 712000]
  - [scsi] ibmvscsi: Improve CRQ reset reliability (Steve Best) [727618 700165]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.14.1.el6]
changelog:
  - [scsi] megaraid_sas: Convert 6, 10, 12 byte CDB's for FastPath IO (Tomas Henzl) [710047 705835]
  - [x86] perf, x86: Fix Intel fixed counters base initialization (Don Zickus) [719229 736284] {CVE-2011-2521}
  - [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723432 723433] {CVE-2011-2699}
  - [fs] Ecryptfs: Add mount option to check uid of device being mounted = expect uid (Eric Sandeen) [731175 731176] {CVE-2011-1833}
  - [char] tpm: Fix uninitialized usage of data buffer (Stanislaw Gruszka) [684674 684675] {CVE-2011-1160}
  - [kernel] perf: Fix software event overflow (Frantisek Hrbata) [730707 730708] {CVE-2011-2918}
  - [serial] 8250_pci: ifdef for powerpc, to only add functionality to this arch (Steve Best) [732382 696695]
  - [serial] 8250: Fix capabilities when changing the port type (Steve Best) [732382 696695]
  - [serial] 8250_pci Add EEH support to the 8250 driver for IBM/Digi PCIe 2-port Adapter (Steve Best) [732382 696695]
  - [serial] 8250_pci: Add support for the Digi/IBM PCIe 2-port Adapter (Steve Best) [732382 696695]
  - [ppc] pseries/iommu: Add additional checks when changing iommu mask (Steve Best) [736065 704401]
  - [ppc] pseries/iommu: Use correct return type in dupe_ddw_if_already_created (Steve Best) [736065 704401]
  - [ppc] iommu: Restore iommu table pointer when restoring iommu ops (Steve Best) [736065 704401]
  - [ppc] Fix kexec with dynamic dma windows (Steve Best) [736065 704401]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.16.1.el6]
changelog:
  - [net] br_multicast: Ensure to initialize BR_INPUT_SKB_CB(skb)->mrouters_only. (Frantisek Hrbata) [739477 738110]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.17.1.el6]
changelog:
  - Revert: [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723432 723433] {CVE-2011-2699}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.18.1.el6]
changelog:
  - [sched] wait_for_completion_interruptible_timeout() should return signed long (J. Bruce Fields) [745413 738379]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.19.1.el6]
changelog:
  - [scsi] scan: don't fail scans when host is in recovery (Mike Christie) [734774 713682]
  - [netdrv] b43: allocate receive buffers big enough for max frame len + offset (RuiRui Yang) [738204 738205] {CVE-2011-3359}
  - [fs] fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message (RuiRui Yang) [736764 736765] {CVE-2011-3353}
  - [fs] cifs: fix possible memory corruption in CIFSFindNext (Jeff Layton) [737482 730354] {CVE-2011-3191}
  - [kernel] perf tools: do not look at ./config for configuration (Jiri Benc) [730203 730204] {CVE-2011-2905}
  - [x86] mm: Fix pgd_lock deadlock (Andrew Jones) [737570 691310]
  - [mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Andrew Jones) [737570 691310]
  - [mm] Revert "fix pgd_lock deadlock" (Andrew Jones) [737570 691310]
  - [fs] corrupted GUID partition tables can cause kernel oops (Jerome Marchand) [695981 695982] {CVE-2011-1577}
  - [net] Compute protocol sequence numbers and fragment IDs using MD5. (Jiri Pirko) [732664 732665] {CVE-2011-3188}
  - [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732664 732665] {CVE-2011-3188}
  - [fs] SUNRPC: Fix use of static variable in rpcb_getport_async (Steve Dickson) [740230 723650]
  - [fs] NFSv4.1: update nfs4_fattr_bitmap_maxsz (Steve Dickson) [740230 723650]
  - [fs] SUNRPC: Fix a race between work-queue and rpc_killall_tasks (Steve Dickson) [740230 723650]
  - [fs] SUNRPC: Ensure we always run the tk_callback before tk_action (Steve Dickson) [740230 723650]
  - [misc] enclosure: fix error path to actually return ERR_PTR() on error (Tomas Henzl) [741166 713730]
  - [virt] KVM: make guest mode entry to be rcu quiescent state (Gleb Natapov) [740352 712653]
  - [virt] rcu: provide rcu_virt_note_context_switch() function (Gleb Natapov) [740352 712653]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.20.1.el6]
changelog:
  - [net] vlan: fix panic when handling priority tagged frames (Andy Gospodarek) [742849 714936] {CVE-2011-3593}
  - [netdrv] igb: fix WOL on second port of i350 device (Frantisek Hrbata) [743807 718293]
  - [kernel] fix taskstats io infoleak (Jerome Marchand) [716847 716848] {CVE-2011-2494}
  - [tpm] Zero buffer after copying to userspace (Jiri Benc) [732632 732633] {CVE-2011-1162}
  - [scsi] Revert megaraid_sas: Driver only report tape drive, JBOD and logic drives (Tomas Henzl) [741167 736667]
  - [x86] acpi: Prevent acpiphp from deadlocking on PCI-to-PCI bridge remove (Prarit Bhargava) [745557 732706]
  - [net] sctp: deal with multiple COOKIE_ECHO chunks (Frantisek Hrbata) [743510 729220]
  - [scsi] iscsi_tcp: fix locking around iscsi sk user data (Mike Christie) [741704 647268]
  - [kernel] first time swap use results in heavy swapping (Hendrik Brueckner) [747868 722461]
  - [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [744811 691945]
  - [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738301 692709] {CVE-2011-3363}
  - [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738301 692709] {CVE-2011-3363}
  - [net] ipv6: fix NULL dereference in udp6_ufo_fragment() (Jason Wang) [748808 740465]
  - [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723432 723433] {CVE-2011-2699}


author: Akemi Yagi <toracat@centos.org> [2.6.32-131.21.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire,
    all serial ATA, BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client.
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - As of 2.6.32-131.12.1.el6, parallel printer support is enabled in distro kernel.
  - Added centos-linux-2.6-vmxnet3-LRO-state-fix-bug5054.patch [bug#5054]
  - Enabled TOMOYO security module [bug#5219]


author: Bob Relyea <rrelyea@redhat.com> - 1.1.0-20
changelog:
  - Fix Spice issue where we disconnected if we couldn't find the applet
    rather then treating the applet as empty. 
  - Fix memory leak in machdep error path


author: Roland McGrath <roland@redhat.com> - 0.149-1
changelog:
  - Update to 0.149
    - libdw: Decode new DW_OP_GNU_implicit_pointer operation;
             new function dwarf_getlocation_implicit_pointer.
    - libdwfl: New function dwfl_dwarf_line.
    - eu-addr2line: New flag -F/--flags to print more DWARF line info details.
    - eu-readelf: better .debug_loc processing (#627729)
    - eu-strings: Fix non-mmap file reading. (#609468)
    - eu-strip: -g recognizes .gdb_index as a debugging section. (#631997)


author: Roland McGrath <roland@redhat.com> - 0.150-1
changelog:
  - Update to 0.150
    - libdw: Fix for handling huge .debug_aranges section. (#638432)
    - libdwfl: Fix for handling prelinked DSO with separate debug file. (#652857)
    - findtextrel: Fix diagnostics to work with usual section ordering.


author: Roland McGrath <roland@redhat.com> - 0.151-1
changelog:
  - Update to 0.151
    - libdwfl: Fix for more prelink cases with separate debug file.
    - eu-strip: New flag --strip-sections to remove section headers entirely.


author: Roland McGrath <roland@redhat.com> - 0.152-1
changelog:
  - Update to 0.152
    - Various build and warning nits fixed for newest GCC and Autoconf.
    - libdwfl: Yet another prelink-related fix for another regression. (#674465)
    - eu-elfcmp: New flag --ignore-build-id to ignore differing build ID bits.
    - eu-elfcmp: New flag -l/--verbose to print all differences.


author: Mark Wielaard <mjw@redhat.com> - 0.158-3.2
changelog:
  - Add elfutils-0.158-unstrip.patch (#806474)
  - Add elfutils-0.158-readelf-nostrings.patch (#1101440)


author: Milan Crha <mcrha@redhat.com> - 3.32.2-1.el6
changelog:
  - Rebase to 3.32.2
  - Remove patch for RH bug #588457 (part of rebase)
  - Remove patch for RH bug #590877 (part of rebase)


author: Milan Crha <mcrha@redhat.com> - 3.32.2-2.el6
changelog:
  - Add patch for some issues found by Coverity scan
  - Add patch for RH bug #577797 (Cursor misplaced after paste)
  - Add patch for RH bug #615969 (Whitespaces drop on paste)
  - Add patch for RH bug #627199 (Underline/strikeout misplaced in printout)
  - Add patch for RH bug #626690 (Paragraph style not drawn after font style change)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-3
changelog:
  - prevent setfacl --restore from SIGSEGV on malformed restore file (#576512)
  - run the test-suite if possible


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-5
changelog:
  - clarify that removing a non-existent acl entry is not an error (#674883)
  - update project URL in package specification (#702638)


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-2.20100411git
changelog:
  Resolves: #609595
  - Fix to read connection configuration from stdin, so no conf file is stored now
  - Fix to read Xauth user password from stdin
  - Fix to delete the secret file as soon as read by Openswan
  - Fixed the issue of world readable conf and secret files
  - Modifed GUI to remove unused configuration boxes


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-3.20100411git
changelog:
  Resolves: #609595
  - Due to changes in NMVpnPluginUiInterface struct in NM, import and export
    fields had to be changed to import_from_file and export_to_file, respectively
  - Rebuilding as build was failing due to the above changes


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-5.20100411git
changelog:
  Resolves: #617016
  - Support for reading phase1 and phase2 algorithms through GUI
  - Fixed chanelog to reference correct bz 617016, and bumped release number.


author: Paul Wouters <pwouters@redhat.com> - 0.8.0-9
changelog:
  Resolves: #1267394
  - Add libreswan softlinks for nm helper to support libreswan dropin
  - Support for libreswan env vars PLUTO_PEER_DNS_INFO, PLUTO_PEER_DOMAIN_INFO and libreswan_reason


author: Marek Grac <mgrac@redhat.com> - 4.0.15-5
changelog:
  - fence_ilo_ssh: New fence agent
    Resolves: rhbz#1111482
  - fence_kdump: Update metadata for 'monitor'
    Resolves: rhbz#1094515


author: Marek Grac <mgrac@redhat.com> - 4.0.15-7
changelog:
  - fence_scsi: remove new pythonic version
  - fence_ipmilan: unset default cipher
  - fence_ilo2: add options --tls1.0
  - fence_bladecenter: fix login process
    Resolves: rhbz#1049805


author: Marek Grac <mgrac@redhat.com> - 4.0.15-9
changelog:
  - fence_ipmilan no longer understands -i
    Resolves: rhbz#1254046
  - fence_ipmilan no longer understands 'timeout'
    Resolves: rhbz#1254700
  - fence_ilo: Improve negotiation of TLS protocol
    Resolves: rhbz#1256902
  - fence_rsa: Login process over telnet is not working
    Resolves: rhbz#1247062
  - fence_mpath: lose scsi keys after restart
    Resolves: rhbz#1254183


author: Marek Grac <mgrac@redhat.com> - 4.0.15-11
changelog:
  - fence_ipmilan: Revert power_wait values
    Resolves: rhbz#1273632
  - fence_apc: Support for firmware 6.x
    Resolves: rhbz#1259254
  - fence_ipmilan: Add 'diag' action
    Resolves: rhbz#1266600
  - fencing: Add '-list-status' action
    Resolves: rhbz#1183829


author: Marek Grac <mgrac@redhat.com> - 4.0.15-13
changelog:
  - fence_ipmilan: Do not print password to debug output
    Resolves: rhbz#1358064
  - fencing: Handle None as status properly
    Resolves: rhbz#1361623


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.15-13.2
changelog:
  - fence_rhevm: add "--api-path" and "--disable-http-filter" to be
    able to explicitly use oVirt API version 3
    Resolves: rhbz#1506694


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-4
changelog:
  - Fix memory leak in sblim-sfcb
    Resolves: #1114798
  - Fix a zombie process of openwsmand (defunct) is left behind
    Resolves: #1110106


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-14
changelog:
  - Resolves: rhbz#1259687 - sssd_nss memory usage keeps growing on
                              sssd-1.12.4-47.el6.x86_64 (RHEL6.7) when
                              trying to retrieve non-existing netgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-14
changelog:
  - Resolves: rhbz#1264705 - Allow SSSD to notify user of denial due to AD
                             account lockout


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-15
changelog:
  - Require a newer selinux-policy to avoid issues when prompting for SC PIN
  - Related: rhbz#1299066 - smartcard login does not prompt for pin when
                            ocsp checking is enabled (default config)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-16
changelog:
  - Resolves: rhbz#1308939 - After removing certificate from user in IPA
                             and even after sss_cache, FindByCertificate
                             still finds the user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-17
changelog:
  - Backport of a more minimal dependency patch to avoid changes to AD
    provider behaviour
  - Related: rhbz#1264705 - Allow SSSD to notify user of denial due to AD
                            account lockout


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-18
changelog:
  - Resolves: rhbz#1209600 - Getting ERROR (getpwnam() failed): Broken pipe
                             with 1.11.6


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-20
changelog:
  - Actually apply patches from previous build
  - Resolves: rhbz#1313940 - sudorule not working with ipa sudo_provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-21
changelog:
  - Resolves: rhbz#1313940 - SSSD PAM module does not support multiple
                             password prompts (e.g. Password + Token) with sudo


author: Akemi Yagi <toracat@centos.org> [2.6.32-358.14.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, EeePC hotkey, JFS
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Enabled ARPD [bug#5709]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added sysfs-fix-printk-warnings-bug6157.patch [bug#6157]
  - Added correct-tty-buffer-flush-bug6104.patch [bug#6104]
  - Added HyperV-Balloon-Fix-bug6316.patch [bug#6316]
  - Added fix-thermal-shutdown-warns-bug6346.patch [bug#6346]
  - Enabled dpt_i2o [bug#6429]
  - Added a fix for virtio_net underestimation [bug#5526]
  - Added fix-freeing-RCU-protected-IP-options-cve20132224.patch [CVE-2012-2224]
  - Added revert-improve-queue_should_plug-bug6548.patch [bug#6548]


author: Chris Feist <cfeist@redhat.com> - 0.16.2-60
changelog:
  - Fix issue causing conga to be unable to find/install packages due to line
    breaks in yum output
  - Resolves: rhbz#842939


author: Chris Feist <cfeist@redhat.com> - 0.16.2-63
changelog:
  - Synced cluster schema with latest cman, resource-agents, fence-agents
    fence-sanlock & fence_virt
  - Resolves: rhbz#878108


author: Chris Feist <cfeist@redhat.com> - 0.16.2-64
changelog:
  - Automatically add unfencing section when adding scsi fence agents
  - Prevent ccs_sync from segfaulting when multiple hostnames were provided
  - ccs --lsmisc now shows fence_daemon options
  - ccs --lsresourceopts has been added as an alias to --lsserviceopts
  - Resolves: rhbz#853890 rhbz#877863 rhbz#893574 rhbz#918555


author: Chris Feist <cfeist@redhat.com> - 0.16.2-69.el6_5.1
changelog:
  - Added ability to create/remove uidgid entries for corosync in cluster.conf
  - Resolves: rhbz#1038272


author: Tom Lane <tgl@redhat.com> 1.2.1-1
changelog:
  - Imported into RHEL-6 from Fedora 18
  - Dropped separate utils subpackage, because existing packages might expect
    that Requires: libjpeg is enough to pull in the command-line tools;
    we should only alter the subpackage breakdown in a new RHEL branch
  - Dropped turbojpeg build, because it doesn't seem ready for prime time
    and isn't part of our RHEL-6 requirements anyway
  Resolves: #788687


author: Rich Megginson <rmeggins@redhat.com> - 4.0.2-3
changelog:
  - Bump spec rev to 3
  - Remove unneeded buildrequires perl, gawk, sed
  - Remove leading / from path macros
  - Remove provides for package name - done automatically
  - Move pkgconfig file stuff under install
  - Added LICENSE and README under docs


author: Rich Megginson <richm@stanfordalumni.org> - 4.0.3.01-0
changelog:
  - Fixed support for windows build by moving old makefile to src/Makefile.win
  - and updating instructions - I could not get configure/libtool to work
  - with cygwin and the msvc compiler
  - Added support for --with-nspr and --with-nss and finding nspr/nss
  - "in-tree" when building with other mozilla components
  - Use PK11_TokenKeyGenWithFlags instead of PK11_KeyGen


author: Rich Megginson <richm@stanfordalumni.org> - 4.0.4-1
changelog:
  - Removed some autoconf generated files which were GPL only - all
  - code needs to be tri-licensed
  - updated version to 4.0.4
  - added empty COPYING file - do not use the one generated by autoreconf
  - use bz2 for source tarball instead of gz


author: John Dennis <jdennis@redhat.com> - 4.2.6-10
changelog:
  - Resolves: bug 656094 - <jdennis@redhat.com>
    Rebase jss to at least jss-4.2.6-9
  - <jdennis@redhat.com>
    merge in updates from Fedora
    move jar location to %{_libdir}/jss and provide symlinks, on 32bit looks like this:
      /usr/lib/java/jss4.jar -> /usr/lib/jss/jss4.jar
      /usr/lib/jss/jss4-<version>.jar
      /usr/lib/jss/jss4.jar -> jss4-<version>.jar
      /usr/lib/jss/libjss4.so
  - bug 654657 - <jdennis@redhat.com>
    Incorrect socket accept error message due to bad pointer arithmetic
  - bug 647364 - <cfu@redhat.com>
    Expose updated certificate verification function in JSS
  - bug 529945 - <cfu@redhat.com>
    expose NSS calls for OCSP settings
  - bug 638833 - <cfu@redhat.com>
    rfe ecc - add ec curve name support in JSS and CS
  - <rcritten@redhat.com>
    Need to explicitly catch UnsatisfiedLinkError exception for System.load()
  - bug 533304 - <rcritten@redhat.com>
    Move location of libjss4.so to subdirectory and use System.load() to
    load it instead of System.loadLibrary() for Fedora packaging compliance


author: Christina Fu <cfu@redhat.com> - 4.2.6-11
changelog:
  - bug 654657 - <jdennis@redhat.com>
    Incorrect socket accept error message due to bad pointer arithmetic
  - bug 661142 - <cfu@redhat.com>
    Verification should fail when a revoked certificate is added


author: Jeff Garzik <jgarzik@redhat.com> - 2-13
changelog:
  - Resolves: bz#754752
  - Add post/preun calls to chkconfig, during rpm install/removal
  - Remove unused rotate, resume steps from init script


author: Deji Akingunola <dakingun@gmail.com> - 0.1.0-3
changelog:
  - Rebuild for babl-0.1.2
  - Backport upstream patch that removed babl processing time instrumentation


author: Nils Philippsen <nils@redhat.com> - 0.1.2-1
changelog:
  - version 0.1.2
  - remove obsolete cflags, babl-instrumentation, autoreconf patches
  - backported: don't leak each node set on a GeglProcessor


author: Nils Philippsen <nils@redhat.com>
changelog:
  - avoid buffer overflow in gegl_buffer_header_init()
  - correct gegl library version, use macro for it


author: Nils Philippsen <nils@redhat.com> - 0.1.2-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because gegl is likely to deal with data coming from untrusted
    sources


author: Baoquan He <bhe@redhat.com> - 2.0.0-300.2
changelog:
  mkdumprd: Allow findmodule() to add dependency for lsmod output, resolves bug 1403699
  mkdumprd: Kill useless code in moduledep(), resolves bug 1403699


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.8.1.el6
changelog:
  - Added and applied patch 116 - patch 116 rh905128-non_block_ciphers.patch
  - Added and applied patch 117 - patch 117 java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
   - to enable handleStartupErrors = ignoreMultipleInitialisation in icedtea 2.3
  - Restorered removed nss support
  - Fixed java-1.7.0-openjdk-nss-config-{1,2} patches to be valid for icedtea 2.3.x
  - enable_nss switch to 0 - disabled
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.8.2.el6
changelog:
  - Added latest Fedora spec changes
  - Bumped release
  - Removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch (unapplied)
  - zlib in BuildReq restricted for  1.2.3-7 or higher
   - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
  - Removed a -icedtea tag from the version
    - package have less and less connections to icedtea7
  - Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
  - Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
    - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
  - Removed all fonconfig files. Fonts are now handled differently in JDK 
    and those files are redundant. This is going to be usptreamed.
    - see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
  - logging.properties marked as config(noreplace)
    - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
  - classes.jsa marked as ghost on full path
    - see https://bugzilla.redhat.com/show_bug.cgi?id=918172 for details
  - nss.cfg was marked as config(noreplace)
  - Add symlink to default soundfont (see 541466)
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.9-2.3.9.0.el6
changelog:
  - updated to IcedTea  2.3.9 with latest security patches
  - buildver sync to b19
  - rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.9.1.el6
changelog:
  - updated to updated IcedTea  2.3.9 with fix to one of security fixes
    -  fixed font glyph offset
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.10.0.el6
changelog:
  - Updated to latest IcedTea7-forest 2.3.10
  - patch 107 renamed to 500 for cosmetic purposes
  - improved handling of patch111 - nss-config-2.patch
  - removed patch 117, java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
    duplicated with patch 108 (java-1.7.0-openjdk-nss-icedtea-e9c857dcb964)
  - Added client/server directories so they can be owned
  - Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs
  - Resolves: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.2.el6
changelog:
  - added patch1000 MBeanFix.patch to fix regressions caused by security patches
  - Resolves: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.3.el6
changelog:
  - removed upstreamed patch1000 MBeanFix.patch
  - updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
  - Resolves: rhbz#973119


author: Karel Zak <kzak@redhat.com> 2.17.1-1
changelog:
  - upgrade to 2.17.1 (bugfix release, #567555)
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ChangeLog
  - spec file fixes:
    fix floppyutil URL in specfile
    add missing liceces to License field
    fix mixed-use-of-spaces-and-tabs
  - fix #565888 - uuidd initscript lsb compliance
  - remove util-linux-ng-2.17-mount-mtabfake.patch (merged upstream)


author: Karel Zak <kzak@redhat.com> 2.17.1-3
changelog:
  - fix #572121 - RHEL6: reset tiny flag in libblkid
  - fix #572122 - RHEL6: blkid (and related) should be a bit more robust


author: Karel Zak <kzak@redhat.com> 2.17.2-1
changelog:
  - upgrade to the bugfix release 2.17.2 (#575722)
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ChangeLog
  - remove: util-linux-ng-2.17-blkid-alignment-offset.patch
            util-linux-ng-2.17-blkid-minix.patch
            util-linux-ng-2.17-blkid-tinyflag.patch
  - fix #572937 - RHEL6: use microsecond resolution for blkid cache entries


author: Karel Zak <kzak@redhat.com> 2.17.2-2
changelog:
  - fix #588248 - RHEL6: don't probe for RAIDs on CD-ROMs
  - fix #586368 - RHEL6: mdraid assembles incorrectly
  - fix #586942 - Add utempter support to "script"
  - fix #588298 - RHEL6: improve fdisk(8) move command.


author: Karel Zak <kzak@redhat.com> 2.17.2-3
changelog:
  - fix #592958 - whole disk raid members to not be identified
  - fix #594689 - partx infinite loop
  - fix #589955 - add command-line interface for libblkid topology support


author: Karel Zak <kzak@redhat.com> 2.17.2-4
changelog:
  - fix #604875 - memory usage in wipefs(8)
  - fix #591133 - udev /dev/disk/by-uuid not populated
  - fix #602657 - fdisk -l does not show correctly partitions names for FCoE volumes
  - fix #591617 - lscpu does not use cpu masks properly


author: Karel Zak <kzak@redhat.com> 2.17.2-5
changelog:
  - fix #561111 - remount of tmpfs fails on RHEL6 alpha
  - fix #612668 - backport fsfreeze from util-linux-ng 2.18
  - fix #598631 - shutdown, reboot, halt and C-A-D don't work


author: David Vossel <dvossel@redhat.com> - 3.9.5-3
changelog:
  - Fix usage of findmnt in fs-lib.sh based rgmanager agents.
  - When executing force kill of processes using a mountpoint,
    take into account those processes accessing shared memory.
  - Add force_unount=safe option to avoid blocking Filesystem
    agent during the stop operation.
  - Do not fail during stop if oracle listener is already down. 
  - Correctly detect oracledb and orainstanch.sh shutdown.
  - Remove unused patches left over from before patches were
    consolidated into the new source files.

    Resolves: rhbz#1038474
    Resolves: rhbz#1089004
    Resolves: rhbz#1095943
    Resolves: rhbz#1047999
    Resolves: rhbz#960186
    Resolves: rhbz#993431


author: David Vossel <dvossel@redhat.com> - 3.9.5-5
changelog:
  - Add support for pacemaker db2 agent
  - Fix syntax error in nfsserver.sh
  - Updates pacemaker nfs server agents. Adds support for
    nfsnotify agent.

    Resolves: rhbz#1059981
    Resolves: rhbz#1091102
    Resolves: rhbz#974239


author: David Vossel <dvossel@redhat.com> - 3.9.5-7
changelog:
  - Update force_unmount=safe option so it does not process
    duplicate process ids.

    Resolves: rhbz#1095943


author: David Vossel <dvossel@redhat.com> - 3.9.5-8
changelog:
  - Revert accidental modification of exportfs's
    unlock_on_stop option.
  - Add on/off as valid value for ip.sh monitor_link

    Resolves: rhbz#1091102
    Resolves: rhbz#1039119


author: David Vossel <dvossel@redhat.com> - 3.9.5-9
changelog:
  - When signalling pids accessing a mount_point to exit,
    make sure to only signal each pid once.

    Resolves: rhbz#1089004


author: David Vossel <dvossel@redhat.com> - 3.9.5-11
changelog:
  - Updates required, unique, and primary fields in bind-mount.sh
    metadata

    Resolves: rhbz#1094789


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.1.2.el6]
changelog:
  - [x86] kvm: fix PIT timer race condition (mguzik) [1149592 1149593] {CVE-2014-3611}
  - [x86] kvm: vmx: handle invept and invvpid vm exits gracefull (mguzik) [1144826 1144837 1144827 1144838] {CVE-2014-3646 CVE-2014-3645}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.1.3.el6]
changelog:
  - Revert: [net] revert "bridge: Set vlan_features to allow offloads on vlans" (Vlad Yasevich) [1144442 1121991]


author: Bill Nottingham <notting@redhat.com> 1.3.49.1-1
changelog:
  - backport LSB fixes from head
  - fixes: #693202/#771455, #649227/#771452, #750446/#771454, #701573/#771741, #696305 (<jbastian@redhat.com>)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.49.4-1
changelog:
  - chkconfig: don't create symlinks if they already exist
  - chkconfig: resetpriorities should work on all runlevels
  - leveldb: fix segfault when selinux policy is not present
  - alternatives: always recreate symlinks when the alternative is updated


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-696.10.2.el6]
changelog:
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652554
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Tom Lane <tgl@redhat.com> 5.1.61-1
changelog:
  - Update to 5.1.61, for assorted upstream bugfixes including
    numerous CVEs announced in January 2012
  Resolves: #787192


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871813


author: Jack Magne <jmagne@redhat.com>= 1.1.0-17
changelog:
  - Resolves: 556657 Enroll button active for an enrolled CAC card.
  - Resolves: 469867 Cannont use arrow keys to move between cards.


author: Jack Magne <jmagne@redhat.com>= 1.1.0-22
changelog:
  - Resolves: 729027 - Debuginfo package issues in esc
  - Resolves: 253077 - ESC windows should keep the same size if the user resized them
  - Resolves: 682216 - [abrt] esc-1.1.1.0-21.el6 __strcmp_ssse3: Process /usr/lib/esc-1.1.1.0/escd 
  -    was killed by singnal 11 (SIGSEGV)
  - Resolves: 702683 - esc-prefs.js file has a typo


author: Petr Oros <poros@redhat.com> - 1:1.17-27
changelog:
  - Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
  - Add amd microcode_amd_fam17h.bin data file
  - Resolves: #1527354


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.3
changelog:
  - Intel CPU microcode update to 20180703
  - Add infrastructure for handling kernel-version-dependant microcode
  - Resolves: #1574593


author: Radek Vokal <rvokal@redhat.com> - 1.2.6-1
changelog:
  - upgrade to 1.2.6
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.6.html 
  - minor spec file tweaks for better svn checkout support (#553500)
  - init.lua is present always and not only when lua support is enabled
  - fix file list, init.lua is only in -devel subpackage (#552406)
  - Autoconf macro for plugin development.


author: Jan Safranek <jsafrane@redhat.com> 1.2.13-1
changelog:
  - upgrade to 1.2.13
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.11.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.12.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.13.html
  - Resolves: #657534 (CVE-2010-4300 CVE-2010-3445)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.6-1
changelog:
  - avoid potential use-after-free and read overrun after a CA is added
    dynamically (thanks to Jan Cholasta)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-1
changelog:
  - fix an inconsistency in how we parse cookie values returned by CA helpers,
    in that single-line values would lose the end-of-line after a daemon
    restart, but not before
  - handle timeout values and exit status values when calling CA helpers
    in non-SUBMIT, non-POLL modes (#1118468)
  - rework how we save CA certificates so that we save CA certificates associated
    with end-entity certificates when we save that end-entity certificate, which
    requires running all of the involved pre- and post-save commands
  - drop package Requires: on systemd-sysv (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-2
changelog:
  - reintroduce package Requires: on systemd-sysv on F19 and EL6 and older,
    conditionalized it so that it's ignored on newer releases, and make
    whether or not we call systemd-sysv-convert in triggers depend on that,
    too (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.8-1
changelog:
  - add a 'refresh' option to the getcert command
  - add a '-a' flag to the getcert command's 'refresh-ca' option


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.9-1
changelog:
  - avoid potential use-after-free after a CA is removed dynamically (thanks to
    Keenan Brock) (#1125342)
  - add a "external-helper" property to CA objects


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.10-1
changelog:
  - when attempting to contact an IPA LDAP server, if no "ldap_uri" is set in
    default.conf, and no "host" is set either, try to construct the server URI
    using the "server" setting (#1126985)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.11-1
changelog:
  - when getcert is passed a -a flag, to indicate that CA root certificates
    should be stored in the specified database, don't ignore locations which
    don't include a storage scheme (#1129537)
  - when called to 'start-tracking' with the -a or -F flags, if we have
    applicable certificates on-hand for a CA that we're either told to use
    or which we decide is the correct one, save the certificates (#1129696)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.12-1
changelog:
  - correct encoding/decoding of variant-typed data which we receive and send
    as part of the org.freedesktop.DBus.Properties interface over the bus, and
    add some tests for them (based on patch from David Kupka, ticket #36)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-76
changelog:
  - 1344782 - Banner pages do not show time-at-creation or time-at-processing
  - 1219571 - Invalid memory accesses lead to crash when configured class has implicit class as first member


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-77
changelog:
  - 1099617 - Using "lp -o orientation-requested=6" with a PDF file has no effect.
  - 1268131 - Printing PDF with fit-to-page doesn't take printer HW margins into account


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-1866, CVE-2010-2094, CVE-2010-1917,
    CVE-2010-2531, MOPS-2010-060 (#624469)


author: Joe Orton <jorton@redhat.com> - 5.3.3-1
changelog:
  - update to 5.3.3 (#645591)
  - add security fixes for CVE-2010-3709, CVE-2010-3710,
    CVE-2010-3870, CVE-2009-5016 (#651953)
  - prevent extract() cloberring $GLOBALS (#655118)
  - ensure correct mysql_config is used in biarch builds


author: Joe Orton <jorton@redhat.com> - 5.3.3-3.1
changelog:
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740731)


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-19
changelog:
  - fixed problem with wrong kernel oops duplicates - rhbz#953813
  - updated translation rhbz#993564
  - Resolves: #953813


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-21
changelog:
  - updated translation (ko, po) #952773
  - added support for MCE errors rhbz#812537
  - Resolves: #812537, #952773


author: Jakub Filak <jfilak@redhat.com> - 2.0.8-22
changelog:
  - desktop file is named redhat-abrt.desktop rhbz#905822
  - dependency missing for abrt-addon-vmcore
  - removed unnecessary debug message "Can't open file '/*/uid': No such file or directory"
  - fix post-create reporter-uploader examples
  - add abrt-harvest-vmcore manual page
  - Resolves: #812284, #888282, #905822, #984065, #1022160


author: Peter Schiffer <pschiffe@redhat.com> 0.37-5
changelog:
  - resolves: #819137
    fixed bug when lscgroup was ltrimming path which wasn't prefixed with slash
  - resolves: #773544
    made --sticky option effective when setuid(2) and setgid(2)
  - resolves: #849757
    added inotify fd to scan running tasks and set control groups
  - resolves: #738737
    logging improvement


author: Peter Schiffer <pschiffe@redhat.com> 0.37-6
changelog:
  - related: #738737
    updated logging improvement
  - resolves: #877042
    fixed coverity finding in libcgroup-0.37-add-inotify-fd.patch
  - resolves: #869990
    fixed bug when cgconfig service was failing to start on read only file systems


author: Peter Schiffer <pschiffe@redhat.com> 0.37-7.1
changelog:
  - resolves: #913282
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.65
changelog:
  - Add 0168-RHBZ-902585-fix-state-size.patch
  - Add 0169-RHBZ-895110-fix-params-size.patch
  - Add 0170-RHBZ-889441-fix-multipath.rules.patch
    * set multipath device link_priority on change events
  - Add 0171-RHBZ-904836-handle-other-sector-sizes.patch
    * handle non-512 byte GPT sector sizes
  - Add 0172-RHBZ-895110-fix-output-buffer.patch
    * make sure to allocate enough space to print the full list of multipath
      devices
  - Add 0173-RHBZ-889429-catch-early-uevents.patch
    * start up the uevent listening thread early, but don't start up the
      uevent servicing thread until after you configure
  - Add 0174-RHBZ-875199-null-vector-fix.patch
  - Add 0175-RHBZ-889987-detect_prio_fix.patch
    * make sure you can actually get the priority with ALUA before selecting it.
  - Add 0176-RHBZ-892292-listing-speedup.patch
    * don't get the wwid when you are just listing a device.
  - Add 0177-RHBZ-902593-multipath-c-manpage.patch
  - Add 0178-RHBZ-918825-kpartx-loop-devices.patch
    * remove tmp loopdev create by 'kpartx -l' in no partitions were found.
  - Add 0179-RHBZ-920448-bindings-fix.patch
    * try to find the smallest unused user friendly name
  - Add 0180-RHBZ-928831-check-dm-version-for-retain_hwhandler.patch
    * don't use retain_attached_hw_handler on kernels that don't support it.
  - Resolves: bz #875199, #889429, #889441, #889987, #892292, #902585
  - Resolves: bz #902593, #904836, #918825, #920448, #928831


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.66
changelog:
  - Modify 0179-RHBZ-920448-bindings-fix.patch
    * remove debug printing.
  - Add 0181-RHBZ-958091-check-for-erofs.patch
    * only retry loading a map read-only if the read/write load failed
      with EROFS
  - Add 0182-RHBZ-947798-rw-change.patch
    * add a new multipath.conf default keyword "reload_readwrite". If set
      to "yes", multipathd will listed to path device change events, and
      if they device has become read/write, it will reload the multipath
      device.
  - Add 0183-RHBZ-924924-replace_whitespace.patch
    * add a new multipath.conf default keyword "replace_wwid_whitespace".
      If set to "yes", multipath will add --replace-whitespace for devices
      That use the default getuid callout.
  - Add 0184-RHBZ-975676-fix_cli_resize.patch
    * deal with resize happening while path device is being removed.
  - Add 0185-RH-signal-waiter.patch
    * send waiter thread a signal to break out of waiting for dm events
  - Resolves: bz #958091, #947798, #924924, #975676


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.67
changelog:
  - Modify 0182-RHBZ-947798-rw-change.patch
    * Add documentation
  - Modify 0183-RHBZ-924924-replace_whitespace.patch
    * Add documentation
  - Add 0186-RHBZ-974129-delay_set_fast_io_fail.patch
    * fix issue with setting fast_io_fail_tmo past the old value of
      dev_loss_tmo
  - Resolves: bz #974129, #924924, #947798


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.68
changelog:
  - Modify 0172-RHBZ-895110-fix-output-buffer.patch
    * free buffer
  - Modify 0182-RHBZ-947798-rw-change.patch
    * don't access multipath device if it has been freed in setup_multipath
  - Add 0187-RH-fix-bad-derefs.patch
    * Fix places where we are dereferencing freed pointers
  - Resolves: bz #947798


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.69
changelog:
  - Add 0188-RH-add-all_devs.patch
    * Add new special "all_devs" devices identifier, that makes multipath
      update a the values on all devices
  - Add 0189-RHBZ-986767-blacklist-td-devs.patch
    * add td[a-z].* devices to the builtin blacklist
  - Add 0190-UPBZ-994277-handle-offline-states.patch
    * Handle "transport-offline" and "quiesce" path states
  - Add 0191-UPBZ-995251-fail-rdac-on-unavailable.patch
    * make rdac checker always mark paths with asymmetric access state of
      unavailable as down
  - Resolves: bz #986767, #994277, #995251


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.70
changelog:
  - Modify 0185-RH-signal-waiter.patch
    * making the waiter threads exit correctly caused a race at shutdown.
  - Resolves: bz #996921


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.71
changelog:
  - Add 0192-RHBZ-916667-print-major-minor.patch
    * Make multipathd print major:minor on path and and remove events
  - Resolves: bz #916667


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72
changelog:
  - Add 0193-UPBZ-1011341-dos-4k-partition-fix.patch
    * Make kpartx correctly handle 4K sector size devices with dos partitions.
  - Resolves: bz #1011341


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.1
changelog:
  - Add 0194-RHBZ-997570-no-sync-turs-on-pthread_cancel.patch
    * If async tur checker fails on threads, don't retry with the sync
      version
  - Resolves: bz #1069435


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.2
changelog:
  - Add 0195-UPBZ-1024103-alua-prio-timeout.patch
    * Change alua prioritizer timeout from 5 minutes to one minute
  - Resolves: bz #1078491


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.442.el6
changelog:
  - kvm-Fix-TEXI-section-mark-imbalance-in-qemu-img-cmd.hx.patch [bz#1116558]
  - kvm-qemu-img-Allow-source-cache-mode-specification.patch [bz#1116558]
  - kvm-vl-Change-mem-prealloc-to-match-upstream.patch [bz#1006027]
  - Resolves: bz#1006027
    (-mem-prealloc option behaviour is opposite to expected)
  - Resolves: bz#1116558
    (Allow qemu-img to bypass the host cache (check, compare, convert, rebase, amend))


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.443.el6
changelog:
  - kvm-char-add-a-dummy-fe_open-implementation.patch [bz#1027181]
  - kvm-char-restore-read-callback-on-a-reattached-hotplug-c.patch [bz#1027181]
  - Resolves: bz#1027181
    (Guest can't receive any character transmitted from host after hot unplugging virtserialport then hot plugging again)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.443.el6
changelog:
  - kvm-qxl-render-add-more-sanity-checks.patch [bz#1095612]
  - Resolves: bz#1095612
    (Machine type rhel6.0.0 & -vga qxl & vnc cause qemu-kvm core dump)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.445.el6
changelog:
  - kvm-trace-add-systemtap-initscript-README-file-to-RPM.patch [bz#1139438]
  - Resolves: bz#1139438
    (README for qemu-kvm systemtap flight recorder)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.446.el6
changelog:
  - Properly adding missing README.systemtap [bz#1139438]
  - Resolves: bz#1139438
    (README for qemu-kvm systemtap flight recorder)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.447.el6
changelog:
  - kvm-net-Forbid-dealing-with-packets-when-VM-is-not-runni.patch [bz#1142756 bz#970103]
  - kvm-migration-set-speed-to-maximum-during-last-stage.patch [bz#1142756 bz#970103]
  - kvm-migration-only-call-append-when-there-is-something-t.patch [bz#1142756 bz#970103]
  - kvm-migration-avoid-no-op-memmove-of-potential-large-buf.patch [bz#1142756 bz#970103]
  - kvm-migration-remove-not-needed-ram_save_remaining-funct.patch [bz#1142756 bz#970103]
  - kvm-migration-move-bandwidth-calculation-to-inside-stage.patch [bz#1142756 bz#970103]
  - kvm-migration-Don-t-calculate-bandwidth-when-last-cycle-.patch [bz#1142756 bz#970103]
  - Resolves: bz#1142756
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)
  - Resolves: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)
  - Properly include README.systemtap [bz#1145672]
  - Resolves: bz#1145672
    (README for qemu-kvm systemtap flight recorder)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.448.el6
changelog:
  - kvm-Revert-migration-Don-t-calculate-bandwidth-when-last.patch [bz#970103]
  - kvm-Revert-migration-move-bandwidth-calculation-to-insid.patch [bz#970103]
  - kvm-Revert-migration-remove-not-needed-ram_save_remainin.patch [bz#970103]
  - kvm-Revert-migration-avoid-no-op-memmove-of-potential-la.patch [bz#970103]
  - kvm-Revert-migration-only-call-append-when-there-is-some.patch [bz#970103]
  - kvm-Revert-migration-set-speed-to-maximum-during-last-st.patch [bz#970103]
  - kvm-Revert-net-Forbid-dealing-with-packets-when-VM-is-no.patch [bz#970103]
  - Reverts attempt to solve: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.448.el6_6.1
changelog:
  - kvm-net-Forbid-dealing-with-packets-when-VM-is-not-run_2.patch [bz#970103]
  - kvm-virtio-net-drop-assert-on-vm-stop.patch [bz#970103]
  - kvm-migration-set-speed-to-maximum-during-last-stage_2.patch [bz#970103]
  - kvm-migration-only-call-append-when-there-is-something_2.patch [bz#970103]
  - kvm-migration-Only-call-memmove-when-there-is-anything-t.patch [bz#970103]
  - kvm-migration-remove-not-needed-ram_save_remaining-fun_2.patch [bz#970103]
  - kvm-migration-move-bandwidth-calculation-to-inside-sta_2.patch [bz#970103]
  - kvm-migration-Don-t-calculate-bandwidth-when-last-cycl_2.patch [bz#970103]
  - kvm-buffered_flush-return-errors.patch [bz#970103]
  - kvm-bandwidth_limit-standarize-in-size_t.patch [bz#970103]
  - kvm-fix-bz-1196970.patch [bz#1196970]
  - Resolves: bz#1196970
    (Migrate status is failed after migrate_cancel.)
  - Resolves: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.448.el6_6.2
changelog:
  - kvm-cirrus-fix-blit-region-check.patch [bz#1170571]
  - kvm-cirrus-don-t-overflow-CirrusVGAState-cirrus_bltbuf.patch [bz#1170571]
  - Resolves: bz#1170571
    (CVE-2014-8106 qemu-kvm: qemu: cirrus: insufficient blit region checks [rhel-6.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.448.el6_6.3
changelog:
  - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch [bz#1219267]
  - Resolves: bz#1219267
    (EMBARGOED CVE-2015-3456 qemu-kvm: qemu: floppy disk controller flaw [rhel-6.6.z])


author: Andrew Overholt <overholt@redhat.com> 1:3.4.1-1
changelog:
  - 3.4.1
  - Don't conditionalize building of gcj AOT bits (we're only building
    this for gcj and IcedTea bootstrapping).


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-1
changelog:
  - Update to upstream 4.5.2 release.
  - Add eclipse-gcj-compat-4.2.1.patch and eclipse-gcj-nodummysymbol.patch
    from rhel-7.3 branch.
  - Add ecj-convertto1.5.patch.
  - Remove ClasspathJsr199.java for 1.5 compatibility.
  - Add man page.
  - Resolves: rhbz#1336481


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-3
changelog:
  - Update to a newer GCCMain.
  - Add a timestamp qualifier to ecj-gcj.tar.bz2.
  - Remove eclipse-gcj-compat-4.2.1.patch, no longer necessary. 
  - Restore versioned jar.
  - Resolves: rhbz#1336481


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.1
changelog:
  - Fix exit codes in nscd start script (#582738)
  - Fix lookup of collation sequence value during regexp matching (#587360)
  - Handle too-small buffers in Linux getlogin_r (BZ#11571)
  - Fix name of tt_RU.UTF-8@iqtelif locale (#589138)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.3
changelog:
  - Implement recvmmsg on all archs (#594194)
  - Avoid strict aliasing issues (#594194)
  - Fix nscd user creation (#594256)
  - Fix access outside of red zone on ppc (#593771)
  - Fix scope handling during dl_close (#593686)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.7
changelog:
  - Round cache sizes to handle odd sizes (#607010)
  - Fix initializsation of cpu features (#630801)
  - Fix ifunc thunk for strspn on x86 in static libc (#631011)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.7.el6_0.1
changelog:
  - Fix bug in generic strstr/memmem implementation handling certain
    repeated patterns (#643341)
  - Correctly align TCB for AVX (#643343)


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-27
changelog:
  - last update of init script modified to work with SELinux correctly
  - added support for new configuration option - file limit for service


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-28
changelog:
  - fixed an issue with flooding log with error messages (see fedora bug #573764)
  - fixed issue with segfaulting tcpmux service (fedora bug #543968)


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.19.1.el6]
changelog:
  - [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-31
changelog:
  * fixed BRIDGE-MIB implementation in /usr/bin/snmp-bridge-mib,
    now it supports embedded perl and answers GETNEXT requests correctly
    (#630157).


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-32
changelog:
  - fixed varbind parsing in python netsnmp module (#711481)
  - fixed session initialization in python netsnmp module (#710667)
  - fixed crash when getting out-of-memory in inetNetToMediaTable (#708947)
  - added xfs and jfs filesystem support to hrStorageTable (#707912)
  - fixed snmpd to purge zombies resulted from pass_persist process exit
    (#703682)
  - added a log message when snmpd detects two interfaces with the same
    IP address and thus having only one ipTable entry for both (#702171)
  - added new snmpd.conf options 'interface_fadeout' and
    'interface_replace_old' to controll snmpd behavior when more
    interfaces get the same name (#702165)
  - fixed snmptrapd leaking memory when processing traps in embedded perl
    (#678314)
  - fixed hrSystemDate timezone sign (#683680)
  - fixed snmp logging 'truncating integer value > 32 bits' for
    UCD-SNMP-MIB::systemStats (#681949)
  - fixed rare race condition in hrSWRunTable (#683563)
  - recompiled with relro for better security (#725657)
  - snmpd should not change request-id when sending multiple SMUX messages
    (#708370)


author: Michal Nowak <mnowak@redhat.com> - 0.3.2-1
changelog:
  - 0.3.2
  - remove rpath (x86-64)
  - xcb_keysyms: remove xcb_lookup_t
  - Revert "keysyms: use xcb_key_lookup_t type for col paramter"
  - temporary disabled %check due to RPATH regression


author: Adam Jackson <ajax@redhat.com> 0.3.6-5
changelog:
  - Add <xcb/xcb_util.h> and xcb-util.pc for source compat with >= 0.3.8
  - Backport pkgconfig fix from upstream
  - Don't install -{icccm,image,keysyms}, they live in their own srpms now


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-33
changelog:
  - wacom: add support for NV-CONTROL extension (#805038)
  - wacom: fix button mapping (#805045)
  - wacom: add LED support from upstream (#805069)
    Resolves: #805038 #805045 #805069


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-37
changelog:
  - wacom: Make the calibrator window stay above other windows and
    cancel calibration if/when the calibrator loses input focus.
    Resolves: #818692


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-38
changelog:
  - wacom: Re-sync sources from gnome-settings-daemon-2.28.2-26 with
    LED support (#805069)
    Resolves: #805069


author: Robbie Harwood <rharwood@redhat.com> - 1.10.3-54
changelog:
  - Fix gss_accept_sec_context output_token return in error cases
    Also backport upstream test for this.
  - Resolves: #1279249


author: John Dennis <jdennis@redhat.com> - 2.1.9-1
changelog:
  - update to latest upstream, mainly bug fix release
  - Resolves: bug #584101
    Feature improvements
    * Add radmin command "stats detail <file>" to see what
      is going on inside of a detail file reader.
    * Added documentation for CoA.  See raddb/sites-available/coa
    * Add sub-option support for Option 82.  See dictionary.dhcp
    * Add "server" field to default SQL NAS table, and documented it.

    Bug fixes
    * Reset "received ping" counter for Status-Server checks.  In some
      corner cases it was not getting reset.
    * Handle large VMPS attributes.
    * Count accounting responses from a home server in SNMP / statistics
      code.
    * Set EAP-Session-Resumed = Yes, not "No" when session is resumed.
    * radmin packet counter statistics are now unsigned, for numbers
      2^31..2^32.  After that they roll over to zero.
    * Be more careful about expanding data in PAP and MS-CHAP modules.
      This prevents login failures when passwords contain '{'.
    * Clean up zombie children if there were many "exec" modules being
      run for one packet, all with "wait = no".
    * re-open log file after HUP.  Closes bug #63.
    * Fix "no response to proxied packet" complaint for Coa / Disconnect
      packets.  It shouldn't ignore replies to packets it sent.
    * Calculate IPv6 netmasks correctly.  Closes bug #69.
    * Fix SQL module to re-open sockets if they unexpectedly close.
    * Track scope for IPv6 addresses.  This lets us use link-local
      addresses properly.  Closes bug #70.
    * Updated Makefiles to no longer use the shell for recursing into
      subdirs.  "make -j 2" should now work.
    * Updated raddb/sql/mysql/ippool.conf to use "= NULL".  Closes
      bug #75.
    * Updated Makefiles so that "make reconfig" no longer uses the shell
      for recursing into subdirs, and re-builds all "configure" files.
    * Used above method to regenerate all configure scripts.
      Closes bug #34.
    * Updated SQL module to allow "server" field of "nas" table
      to be blank: "".  This means the same as it being NULL.
    * Fixed regex realm example.  Create Realm attribute with value
      of realm from User-Name, not from regex.  Closes bug #40.
    * If processing a DHCP Discover returns "fail / reject", ignore
      the packet rather than sending a NAK.
    * Allow '%' to be escaped in sqlcounter module.
    * Fix typo internal hash table.
    * For PEAP and TTLS, the tunneled reply is added to the reply,
      rather than integrated via the operators.  This allows multiple
      VSAs to be added, where they would previously be discarded.
    * Make request number unsigned.  This changes nothing other than
      the debug output when the server receives more than 2^31 packets.
    * Don't block when reading child output in 'exec wait'.  This means
      that blocked children get killed, instead of blocking the server.
    * Enabled building without any proxy functionality
    * radclient now prefers IPv4, to match the default server config.
    * Print useful error when a realm regex is invalid
    * relaxed rules for preprocess module "with_cisco_vsa_hack".  The
      attributes can now be integer, ipaddr, etc.  (i.e. non-string)
    * Allow rlm_ldap to build if ldap_set_rebind_proc() has only
      2 arguments.
    * Update configure script for rlm_python to avoid dynamic linking
      problems on some platforms.
    * Work-around for bug #35
    * Do suid to "user" when running in debug mode as root
    * Make "allow_core_dumps" work in more situations.
    * In detail file reader, treat bad records as EOF.
      This allows it to continue working when the disk is full.
    * Fix Oracle default accounting queries to work when there are no
      gigawords attributes.  Other databases already had the fix.
    * Fix rlm_sql to show when it opens and closes sockets.  It already
      says when it cannot connect, so it should say when it can connect.
    * "chmod -x" for a few C source files.
    * Pull update spec files, etc. from RedHat into the redhat/ directory.
    * Allow spaces when parsing integer values.  This helps people who
      put "too much" into an SQL value field.


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#855316
    CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
    certain expiration date fields of a certificate during x509 certificate
    validation


author: Jiri Moskovcak <jmoskovc@redhat.com> - 4.2.1-1
changelog:
  - new version
  - obsoletes previous patches
  - added patch to maintain backwards compatibility for scripts using -c/--copy
  - Resolves: #502934


author: Jiri Moskovcak <jmoskovc@redhat.com> 4.2.1-4
changelog:
  - added libselinux-devel to buildrequires rhbz#514182
  - fixed problem with --excludedocs rhbz#515913


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.1-7
changelog:
  - improve man/usage documentation of the -i/--in-place option
    in the case of symlinks/hardlinks(#679921)


author: Andy Grover <agrover@redhat.com> - 1.0.24-4
changelog:
  - Add patches
    * 0001-iser-Fix-bidirectional-chap.patch
    * 0002-bs_aio-use-64bit-to-read-eventfd-counter.patch
    * 0003-iser-added-huge-pages-support.patch
    * 0004-iser-added-parameter-for-pool-size.patch
    * 0005-iser-limit-number-of-CQ-entries-requested.patch
    * 0006-iser-add-CQ-vector-param.patch
    * 0007-Rework-param_set_val-and-friends.patch
    * 0008-return-Reject-in-iscsi-login-text-failure.patch


author: Jack Magne <jmagne@redhat.com>= 1.1.0-26
changelog:
  - Resolve bugs #981156 and #961582. One minor permissions issue, the other fix to malformed desktop file.


author: Ondrej Oprala <ooprala@redhat.com> - 8.4-39
changelog:
  - du: improve du error message of coreutils commands in a chrooted environment
    (patch by Boris Ranto) (#1086916)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-40
changelog:
  - ls: improve efficiency on filesystems without support for ACLs,
    xattrs or SELinux (#1248141)
  - su: suppress PAM info messages for -c or non-login sessions (#1267588)
  - tail, stat: recognize several new filesystems - up2date by Jan 1st 2016 (#1280333)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-41
changelog:
  - colorls.sh,colorls.csh - call utilities with complete path (#1222140)
  - mkdir, mkfifo, mknod - respect default umask/acls when 
    COREUTILS_CHILD_DEFAULT_ACLS envvar is set (to match rhel 7 behaviour,


author: Kamil Dudka <kdudka@redhat.com> - 8.4-44
changelog:
  - fix the functionality of 'sort -h -k ...' in multi-byte locales (#1357979)
  - use correct path to grep(1) in colorls.sh (#1376892)
  - make colorls.sh compatible with ksh (#1321643)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Remove upstreamed patches.
  - Regenerate add-final-location-rpaths patch against new release.
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - Use xz for tarballs to reduce file size.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148899


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Remove upstreamed patch for RH1158799.
  - Regenerate add-final-location-rpaths patch against new release.
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Resolves: rhbz#1180290


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Resolves: rhbz#1180290


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update IcedTea and OpenJDK sources to fix x86 build issue.
  - Regenerate add-final-location-rpaths patch against new release.
  - Resolves: rhbz#1180290


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Regenerate add-final-location-rpaths patch against new release.
  - Resolves: rhbz#1180290


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.35-1.13.7.0
changelog:
  - Update to IcedTea 1.13.7
  - Regenerate add-final-location-rpaths patch so as to be less disruptive.
  - Resolves: rhbz#1209065


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.25-7
changelog:
  - Fix for CVE-2010-2244
  - Resolves: #607296
  - Resolves: #594405
  - Related 587761
  - Related 584761
  - Related 584766
  - Related 596151
  - Related 599435


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-1
changelog:
  - new version 1.4.6 with support for all new features of 2.6.32
    - several man page fixes
    - Support for nommu arches
    - realm: remove static initializations
    - libiptc: remove unused functions
    - libiptc: avoid strict-aliasing warnings
    - iprange: do accept non-ranges for xt_iprange v1
    - iprange: warn on reverse range
    - iprange: roll address parsing into a loop
    - iprange: do accept non-ranges for xt_iprange v1 (log)
    - iprange: warn on reverse range (log)
    - libiptc: fix wrong maptype of base chain counters on restore
    - iptables: fix undersized deletion mask creation
    - style: reduce indent in xtables_check_inverse
    - libxtables: hand argv to xtables_check_inverse
    - iptables/extensions: make bundled options work again
    - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
    - iptables: take masks into consideration for replace command
    - doc: explain experienced --hitcount limit
    - doc: name resolution clarification
    - iptables: expose option to zero packet/byte counters for a specific rule
    - build: restore --disable-ipv6 functionality on system w/o v6 headers
    - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
    - DNAT: fix incorrect check during parsing
    - extensions: add osf extension
    - conntrack: fix --expires parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-2
changelog:
  - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
    to /usr/lib[64] for compatibility (rhbz#558796)


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-3
changelog:
  - fixes according to review:
  - fixed license
  - moved /bin/iptables-xml to iptables main package fixes dangling symlink in
    ipv6 sub-package
  - added missing lsb keywords Required-Start and Required-Stop to init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-5.1
changelog:
  - reverted upstream patches, because they are breaking the ABI (rhbz#725879)
  - created new patch based on upstream but without ABI break (rhbz#725879)


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-50.el6.3
changelog:
  - Resolves: #1322059 IPA Replica-Install from RHEL6 to RHEL7 Fails
    - Modififed NSSConnection not to shutdown existing database.
    - Do not erroneously reinit NSS in Dogtag interface
    - Make sure replication works after DM password is changed


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-51.el6
changelog:
  - Resolves: #1321138 Missing dependency package "python-sss-murmur" in
    ipa-server-3.0.0-50.el6.x86_64
    - SPEC: Require python2 version of sssd bindings
  - Resolves: #1367026 Document and test procedure for running IdM Server in TLS
    1.2+ environment
    - Require 389-ds-base with TLS 1.0 disable switch


author: Doug Ledford <dledford@redhat.com> - 0.5-3
changelog:
  - Upstream has updated the libnes tarball without changing the version.  Pick
    up the libnes-0.5.tar.gz tarball that's dated 13-Jun-2008
  - Resolves: bz451470


author: Doug Ledford <dledford@redhat.com> - 0.5-5.el5
changelog:
  - Fix a minor memleak (from upstream)
  - Rebuild against libibverbs that has xrc support
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 0.6-1.el5
changelog:
  - Build against non-XRC libibverbs
  - Update to ofed 1.4.1 final bits
  - Remove no longer needed memleak patch
  - Related: bz506258, bz506097


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Rebuild against latest libibverbs
  - Add psuedo provide of libibverbs-driver.%{_arch}
  - Fix exclusivearch to work on i686
  - Related: bz725016, bz724900


author: Michael Stead <mstead@redhat.com> 0.99.14-1
changelog:
  - Update strings and pull latest from zanata (alikins@redhat.com)
  - 810306: Improved messaging in firstboot (mstead@redhat.com)
  - 811337: Unregister any time we return to rhsm_login (jbowes@redhat.com)
  - 811294: Refresh strings to fix broken kn.po (alikins@redhat.com)
  - 807153: Allow more aggressive deletion of product certs. (awood@redhat.com)
  - 810399: Require the latest rhn-setup-gnome for firstboot (alikins@redhat.com)
  - 810290: Use correct calculation for "Next update" time in sm-gui
    (cduryee@redhat.com)
  - Extracted the latest strings, and sent them to the zanata
    (bkearney@redhat.com)
  - 810363: Handle socket errors for bad proxy host in firstboot
    (alikins@redhat.com)
  - Latest man page and documentation (dlackey@redhat.com)
  - 809989: Add the shortened password url to the strings files.
    (bkearney@redhat.com)
  - 809989: Add a shorter URL to the registration screen (bkearney@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.15-1
changelog:
  - update translations from zanata (alikins@redhat.com)
  - 815563: Remove incorrect at-spi locators. (awood@redhat.com)
  - 795541: Environment command should omit the Library from katello
    (bkearney@redhat.com)
  - 811952: Don't try to unsubscribe old ents if we register (alikins@redhat.com)
  - 811952: Handle errors on unsubscribing ent certs (alikins@redhat.com)
  - 812929: Fix issue with selected sla not being in suitable_slas
    (mstead@redhat.com)
  - 811863: Handle unforseen errors in preferences dialog. (dgoodwin@redhat.com)
  - 812104: add "release" and "service-level" to completion (alikins@redhat.com)
  - Latest man page (bkearney@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 0.99.16-1
changelog:
  - 817390: add completion support for servicelevel (alikins@redhat.com)
  - 817117: fix completion of environment command (alikins@redhat.com)
  - 816377: handle cert migration data being missing (alikins@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.17-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - 810236: Update facts after registering with --consumerid.
    (dgoodwin@redhat.com)
  - 818298: release --list should not display rhel-5 when only rhel-6 product is
    installed (wpoteat@redhat.com)
  - adding mention that subscription-manager-migration-data is a required package
    for the migration scripts to work, bz818767 (deon@deonlackey.com)
  - 818461: invalid date format error when using or_IN.UTF-8 (cduryee@redhat.com)
  - 815479: Incorrect owner should be relayed on service level list call.
    (wpoteat@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.18-1
changelog:
  - 813296: Remove check for candlepin_version (jbowes@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - 820743: fix multiline string that was not extracted (alikins@redhat.com)
  - 820080: Fix "Configuration" spelling on firstboot page (alikins@redhat.com)
  - 820671: Fix issues finding translated strings from glade (alikins@redhat.com)
  - 820765 removing reference to migration being supported on rhel 5.8 and later
    (deon@deonlackey.com)
  - 821024: Properly handle ESC on preferences dialog (mstead@redhat.com)
  - 820639: Don't show unenabled content as an available release
    (alikins@redhat.com)
  - 820743: fix some merge errors from fix for 820743 (alikins@redhat.com)
  - 820743: some multiline strings extracted into string catalog incorrectly
    (alikins@redhat.com)
  - 820080: Fix "Configuration" spelling on firstboot page (alikins@redhat.com)
  - 820027: Fix unlocalized string blurb for "list --servicelevels"
    (alikins@redhat.com)
  - 820042: update translations from zanata (alikins@redhat.com)
  - 819808: Fix untranslated string "No service levels..." (alikins@redhat.com)
  - 820040,820037,820030: don't break multibyte help blurbs (alikins@redhat.com)
  - 819828: Add translated strings for missing translations (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.19-1
changelog:
  - 824100: fix pt_BR translations, and update zanata (alikins@redhat.com)
  - 822057: do not hard-code cdn to port 443 (cduryee@redhat.com)
  - 820743: fix translation errors for "service-level" command
    (alikins@redhat.com)


author: Chris Duryee (beav) <cduryee@redhat.com>
changelog:
  - rev version so next will be 0.99.19.1 (cduryee@redhat.com)
  - 818383: display better messages for yum plugin usage (cduryee@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.19.4-1
changelog:
  - 827035: update identity certificate when updated on server
    (jmrodri@gmail.com)
  - 824530: add test case for setting proxy cli for release (alikins@redhat.com)
  - 824530: "release" command ignoring cli proxy options (alikins@redhat.com)


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.3.2.el6]
changelog:
  - [md] dm-thin: fix pool_io_hints to avoid looking at max_hw_sectors (Mike Snitzer) [1161420 1161421 1142773 1145230]


author: Akemi Yagi <toracat@centos.org> [2.6.32-504.3.3.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, all serial ATA, Adaptec I2O,
    ARPD, BusLogic, IPX, Appletalk, ReiserFS, JFS, TOMOYO
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added sysfs-fix-printk-warnings-bug6157.patch [bug#6157]
  - Added fs-tmpfs-add-xattrs-support.patch [bug#4586.18700]
  - Added fix-fadvise-for-tmpfs.patch [bug#6938]
  - DEBUG_KMEMLEAK enabled in config [bug#7055]
  - Added support for Kontron  [bug#7270]
  - Added a patch to fix a regression for ehci iso scheduler [bug#7815]
  - Added a patch to fix [bug#7051]
  - Added a patch to fix [bug#7538]
  - Added a patch to fix [bug#7882]
  - Disable BRIDGE_IGMP_SNOOPING [bug#7796]


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-74
changelog:
  - fsck.gfs2: replace recent i_goal fixes with simple logic
    Resolves: rhbz#1238754
  - fsck.gfs2: Change duptree structure to have generic flags
  - fsck.gfs2: Detect, fix and clone duplicate block refs within a dinode
    Resolves: rhbz#1206149


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-75
changelog:
  - fenced: Delay killing a node if there's a stateful merge after a short outage
    Resolves: rhbz#1077890
  - cman_tool: Don't segfault if /dev/zero doesn't exist
    Resolves: rhbz#1171241
  - cman: Improve node-name matching algorithm
    Resolves: rhbz#1193169
  - cman: Delete temp file if ccs_validation fails
    Resolves: rhbz#1206188
  - dlm_controld: reconnect uevent socket on error
    Resolves: rhbz#1221815
  - gfs_controld: reconnect uevent socket on error
    Resolves: rhbz#1225583
  - groupd: Show more than 128 mount groups or lockspaces
    Resolves: rhbz#1243944
  - qdiskd: fix memory leak in unaligned write path
    Resolves: rhbz#1245232
  - qdiskd: fix memory copy in unaligned write path
    Resolves: rhbz#1245232
  - qdiskd: Watch for other nodes leaving during a master re-election
    Resolves: rhbz#1257732


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-75
changelog:
  - libfence: Remove fencedevice params from fence_node -S so that asking for
    status does not shut down a node if action= is set
    Resolves: rhbz#1252991
  - schema: add RRP attributes for <token> section
    Resolves: rhbz#1221728


author: Rafael Aquini <aquini@redhat.com> [2.6.32-423.el6]
changelog:
  - [kvm] pmu: add proper support for fixed counter 2 (Gleb Natapov) [1000956]
  - [kvm] vmx: do not check bit 12 of EPT violation exit qualification when undefined (Gleb Natapov) [1006139]
  - [kvm] vmx: set "blocked by NMI" flag if EPT violation happens during IRET from NMI (Gleb Natapov) [1006139]
  - [edac] Fix workqueue-related crashes (Aristeu Rozanski) [831127]
  - [edac] amd64_edac: Fix driver module removal (Aristeu Rozanski) [831127]
  - [md] raid5: BIO flags adjust (Jes Sorensen) [837097]
  - [md] Fix skipping recovery for read-only arrays (Jes Sorensen) [1014102]
  - [kernel] audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_names record (Richard Guy Briggs) [1009386]
  - [kernel] audit: log the audit_names record type (Richard Guy Briggs) [1009386]
  - [kernel] audit: add child record before the create to handle case where create fails (Richard Guy Briggs) [1009386]
  - [kernel] audit: format user messages to size of MAX_AUDIT_MESSAGE_LENGTH (Richard Guy Briggs) [1007069]
  - [netdrv] tg3: Expand led off fix to include 5720 (Ivan Vecera) [991498]
  - [netdrv] tg3: Don't turn off led on 5719 serdes port 0 (Ivan Vecera) [991498]
  - [netdrv] tg3: Fix UDP fragments treated as RMCP (Ivan Vecera) [991498]
  - [netdrv] tg3: Remove incorrect switch to aux power (Ivan Vecera) [991498]
  - [i2c] ismt: initialize DMA buffer (Neil Horman) [1014753]
  - [scsi] libfcoe: Make fcoe_sysfs optional / fix fnic NULL exception (Neil Horman) [1014864]
  - [fs] gfs2: Fix race in iteration of glocks for unfreeze/umount (Abhijith Das) [999909]
  - [fs] gfs2: dirty inode correctly in gfs2_write_end (Benjamin Marzinski) [991596]
  - [x86] Mark Intel Atom Avoton processor as supported (Prarit Bhargava) [914842]
  - [mm] vmscan: fix zone shrinking exit when scan work is done (David Gibson) [985155]
  - [block] free bios when failing blk_execute_rq_nowait calls (Jeff Moyer) [1009312]
  - [netdrv] be2net: fix disabling TX in be_close() (Ivan Vecera) [951271]
  - [crypto] Fix race condition in larval lookup (Herbert Xu) [916361]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-424.el6]
changelog:
  - [block] loop: fix crash when using unassigned loop device (Mike Snitzer) [989795]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1014867]
  - [x86] microcode: Fix patch level reporting for AMD family 15h (Prarit Bhargava) [1014401]
  - [hda] alsa: enable switcheroo code in the snd-hda-intel driver (Jaroslav Kysela) [1013993]
  - [x86] reboot: Fix a warning message triggered by stop_other_cpus() (Jerome Marchand) [840710]
  - [kernel] async: Bump up the MAX_THREADS count for the async subsystem (Neil Horman) [1010666]
  - [pci] Calculate right add_size (Myron Stowe) [997672]
  - [netdrv] iwlwifi: pcie: add SKUs for 6000, 6005 and 6235 series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: pcie: add new SKUs for 7000 & 3160 NIC series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: enable shadow registers for 7000 (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: add new 7260 and 3160 series device IDs (Stanislaw Gruszka) [1013951]
  - [netdrv] be2net: pass if_id for v1 and V2 versions of TX_CREATE cmd (Ivan Vecera) [1014360]
  - [netdrv] be2net: call ENABLE_VF cmd for Skyhawk-R too (Ivan Vecera) [1014360]
  - [netdrv] be2net: Fix to prevent Tx stall on SH-R when packet size < 32 (Ivan Vecera) [1014360]
  - [scsi] pm8001: Queue rotation logic for inbound and outbound queues (Rich Bono) [1013771]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.4p driver release (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock hang (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock inversion problem (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed inconsistent spin lock useage (Rob Evers) [1004841]
  - [scsi] qla2xxx: Update version number to 8.05.00.03.06.5-k2 (Chad Dupuis) [912652]
  - [scsi] qla2xxx: Fix request queue null dereference (Chad Dupuis) [912652]
  - [net] tcp: TSQ can use a dynamic limit (Jiri Pirko) [996802]
  - [net] tcp: TSO packets automatic sizing (Jiri Pirko) [996802]
  - [net] tcp: Apply device TSO segment limit earlier (Jiri Pirko) [996802]
  - [net] Allow driver to limit number of GSO segments per skb (Jiri Pirko) [996802]
  - [net] cleanups in RX queue allocation (Ivan Vecera) [1012388]
  - [net] Update kernel-doc for netif_set_real_num_rx_queues() (Ivan Vecera) [1012388]
  - [net] netif_set_real_num_rx_queues may cap num_rx_queues at init time (Ivan Vecera) [1012388]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-425.el6]
changelog:
  - [md] dm-snapshot: fix data corruption (Mikulas Patocka) [974481] {CVE-2013-4299}
  - [watchdog] iTCO_wdt: add platform driver module alias (Neil Horman) [1019497]
  - [hda] alsa: disable 44.1kHz rate for Haswell HDMI/DP audio (Jaroslav Kysela) [831970]
  - [x86] Update UV3 hub revision ID (George Beshers) [1018962]
  - [fs] xfs: Don't reference the EFI after it is freed (Eric Sandeen) [1018469]
  - [security] keys: Fix a race between negating a key and reading the error set (Dave Wysochanski) [890231]
  - [fs] nfsv4: Ensure memory ordering between nfs4_ds_connect and nfs4_fl_prepare_ds (Jeff Layton) [1012439]
  - [fs] nfsv4: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails (Jeff Layton) [1012439]
  - [md] Disable TRIM on RAID5 for RHEL 6.5 (Jes Sorensen) [837097]
  - [md] raid5: BIO_RW_SYNCIO is a bit number, not a bitmask (Jes Sorensen) [837097]
  - [virt] hyperv: framebuffer pci stub (Gerd Hoffmann) [1013335]
  - [netdrv] bnx2x: add missing enum channel_tlvs definitions (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: KR2 disablement fix (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Specific Active-DAC is not detected on 57810 (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Generalize KR work-around (Michal Schmidt) [1015137]
  - [usb] usbnet: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [usb] cdc_ether: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [mm] Revert "Find_early_table_space based on ranges that are actually being mapped" (Rafael Aquini)
  - [mm] Revert "Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping" (Rafael Aquini)
  - [mm] Revert "Group e820 entries together and add map_individual_e820 boot option" (Rafael Aquini)
  - [net] bridge: update mdb expiration timer upon reports (Vlad Yasevich) [1013816]
  - [net] veth: Remove NETIF_F_HW_VLAN_RX capability (Thomas Graf) [1018158]
  - [net] gre/vxlan: handle 802.1Q inner header properly (Thomas Graf) [997632]
  - [net] disable the new NAPI weight error message for RHEL 6.5 (Michal Schmidt) [1012090]
  - [scsi] sd: Fix parsing of 'temporary ' cache mode prefix (Ewan Milne) [955441]
  - [scsi] sd: fix array cache flushing bug causing performance problems (Ewan Milne) [955441]
  - [scsi] bfa: firmware update to 3.2.1.1 (Rob Evers) [1002770]
  - [netdrv] bna: firmware update to 3.2.1.1 (Ivan Vecera) [1002771]


author: Akemi Yagi <toracat@centos.org> [2.6.32-431.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, all serial ATA, Adaptec I2O,
    ARPD, BusLogic, IPX, Appletalk, ReiserFS, JFS, TOMOYO
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added sysfs-fix-printk-warnings-bug6157.patch [bug#6157]
  - Added correct-tty-buffer-flush-bug6104.patch [bug#6104]
  - Added a fix for virtio_net underestimation [bug#5526]
  - Added revert-improve-queue_should_plug-bug6548.patch [bug#6548]


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-15
changelog:
  - fix the kbase searching rhbz#743198
  - updated translation Related: #731037
  - Resolves: #743198 #731037


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-25
changelog:
  - Fix bz733084 (Cleared options are not saved correctly in Virtual Machine services)
  - Additional fixes for bz522005


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-28
changelog:
  - Make sure cluster permission database objects are created properly
    after a cluster is destroyed, then recreated.


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-29
changelog:
  - Add a note about the implications of creating, deleting, and editing
    service groups on the admin page.


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-30
changelog:
  - Additional fix for bz639121 (Lightbox dialog state is not reset when the dialog is closed)
  - Additional fix for bz718355 (Logging feature in Luci not working as expected)
  - Additional fix for bz599074 ("Use same password for all nodes" doesn't work.)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-31
changelog:
  - Additional fix for bz705884 (luci chokes on working cluster.conf line)
  - Fix to mitigate SELinux issues (bz737635)


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-13
changelog:
  - rgmanager: Fix a crash when dbus notifications are
    Resolves: rhbz#825375
  - rgmanager: Fix for deadlock
    Resolves: rhbz#861157


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-15
changelog:
  - rgmanager: Randomize node list when relocating with no
    Resolves: rhbz#831648
  - rgmanager: Fix return code when a service would deadlock
    Resolves: rhbz#861157


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.2
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.4
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Set install directories in configure so that @prefix@ is substituted correctly in tapset
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Require a JDK with RH1334465/PR2956 fixed and turn off bootstrapping for Zero architectures.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: Ray Strode <rstrode@redhat.com> - 2.14.17-7
changelog:
  - Move linc-cleanup-sockets to main package, so users
    don't need to install ORBit2-devel to get fix for #1258459
    Resolves: #1499272
    Related: 1258459


author: Marek Kasik <mkasik@redhat.com> - 2.24.1-2
changelog:
  - Import gdk-pixbuf2 package from F16
  - Disable introspection
  - Add update-gdk-pixbuf-loaders
  - Resolves: #1103734


author: Akemi Yagi <toracat@centos.org> [2.6.32-279.19.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client, EeePC hotkey, JFS
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - As of 2.6.32-131.12.1.el6, parallel printer support is enabled in distro kernel.
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix for the 208.5-days-and-the-system-reboots issue [bug#5397]
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Enabled ARPD [bug#5709]
  - Added a patch for PCIe PME issue [bug#5383]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added patch fix-ptrace-getventmsg-pid-in-lxc-bug5424 [bug#5424]
  - Added a patch for fsync() tid wraparound bug [bug#5955]
  - Added patches to fix e1000e-related network crash [bug#6018]
  - [Re]enabled ARPD [bug#5709]


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-13
changelog:
  - added new options to configure retransmissions on lan/lanplus interfaces
    (#748073)
  - updated dellem command (#739358)
  - fixed exit code of ipmitool -o list (#715615)
  - improved checking of command line arguments (#725993)


author: Adam Tkac <atkac redhat com> 32:9.7.3-1
changelog:
  - update to 9.7.3 (CVE-2011-0414)
  - patches merged
    - bind97-gsstsig.patch
    - bind97-rh664401.patch
    - bind97-rh623638.patch


author: Adam Tkac <atkac redhat com> 32:9.7.3-6.P3
changelog:
  - load/unload dyndb plugins on appropriate places to avoid crashes (#725577)
  - nsupdate could have failed if server has multiple IPs and the first
    was unreachable (#714049)
  - nsupdate returned zero when target zone didn't exist (#700097)
  - readd configtest target to initscript
  - print "the working directory is not writable" as debug message
  - fix some Coverity warnings


author: Adam Tkac <atkac redhat com> 32:9.7.3-8.P3.1
changelog:
  - fix race condition in resolver.c:validated()
  - improve error handling in zone.c:zone_refreshkeys() to avoid
    hang during shutdown


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-38
changelog:
  - Release 1.2.11.15-38
  - Resolves: bug 1080185 - revert - Creating a glue fails if one above level is a conflict or missing (DS 47750;Patch233)


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.2.el6]
changelog:
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.158
changelog:
  - Enhance nscd to detect any configuration file changes (#859965).
  - Fix __times() handling of EFAULT when buf is NULL (#1124204).
  - Fix memory leak with dlopen() and thread-local storage variables (#978098).
  - Prevent getaddrinfo from writing DNS queries to random fd (CVE-2013-7423,
    - Implement userspace half of in6.h header coordination (#1053178).
  - Correctely size relocation cache used by profiler (#1144132).
  - Fix reuse of cached stack leading to bounds overrun of DTV (#1116050).


author: Milan Crha <mcrha@redhat.com> - 2.28.3-13.el6
changelog:
  - Add patch for RH bug #634949 (crash with google address book)
  - Add patch for RH bug #660356 (crash with calendar views and webcal)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.494.el6
changelog:
  - kvm-rtl8139-flush-queued-packets-when-RxBufPtr-is-writte.patch [bz#1356924]
  - kvm-block-Detect-unaligned-length-in-bdrv_qiov_is_aligne.patch [bz#1321862]
  - kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1281713]
  - kvm-atapi-fix-halted-DMA-reset.patch [bz#1281713]
  - Resolves: bz#1281713
    (system_reset should clear pending request for error (IDE))
  - Resolves: bz#1321862
    (Backport 'block: Detect unaligned length in bdrv_qiov_is_aligned()')
  - Resolves: bz#1356924
    (rtl8139 driver hangs in widows guests)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.495.el6
changelog:
  - kvm-qemu-img-add-support-for-fully-allocated-images.patch [bz#1297653]
  - kvm-qemu-img-fix-usage-instruction-for-qemu-img-convert.patch [bz#1297653]
  - kvm-target-i386-warns-users-when-CPU-threads-1-for-non-I.patch [bz#1292678 bz#1320066]
  - Resolves: bz#1292678
    (Qemu should report error when cmdline set threads=2 in amd host)
  - Resolves: bz#1297653
    ("qemu-img convert" can't  create a fully allocated image passed a "-S 0" option)
  - Resolves: bz#1320066
    (Qemu should not report error when cmdline set threads=2 in Intel host)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.496.el6
changelog:
  - kvm-virtio-blk-Release-s-rq-queue-at-system_reset.patch [bz#1361490]
  - kvm-virtio-scsi-Prevent-assertion-on-missed-events.patch [bz#1333697]
  - Resolves: bz#1333697
    (qemu-kvm: /builddir/build/BUILD/qemu-kvm-0.12.1.2/hw/virtio-scsi.c:724: virtio_scsi_push_event: Assertion `event == 0' failed)
  - Resolves: bz#1361490
    (system_reset should clear pending request for error (virtio-blk))


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.497.el6
changelog:
  - kvm-vmstate-fix-breakage-by-7e72abc382b700a72549e8147bde.patch [bz#1294941]
  - Resolves: bz#1294941
    (QEMU crash on snapshot revert when using Cirrus)


author: Jeff Law <law@redhat.com> - 4.5.19-1.12
changelog:
  - Fix semtimedop decoding for S390/S390x (#759569)
  - Use PTRACE_SETOPTIONS to set behaviour of ptrace at fork/vfork/clone
    syscalls rather than buggy magic breakpoint methods (#837183).


author: Jeff Law <law@redhat.com> - 4.5.19-1.13
changelog:
  - build strace32 on ppc and s390 which can be installed alongside
    strace/strace64 on ppc64 and s390x (#809917)


author: Jeff Law <law@redhat.com> - 4.5.19-1.18
changelog:
  - Fix output string for getsockopt (#862321)
  - Handle MADV_DONTDUMP and MADV_DODUMP (#921548)
  - Do not segfault when sorting by name and name is NULL (# 1044605)


author: Tim Waugh <twaugh@redhat.com> 0.0.3-1
changelog:
  - 0.0.3:
    - Allow multiple services to be defined in a single configuration
      file.
    - Allow protocol specifications, e.g. ipp/udp.


author: Ivana Varekova <varekova@redhat.com> - 2.31-4
changelog:
  - fix "zip does not honor umask setting when creating archives"
  - fix "zip segfaults by attempt to archive big file"
  - spec file cleanup


author: Karel Klic <kklic@redhat.com> - 3.0-1
changelog:
  - New upstream version
  - Removed zip23.patch, because ZMEM is not used anyway
  - Removed zip-2.31-install.patch, problem solved in upstream
  - Removed zip23-umask.patch, upstream uses mkstemp which solves the problem
  - Removed zip-2.31-near-4GB.patch, because upstream version 
    handles large files well
  - Removed zip-2.31-configure.patch, configure is better in the current version
  - Removed zip-2.3-sf.patch, the error message doesn't exist in upstream anymore
  - Removed zip-2.31-umask_mode.patch, which fixes also removed near-4GB patch
  - Updated zip-2.31-time.patch for zip 3.0
  - Updated exec-shield.patch for zip 3.0
  - Updated zip-2.3-currdir.patch for zip 3.0


author: Marek Grac <mgrac@redhat.com> - 3.1.5-9
changelog:
  - fence_ipmilan exposes user password on verbose mod
    Resolves: rhbz#732372
  - fence_ipmilan should honor ipmilan's -L option (privileges)
    Resolves: rhbz#726571


author: Marek Grac <mgrac@redhat.com> - 3.1.5-10
changelog:
  - fence_kdump: Newly detected Coverity defect (null dereference)
    Resolves: rhbz#734429
  - fence_scsi: fix scsi unfencing to allow simultaneous unfences
    Resolves: rhbz#738384


author: Marek Grac <mgrac@redhat.com> - 3.1.5-11
changelog:
  - fence_ipmilan: Parsing args for password script
    Resolves: rhbz#740484
  - fence_rsb: Porting RSB fence agent to fencing library (ssh support added)
    Resolves: rhbz#742003
  - fence_rhevm: Incorrect power status detection
    Resolves: rhbz#769681
  - fence_vmware_soap: Support for alias names as ports
    Resolves: rhbz#771211
  - fence_ipmilan: Possible buffer overflow
    Resolves: rhbz#771936
  - fence_vmware_soap: Support for more than 100 virtual machines
    Resolves: rhbz#772597


author: Marek Grac <mgrac@redhat.com> - 3.1.5-12
changelog:
  - fence_ipmilan: doesn't respect power_wait option for power off
    Resolves: rhbz#787706
  - fencing: Missing password is not reported properly
    Resolves: rhbz#785091
  - fencing: fence_<agent> metadata behaviour and docs 
    Resolves: rhbz#714841


author: Marek Grac <mgrac@redhat.com> - 3.1.5-16
changelog:
  - fence agents: attribute unique in XML metadata should be set 0
    Resolves: rhbz#806883
  - fence_ipmilan: Typo
    Resolves: rhbz#806912
  - fence_ipmilan: Return code can be invalid with -M cycle
    Resolves: rhbz#806897


author: Jeff Layton <jlayton@redhat.com> 4.8.1-3
changelog:
  - mount.cifs: reacquire CAP_DAC_READ_SEARCH before calling mount (bz 676439)
  - manpage: document missing mount.cifs options (bz 719363)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-7
changelog:
  - RFE: Improve selection of SPNs with cifs.upcall (bz 748757)
  - mount.cifs does not use KRB5_CONFIG (bz 748756)
  - mount -o remount <cifs> creates additional entries in /etc/mtab (bz 770004)
  - mount.cifs does not honor the uid/gid=username option, only the uid/gid=# option (bz 796463)


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.49.1.11.5
changelog:
  - Updated to IcedTea6 1.11.5
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.51.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.53.1.11.6
changelog:
  - added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.54.1.11.6
changelog:
  - removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch8:   7201064.patch to be reverted
  - added patch9:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.55.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but working
  - Resolves: rhbz#911524


author: Daniel P. Berrange <berrange@redhat.com> - 0.9.10-3
changelog:
  - Fix migration speed units (rhbz #800766)
  - Fix typed param string handling (rhbz #800734)
  - Fixed block stats ref counting


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-1
changelog:
  - Update to 0.10.2 release (rhbz #836955)
  - Fix passing flags with schedular parameters (rhbz #848309)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-4
changelog:
  - Fix mistakes in POD docs (rhbz #869130)
  - Fix updating of node memory params (rhbz #865310)
  - Make flags parameters optional (rhbz #873203)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-5
changelog:
  - Fix module type in list_all_nwfilters (rhbz #883775)
  - Fix POD doc errors in StoragePool module (rhbz #882829)
  - Fix return value checks (rhbz #886028)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-6
changelog:
  - Fix handling of flags in get_vcpu_info (rhbz #905836)
  - Fix handling of get_parent with NodeDev object (rhbz #908274)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-17
changelog:
  - fix race condition when creating INBOX (#1184865)
  - close stderr if it's not used for logging (#730746)
  - login proxy should not fail connection if CRL isn't found for some certificate (#813957)
  - fix crash in list-status (#961466)
  - installation of dovecot hangs if there is no /dev/urandom (#1026790)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-22
changelog:
  - allow larger DH parameters length(#1230258)
  - don't check client PID in non-login auth sockets (#1281670)
  - messages containing a CP932 character were not shown in a search result (#1275233)


author: Martin Osvald <mosvald@rehat.com> - 2.2.2-14
changelog:
  - Resolves: #1092877 - The vsftpd hangs in a SIGCHLD handler when the pam_exec.so is used in pam.d configuration


author: Martin Osvald <mosvald@rehat.com> - 2.2.2-15
changelog:
  - Resolves: #816486 - Timestamp problem
  - Resolves: #849993 - deny_file, hide_file
  - Resolves: #863061 - "service vsftpd stop" not stopping all vsftpd processes
  - Resolves: #894340 - The vsftpd doesn't remove failed upload when the delete_failed_uploads
    is enabled and the network cable is unplagged
  - Resolves: #1058695 - [RFE] vsftpd does not support DHE cipher suites
  - Resolves: #1058710 - [RFE] vsftpd does not support ECDHE cipher suites
  - Resolves: #1065361 - closing a non-opened file when connection fails with a message "Security: Bad IP connecting." 
  - Resolves: #1103754 - ssl_request_cert paragraph in the vsftpd.conf man page gets rendered incorrectly
  - Resolves: #1182928 - [RFE] vsftpd should permit specified TLS versions only.


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-29
changelog:
  - luci: Fix the interaction of the force_unmount and nfsrestart checkboxes
    Resolves: rhbz#822502
  - luci: Error out if max_restarts is set but not restart_expire_time is not
    luci: Fix handling of subtree options
    Resolves: rhbz#877188
  - luci: Fix value for LVM self_fence
    Resolves: rhbz#877392
  - Remove trailing commas that cause problems for some old
    Resolves: rhbz#881796
  - luci: Audit of resource agent checkbox input
    Resolves: rhbz#881955


author: John Ruemker <jruemker@redhat.com> - 0.26.0-36
changelog:
  - Correctly display the 'type' attribute value when editing an oracledb resource
    Resolves: rhbz#886678


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-37.1
changelog:
  - Add support for fence device attributes
    Resolves: rhbz#969328
  - Add support for missing fence devices
    Resolves: rhbz#996423


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915693 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915693 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915693 - CVE-2013-1667 (DoS in rehashing code)


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-132
changelog:
  - Resolves: #767608 - Fix memory leak when accessing non-matched named
    capturing groups
  - Resolves: #839788 - Do not crash if declared DESTROY method has not been
    defined


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-133
changelog:
  - Resolves: #698552 - Correct taintedness tests
  - Resolves: #825713 - Fix find2perl to translate ? glob properly
  - Resolves: #810469 - Upgrade IO-Compress, Compress-Raw-Bzip2, and
    Compress-Raw-Zlib to 2.021
  - Resolves: #819042 - Set default output for Pod::Man and Pod::Text
    parse_file() methods
  - Resolves: #905482 - Require glibc-devel, gdbm-devel, db4-devel by perl-devel


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-134
changelog:
  - Resolves: #973022 - Make non-option handler for Getopt::Long::GetOptions()
    compatible with XML::Simple


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48.1
changelog:
  - fix CVE-2016-2105 - possible overflow in base64 encoding
  - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
  - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
  - fix CVE-2016-0799 - memory issues in BIO_printf


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48.3
changelog:
  - fix CVE-2016-2177 - possible integer overflow
  - fix CVE-2016-2178 - non-constant time DSA operations
  - fix CVE-2016-2179 - further DoS issues in DTLS
  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
  - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
  - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
  - fix CVE-2016-6304 - unbound memory growth with OCSP status request
  - fix CVE-2016-6306 - certificate message OOB reads
  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
    112 bit effective strength
  - replace expired testing certificates


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48.4
changelog:
  - fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
  - fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13
changelog:
  - Omit jsa files from power64 file list as well, as they are never generated
  - Use the template interpreter on ppc64le
  - priority set  gcj < lengthOffFour < otherJdks (RH1175457)
  - misusing already fixed bug
  - Resolves: rhbz#1189853


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16
changelog:
  - July 2015 security update to u51b16.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60.
  - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea.
  - Re-generate EC disablement patch following CPU DH changes.
  - Resolves: rhbz#1235161


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16
changelog:
  - another touching attempt to polycies...
  - main links in alternatives moved to versionless format
  - Resolves: rhbz#1254197


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-3.b16
changelog:
  - direcotries aligned to rhel6, jdk7 like style ifarch 64 name.arch else naem
  - moved to rhel7, jdk8 like style of name.arch. Fixes 1259241
  - Resolves: rhbz#1254197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17
changelog:
  - October 2015 security update to u65b17.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Update RH1191652 patch to build against current AArch64 tree.
  - Use appropriate source ID to avoid unpacking both tarballs on AArch64.
  - Fix library removal script so jpeg, giflib and png sources are removed.
  - Update system-lcms.patch to regenerated upstream (8042159) version.
  - Drop LCMS update from rhel6-built.patch
  - Resolves: rhbz#1257654


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.6-3
changelog:
  - drop alternatives, use app-wrapper instead (borrowed from opensuse)
  - -qt4 experimental subpkg, -qt includes qt3 version again  (#523488)


author: Brian C. Lane <bcl@redhat.com> 2.1-21
changelog:
  - Raise size limit on loop devices
    Resolves: #869743
  - Remove dm device when last partition is removed
    Resolves: #851705


author: Brian C. Lane <bcl@redhat.com> 2.1-22
changelog:
  - Add PreP GUID support
    Resolves: rhbz#1054283
  - Fix busy partition detection on devices witout sequential minor device numbers
    Resolves: rhbz#1018075
  - Fix align-check in interactive mode
    Resolves: rhbz#975478


author: Brian C. Lane <bcl@redhat.com> 2.1-23
changelog:
  - Drop the warning about greater than 512-byte sector sizes being experimental
    Resolves: rhbz#929319


author: Brian C. Lane <bcl@redhat.com> 2.1-26
changelog:
  - libparted: device mapper uses 512b sectors
    Resolves: rhbz#1189328
  - tests: Add a test for device-mapper partition sizes
    Related: rhbz#1189328
  - tests: Turn on testing of other blocksizes
    Related: rhbz#1189328


author: Brian C. Lane <bcl@redhat.com> 2.1-27
changelog:
  - libparted: fix gpt end of disk handling
    Resolves: rhbz#1180683
  - tests: Add tests for gpt end of disk handling
    Related: rhbz#1180683


author: David Vossel <dvossel@redhat.com> - 1.1.10-15
changelog:
  - Fix: Removes unnecessary newlines in crm_resource -O output
      Resolves: rhbz#1038155
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
      Resolves: rhbz#1046131
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1046131


author: David Vossel <dvossel@redhat.com> - 1.1.10-16
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1078954


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-1
changelog:
  - Update to upstream release 1.1.12-rc3
  - The CIB has O(2) better performance and updates are applied with greater reliablity
  - Transient attributes are now recorded in a truely atomic manner
  - Supports fencing agents that need the host to be unfenced at startup
  - CIB ACLs have been reimplemented and are now enabled 
  - Various bugs squashed

  - Resolves: rhbz#1020210 rhbz#1036631 rhbz#1069279
  - Resolves: rhbz#1069795 rhbz#1071995


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-2
changelog:
  - Bug rhbz#1054307 - cname pattern match should be more restrictive in init script
      Resolves: rhbz#1054307


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-3
changelog:
  - Fix: crmd: avoid double free caused by nested hash table removal
  - Fix: ignore SIGPIPE with gnutls is in use
  - Fix: cib: cl#5222 - Prevent assert in xml_calculate_changes() on performing cib operations
      Resolves: rhbz#1071995


author: David Vossel <dvossel@redhat.com> - 1.1.12-5
changelog:
  - Properly clear shutdown transient attribute after node leaves
    membership.

    Resolves: rhbz#1198638


author: David Vossel <dvossel@redhat.com> - 1.1.12-6
changelog:
  - Fixes invalid free in attrd
  - Fixes crm_mon -E option for external script.
  - Fixes acl read-only access role assignment.

    Resolves: rhbz#1205292
    Resolves: rhbz#1208896
    Resolves: rhbz#1207621


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-7
changelog:
  - Ensure relevant components clear cache entries are cleared when peers leave the cluster

    Resolves: rhbz#1193499


author: David Vossel <dvossel@redhat.com> - 1.1.12-8
changelog:
  - Reduce log severity for style upgrade notice.
   - Properly export pacemaker related sysconfig variables
   - Remove warning during yum update of pacemaker packages.

    Resolves: rhbz#1163982
    Resolves: rhbz#1177821
    Resolves: rhbz#1210291


author: Marek Grac <mgrac@redhat.com> - 3.1.5-7
changelog:
  - fence_rhevm needs to change "UP" status to "up" state 
      as the REST-API has changed
    Resolves: rhbz#731166


author: Marek Grac <mgrac@redhat.com> - 3.1.5-10.1
changelog:
  - fence_rhevm: Incorrect power status detected when VM status is not up/down
    Resolves: rhbz#785816


author: David Vossel <dvossel@redhat.com> - 3.9.2-37
changelog:
  - Fixes lvm metadata corruption caused when activating by lv
    using tags.

    Resolves: rhbz#1009772


author: David Vossel <dvossel@redhat.com> - 3.9.2-38
changelog:
  - Removes usage of fuser -kvm from fs-lib.sh based agents.
    This resolves issue with fuser blocking netfs mounts.
  - tomcat-6.sh, Do not fail on stop if config validation fails.
  - tomcat-6.sh, Set tomcat usr correctly.

    Resolves: rhbz#981717 
    Resolves: rhbz#983273
    Resolves: rhbz#1014298


author: David Vossel <dvossel@redhat.com> - 3.9.2-39
changelog:
  - Fixes issue with mysql agent not being able to set transient
    attributes on local node correctly.

    Resolves: rhbz#989284


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-40.2
changelog:
  - Fix netnfs unmount self_fence integration in netfs.sh
  - Ship send_ua helper binary to allow IPaddr2 to manage IPv6 addresses

    Resolves: rhbz#1027410
    Resolves: rhbz#1027412


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.4
changelog:
  - Med: oracledb.sh: Remove quotes around listener name
  - Add no_unmount functionality back into netfs.sh agent
  - Use crm_node instead of uname -n when referencing cluster nodes.
  - Adds Delay agent back into package.
  - Drops nginx rsyslog mysql-proxy tomcat and slapd agents.

    Resolves: rhbz#1031789
    Resolves: rhbz#1031791
    Resolves: rhbz#1031940
    Resolves: rhbz#1032778
    Resolves: rhbz#1032777


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.5
changelog:
  - High: fs-lib.sh: Fixes failure to unmount local fs
    when process runs with cwd inside fs mount.

    Resolves: rhbz#1051185


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-2
changelog:
  - Revert the version not to be rebased.
  - Fix bug 608988 - Cannot de-select Hanja lock in applet menu
    Resolves: #608988


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-4
changelog:
  - Resolves: #651915 Wrong window position with ibus-x11
    Added ibus-651915-x11-position.patch
  - Resolves: #633330 Fixed kn.po
  - Resolves: #635541 Fixed gu.po
    Added ibus-1.3.4-po-2010-11-17.tar.bz2


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-6
changelog:
  - Fixed Bug 667031 - ibus requires dbus-x11
  - Fixed Bug 670137 - QT_IM_MODULE=xim in ibus.conf without ibus-qt


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0-1
changelog:
  - build a split-out krb5-appl package by pruning out all of the non-appl
    parts and resetting the versioning to match the upstream version for the
    newly-split package


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0-3
changelog:
  - when checking for pty-handling functions, do so with the benefit of the
    libutil library we think might include them (#595411)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2
changelog:
  - krshd: don't limit user names to 16 chars when utmp can handle names
    at least a bit longer than that (#632442, RT#6773)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2.1
changelog:
  - ftpd: add candidate patch to detect setegid/setregid/setresgid and check
    for errors when calling them (MITKRB5-SA-2011-005, CVE-2011-1526, #713342)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-3
changelog:
  - drop calls to pam_selinux from the gssftp PAM configuration (#713459)
  - reference password-auth instead of system-auth in the gssftp and kshell
    PAM configurations


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-4
changelog:
  - increase the size of the ftp client's command line input buffer (#665834)
  - incorporate patch to correct parsing errors with "restrict" lines in
    ftpusers (#713521, RT#6889)


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-2
changelog:
  - Remove two unused patches and apply a needed one that was missed
  - Resolves: Bug 1112136 - Rebase nss in RHEL 6.5.Z to NSS 3.16.1


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-7
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1145431 - CVE-2014-1568


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.157
changelog:
  - Return failure in getnetgrent only when all netgroups have been searched
    (#1085312).
  - Fix valgrind warning in nscd_stats (#1091915).


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.41.1.11.1
changelog:
  - Resolves: rhbz#771971
  - Updated to IcedTea6 1.11.1
  - Security fixes:
    - S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object
    - S7082299, CVE-2011-3571: AtomicReferenceArray insufficient array type check
    - S7110687, CVE-2012-0503: Unrestricted use of TimeZone.setDefault
    - S7110700, CVE-2012-0505: Incomplete info in the deserialization exception
    - S7110683, CVE-2012-0502: KeyboardFocusManager focus stealing
    - S7088367, CVE-2011-3563: JavaSound incorrect bounds check
    - S7126960, CVE-2011-5035: Add property to limit number of request headers to the HTTP Server
    - S7118283, CVE-2012-0501: Off-by-one bug in ZIP reading code
    - S7110704, CVE-2012-0506: CORBA fix


author: Mark Wielaard <mjw@redhat.com> - 1:1.6.0.0-1.42.1.11.1
changelog:
  - Resolves: rhbz#804632
  - Added patch7 java-1.6.0-openjdk-jstack.patch based on upstream patches:
    http://thread.gmane.org/gmane.comp.java.openjdk.distro-packaging.devel/17667


author: Petr Machata <pmachata@redhat.com> - 1:3.81-12
changelog:
  - Fix the rlimit patch.  The success flag is kept in memory shared
    with parent process after vfork, and so cannot be reset.
  - Related: #214033


author: Petr Machata <pmachata@redhat.com> - 1:3.81-20
changelog:
  - Add a patch for use-after-free when eval in variable assignments
    reassigns the same variable
  - Resolves: #699911


author: Adam Jackson <ajax@redhat.com> 1.2.0-5
changelog:
  - cirrus-1.2.0-qemu.patch: Detect qemu virtual video when we can, and default
    to 1024x768 in that case. (#251264)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.40-1
changelog:
  - Version bump to 0.40. (Red Hat Bugzilla #466359)
  - Add patch from upstream to fix crash in icalvalue.c.
  - Update makefile patch, remove the test part (already applied).
  - Package libical.pc, add Requires: pkgconfig to -devel.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.41-2
changelog:
  - Switched off ICAL_ERRORS_ARE_FATAL for all distributions, except Fedora 11.
    (Red Hat Bugzilla #478331)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.43-1
changelog:
  - Version bump to 0.43.
  - Added patch to fix implicit pointer conversion from Debian. (Debian BTS
    - Upstream has switched off ICAL_ERRORS_ARE_FATAL by default. This behaviour
    is being retained across all distributions, including Fedora 11.
  - Added 'Requires: tzdata'.
  - Enabled backtrace dumps in the syslog.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.43-4
changelog:
  - Updated patch to fix #includes in the headers to work with
    'pkg-config --cflags libical'. (Red Hat Bugzilla #484091)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.8-3.2
changelog:
  - Move _tdb_text.py to python-tdb subpackage
  - Resolves: rhbz#1329664 - tdb mispackaged tdb_text.py file


author: Jeff Layton <jlayton@redhat.com> 4.4-5.el6.0.1
changelog:
  - cifs.upcall: set GSSAPI checksum in SPNEGO blobs (bz 668366)
  - cifs.upcall: fix '-l' option (bz 668366)


author: Ville Skyttä <ville.skytta@iki.fi> - 1.6.6-5
changelog:
  - Include svn2cl and its man page only in the -svn2cl subpackage (#558598).
  - Do not include bash completion in docs, it's installed.


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-1
changelog:
  - iceauth 1.0.4
  - rgb 1.0.4
  - xhost 1.0.4
  - xmodmap 1.0.5
  - xrandr 1.3.4
  - xsetroot 1.1.0
  - xstdcmap 1.0.2


author: Yuval Kashtan <ykashtan@redhat.com> - 1.0-4.el5
changelog:
  - limit rpm to x86_64, because it is used only by qspice, to fix
    "stack smashing detected" error on ia64 (513407)


author: Uri Lublin <uril@redhat.com> - 1.0-8.el6
changelog:
  Copy changes done by Tom "spot" Callaway <tcallawa@redhat.com> in Fedora-12:
    - Delete non-free (but freely distributable) snprintf.c under Artistic 1.0
    Copy changes done by Yuval Kashtan <ykashtan@redhat.com> in RHEL-5:
    -   Create a -docs subpackage to resolve a multilib conflict. (502679)
    -   Convert some files from iso-8859-1 to utf8 (makes rpmlint happy).
    -   ExclusiveArch:  x86_64 i386 (513407)
  Related: #549888


author: Uri Lublin <uril@redhat.com> - 1.0-10.el6
changelog:
  Fix rpmlint issues:
      - Added doc files to -devel subpackage
      - Made doc-file api/installdox non-executable
  Related: #555835


author: Uri Lublin <uril@redhat.com> - 1.0-11.el6
changelog:
  Fix review comments:
      - removed installdox from -docs sub-package
      - fixed multi-lib/multi-arch issues
        - renamed log4cpp-config according to arch
  Related: #555835


author: Uri Lublin <uril@redhat.com> - 1.0-12.el6
changelog:
  Fixed multi-lib/multi-arch issues:
      - Remove date from html-footer (doc/html/api/*)
      - Also in preparation of removing -doc subpackage
  Related: #555835


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64
changelog:
  - Add 0167-RHBZ-735459-fix-mpathpersist-fns.patch
    * make reservation_key display correctly in "multipathd show config"
  - Resolves: bz #735459


author: Than Ngo <than@redhat.com> - 4.6.2-15
changelog:
  - Resolves: bz#589165
     fix multiple flaws in webkit
     CVE-2010-0047, CVE-2010-0648, CVE-2010-0656


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.91-2.6.2.1
changelog:
  - Bump to 2.6.2 and u91b00.
  - Drop PR2568/RH1248530 backport now applied upstream.
  - Resolves: rhbz#1271920


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.1
changelog:
  - Bump to 2.6.4 and u95b00.
  - Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
  - Drop 8072932or8074489 patch as applied upstream in u91b01.
  - Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
  - Resolves: rhbz#1295767


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.1
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Remove patches added for RH1183014 which are now upstream in 2.6.5/7u99.
  - Resolves: rhbz#1320657


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.2
changelog:
  - qemu: Add capabilities flags related to SG_IO (rhbz#768469)
  - qemu: Add new disk type='lun' for bus='virtio' (rhbz#768469)
  - network: Don't add iptables rules for externally managed networks (rhbz#769674)
  - schema: Rewrite seclabel rng to match code (rhbz#770958)
  - seclabel: Refactor existing domain_conf usage (rhbz#770958)
  - seclabel: Move seclabel stuff earlier (rhbz#770958)
  - seclabel: Extend XML to allow per-disk label overrides (rhbz#770958)
  - seclabel: Allow a seclabel override on a disk src (rhbz#770958)
  - seclabel: Honor device override in selinux (rhbz#770958)
  - esx: Support vSphere 5.x (rhbz#759061)
  - conf: Introduce optional startupPolicy attribute for cdrom and floppy (rhbz#769853)
  - util: Create virFileAccessibleAs function (rhbz#769853)
  - qemu: Move device alias assigning before command line construction (rhbz#769853)
  - qemu: Implement startupPolicy (rhbz#769853)
  - startupPolicy: Emit event on disk source dropping (rhbz#769853)
  - util: Add virFileAccessibleAs to private symbols (rhbz#769853)
  - qemu: Fix race between async and query jobs (rhbz#770955)
  - Require avahi as an rpm dependancy (rhbz#770957)
  - qemu: Rework handling of shutdown event (rhbz#770959)
  - qemu: Don't release network actual device twice (rhbz#770961)
  - Remove a static limit on max domains in python bindings (rhbz#770966)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.4
changelog:
  - seclabel: Fix regression in libvirtd restart (rhbz#770958)
  - qemu: Add capabilities flags related to SG_IO (rhbz#768469)
  - qemu: Add new disk device='lun' for bus='virtio' & type='block' (rhbz#768469)


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-3
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Use completed patch per code review


author: Elio Maldonado <emaldona@redhat.com> - 3.13.6-1
changelog:
  - Update to NSS_3_13_6_RTM
  - Resolves: rhbz#891663 - Update to 3.13.5 for mozilla 10.0.6
  - Resolves: rhbz#891151 [CVE-2013-0743]


author: Elio Maldonado <emaldona@redhat.com> - 3.13.6-2
changelog:
  - Retagging for rhel-6.3 z-stream
  - Update to NSS_3_13_6_RTM
  - Resolves: rhbz#891663 - Update to 3.13.5 for mozilla 10.0.6
  - Resolves: rhbz#891151 [CVE-2013-0743]


author: Francois Aucamp <faucamp@fedoraproject.org> - 1.31-3
changelog:
  - Added "makefile_libjack" patch to link to libjack
  - Added BuildRequires: jack-audio-connection-kit-devel


author: Francois Aucamp <faucamp@fedoraproject.org> - 1.40.02-1
changelog:
  - Update to version 1.40.02
  - Added patch to compile with GCC and not to link to libstdc++ (not needed)
  - Added manpage (thanks goes to Luke Yelavich from Ubuntu for writing it)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.1-4
changelog:
  - synaptics-1.2.1-man-page-fixes.patch: Update man page to bring it more
    in-line with the real information (#604483)
  - synaptics-1.2.1-force-mode.patch: don't allow any mode but Relative
    (#604485)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.1-1
changelog:
  - synaptics 1.4.1 (#713861)
  - drop patches, all merged upstream
  - Revert coasting enabled by default. This is a behaviour change.
  - Revert two-finger emulation by default. Behaviour change.


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-10
changelog:
  - fix #604686 - pass currently rotated file as argument to
    postrotate/prerotate script in nosharedscripts mode


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-14
changelog:
  - fix #683622 - add support for ACLs
  - fix #736053 - check for brackets order in config file
  - fix #659705, #659713, #659720 - fixed mistakes in man-page


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-33
changelog:
  - SCP: send large files properly with new enough libssh2 (#879592)
  - fix handling of errors returned from libssh2 when sending data (#873789)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-37.el6_5.1
changelog:
  - refresh expired cookie in test172 from upstream test-suite (#1092486)
  - fix a memory leak caused by write after close (#1092479)
  - nss: implement non-blocking SSL handshake (#1092480)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-18
changelog:
  - pam_cracklib: improve documentation (#889233)
  - unbreak authentication if ld.so.preload is not empty
  - correct off by one error in account expiration calculation (#947011)
  - pam_console_apply: do not print error if console.perms.d is empty
  - properly handle all cases where crypt() might return NULL (#1026203)
  - pam_limits: clarify documentation of maxsyslogins limit (#1028490)
  - pam_access: call DNS resolution only when necessary and cache
    results (#1029817)
  - pam_limits: nofile applies to file descriptors not files (#1040664)
  - pam_limits: check whether the utmp login entry is valid (#1054936)
  - correct URLs in spec file (#1071770)
  - pam_userdb: correct the example in man page (#1078779)
  - pam_selinux: canonicalize username for getseuser() (#1083981)
  - pam_access: fix netgroup matching and @user@@netgroup parsing (#740233)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-22
changelog:
  - pam_tally2: added no_lockf_timeout option, do not use it
  - pam_tally2: added debug option
  - pam_tally2: do not create the log file as executable (#1186361)
  - add manpage symlink for environment(5) (#1110258)
  - pam_group: add support for Development/Debug syntax (#1114220)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-23
changelog:
  - pam_succeed_if: properly work with large uids
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - pam_access: check for (group) match first (#1359303)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-14
changelog:
  - fix data corruption in a here-document section of a script at byte 8192 (#786787)
  - restore tty settings after timed out read (#577223)
  - do not create extra process when it's not needed (#781976)
  - fix file descriptor leak (#781498)
  - do not segfault on incorrect oop code (#743840)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-19
changelog:
  - assigning a right justified typedef'd variable to a smaller one
    could corrupt the result (#846678)
  - fix exporting of l/r-justified variable (#846678)


author: Andreas Schwab <schwab@redhat.com> - 2.20.51.0.2-5.21
changelog:
  - Copy over OSABI header (#698005)
  - Don't set OSABI_LINUX in dynamic ifunc-using executable (#689829)
  - Handle non-ASCII in readelf output (#664640)
  - Remove unneeded clearing (#674925)
  - Handle old ABI calls to new ABI code (#701586)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032485 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-43
changelog:
  - Related:  rhbz#721052 - sssd does not handle kerberos server IP change
  -                         Use ares_search instead of ares_query to honor
  -                         search entries in /etc/resolv.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-44
changelog:
  - Resolves: rhbz#700828 - Process /usr/libexec/sssd/sssd_be was killed by
                            signal 11 (SIGSEGV) when ldap_uri is misconfigured
  - Resolves: rhbz#726438 - sssd doesn't honor ldap supportedControls 
  - Resolves: rhbz#726466 - HBAC rule evaluation does not support extended
                            UTF-8 languages
  - Resolves: rhbz#718250 - Remove DENY rules from the HBAC access provider
  - Resolves: rhbz#728267 - When non-posix groups are skipped, initgroups
                            returns random GID
  - Resolves: rhbz#726475 - sssd_pam leaks file descriptors
  - Resolves: rhbz#725868 - Explicitly ignore groups with gidNumber = 0


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-45
changelog:
  - Related:  rhbz#726466 - HBAC rule evaluation does not support extended
                            UTF-8 languages
  - Related:  rhbz#718250 - Remove DENY rules from the HBAC access provider
  - Fixes an issue on big endian platforms


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-46
changelog:
  - Related:  rhbz#728267 - When non-posix groups are skipped, initgroups
                            returns random GID


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-47
changelog:
  - Resolves: rhbz#728961 - Provide a mechanism for vetoing the use of certain
                            shells


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-49
changelog:
  - Resolves: rhbz#732010 - LDAP+GSSAPI needs explicit Kerberos realm
  - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names
  - Resolves: rhbz#733409 - Improve password policy error message
  - Resolves: rhbz#733663 - Authentication fails when there exists an empty
                            hbacsvcgroup
  - Resolves: rhbz#732935 - Add LDAP provider option to set
                            LDAP_OPT_X_SASL_NOCANON
  - Resolves: rhbz#734101 - sssd blocks login of ipa-users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-50
changelog:
  - Resolves: rhbz#736314 - sssd crashes during auth while there exists multiple
                            external hosts along with managed host
  - Resolves: rhbz#732974 - [RFE] Have SSSD cache properly with
    krb5_validate = True and SElinux enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-51
changelog:
  - Resolves: rhbz#737157 - "System error" appears in log during change password
                            operation of a user in openldap server with ppolicy
                            enabled
  - Resolves: rhbz#737172 - "Unknown (private extension) error(21853), (null)"
                            messages are logged during change password operation
                            of a user in openldap server with ppolicy enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-52
changelog:
  - Resolves: rhbz#728343 - SSSD taking 5 minutes to log in
  - Resolves: rhbz#739850 - Coverity defects newly introduced in rhel 6.2


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-13
changelog:
  - If the ssl part is specified for ldap, default to ldaps unless
    otherwise specified in the .conf file


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-14
changelog:
  - Handle PKCS #11 modules when NSS or pam_pkcs11 only specify a partial path
  - Fix coverity issues (found in 7.0 coverity scan)


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.1
changelog:
  - Add support for IBM PowerVM Lx86 Linux/x86 emulator (RHBZ#668857).
  - Move configure into build (not prep).


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.2
changelog:
  - Add support for Microsoft HyperV (RHBZ#670272).
  - Add support for Hitachi Virtage (RHBZ#670530).
  - Add support for EC2 (Xen) instances (RHBZ#671126).  This includes
    backporting the test framework and enabling tests.
  - Add support for IBM Systemz z/VM, LPAR (RHBZ#671132).


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.4
changelog:
  - Various improvements to the wording in the manual page.
    resolves: rhbz#672285
  - Confirm support for Microsoft HyperV and add a regression test.
    resolves: rhbz#670272


author: Richard W.M. Jones <rjones@redhat.com> - 1.11-1.1
changelog:
  - Rebase to virt-what 1.11.
    resolves: rhbz#672211
  - Add patch "IA64 Xen HVM should print 'xen-hvm' not 'xen-domU'" from upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.11-1.2
changelog:
  - Add patch to fix dmidecode detection of Hitachi Virtage
    (thanks Satoru Moriya, Masaki Kimura)
    resolves: rhbz#829427


author: Ian Kent <ikent@redhat.com> - 5.0.5-113
changelog:
  - bz1201195 - autofs: MAPFMT_DEFAULT is not macro in lookup_program.c
    - fix macro usage in lookup_program.c.
  - Resolves: rhbz#1201195


author: Ian Kent <ikent@redhat.com> - 5.0.5-115
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - add dependent patch series.
    - add aditional bug fix patches, including updated error handling on ldap bind fail.
    - add reinit method and change lookup to use reinit instead of reopen for its shared
      libraries.
  - Resolves: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-116
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - fix mistake in the updated error handling on ldap bind fail patch.
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-117
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - fix error handling on ldap bind fail patch again.
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-118
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - fix unbind external mech.
    - fix sasl connection concurrancy problem.
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-119
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - rework sasl connection concurrancy problem patch.
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-120
changelog:
  - bz1161031 - RFE: autofs MAP_HASH_TABLE_SIZE description
    - update map_hash_table_size description.
  - bz1248798 - Request to add a configuration option to force use of the map entry
    hostname for mounts
    - add configuration option to use fqdn in mounts.
  - also update changelog with patches include from other bugs in rev 115 to support
    changes for bug 1243525.
    - fix left mount count return from umount_multi_triggers() (1227496).
    - fix return handling in sss lookup module (1227496).
    - move query dn calculation from do_bind() to do_connect() (1227496).
    - make do_connect() return a status (1227496).
    - make connect_to_server() return a status (1227496).
    - make find_dc_server() return a status (1227496).
    - make find_server() return a status (1227496).
    - fix return handling of do_reconnect() in ldap module (1227496).
    - fix race accessing qdn in get_query_dn() (1084254).
    - init qdn before use in get_query_dn() (1084254).
    - fix direct mount stale instance flag reset (1232074).
  - bz1263505 - Heavy program map usage can lead to a hang
    - fix out of order call in program map lookup.
  - bz1238605 - On every system boot automount needs a restart to access NIS map
    - fix lsb service name in init script.
  - bz1097864 - Duplicate mounts created or leftovers in mtab
    - revert special case cifs escapes.
  - bz1203139 - Similar but unrelated NFS exports block proper mounting of
    "parent" mount point
    - remove unused offset handling code.
    - fix mount as you go offset selection.
  - bz1222522 - Parent directory in nested mount gets unmounted while the child
    remains mounted
    - guard against incorrect umount return.
  - bz1233057 - Direct map does not expire if map is initially empty
    - fix direct map expire not set for initail empty map.
  - Resolves: rhbz#1161031 rhbz#1248798 rhbz#1227496 rhbz#1084254 rhbz#1232074
  - Resolves: rhbz#1263505 rhbz#1238605 rhbz#1097864 rhbz#1203139 rhbz#1222522
  - Resolves: rhbz#1233057


author: Ian Kent <ikent@redhat.com> - 5.0.5-121
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - Some Coverity identified fixes for recent changes for this bug.
    - fix memory leak in nisplus lookup_reinit().
    - fix memory leak in ldap do_init().
    - fix use after free in sun parser parse_init().
    - fix use after free in open_lookup().
    - fix typo in autofs_sasl_bind().
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-122
changelog:
  - bz1233057 - Direct map does not expire if map is initially empty
    - don't schedule new alarms after readmap.
  - Related: rhbz#1233057


author: Ian Kent <ikent@redhat.com> - 5.0.5-123
changelog:
  - bz1333777 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - always set direct mounts catatonic at exit.
    - fix error handing in do_mount_indirect().
    - check negative cache much earlier.
    - log pipe read errors.
    - fix handle_mounts() termination condition check.
  - Resolves: rhbz#1333777


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1
changelog:
  - new version 2.3.2 with upstream bug fixes: #1212, #1277, #1473, #1476
  - spec file cleanup
  - make build work with libtool
  - all man pages are utf-8, no need to convert them anymore
  - enabled EditRes support with upstream fix
  - fixed parallel build
  - fixed patches for fuzz 0
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1.1
changelog:
  - fixes according to review:
  - fixed buildroot
  - removed dot from summary
  - removed dist tag from changelog
  - added source download link


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - fixed use after free with comboboxes and XIM (rhbz#866499)
    (MotifZone bug #1559)
  - fixed border at insertion cursor if XmNmarginWidth is set (rhbz#866496)
    (MotifZone bug #1552)
  - fixed copy/paste problem with Clipboard (rhbz#867463)
    (MotifZone bug #1529)


author: - Bastien Nocera <bnocera@redhat.com> - 1.2.0-3
changelog:
  - Make a few functions hidden, to try and avoid textrels
  - Disable optimisations on x86 for the same reason
    (#285961)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2.1-2
changelog:
  - fix building with gcc-4.3 
  - reenable some assembly optimizations
  - hide private libFLAC symbols (#285961)
  - update license tag
  - add %check
  - remove -maltivec from CFLAGS


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2.1-7
changelog:
  - fix buffer overflow when processing ID3v2 metadata (CVE-2014-8962)
  - fix buffer overflow with invalid blocksize (CVE-2014-9028)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-32
changelog:
  - fix: in a login shell "( cmd & )" does nothing (#1217236)
  - multibyte character string after $1-9 was not expanded correctly (#1256495)
  - case in a for loop inside a subshell caused syntax error (#1241013)


author: Siteshwar Vashisht <svashisht@redhat.com> - 20120801-36
changelog:
  - Add configuration option to enable signal bubbling for backward compatibility
    Resolves: #1454804


author: Steve Dickson <steved@redhat.com> 1.2.3-34
changelog:
  - Update the default encryption types in svcgssd (bz 877636)
  - Added the -v 4.1 mount option (bz 877052)


author: Steve Dickson <steved@redhat.com> 1.2.3-35
changelog:
  - Fixed a regession in mountd that cause a localhost mounts to hang (bz 797209)
  - Make sure mount tries all the addresses returned by getaddrinfo (bz 876847)


author: Steve Dickson <steved@redhat.com> 1.2.3-38
changelog:
  - Fixed typo in nfsstat's output (bz 890146)
  - Fixed retrans defaults in nfs(5) man page (bz 952560)
  - Clean rpc.idmapd messages when nfsd starts (bz 892235)
  - Fixed sm-notify to work with localhost (bz 950324)
  - Fixed pNFS stats (bz 962602)
  - Remove no_acl from exports(5) man page (bz 991302)
  - Improve nfsmount.conf configuration parsing (bz 889272)
  - Fixed sm-notify -v (bz 995484)


author: Jeff Law <law@redhat.com> - 2.12-1.78
changelog:
  - Fix option rotate with single IPV6 server (#804630)
    - Fix loading first object along a path when tracing (#808337)
    - Don't free non-malloced memory.  (#809602)


author: Jeff Law <law@redhat.com> - 2.12-1.80.el6_3.3
changelog:
  - Fix incorrect/corrupt patchfile for 833716.  Did not
      affect generated code, but tests were missing (#833716).


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.41
changelog:
  - Allow use sandbox to follow homedirs symlinks
  Resolves:#913175
  - Make sure file equivalance target and source do not end
   with a /
  - Allow make only valid domains as permissive domains
  - Fix polgen.py to allow "_" in a policy file.
  - Implement --noreload option to semanage
  - Add missing long options in sandbox man page


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.42
changelog:
  - Fail properly on invalid options for restorecon/setfiles when using -R or -r
  - Check if all files exist for setfiles and restorecon
  - Remove handling of cgroups from sandbox. 
  Resolves:#1091139
  - Make -q and -d options mutually exclusive


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.43
changelog:
  - Fix semanage man page to contain also noreload option
  Resolves:#1032828
  - Fix sandbox man page
  - Make setfiles more informative if bad option is given


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.46
changelog:
  - Make semanage -i working on empty file
  - Fix setfiles man page
  - Fix setfiles -r option to be working correctly
  Resolves:#1086456


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.47
changelog:
  - Fix setfiles man page
  Resolves:#1086456
  - Fix  semanage fcontext  error message when non-existing context given
  Resolves:#1122023


author: Michal Toman <mtoman@redhat.com> - 3.4.0-1
changelog:
  - rebase to 3.4.0 - #1127907
  - remove ipv6 patch - it is a part of 3.4.0
  - fix "strmsock.cpp:558: accept failed" - #1105679


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.12.1.el6]
changelog:
  - [mm] vmscan: re-introduce the ZONE_RECLAIM_NOSCAN bailout for zone_reclaim() (Rafael Aquini) [1073562 1039534]
  - [mm] vmscan: compaction works against zones, not lruvecs (Johannes Weiner) [1073564 982770]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-431.13.1.el6]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (J. Bruce Fields) [1063201 1042731]
  - [net] sctp: fix sctp_connectx abi for ia32 emulation/compat mode (Daniel Borkmann) [1076242 1053547]


author: Marek Grac <mgrac@redhat.com> - 3.0.15-26
changelog:
  - fence_drac5: fix regression caused by missing detection of EOL
    Resolves: rhbz#905478
  - fence_vmware_soap: fix traceback when hostname cannot be resolved
    Resolves: rhbz#902404


author: Marek Grac <mgrac@redhat.com> - 3.0.15-27
changelog:
  - fence_ipmilan: Fix manual page to mention HP iLO3, iLO4
    Resolves: rhbz#872308
  - fence_cisco_ucs: Respect "delay" option
    Resolves: rhbz#896603
  - fence_scsi: Add "unfence" operation to manual page
    Resolves: rhbz#887349


author: Marek Grac <mgrac@redhat.com> - 3.0.15-28
changelog:
  - fence_scsi: Add delay option
    Resolves: rhbz#912773
  - fence_apc: Add support for firmware 5.x
    Resolves: rhbz#886614


author: Marek Grac <mgrac@redhat.com> - 3.0.15-29
changelog:
  - remove static parts from cluster schema templates
    Resolves: rhbz#917675
  - fence_cisco_ucs: agent did not respect login_timeout
    Resolves: rhbz#978325
  - fence_cisco_ucs: agent fail with traceback when hostname cannot be resolved
    Resolves: rhbz#978326
  - fencing: Validation if password/password_script or identity file is used was not processed
    Resolves: rhbz#959490
  - fence_scsi: support unfence action in pacemaker cluster
    Resolves: rhbz#978328


author: Marek Grac <mgrac@redhat.com> - 3.0.15-33
changelog:
  - fence_scsi: Fix error in XML metadata
    Resolves: rhbz#994186
  - fence_scsi: Add documention of "delay" into manual pages
    Resolves: rhbz#912773
  - fencing: Improve detection of EOL during login
    Resolves: rhbz#886614


author: Marek Grac <mgrac@redhat.com> - 3.0.15-34
changelog:
  - fence_cisco_ucs: Respect login timeout
    Resolves: rhbz#978325
  - fence_bladecenter: Telnet login failure
    Resolves: rhbz#997416


author: Marek Grac <mgrac@redhat.com> - 3.0.15-35
changelog:
  - fence_vmware_soap: Fix symlink vulnerability caused by python-suds temp directory
    Resolves: rhbz#1014000


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-10
changelog:
  - fix: add symlinks for libraries moved in 2.4.23-5 to allow building
    packages which require these libraries in the old location (#678105)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-11
changelog:
  - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success
  - fix: CVE-2011-1025 rootpw is not verified for ndb backend
  - fix: openldap startup script ignores ulimit settings (#679356)
  - fix: add symlinks into /usr/lib*/ (#680139)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-13
changelog:
  - fix update: openldap can't use TLS after a fork() (#671553)
  - fix: possible NULL pointer dereferences in NSS non-blocking patch (#684035)
  - fix: move libldif to /lib for consistency (#548475)
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#685119)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-14
changelog:
  - fix update: openldap startup script ignores ulimit settings (#679356)
  - fix update: openldap-servers upgrade hangs or do not upgrade the database (#685119)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-15
changelog:
  - fix: rpm -V fail when upgrading with openldap-devel installed (#693716)
    (remove devel *.so symlinks from /lib and leave them in /usr/lib)


author: Jan Synáček <jsynacek@redhat.com> - 0.17-52
changelog:
  - Add listening timeout to avoid hanging up when ftp is executed in active mode
    and ftp-data port is blocked (#852636)
  - Plug memleaks in append, put and send commands (#786004)


author: Jan Görig <jgorig@redhat.com> 3.2.8-15
changelog:
  - fix #622389 - The sysctl command's man page doesn't describe the option -A correctly
  - minor changelog fix


author: Jan Görig <jgorig@redhat.com> 3.2.8-17
changelog:
  - fixed bugs in procps-3.2.7-ps-cgroup.patch and procps-3.2.8-pmap-smaps.patch
  - fixed memory leaks in vmstat
  - Resolves: rhbz#684031


author: Jan Görig <jgorig@redhat.com> 3.2.8-18
changelog:
  - fix #692397 - wrong formatting of ps man page
  - fix #709684 - procps/top SWAP statistics makes no sense
    patch by KOSAKI Motohiro
  - fix #690078 - replace dlopen with build time linking
    - dropped procps-3.2.7-libselinux.patch and procps-3.2.7-ps-libselinux.patch
  - fix #690078 - nullifying variables in procps-3.2.8-pmap-smaps.patch


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-20
changelog:
  - fix #701710 - vmstat does not print out correct free page count on 8TB SGI system
  - Resolves: rhbz#701710


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-21
changelog:
  - fix #736023 - Common realloc mistake: 'screen' nulled but not freed upon failure
  - Resolves: rhbz#736023


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-22
changelog:
  - fix #751475 - top displays incorrect CPU summary the first time with CPULOOP=1
  -   Patch15: procps-3.2.7-top-env-cpuloop.patch altered
  - fix #746997 - top utility can't sort by memory usage in batch mode
  - fix #766792 - No devel headers for procps
  - Resolves: rhbz#751475 rhbz#746997 rhbz#766792


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-23
changelog:
  - fix for #757734 - top: Sorting by memory usage is not documented
  - additionally introduces other missing switches in the top man-page
  - Resolves: rhbz#746997


author: Akemi Yagi <toracat@centos.org> [2.6.32-504.12.2.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, all serial ATA, Adaptec I2O,
    ARPD, BusLogic, IPX, Appletalk, ReiserFS, JFS, TOMOYO
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added sysfs-fix-printk-warnings-bug6157.patch [bug#6157]
  - Added fs-tmpfs-add-xattrs-support.patch [bug#4586.18700]
  - Added fix-fadvise-for-tmpfs.patch [bug#6938]
  - DEBUG_KMEMLEAK enabled in config [bug#7055]
  - Added support for Kontron  [bug#7270]
  - Added a patch to fix [bug#7051]
  - Added a patch to fix [bug#7538]
  - Added a patch to fix [bug#7882]
  - Disable BRIDGE_IGMP_SNOOPING [bug#7796]
  - Enable IRDA (regression) [bug#8070]


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.6-1
changelog:
  - update to 2.6.6 (#588781)
  - move sasl config to /etc/sasl2 (#574439)
  - drop sasl v1 support
  - require Date::Calc for pflogsumm (#588726)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-7
changelog:
  - Backported patch to use long integers for message_size_limit,
    mailbox_size_limit and virtual_mailbox_limit
    Resolves: rhbz#907387


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-8
changelog:
  - Backported support for TLS 1.1, TLS 1.2
    Resolves: rhbz#1287192
  - Preserve timestamps for configuration files
    Resolves: rhbz#1307066


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-54.el6_7.1
changelog:
  - qemu: split out cpuset.mems setting (rhbz#1265970)
  - qemu: leave restricting cpuset.mems after initialization (rhbz#1265970)
  - virNetDev{Replace, Restore}MacAddress: Fix memory leak (rhbz#1266039)
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1266039)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1266039)


author: Dave Anderson <anderson@redhat.com> - 1.0-1.2
changelog:
  - fix Makefile to account for s390 build
  - change exclusive arch entry from i386 to i386 i486 i586 i686 pentium3 pentium4 athlon geode
  - Resolves: rbhz#545564


author: Dave Anderson <anderson@redhat.com> - 1.0-2
changelog:
  - Fix for segmentation violation with "trace show -c cpu" command,
    and add "trace dump -t" command.
    Resolves: rbhz#592887


author: Dave Anderson <anderson@redhat.com> - 1.0-3
changelog:
  - Remove trace_dump.patch, which requires a kernel later than
    the RHEL6 base of 2.6.32.
    Resolves: rbhz#601536


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-8
changelog:
  - Resolves: rhbz#798983 Kannada langpack missing
  - Resolves: rhbz#798926 fix endianess assumptions of lotuswordpro filter
  - Resolves: rhbz#800272 complain about unknown commandline options


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-12
changelog:
  - Resolves: rhbz#810267 better CSV import default separators
  - Resolves: rhbz#807392 focus problems and tearable menus


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-13
changelog:
  - Resolves: rhbz#809466 libreoffice-core (unintentionally) provides
    libraptor.so.1()() and librdf.so.0()()


author: Nalin Dahyabhai <nalin@redhat.com> 264-8
changelog:
  - add "rtkit" and "pulse" to the list of users whom we default to ignoring
    for looking up supplemental groups (Gordon Messmer, part of #186527)


author: Nalin Dahyabhai <nalin@redhat.com> 185-1
changelog:
  - split out pam_ldap as a separate source package, update URL, change
    %{version} to reflect pam_ldap's versioning rather than nss_ldap's
  - set config file to /etc/pam_ldap.conf, rootbindpw file /etc/pam_ldap.secret
  - drop %post bits that care about upgrades from RHL 7.2
  - drop %post/%postun calls to ldconfig
  - drop buildrequires on openssl-devel, krb5-devel, cyrus-sasl-devel
  - update to version 185
    - drop now-obsolete patches to the rebind callback
  - add %pre logic for the upgrading-from-a-non-split-nss_ldap case


author: Nalin Dahyabhai <nalin@redhat.com> 185-3
changelog:
  - make mentions of pam_ldap.conf and %{name}.conf more consistent (rcritten)
  - drop no-longer-used .versions file


author: Nalin Dahyabhai <nalin@redhat.com> 185-5
changelog:
  - require the pam package explicitly, so that /%{_lib}/security won't be
    an orphaned directory (part of #553857)


author: Nalin Dahyabhai <nalin@redhat.com> 185-6
changelog:
  - add a proposed patch to avoid losing password expiration warnings relayed
    via policy controls when expiration is less than a day away (based on
    patch from Masahiro Matsuya, #637190, upstream #407)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-2
changelog:
  - don't return an uninitialized buffer as the value for an optional attribute
    that isn't present in the directory server entry (#592965)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-4
changelog:
  - tweak the pre-generated man pages to avoid a syntax error warning with older
    versions of groff (#676483)


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.18.1.el6]
changelog:
  - [netdrv] iwlwifi: add option to disable 5Ghz band (Stanislaw Gruszka) [816226 812259]
  - [netdrv] iwlwifi: cancel scan before nulify ctx->vif (Stanislaw Gruszka) [816225 801730]
  - [netdrv] iwlwifi: do not nulify ctx->vif on reset (Stanislaw Gruszka) [816225 801730]
  - [net] mac80211: workaround crash at ieee80211_mgd_probe_ap_send (Stanislaw Gruszka) [814657 808095]
  - [net] bonding: 802.3ad - fix agg_device_up (Veaceslav Falico) [817466 806081]
  - [scsi] st: fix memory leak with 1MB tape I/O (David Milburn) [816271 811703]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.19.1.el6]
changelog:
  - [pci] Fix unbootable HP DL385G6 on 2.6.32-220 by properly disabling pcie aspm (Dave Wysochanski) [819614 769626]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.20.1.el6]
changelog:
  - [vhost] net: fix possible NULL pointer dereference of vq->bufs (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] macvtap: validate zerocopy vectors before building skb (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] macvtap: set SKBTX_DEV_ZEROCOPY only when skb is built successfully (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] macvtap: put zerocopy page when fail to get all requested user pages (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] macvtap: fix zerocopy offset calculation when building skb (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] bonding: remove entries for master_ip and vlan_ip and query devices instead (Andy Gospodarek) [816197 810299]
  - [virt] KVM: lock slots_lock around device assignment (Alex Williamson) [814154 811653] {CVE-2012-2121}
  - [virt] kvm: unmap pages from the iommu when slots are removed (Alex Williamson) [814154 811653] {CVE-2012-2121}
  - [virt] xenfv: fix hangs when kdumping (Andrew Jones) [812953 811815]
  - [s390x] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810125 808487]
  - [drm] i915: suspend fbdev device around suspend/hibernate (Dave Airlie) [818503 746169]
  - [fs] tmpfs: fix off-by-one in max_blocks checks (Eric Sandeen) [809399 783497]
  - [net] bonding: Allow Bonding driver to disable/enable LRO on slaves (Neil Horman) [818504 772317]
  - [virt] xen-blkfront: conditionally drop name and minor adjustments for emulated scsi devs (Laszlo Ersek) [818505 729586]
  - [virt] xen-blk: plug device number leak on error path in xlblk_init (Laszlo Ersek) [818505 729586]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.21.1.el6]
changelog:
  - [security] fix compile error in commoncap.c (Eric Paris) [806725 806726] {CVE-2012-2123}
  - [security] fcaps: clear the same personality flags as suid when fcaps are used (Eric Paris) [806725 806726] {CVE-2012-2123}
  - [net] rds: fix rds-ping inducing kernel panic (Jay Fenlason) [822757 803936] {CVE-2012-2372}
  - [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816292 814504] {CVE-2012-2136}
  - [virt] kvm: Fix buffer overflow in kvm_set_irq() (Avi Kivity) [816154 816155] {CVE-2012-2137}
  - [drm] integer overflow in drm_mode_dirtyfb_ioctl() (Dave Airlie) [773249 773250] {CVE-2012-0044}
  - [net] netfilter: Fix ip_route_me_harder triggering ip_rt_bug (Jiri Benc) [824429 812108]
  - [net] netfilter/tproxy: do not assign timewait sockets to skb->sk (Jiri Benc) [824429 812108]
  - [virt] xenpv: avoid paravirt __pmd in read_pmd_atomic (Andrew Jones) [823903 822697]
  - [infiniband] mlx4: fix RoCE oops (Doug Ledford) [799946 749059]
  - [mm] read_pmd_atomic: fix pmd_populate SMP race condition (Andrea Arcangeli) [822824 820762] {CVE-2012-2373}
  - [infiniband] mlx4: check return code and bail on error (Doug Ledford) [799946 749059]
  - [infiniband] mlx4: use locking when walking netdev list (Doug Ledford) [799946 749059]
  - [mm] thp: fix pmd_bad() triggering in code paths holding mmap_sem read mode (Andrea Arcangeli) [803808 800328] {CVE-2012-1179}


author: Tomáš Mráz <tmraz@redhat.com> - 4.29-5
changelog:
  - Fix first connection failure when configuration pulled from stdin (#927928)
  - Log the negotiated protocol version to the logs (#1275611)


author: Tomáš Mráz <tmraz@redhat.com> - 4.29-6
changelog:
  - Add support for TLSv1.1 and TLSv1.2, change the default for client from
    SSLv3 to all version support
  - Add support for DH and ECDH ciphersuites on server


author: Peter Schiffer <pschiffe@redhat.com> 0.37-8
changelog:
  - resolves: #912425
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Peter Schiffer <pschiffe@redhat.com> 0.37-10
changelog:
  - resolves: #921328
    cgred service can now start with an empty configuration file
  - resolves: #863172
    cgconfig now sets group write permissions on files in the cgroup
  - resolves: #916397
    fixed cgrulesengd segfault
  - resolves: #924399
    fixed bug when the cgrulesengd had different logging level from the library
  - resolves: #951724
    fixed cgget(1) man page
  - resolves: #809550
    removed -s option from cgcreate(1) man page
  - resolves: #913286
    fixed adding control subgroups after cgrulesengd has started
  - resolves: #753334
    fixed bug when cgconfig fails to parse commas in the cgconfig.conf file


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-1
changelog:
  - resolves: #589535
    rebase to 0.40.rc1
    added support for automated cgroup creation following a template


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-2
changelog:
  - fixed coverity findings
  - resolves: #738620
    relabel cgred.pid file after service starts
  - resolves: #961844
    increase start priority for cgred service


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-4
changelog:
  - related: #913286
    fixed performance regression when starting cgred service
  - related: #589535
    fixed templates


author: Akemi Yagi <toracat@centos.org> [2.6.32-220.7.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, legacy Firewire, all serial ATA,
    BusLogic, IPX, Appletalk, ReiserFS, Hyper-V client, EeePC hotkey, JFS
  - Added centos-linux-2.6-ipv6-cpe-router-bug4806.patch [bug#4806]
  - As of 2.6.32-131.12.1.el6, parallel printer support is enabled in distro kernel.
  - Enabled TOMOYO security module [bug#5219]
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix for the 208.5-days-and-the-system-reboots issue [bug#5397]
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]


author: Matthias Clasen <mclasen@redhat.com> 2.26.1-3
changelog:
  - Fix multilib parallel-installability (#477672)
  - Remove some old optimizations that are now no-ops


author: David Howells <dhowells@redhat.com> 0.9-1
changelog:
  - The cachefiles module no longer accepts directory fds on cull and inuse
    commands, but rather uses current working directory.


author: David Howells <dhowells@redhat.com>
changelog:
  - Must include sys/stat.h to use stat() and co. [RH BZ 565135].
  - Remove tail comments from functions.


author: David Howells <dhowells@redhat.com>
changelog:
  - The SELinux policies for cachefilesd now live in the selinux-policy RPM, so
    the cachefilesd-selinux RPM is now redundant.
  - Move the default cache dir to /var/cache/fscache.
  - Make the initscript do a restorecon when starting the cache to make sure the
    labels are correct.
  - Fix a wildchar that should be a literal dot in the SELinux policy.


author: David Howells <dhowells@redhat.com>
changelog:
  - Fix the initscript to contain an LSB parseable description.
  - Fix the initscript to return the correct error codes [RH BZ 605631].


author: David Howells <dhowells@redhat.com> 0.10.2-2
changelog:
  - Note the correct licence.
  - Handle malformed kernel status correctly.
  - Suspend culling when cache space is short and cache objects are pinned (#1109640).
  - Set the security label on the device file only after loading the module (#1066139).


author: David Howells <dhowells@redhat.com> 0.10.2-3
changelog:
  - postuninstall: Only restorecon /var/cache/fscache if it exists (#1316776)
  - Fix bogus dates in changelog


author: Dave Anderson <anderson@redhat.com> - 5.0.0-21.el6
changelog:
  - Implement support for x86 and x86_64 RHEL6 xen/pvops kernels, both live
    and xendumps.
    Resolves: rhbz#608779


author: Dave Anderson <anderson@redhat.com> - 5.0.0-23.el6
changelog:
  - Additional support for QEMU/savevm ram device version 4 to only use
    "pc.ram" segments and to handle the 512MB I/O hole at e0000000.
    Resolves: rhbz#619758


author: Dave Anderson <anderson@redhat.com> - 5.1.1-1.el6
changelog:
  - Add support for s390x ELF dumpfile format.  
    Resolves: rhbz#633449
  - Add support for s390x compressed/filtered dumpfiles generated by 
    makedumpfile.
    Resolves: rhbz#637197
  - Fix for the "bt" command with 2.6.27 and later x86_64 kernels to
    prevent the possible display of a an invalid "vgettimeofday" frame
    above the topmost "system_call_fastpath" frame, followed by two
    read errors indicating "bt: read error: kernel virtual address:
    ffffffffff600000  type: gdb_readmem_callback".
    Resolves: rhbz#637735
  - Save the per-cpu register contents stored in the "cpu" devices of 
    x86_64 KVM dumpfiles, and use their contents for x86_64 backtrace RSP
    and RIP hooks in the case of KVM "live dumps" where the guest system 
    was not in a crashed state when the "virsh dump" operation was done
    on the KVM host.  If an active task was running in user space when 
    a live dump was taken, that will be indicated by the "bt" output, 
    along with the user-space register contents.  The x86_64 register set 
    saved for each cpu may be displayed with the "help -[D|n]" command.
  - Fix for the x86_64 "bt" command to more correctly find the starting
    backtrace RIP and RSP hooks in KVM dumpfiles.  Without the patch,
    backtraces that should start in the interrupt or exception stacks
    were not being detected correctly.
    Resolves: rhbz#649050
  - Fix to utilize the correct "cpu" device format in x86 KVM dumpfiles
    Without the patch, the x86 registers were read in a 32-bit format, 
    which is only true if the host machine was running a 32-bit kernel.
    With the patch, the format defaults to the 64-bit format, and is
    switched to the 32-bit format if it can be determined that the host
    machine was running a 32-bit kernel.
  - Save the per-cpu register contents stored in the "cpu" devices of
    x86 KVM dumpfiles, and use their contents for x86 backtrace ESP and
    EIP hooks in the case of KVM "live dumps", i.e., where the guest
    system was not in a crashed state when the "virsh dump" operation
    was done on the KVM host.  If an active task was running in user
    space when a live dump was taken, that will be indicated by the
    "bt" output, along with the user-space register contents.  The saved
    x86 register set for each cpu may also be displayed with the
    "help -[D|n]" command.
  - Fix for the x86 "bt" command to correctly find the starting backtrace
    EIP and ESP hooks for the active tasks in KVM dumpfiles where the
    kernel had crashed.
    Resolves: rhbz#649051
  - Fix for the cpu count determination in crashed x86 KVM dumpfiles, 
    where the non-crashing cpus are marked offline in the kernel's
    cpu_online_mask by smp_stop_cpu().  Depending upon the cpu number
    of the crashing task, the cpu count may be set to a value that is
    less than the number of present cpus.
  - Change to the manner in which the cpu count is determined for x86_64
    kernels.  SLES11 2.6.32 kernels delay the call to crash_kexec() until
    after smp_send_stop() is called by panic(), and so the cpu_online_map
    cannot be used for determining the cpu count.  With the patch, the
    cpu_present_map is used.
    Resolves: rhbz#649053
  - Rebase to upstream version 5.1.1.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.1-2.el6
changelog:
  - Fix for x86 "bt" command to account for movement of ia32_sysenter_target()
    assembly function to a separate text section, and for the failure to
    resolve the backtrace of a non-active swapper task.
    Resolves: rhbz#682129
  - Upstream equivalency with 5.1.3 patch.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.7-1.el6
changelog:
  - Fix for "kmem -[sS]" if NUMA node 0 has no memory associated with it.
    Resolves: rhbz#716931
  - Fix for the x86_64 "bt" command stack transition error when a non-crashing
    CPU receives a NMI immediately after receiving an interrupt from another 
    source. 
    Resolves: rhbz#712214
  - Fix for the handling of x86_64 compressed kdump dumpfiles where
    the crashing system contains more than 454 cpus.
    Resolves: rhbz#705142
  - Added a new "--osrelease <dumpfile>" command line option that
    displays the OSRELEASE vmcoreinfo string from a kdump dumpfile.
    Resolves: rhbz#703467
  - Update to the crash(8) man page and the associated "crash -h" output.
    Resolves: rhbz#695413
  - Rebase to upstream version 5.1.7.
    Resolves: rhbz#710193


author: Johnny Hughes <johnny@centos.org> - 1.28.1-3.el6_0.5.1.centos
changelog:
  - rebuild due to environment issue (centos bug #5281)
  - only change is to the release string (no changes to the binaries)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-6
changelog:
  - SFTP: Fix crash on unmount
  - FTP: Backport several PASV/EPSV fixes from upstream (#542205, #555033)
  - AFC: Use new libimobiledevice library (#565567)


author: Adam Jackson <ajax@redhat.com> 2.3.0-1
changelog:
  - vesa 2.3.0
  - vesa-avoid-24bpp.patch: Avoid 24bpp if 16bpp is available, ugly workaround
    for an xserver crash with virt (#555221)


author: Adam Jackson <ajax@redhat.com> 2.3.2-4
changelog:
  - vesa-2.3.0-no-virt-shadowfb.patch: Don't bother with a shadowfb on known
    virtual machine GPUs, it won't help. (#795686)


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.3.rc1
changelog:
  - decrease severity of various errors related to outside DNS environment
    (#788870)
  - fixed various bind-chroot packaging errors (#789886)
  - use portreserve to reserve rndc control port (#790682)


author: Tim Waugh <twaugh@redhat.com> 3.9.8-25
changelog:
  - Retry when connecting to device fails (bug #552582).
  - Don't ship PolicyKit mechanism (bug #552536).
  - Don't run automake/autoconf etc as it causes build failures.
  - Reverted fix for bug #533462 until bug #541604 is solved (bug #553220).


author: Jiri Popelka <jpopelka@redhat.com> - 3.9.8-28
changelog:
  - Fixed crash when using Preferences dialog (bug #557099).
  - Ship %{_datadir}/hplip/prnt/plugins directory (bug #565875).


author: Tim Waugh <twaugh@redhat.com> - 3.9.8-30
changelog:
  - Explicitly destroy tray icon on exit (bug #576282).
  - Fixed duplex handling in hpcups.drv (bug #557515).


author: Chris Duryee (beav) <cduryee@redhat.com>
changelog:
  - 573591: Fix the permissions on some directories (bkearney@redhat.com)
  - 678049: Fix status after CLI register with --autosubscribe.
    (dgoodwin@redhat.com)
  - 676349: python deprecation fixups (jbowes@redhat.com)
  - 676363 - rhsm-compliance-icon has no icon image (cduryee@redhat.com)
  - 672562 - request for subscription-manager list --available --ondate option
    (cduryee@redhat.com)
  - 672562 - request for subscription-manager list --available --ondate option
    (cduryee@redhat.com)
  - 676371 - Compliance Assistant closes when you're not done
    (cduryee@redhat.com)
  - 676348: make config file and runtime dirs/logs only readable by root
    (jbowes@redhat.com)
  - 676534 - Got message “unable to read /var/lib/rhsm/facts/facts.json” at
    first time register to stage (cduryee@redhat.com)
  - 675777 Date search field has no accessibility handler (cduryee@redhat.com)
  - 675817 - Compliance Assistant needs an Update button for the date
    (cduryee@redhat.com)
  - 675812 - Some tracebacks while beating on subscription-manager-gui
    (cduryee@redhat.com)
  - 675951 compliance asst doesn't word wrap label (cduryee@redhat.com)
  - 670655 can't dismiss error dialog when subscribing to personal subscriptions
    (cduryee@redhat.com)
  - 673050: Using strftime to format update time. (jharris@redhat.com)
  - 674078: send 'right now' for compliance today, too (jbowes@redhat.com)


author: Chris Duryee (beav) <cduryee@redhat.com>
changelog:
  - 678003: Write proxy info for yum repositories we manage.
    (dgoodwin@redhat.com)
  - 678003: Fix a certlib cached connection. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.95.4-1
changelog:
  - Add support for tags. (dgoodwin@redhat.com)
  - 682311: rhsm-compliance icon pegs the cpu at 100% (cduryee@redhat.com)
  - 672821: Latest man pages from deon (bkearney@redhat.com)
  - 679961:  Clearing out all fields in subscription details widget.
    (jharris@redhat.com)
  - 629670: check for warning periods in valid certs, not expired ones
    (jbowes@redhat.com)
  - 676017: Configure the release branch to use production (bkearney@redhat.com)
  - 676371: Better Compliance Assistant refreshing after bind.
    (dgoodwin@redhat.com)
  - Move the translations to be language only, not language plus country
    (bkearney@redhat.com)
  - 678151: prompt for credentials if not supplied as cli args
    (jbowes@redhat.com)
  - 680399: add --auto to subscribe (jbowes@redhat.com)
  - 676377: rhsm-compliance-icon's status can be a day out of sync
    (cduryee@redhat.com)
  - 672562: request for subscription-manager list --available --ondate option
    (cduryee@redhat.com)
  - Add in the translated po files (bkearney@redhat.com)
  - 677756 add accesibility names to compliance assistant tables
    (alikins@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 0.95.5-1
changelog:
  - Resolves: #688192,#688469,#683968,#688550,#685086,#685099,#685145,#685108,#684680,#684285,#676377,#681925,#614453,#682331
  - 688192: don't look for dmi info on machines without dmi (jbowes@redhat.com)
  - 688469: workaround for optparse's lack of i18n/l10n (jbowes@redhat.com)
  - 683968: ensure yum plugins don't log to stdout (jbowes@redhat.com)
  - 688550: ensure i18n configuration is the first thing to happen
    (jbowes@redhat.com)
  - 685086: Fact times were read from the file but not localized before putting
    on the ui (bkearney@redhat.com)
  - 685099: Add in missed translations to the compliance assistant string
    (bkearney@redhat.com)
  - 685145: Remove rogue use of pyOpenSSL (jbowes@redhat.com)
  - 685108: Translation missed for the import dialog (bkearney@redhat.com)
  - 684680: Remove unnecessary gettext text domain calls, and ensure only using
    the rhsm domain (bkearney@redhat.com)
  - 684285: Add a svg library dependency (bkearney@redhat.com)
  - 676377: rhsm-compliance-icon's status can be a day out of sync
    (cduryee@redhat.com)
  - 681925: subscription-manager masks SIGPIPE when running virt-what, resulting
    in errors in shell commands (cduryee@redhat.com)
  - 614453: fix list cli command for multi entitled products (jbowes@redhat.com)
  - 682331: Latest man pages from Deon (bkearney@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 0.95.6-1
changelog:
  - Resolves: #691137,#691536,#684647,#688592
  - Add the latest l10n strings (jbowes@redhat.com)
  - 691137: set return code from main() for rhsmcertd (jbowes@redhat.com)
  - latest l10n strings (jbowes@redhat.com)
  - 691536: More string updates (jbowes@redhat.com)
  - 691536: update strings replacing compliance with valid (jbowes@redhat.com)
  - 684647: i18n/l10n our .desktop files (jbowes@redhat.com)
  - 688592: Latest strings from the i18n team (bkearney@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 0.95.7-1
changelog:
  - Resolves: #691784, #688419, #691480, #691536, #691788
  - 691784: fix entitlement failure that throws sequence error
    (alikins@redhat.com)
  - 688419: Latest japanese strings (bkearney@redhat.com)
  - 691784: Fix a bug when bare strings were passed to handle_gui_exception
    (alikins@redhat.com)
  - 691784: Fix handling of unsubscribing imported certs while unregistered
    (alikins@redhat.com)
  - 691480: syslog non-compliance on the proper status code (jbowes@redhat.com)
  - 691480: update syslog message for proper cli command name (jbowes@redhat.com)
  - 691536: remove 'compliance' from a11y string, and remove useless glade string
    (jbowes@redhat.com)
  - 691788: Check if entitlement cert is valid before allowing manual import.
    (dgoodwin@redhat.com)


author: Adrian Likins <alikins@redhat.com> 0.95.9-1
changelog:
  - 700313: We were skipping the code that hides the activation button
    (alikins@redhat.com)
  - 700313: Tweaking activate dialog properties to show in firstboot.
    (jharris@redhat.com)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.5.6-1.el6_5
changelog:
  - Rebase to v0.5.6. Resolves: #961455
  - Two monitors are in fullscreen at only one screen (rhbz#809546)
  - Can't Change Resolution in Full Screen (rhbz#846127)
  - Connection dialog should handle connection errors (rhbz#864026)
  - Allow changing guest resolution when started in fullscreen (rhbz#864929)
  - "Unable to connect to the graphic server" error on guest shutdown (rhbz#875697)
  - Cannot change resolution when automatically resize is off (rhbz#908057)
  - full-screen=auto-conf -- setting resolution in a loop (rhbz#908408)
  - Send keys menu offset in fullscreen (rhbz#913601)
  - Support connection file / MIME reigstration (rhbz#908805)
  - Reuse existing 'displays' submenu (rhbz#856682)
  - Window too small after switching off full-screen (rhbz#805146)
  - Move display on client monitors with --full-screen (rhbz#876444)
  - Make window titles configurable (rhbz#904091)
  - Make hotkeys configurable from the cmdline (rhbz#904094)
  - Guest will keep typing '~' after press F9 and F10 in same time (rhbz#820829)
  - Fail to resume guest after do S3 (rhbz#870710)
  - man: document auto-conf fullscreen option (rhbz#875559)
  - Title bar of second form becomes invisible (rhbz#876445)
  - man: document running remote-viewer without URI (rhbz#882133)
  - Fix recent connections (rhbz#882134)
  - Multi-monitors fixes (rhbz#888629)
  - Add a "Do not ask me again" checkbox when closing app (rhbz#905684)
  - Fix menu keyboard interaction (rhbz#924577)
  - man: add -- to seperate program arguments (rhbz#843103)
  - Press Enter to connect in dialog (rhbz#885106)
  - Change of resolution switches previously disabled display back on (rhbz#958966)
  - All "windows" have the same resolution in fullscreen (rhbz#886570)
  - Removed plugin


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.5.6-2
changelog:
  - Use -H instead of -h for the short --hotkeys (rhbz#980846)
  - remote-viewer.desktop: Fix missing trailing ;


author: Christophe Fergeau <cfergeau@redhat.com> 0.5.6-6
changelog:
  - Unregister events and callbacks on dispose, silence a libvirtd error when
    virt-viewer shuts down (rhbz#890297)


author: Christophe Fergeau <cfergeau@redhat.com> 0.5.6-7
changelog:
  - Always ask for confirmation when quitting remote-viewer, even when in
    fullscreen (rhbz#905684)
  - Show an error message when trying to use a wrong SPICE password
    (rhbz#990883)
  - Make sure resolution higher than native can be set in fullscreen
    (rhbz#864929)


author: Christophe Fergeau <cfergeau@redhat.com> 0.5.6-8
changelog:
  - Re-add patch to propagate 'send-ctrlaltdel' setting from the controller
    to spice-gtk, this was dropped by mistake during the 6.5 rebase
    Resolves: rhbz#1007205


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.3-5
changelog:
  - add ISC license
  - apply small fixes: anacrontab man page is more readable and
    values from /etc/security/pam_env.conf are used.
  - Related: rhzb#543948


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-2
changelog:
  - remove patches because they were included in new release.
  - 584006 lsb compliance
  - upload correct source
  - Resolves: bz#584006


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-3
changelog:
  - 624043 selinux issue done by leaking file decriptor
  - crontab has wrong permission 676081 & fix in files section 6755->4755
  - 615107 echos twice OK in init script
  - 677364 common criteria - freeing, cleaning code
  - 676040 add relro and PIE into compiler flags
  - Resolves: rhbz#624043, rhbz#676081, rhbz#615107, rhbz#677364, rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-4
changelog:
  - 675077 anacron runs hourly instead of daily=>wrong option in bash script
  - fix common criteria patch 677364
  - Resolves: rhbz#675077


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-9
changelog:
  - Handle non-existent dependency sets correctly in python (#593621)
  - Permit DOS-style line-endings in PGP armor headers (#532992)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-10
changelog:
  - Fix empty reply from server on url retrieve (#598988)
  - Drop suid/sgid bits and capabilities on upgrade/erase (#598832)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-13
changelog:
  - Require matching arch for freshen on colored transactions (#553108, #479608)
  - Verify that generated signature can be used by rpm (#608599)
  - Fix broken pipe on font provide generation + better error message (#609117)
  - Fix find-debuginfo.sh behavior on cross-directory hardlinks (#618428)
  - Generate gdb index for debuginfos (#652787)
  - Fix verifyscript return code on failure (#668629)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-14
changelog:
  - Fix signature comparison on package resigning (#608608)
  - Let error messages from gpg through on passphrase checking (#607222)
  - Only enforce default umask during transaction (#565843)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-17
changelog:
  - Allow self conflicts (#651951)
  - Add support for xz compression in rpm2cpio.sh (#674348)
  - Don't error out on already imported GPG keys (#680889)
  - Fix file conflict handling for uncolored files (#705115)
  - Fix file attribute handling with %defattr(-) (#705993)
  - Don't error out when trying to add the same signature again (#707449)
  - Fix signature checking (#721363)


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.0-3
changelog:
  - Rebase to 2.26.0 based on the Fedora 14 package.
  - Retain glib-2.22.5-gio-hide-dot-mounts.patch
  - Drop all other patches.  Code patches were already merged into
    the 2.26.0 tarball, translation patches no longer apply.
  Resolves: #883021


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1 to pick up some additional bug fixes.
  - Remove 0001-message_to_write_data_free-Don-t-unref-data-message-.patch
    (included in 2.26.1).
  Resolves: #883021


author: Colin Walters <walters@redhat.com> - 2.26.1-3
changelog:
  - Explicitly disable systemtap for this rebase; I am not aware
    of a significant number of current users in upstream, and it
    has not to my knowledge been tested in RHEL6.
    Resolves: #1000287


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1065429


author: Colin Walters <walters@redhat.com> - 2.26.1-7
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1065429


author: Chris Feist <cfeist@redhat.com> - 0.9.123-3
changelog:
  - Added ability to upgrade cluster cib and we auto upgrade cib if we're running
    an acl command (except show or help)
  - Resolves: rhbz#1112727


author: Chris Feist <cfeist@redhat.com> - 0.9.123-4
changelog:
  - Fixed resource delete for clones of groups with more than one resource
  - Fixed unclone of group so all resources are removed
  - Resolves: rhbz#1107612 rhbz#1108778


author: Chris Feist <cfeist@redhat.com> - 0.9.123-6
changelog:
  - Fixed issue with sync cluster.conf & adding uid/gid across cluster on RHEL6 w/ pcsd
  - Resolves: rhbz#1102836


author: Harald Hoyer <harald@redhat.com> 147-2.65
changelog:
  - 80-drivers.rules: only make an exception for ipmi for
                      modprobe with DRIVER set
  Resolves: rhbz#1268251


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.139-1
changelog:
  - Rebased to latest upstream packages
  - Fixed constraints removal and node standby/unstandby using remote GUI
  - Fixed displaying of fence / resource agent metadata in GUI
  - Added Pacemaker Resource defaults and Op defaults to 'pcs config' output
  - Fixed 'pcs resource clear' used on cloned group
  - Added support for scope option in cib commands
  - Added warning when creating a cluster with UDPU transport
  - Reload cluster.conf after node addition / removal
  - Resolves: rhbz#1185738 rhbz#1168982 rhbz#1174793 rhbz#1187488 rhbz#1190167 rhbz#1190168 rhbz#1191898 rhbz#1193433


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.139-9.el6_7.1
changelog:
  - Fixed session and cookies processing
  - Fixed command injection vulnerability
  - Resolves: rhbz#1253287 rhbz#1253291


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-36
changelog:
  - #1201024 - [RFE] Increase sysctl -p line size limit
  - #1246573 - typo in ps man page
  - #1251101 - Fixing human readable patch (removing trailing spaces)
  - #1284076 - [RFE] Support for thread cgroups
  - #1288208 - use of /proc/self/auxv breaks ps when running as a different euid
  - #1288497 - pmap - no sums computed for RSS and Dirty column
  - Resolves: #1201024 #1246573 #1251101 #1284076 #1288208 #1288497


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.482.el6
changelog:
  - kvm-qemu-kvm-get-put-MSR_TSC_AUX-across-reset-and-migrat.patch [bz#1265428]
  - kvm-qcow2-Discard-VM-state-in-active-L1-after-creating-s.patch [bz#1219908]
  - kvm-net-pcnet-add-check-to-validate-receive-data-size-CV.patch [bz#1286597]
  - kvm-pcnet-fix-rx-buffer-overflow-CVE-2015-7512.patch [bz#1286567]
  - Resolves: bz#1219908
    (Writing snapshots with "virsh snapshot-create-as" command slows as more snapshots are created)
  - Resolves: bz#1265428
    (contents of MSR_TSC_AUX are not migrated)
  - Resolves: bz#1286567
    (CVE-2015-7512 qemu-kvm: Qemu: net: pcnet: buffer overflow in non-loopback mode [rhel-6.8])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.483.el6
changelog:
  - kvm-rtl8139-Fix-receive-buffer-overflow-check.patch [bz#1262866]
  - kvm-rtl8139-Do-not-consume-the-packet-during-overflow-in.patch [bz#1262866]
  - Resolves: bz#1262866
    ([RHEL6] Package is 100% lost when ping from host to Win2012r2 guest with 64000 size)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.484.el6
changelog:
  - kvm-qga-flush-explicitly-when-needed.patch [bz#1210246]
  - kvm-qga-add-guest-set-user-password-command.patch [bz#1174181]
  - kvm-qcow2-Zero-initialise-first-cluster-for-new-images.patch [bz#1223216]
  - kvm-Documentation-Warn-against-qemu-img-on-active-image.patch [bz#1297424]
  - kvm-target-i386-warns-users-when-CPU-threads-1-for-non-I.patch [bz#1292678]
  - kvm-qemu-options-Fix-texinfo-markup.patch [bz#1250442]
  - kvm-qga-Fix-memory-allocation-pasto.patch []
  - kvm-block-raw-posix-Open-file-descriptor-O_RDWR-to-work-.patch [bz#1268347]
  - Resolves: bz#1174181
    (RFE: provide QEMU guest agent command for setting root/administrator account password)
  - Resolves: bz#1210246
    ([virtagent]The 'write' content is lost if 'read' it before flush through guest agent)
  - Resolves: bz#1223216
    (qemu-img can not create qcow2 image when backend is block device)
  - Resolves: bz#1250442
    (qemu-doc.html bad markup in section 3.3 Invocation)
  - Resolves: bz#1268347
    (posix_fallocate emulation on NFS fails with Bad file descriptor if fd is opened O_WRONLY)
  - Resolves: bz#1292678
    (Qemu should report error when cmdline set threads=2 in amd host)
  - Resolves: bz#1297424
    (Add warning about running qemu-img on active VMs to its manpage)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.485.el6
changelog:
  - kvm-Change-fsfreeze-hook-default-location.patch [bz#1213233]
  - kvm-qxl-replace-pipe-signaling-with-bottom-half.patch [bz#1290743]
  - Resolves: bz#1213233
    ([virtagent] The default path '/etc/qemu/fsfreeze-hook' for 'fsfreeze-hook' script doesn't exist)
  - Resolves: bz#1290743
    (qemu-kvm core dumped when repeat system_reset 20 times during guest boot)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.486.el6
changelog:
  - kvm-blockdev-Error-out-on-negative-throttling-option-val.patch [bz#1294619]
  - kvm-fw_cfg-add-check-to-validate-current-entry-value-CVE.patch [bz#1298046]
  - Resolves: bz#1294619
    (Guest should failed to boot if set iops,bps to negative number)
  - Resolves: bz#1298046
    (CVE-2016-1714 qemu-kvm: Qemu: nvram: OOB r/w access in processing firmware configurations [rhel-6.8])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.487.el6
changelog:
  - kvm-virtio-scsi-use-virtqueue_map_sg-when-loading-reques.patch [bz#1249740]
  - kvm-scsi-disk-fix-cmd.mode-field-typo.patch [bz#1249740]
  - Resolves: bz#1249740
    (Segfault occurred at Dst VM while completed migration upon ENOSPC)


author: Miroslav Rezanina <mrezanin@redhat.com - 0.12.1.2-2.488.el6
changelog:
  - Fixed qemu-ga path configuration [bz#1213233]
  - Resolves: bz#1213233
    ([virtagent] The default path '/etc/qemu/fsfreeze-hook' for 'fsfreeze-hook' script doesn't exist)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.489.el6
changelog:
  - kvm-hw-qxl-qxl_send_events-nop-if-stopped.patch [bz#1290743]
  - kvm-block-mirror-fix-full-sync-mode-when-target-does-not.patch [bz#971312]
  - Resolves: bz#1290743
    (qemu-kvm core dumped when repeat system_reset 20 times during guest boot)
  - Resolves: bz#971312
    (block: Mirroring to raw block device doesn't zero out unused blocks)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.490.el6
changelog:
  - kvm-qemu-ga-implement-win32-guest-set-user-password.patch [bz#1174181]
  - kvm-util-add-base64-decoding-function.patch [bz#1174181]
  - kvm-qga-convert-to-use-error-checked-base64-decode.patch [bz#1174181]
  - kvm-qga-use-more-idiomatic-qemu-style-eol-operators.patch [bz#1174181]
  - kvm-qga-use-size_t-for-wcslen-return-value.patch [bz#1174181]
  - kvm-qga-use-wide-chars-constants-for-wchar_t-comparisons.patch [bz#1174181]
  - kvm-qga-fix-off-by-one-length-check.patch [bz#1174181]
  - kvm-qga-check-utf8-to-utf16-conversion.patch [bz#1174181]
  - Resolves: bz#1174181
    (RFE: provide QEMU guest agent command for setting root account password (Linux guest))


author: Adam Jackson <ajax@redhat.com> 2.1.15-2
changelog:
  - nv-2.1.15-g80-nop-gamma.patch: Install a no-op gamma hook so we don't
    crash immediately on init.


author: Klaus Wenninger <kwenning@redhat.com> - 1.1.14-1.0
changelog:
  - Update to upstream release 1.1.14
   - added README_RGManager_porting to document replacement of
       ccs2cib, ccs_flatten & disable_rgmanager
   - added patchset (0100-0111) from master to implement graceful
       stop of pacemaker_remote
   - require minimum-version 0.17.0 of libqb

    Resolves: rhbz#1193499
    Resolves: rhbz#1195500
    Resolves: rhbz#1200853
    Resolves: rhbz#1215809
    Resolves: rhbz#1219103
    Resolves: rhbz#1235316
    Resolves: rhbz#1246490
    Resolves: rhbz#1246563
    Resolves: rhbz#1252206
    Resolves: rhbz#1257333
    Resolves: rhbz#1275223
    Resolves: rhbz#1287535
    Resolves: rhbz#1297564


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-7
changelog:
  - Fix xfs_metadump hang (#730886)
  - mkfs.xfs: don't increase agblocks past maximum (#738279)
  - Fix double reporting of quota values (#749435)
  - xfs_quota: handle malformed entries in mtab (749434)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-8
changelog:
  - mkfs.xfs: better handle misaligned 4k devices (#836433)
  - mkfs.xfs: default to physical sectorsize (#836433)
  - mkfs.xfs: clarify errors when specified AG size is too large (#730433)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-11
changelog:
  - mkfs.xfs: Use multidisk mode when geometry is on cmdline (#961501)
  - xfs_io: Update  man page to include chproj, lsproj (#962394)
  - xfs_io: Remove broken setfl command (#962394)
  - xfs_logprint: Handle multiply-logged fields (#962397)
  - xfs_repair: Handle fragmented multiblock dir2 directories (#964216)
  - xfs_repair: avoid segfault with ag_stride (#93904)


author: Petr Holasek <pholasek@redhat.com> - 2:0.55-32
changelog:
  - NUMA awareness bits were thrown away (from #673234 and #798648)
  - Mistake in sysconfig documentation was fixed (bz 732435)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-37
changelog:
  - Release 1.2.11.15-37
  - Resolves: bug 1113606 - server restart wipes out index config if there is a default index (DS 47831)
  - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47821)
  - Resolves: bug 1080185 - Creating a glue fails if one above level is a conflict or missing (DS 47750)


author: Jarod Wilson <jarod@redhat.com> [2.6.32-350.el6]
changelog:
  - [powerpc] perf: power_pmu_start restores incorrect values, breaking frequency events (Jiri Olsa) [880525]
  - [netdrv] mlx4: Allow choosing flow steering mode (Doug Ledford) [885191]
  - [netdrv] mlx4: Adjustments to Flow Steering activation logic for SRIOV (Doug Ledford) [885191]
  - [netdrv] mlx4: Fix wrong error flow in the flow steering wrapper (Doug Ledford) [885191]
  - [netdrv] mlx4: Add QPN enforcement for flow steering rules set by VFs (Doug Ledford) [885191]
  - [infiniband] mlx4: 64-byte CQE/EQE support (Doug Ledford) [885191]
  - [netdrv] mlx4: Fix potential deadlock in mlx4_eq_int() (Doug Ledford) [885191]
  - [infiniband] mlx4: Fix spinlock order to avoid lockdep warnings (Doug Ledford) [885191]
  - [netdrv] mlx4: Removing reserve vectors (Doug Ledford) [885191]
  - [netdrv] mlx4: Fix double-release-range in tx-rings (Doug Ledford) [885191]
  - [infiniband] mlx4: Fix QP1 P_Key processing in the Primary Physical Function (PPF) (Doug Ledford) [885191]
  - [infiniband] mlx4: Synchronize cleanup of MCGs in MCG paravirtualization (Doug Ledford) [885191]
  - [net] bonding: Bonding driver does not consider the gso_max_size setting of slave devices (Ivan Vecera) [883643]
  - [net] tcp: Fix >4GB writes on 64-bit (Daniel Borkmann) [885238]
  - [net] bridge: skip forwarding delay if not using STP (Thomas Graf) [881682]
  - [fs] nfs: Fix open(O_TRUNC) and ftruncate() error handling (Steve Dickson) [884263]
  - [fs] nfsd: add proc file listing kernel's gss_krb5 enctypes (Steve Dickson) [877113]
  - [fs] nfs: add nfs_sb_deactive_async to avoid deadlock (Steve Dickson) [871968]
  - [fs] nfs: fix page dirtying in NFS DIO read codepath (Jeff Layton) [876514]
  - [fs] nfs: don't zero out the rest of the page if we hit the EOF on a DIO READ (Jeff Layton) [876514]
  - [fs] handle null sb in get_super_thawed (Eric Sandeen) [874521]
  - [scsi] Fix race when removing SCSI devices (Tomas Henzl) [820880]
  - [netdrv] be2net: enable GRO by default (Ivan Vecera) [849930]
  - [netdrv] igb: fix compile warning if CONFIG_IGB_PTP is not set (Stefan Assmann) [886519]
  - [netdrv] bnx2x: Prevent link flaps when booting from SAN (Michal Schmidt) [881068]
  - [netdrv] bnx2x: Activate LFA (Michal Schmidt) [881068]
  - [acpi] apei: Fixup common access width firmware bug (Prarit Bhargava) [880465]
  - [acpi] apei: Avoid too much error reporting in runtime (Prarit Bhargava) [880465]
  - [acpi] apei: Fix incorrect APEI register bit width check and usage (Prarit Bhargava) [880465]
  - [virt] vhost: fix length for cross region descriptor (Michael S. Tsirkin) [862265]
  - [fs] nfs: Use FS-Cache invalidation (David Howells) [699931]
  - [fs] cachefiles: Implement invalidation (David Howells) [699931]
  - [fs] vfs: Make more complete truncate operation available to CacheFiles (David Howells) [699931]
  - [fs] fscache: Provide proper invalidation (David Howells) [699931]
  - [fs] fscache: Fix operation state management and accounting (David Howells) [699931]
  - [fs] fscache: Make cookie relinquishment wait for outstanding reads (David Howells) [699931]
  - [fs] cachefiles: Make some debugging statements conditional (David Howells) [699931]
  - [fs] fscache: Check cookie is still correct in __fscache_read_or_alloc_pages() (David Howells) [699931]
  - [fs] fscache: Check that there are no read ops when cookie relinquished (David Howells) [699931]
  - [fs] cachefiles: Downgrade the requirements passed to the allocator (David Howells) [699931]
  - [fs] fscache: Validate page mapping pointer value (David Howells) [699931]
  - [fs] fscache: Fix the marking of cached pages (David Howells) [699931]
  - [fs] fscache: nfs_migrate_page() does not wait for FS-Cache to finish with a page (David Howells) [699931]
  - [fs] fscache: Fix __fscache_uncache_all_inode_pages()'s outer loop (David Howells) [699931]
  - [fs] fscache: Add a helper to bulk uncache pages on an inode (David Howells) [699931]
  - [scsi] qla2xxx: Ramp down queue depth for attached SCSI devices when driver resources are low (Chad Dupuis) [829739]
  - [scsi] qla2xxx: Determine the number of outstanding commands based on available resources (Chad Dupuis) [829739]
  - [s390] zfcp: return early from slave_destroy if slave_alloc returned early (Hendrik Brueckner) [878372]
  - [scsi] fcoe: fix fcoe enable on link toggle while it is still disabled (Neil Horman) [875271]
  - [scsi] Log thin provisioning threshold event (Ewan Milne) [847998]
  - [netdrv] qlge: NETIF_F_GRO needs to be part of hw_features instead of features (John Green) [849749]
  - [s390] qeth: set new mac even if old mac is gone (Hendrik Brueckner) [883458]
  - [s390] qeth: Fix IPA_CMD_QIPASSIST return code handling (Hendrik Brueckner) [882792]


author: Roland Mainz <roland.mainz@nrubsig.org> 1.10.3-34
changelog:
  - Backport of krb1.12 localauth plugin support
    See krb5-1.10-localauth_backport.patch for porting comments.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-36
changelog:
  - Backported krbdev #7996 ("Simplify and improve ksu cred
    verification"; cherry-picked from upstream
    bbfe19f03bdeca7b05b542dbae4c1692c9800c70) to fix RH bug
      less than 5 mins"): When verifying the user's initial
    credentials, don't compute a server name and preemptively
    obtain creds for it. This change allows
    |krb5_verify_init_creds()| to use any host key in the
    keytab, and not just the one for the canonicalized local
    hostname.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-37
changelog:
  - Backported krb5-1.12.2 changes for |getclhoststr()|
    to fix RH bug #1154130 ("kadmind (Error): iprop_full_resync_1:
    getclhoststr failed").


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-38
changelog:
  - Backported krbdev #7868 ("Use preauth options when changing
    password") from krb-1.13 to fix RH bug #1075656 ("krb5
    client ignores FAST settings for changepw requests"):
    If we try to change the password in
    |rb5_get_init_creds_password()|, we must use all
    application-specified gic options which affect
    preauthentication when getting the kadmin/changepw ticket.
    Create a helper function |make_chpw_options()| which copies
    the application's options, unsets the options we don't want,
    and sets options appropriate for a temporary ticket.


author: - Roland Mainz <rmainz@redhat.com> - 1.10.3-39
changelog:
  - Backout patch #137 for krbdev #7996 ("Simplify and improve
    ksu cred verification" - see 1.10.3-36) for now until we
    figure out how to get this working.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-42
changelog:
  - fix for RH bug #1210704 ("Remove stray include in krb5's
    localauth_plugin.h"). This unnecessary #include statement
    was causing build failures on some systems by making libkrb5
    sources depend on gssapi.h (and as result to libcom_err,
    too).


author: Robbie Harwood <rharwood@redhat.com> - 1.10.3-42z1
changelog:
  - Fix CVE-2015-8629 and CVE-2015-8631
  - Also fix a spec trigger issue that prevents building
  - Resolves: #1306973


author: Adam Jackson <ajax@redhat.com> 1.2.2-2
changelog:
  - libvorbis-1.2.2-svn16228.patch: Backport a fix from pre-1.2.3 to hopefully
    fix small sound file playback. (#505610)


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-10
changelog:
  - Drop the fence-virtd-libvirt-qpid subpackage.
    Resolves: rhbz#859235
  - Add a delay option to fence_virt/fence_xvm
    Resolves: rhbz#823542
  - Return failure from fence_virtd when attempting to fence a nonexistent VM
    Resolves: rhbz#853927
  - Improve the documentation of the 'hash' parameter in fence_virt.conf
    Resolves: rhbz#843104


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-19
changelog:
  - fence_virt/fence_xvm: Print status when invoked with -o
    Resolves: rhbz#1020992
  - fence-virt: Fix broken restrictions on the port ranges
    Resolves: rhbz#1078197
  - Fix static analysis errors
    Resolves: rhbz#1125290


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - do entry comparisons ourselves, albeit less throughly, to avoid the worst
    case in pathological cases (more of #771444)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
changelog:
  - add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
    match/regmatch[i]/regsub[i], but which can handle and return lists of
    zero or more results (part of #783274)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
changelog:
  - take steps to avoid making yp_first/yp_next clients loop indefinitely
    when a single LDAP entry produces multiple copies of the same NIS key
    for a given map


author: Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
changelog:
  - fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
    (reported by Christian Neuhold)
  - conditionalize whether we have a build dependency on tcp_wrappers (older
    releases) or tcp_wrappers-devel (newer releases)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
changelog:
  - add a "default" function for trying to evaluate one expression, then
    another, then another... (part of #767372)
  - when creating a compat entry based on a real entry, set an entryUSN based on
    the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
    won't have them


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
changelog:
  - treat padding values passed to the "link" function as expressions to be
    evaluated rather than simply as literal values (part of #767372)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-2
changelog:
  - add explicit build-time and install-time dependencies on 389-ds-base 1.2.10,
    so that we know we build with transaction support (#829502)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-3
changelog:
  - backport fix for a slow memory leak (#840926)
  - tweak configure to disable explicit (wrong) transaction support (#829502)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-4
changelog:
  - backport fix for request argument memory leaks in NIS server (#967468)
  - backport fix for dispatching for multiple connected clients in the NIS
    plugin (#923336)


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-63
changelog:
  - Applied upstream patch to fix CVE-2014-5029 (bug #1122600),
    CVE-2014-5030 (bug #1128764), CVE-2014-5031 (bug #1128767).
  - Fix conf/log file reading for authenticated users (STR #4461).


author: Doug Ledford <dledford@redhat.com> - 1.0.5-1
changelog:
  - Update to latest upstream
  - Drop awk based setup for a bash based setup, making including
    the setup code on an initramfs easier
  - Modernize spec file
  - Related: bz950915


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-11
changelog:
  - fix incompatibility between 2.6.6 and our non-standard M2Crypto.SSL.SSLTimeoutError
  Resolves: rhbz#681811


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-1
changelog:
  - rebase to latest stable version
  - sudo now uses /var/db/sudo for timestamps
  - new command available: sudoreplay
  - use native audit support
  - sync configuration paths with the nss_ldap package
    Resolves: rhbz#615087
    Resolves: rhbz#652726
    Resolves: rhbz#634159
    Resolves: rhbz#603823


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-6
changelog:
  - removed the --with-ldap-*conf options
  - added RELRO flags
    Resolves: rhbz#709235
    Resolves: rhbz#709859


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-9
changelog:
  - switched to an updated -getgrouplist patch to fix sudo -l -U <user> behavior (#811879)
    Resolves: rhbz#811879


author: Milan Crha <mcrha@redhat.com> - 0.28.0-1
changelog:
  - Update to 0.28.0
  - Add patch for Gnome bug #588453 (slow retrieval of message IDs).
  - Add patch for Gnome bug #595260 (crash in mapi_sync_deleted).
  - Add patch for Gnome bug #595355 (crash and incorrect header parsing).
  - Add patch for Gnome bug #595480 (crash on fetching GAL).


author: Milan Crha <mcrha@redhat.com> - 0.28.1-1
changelog:
  - Update to 0.28.1
  - Remove patch for Gnome bug #588453 (fixed upstream).
  - Remove patch for Gnome bug #595260 (fixed upstream).
  - Remove patch for Gnome bug #595355 (fixed upstream).
  - Remove patch for Gnome bug #595480 (fixed upstream).


author: Milan Crha <mcrha@redhat.com> - 0.28.3-5
changelog:
  - Bump openchange requirement to 0.9-7
  - Add patches for RH bug #605369, namely:
    - Exchange 2010 support (tags and encrypted connection)
    - Less debug output on console
    - GNOME bug #569631 (Hangs during the initial fetch of calendar items)
    - GNOME bug #581434 (Double free or corruption in calendar)
    - GNOME bug #593176 (winmail.dat sent in outgoing plaintext mail)
    - GNOME bug #595914 (Doesn't display the Cyrrilic symbols in folder names)
    - GNOME bug #598564 (Has problems encoding mails containing html)
    - GNOME bug #600386 (Do not use charset on messages with UNICODE body fetched)
    - GNOME bug #600389 (UTF8 characters not shown properly)
    - GNOME bug #602896 (CC field is shown twice in message)
    - GNOME bug #607384 (Replying causes the message to appear as garbage)
    - GNOME bug #607422 (Crash while importing a message without From header)
    - GNOME bug #610224 (Crash on a meeting forward notification mail)


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.10-47
changelog:
  - do not use perr() in running atd (#994201)
  - correct Requires/BuildRequires (#712079)
  - mention all options in the usage() (#784814)
  - do not leave zero-byte sized files when filesystem is full (#1166882)


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3.14.3_RTM
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Update expired test certificates (fixed in upstream bug 852781)
  - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
  - Reactivate the aia tests


author: Elio Maldonado - 3.14.3-2
changelog:
  - Install sechash.h and secmodt.h which are now provided by nss-devel
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Ensure pem uses system freebl as with this update freebl brings in new API's
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#957603 - nss 3.14 - MD5 hash algorithm disabled


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-7
changelog:
  - add patch to correct the behavior of the ActionExecOnlyOnceEveryInterval
    configuration directive
    Resolves: #727208


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-8
changelog:
  - workaround the mysql_conf multilib issue by directly using
    the arch-specific script
    Resolves: #694414


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-11
changelog:
  - provide configuration directive for sysklogd message format compatibility
  - provide log format template for sysklogd message format compatibility
    Resolves: #737096


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-86
changelog:
  - Release 1.2.11.15-86
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 49049)
  - Resolves: #1400997 - ldif2db.pl script shows wrong usage for -n as instance, instead of database (DS 49070)
  - Resolves: #1403754 - ns-slapd crashes during tickets/ticket48665_test.py (DS 48665)
  - Resolves: #1410645 - The "repl-monitor" web page does not display "year" in date. (DS 48220)
  - Resolves: #1399600 - ns-slapd segfaults during execution of tickets/ticket47966_test.py (DS 47966, DS 48987)
  - Resolves: #1402012 - Importing big ldif file with duplicate DNs throwing "unable to flush" error
  - Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-87
changelog:
  - Release 1.2.11.15-87
  - Resolves: #1391701 - do not treat missing csn as fatal (DS 49020)
  - Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-88
changelog:
  - Release 1.2.11.15-88
  - Resolves: #1413692 - custom schema is registered in small caps after schema reload (DS 47973)
  - Resolves: #1408976 - dbscan-bin crashing due to a segmentation fault. (DS 49104)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-89
changelog:
  - Release 1.2.11.15-89
  - Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-90
changelog:
  - Release 1.2.11.15-90
  - Resovles: #1435365 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-91
changelog:
  - Release 1.2.11.15-91
  - Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11-15-92
changelog:
  - Release 1.2.11.15-92
  - Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11-15-93
changelog:
  - Release 1.2.11.15-93
  - Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c
  - Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11-15-94
changelog:
  - Release 1.2.11.15-94
  - Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-95
changelog:
  - Bump version to 1.2.11-15-95
  - Resolves: Bug 1562152 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.1.pre1
changelog:
  - update to 2.2.3pre1, which you can still get from upstream
  - build with -fno-strict-aliasing to avoid problems triggered by strict aliasing
  - package the translations


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.3.pre1
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580192, CVE-2010-0826)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.4.pre1
changelog:
  - import patch to handle initgroups directly rather than forcing libc to
    use the enumeration interfaces, which could result in two threads calling
    initgroups() at the same time to both get a subset of the right answers
    (#705466)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.5.pre1
changelog:
  - when the initgroups function needs to parse a group entry which contains a
    large list of users, reinitialize the buffer that we pass to the parsing
    function, which destroyed what we passed to it the previous time (#751461)


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-11
changelog:
  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1053437 - Admin server segfault when configuration DS configured on SSL port


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-12
changelog:
  - Avoid call to sdb_measureAccess in lib/softoken/sdb.c s_open if NSS_SDB_USE_CACHE is "yes" or "no"
  - Resolves: Bug 1044666 - Can curl HTTPS requests make fewer access system calls?


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-15
changelog:
  - Fix shlibsign to return non-zero on failure
  - Resolves: Bug 587634 - shlibsign returns 0 although if fails


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.3.8-2
changelog:
  - Specfile cleanups as suggested in the review.
  - Remove unneeded BR on pkgconfig.
  - Remove unneeded chrpath call.


author: Marek Grac <mgrac@redhat.com> - 3.0.15-20
changelog:
  - fence_ipdu: New fence agent for IBM iPDU
    Resolves: rhbz#740869
  - fence_hpblade: New fence agent for HP blades
    Resolves: rhbz#818337
  - Add fence symlinks for most used fence agents
    Resolves: rhbz#800650
  - Fix unique attributes in XML output
    Resolves: rhbz#822507
  - Automatic detection of EOL in telnet sessions
    Resolves: rhbz#823430


author: Marek Grac <mgrac@redhat.com> - 3.0.15-21
changelog:
  - fence_vmware_soap: Faster fencing and fix issue with VM without valid UUID
    Resolves: rhbz#769798
  - fence_rhevm: Support new RHEV-M API
    Resolves: rhbz#863568


author: Marek Grac <mgrac@redhat.com> - 3.0.15-25.2
changelog:
  - fence_drac5: fix regression due to invalid EOL
    Resolves: rhbz#908401
  - fence_vmware_soap: traceback when hostname cannot be resolved
    Resolves: rhbz#908409


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.21.1
changelog:
  - Revert "Optimize memcpy, mempcpy and memmove" to let broken software
    continue to be broken (#676065)
  - Optimize memset (#676076)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.22.1
changelog:
  - Avoid too much stack use in fnmatch (#681054, CVE-2011-1071)
  - Properly quote output of locale (#625893, CVE-2011-1095)
  - Don't leave empty element in rpath when skipping the first element,
    ignore rpath elements containing non-isolated use of $ORIGIN when
    privileged (#667974, CVE-2011-0536)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-7
changelog:
  - move the sudo_end* calls before closefrom()
  - close audit_fd before exec
  - fixed typo in Makefile.in
    Resolves: rhbz#569313


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.8.beta6.20100630
changelog:
  - dovecot and pigeonhole updated
  - moved disable_plaintext_auth to 10-auth.conf
  - moved ACL and quota settings to a separate .conf files


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8 (fixes #654226), pigeonhole updated to 0.2.2
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.
  - mdbox: Fixed potential assert-crash when saving multiple messages
    in one transaction
  - dsync: a lot of fixes
  - fixed lda + sieve crash


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Andreas Schneider <asn@redhat.com> - 3.6.23-37
changelog:
  - resolves: #1380151 - Fix memory leak in idmap_ad module
  - resolves: #1333561 - Fix smbclient connection issues to DFS shares
  - resolves: #1372611 - Allow ntlmsssp session key setup without signing
                         (Workaround for broken NetApp and EMC NAS)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-38
changelog:
  - resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                         empty list


author: Andreas Schneider <asn@redhat.com> - 3.6.23-42
changelog:
  - resolves: #1428835 - Performance issues with vfs_dirsort and extended
                         attributes


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.el6
changelog:
  - Updated priority to be > 17000 and to depend on buildver variable
  - Variable buildver increased to 5 as it should be
  - Resolves: rhbz#828759


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el6
changelog:
  - Added patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch
    to fix vulnerability until it is fixed in upstream sources. 
  - Resolves: rhbz#852299


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.el6.3
changelog:
  - Removed patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch
  - Applied upstream patches for same issue:
     patch 1001 sec-webrevs-openjdk7-29_aug_2012-7162473.patch
     patch 1002 sec-webrevs-openjdk7-29_aug_2012-7162476.patch
     patch 1003 sec-webrevs-openjdk7-29_aug_2012-7163201.patch
     patch 1004 sec-webrevs-openjdk7-29_aug_2012-7194567.patch
     patch 1005 sec-webrevs-openjdk7-29_aug_2012-78e01a6ca8d3.patch
  - Resolves: rhbz#852299


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el6.4
changelog:
  - Cleanup before security release
  - Removed patches:
     patch 1001 sec-webrevs-openjdk7-29_aug_2012-7162473.patch
     patch 1002 sec-webrevs-openjdk7-29_aug_2012-7162476.patch
     patch 1003 sec-webrevs-openjdk7-29_aug_2012-7163201.patch
     patch 1004 sec-webrevs-openjdk7-29_aug_2012-7194567.patch
     patch 1005 sec-webrevs-openjdk7-29_aug_2012-78e01a6ca8d3.patch
  - Resolves: rhbz#852299


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.3.el6
changelog:
  - Updated to 2.3.3
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.2.el6
changelog:
  - Sync with 6.4
  - introduced tmp-patches source tarball
  - release tag moved before dist (see 875245)
  - Resolves: rhbz#880352


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.1.el6
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed tmp-patches source tarball
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Resolves: rhbz#895033


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.4.1.el6
changelog:
  - Rewerted to IcedTea 2.3.4
    - rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
    - removed jxmd and idlj to alternatives
    - make NOT executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
    - re-applied patch302 and restored systemtap.patch
    - buildver set to 9
    - icedtea_version set to 2.3.4
    - unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
    - restored tmp-patches source tarball
    - removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
    - java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from 
      java.security-linux back to java.security
  - Resolves: rhbz#895033


author: Remi Collet <rcollet@redhat.com> - 5.3.3-24
changelog:
  - fix buffer overflow in _pdo_pgsql_error (#969110)
  - fix double free when destroy_zend_class fails (#910466)
  - fix segfault in error_handler with
    allow_call_time_pass_reference = Off (#892158)
  - fix copy doesn't report failure on partial copy (#947428)
  - add rpm macros for packagers: %php_inidir,
    %php_incldir and %__php (#953814)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-27.1
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Steve Dickson <steved@redhat.com> 1.2.2-5
changelog:
  - Removed the inconsistent default anonuid/anongid values. (bz 566888)
  - Created the rpcuser group (bz 594206)


author: Steve Dickson <steved@redhat.com> 1.2.3-1
changelog:
  - Initscripts changes needed to support NFS over RDMA (bz 631012)
  - Initscripts changes needed for NFS to shutdown cleanly (bz 636513)
  - Initscripts changes needed for rpcbind to be running 
    when nfs is started (bz 641291)


author: Steve Dickson <steved@redhat.com> 1.2.3-6
changelog:
  - Added support for AD style kerberos to rpc.gssd (bz 671474)
  - Disabled the installing of the nfsidmap command


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-4.b17
changelog:
  - Add flag logic back to spec file but disable for now.
  - Restore system-lcms.patch as used in October CPU.
  - Resolves: rhbz#1295751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-0.b15
changelog:
  - January 2016 security update to u71b15.
  - Improve verbosity and helpfulness of tarball generation script.
  - Update patch documentation using version originally written for Fedora.
  - Drop prelink requirement as we no longer use execstack.
  - Drop ifdefbugfix patch as this is fixed upstream.
  - Provide optional boostrap build and turn it off by default.
  - Add patch for size_t formatting on s390 as size_t != intptr_t there.
  - Resolves: rhbz#1295751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15
changelog:
  - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
  - Resolves: rhbz#1295751


author: Than Ngo <than@redhat.com> - 4.3.4-3
changelog:
  - fix bz#531211, backport sonnet patch, fix rendering issue in indic, asian, arabic 
    languages
  - drop noarch hack


author: Peter Jones <pjones@redhat.com> - 0.97-622
changelog:
  - Update relocatable kernel support for UEFI/x86_64 .
    Related: rhbz #476230
  - grub-0.97-gate-a20.patch: Patch from Suse. Make really, really sure that
    A20 is behaving itself. (mjg)
  - add "silent" option (mjg)
  - Rework EFI Graphics Output Protocol mode selection.


author: Peter Jones <pjones@redhat.com> - 0.97-63
changelog:
  - Clear the screen when the timeout finishes, not just if verbose is set.
    Patch from Eelko Berkenpies.


author: Peter Jones <pjones@redhat.com> - 0.97-65
changelog:
  - Draw the inverted line correctly in the menu
    Resolves: rhbz#613153
  - Don't fail to boot on UEFI when the memory map changes (shayes)
    Resolves: rhbz#607213


author: Caolán McNamara <caolanm@redhat.com> - 0.14.4-3
changelog:
  - Resolves: rhbz#524662 Implement new Gnome XDG Config Folders for planner
      + gnome#596171 change recently used to use new recently used backend
      + gnome#XXXXXX split config/data setting into xdg dirs


author: Caolán McNamara <caolanm@redhat.com> - 0.14.4-4
changelog:
  - Resolves: rhbz#526295 automatically go to edit mode on insert task
  - Resolves: rhbz#537854 fix zoom to fit


author: Matthew Barnes <mbarnes@redhat.com> - 0.14.4-10
changelog:
  - Resolves: rhbz#973289 rebuild against newer evolution-data-server
  - Also add planner-0.14.4-edsapi.patch from Fedora 14 package.


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25
changelog:
  - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
  - properly initialize tkeylen in the CVE-2012-0884 fix


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-26
changelog:
  - use PKCS#8 when writing private keys in FIPS mode as the old
    PEM encryption mode is not FIPS compatible (#812348)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27
changelog:
  - fix sslrand(1) and sslpasswd(1) reference in openssl(1) manpage (#841645)
  - drop superfluous lib64 fixup in pkgconfig .pc files (#770872)
  - force BIO_accept_new(*:<port-number>) to listen on IPv4


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-30
changelog:
  - resolves: #659646
    man man for Japanese manual page contains duplicated lines in PAGER explanation
  - resolves: #749290
    [RHEL6:REG] Missing Functionality : Improve makewhatis handling of symbolic links


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-31
changelog:
  - resolves: #815209
    fixed override_dir patch - do not override localized man pages
    with English man pages
  - resolves: #713088
    fixed memory leaks


author: Petr Machata <pmachata@redhat.com> - 0.5-25.45svn
changelog:
  - Fix a problem in including in summary (-c) function calls that don't
    finish before exec or exit (ltrace-0.5-account_execl.patch)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-10
changelog:
  - revert previous patch (#1172296)
  - fix: crash in ldap_domain2hostlist when processing SRV record (#1164369)
  - support TLS 1.1 and later (#1160467)
  - enhancement: add ppolicy-check-password (#1155390)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - fix: regression: deadlock during SSL_ForceHandshake when getting connection to replica (#1267501)
    + apply (and modify a little) the patch from commit 1eeaeeb7


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-28
changelog:
  - when processing etype-info and etype-info2 preauth hints, remember them all,
    and if we fail to generate enc_timestamp preauth data due to a
    key-table-entry-not-found error with a given set of hints, move on to try the
    next one until we run out of hints (#748528)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-29
changelog:
  - backport fixes to GSSAPI to obtain creds for all available mechanisms when we
    don't specify a mechanism when acquiring credentials, and to not try to use
    the default credential when accepting an initiator token for a mechanism for
    which we have no verifier creds (#799161, RT#6894)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-30
changelog:
  - move removal of krb5-user.info from %postun to %preun, and use the name
    of the compressed file (#801033)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-31
changelog:
  - backport fixes for retrying a request with referrals disabled if we get
    a referral to the same realm (#786216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-32
changelog:
  - revise the fix for #748528 so that it correctly resets the shallow
    etype_info list in cases where we get both etype-info and etype-info2


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33
changelog:
  - selinux: reliably reset the file creation context after setting it when we
    flush replay caches, in cases where there was none explicitly set beforehand
    (#813883)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.1
changelog:
  - add candidate patch from upstream to fix freeing uninitialized pointer in
    the KDC (MITKRB5-SA-2012-001, CVE-2012-1015, #839859)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.2
changelog:
  - pull up the patch to correct a possible NULL pointer dereference in
    kadmind (CVE-2012-1013, #827517)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport changes to how and when we read and make use of SELinux labeling
    configuration (#852455)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.3
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (#852455)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.84
changelog:
  - Add 0228-RHBZ-1072081-delayed-reintegration.patch
    * Add "delay_watch_checks" and "delay_wait_checks" options to delay
      reintegration of flakey paths.
  - Add 0229-UPBZ-1168987-queue_if_no_path_issue.patch
    * Make sure no_path_retry is properly set even if there are no active paths.
  - Add 0230-RHBZ-880121-fix-double-free.patch
    * multipath was freeing the multipath alias twice if it failed to create the
      multipath device.
  - Add 0231-RHBZ-978947-dell-36xxi.patch
    * new builtin configurations.
  - Add 0232-RHBZ-997028-autodetect-clariion-alua.patch
    * configure multipath to automatically detect alua settings on clariion
      devices.
  - Resolves: bz #880121, #978947, #997028, #1072081, #1168987


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.85
changelog:
  - Modify 0228-RHBZ-1072081-delayed-reintegration.patch
    * Fix checker name printing issue
  - Resolves: bz #1072081


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.86
changelog:
  - Modify 0228-RHBZ-1072081-delayed-reintegration.patch
    * Change show config output
  - Resolves: bz #1072081


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.87
changelog:
  - Modify 0228-RHBZ-1072081-delayed-reintegration.patch
    * print "no" instead of "off"
  - Resolves: bz #1072081


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.88
changelog:
  - Add 0233-RHBZ-1215903-remove-pg-timeout.patch
  - Add 0234-RHBZ-818404-update-doc.patch
  - Add 0235-RHBZ-1033789-rdac-update.patch
    * Don't use trasntioning controllers
  - Add 0236-RH-per-path-prio.patch
    * Paths now store their own prio structure, instead of pointing
      to a global one
  - Add 0237-RHBZ-1081395-save-alua-info.patch
    * Save alua information in prioritizer to speed access
  - Add 0238-RHBZ-1153704-async-timeout.patch
    * Make directio use the checker_timeout in async mode
  - Add 0239-RHBZ-1201444-update-eternus-config.patch
  - Add 0241-RHBZ-1214127-fix-help.patch
  - Add 0242-RHBZ-1238507-kpartx-fix.patch
    * Don't overwrite already in use partitions
  - Add 0243-RHBZ-1248177-reset-alias.patch
    * Use existing alias on failed rename
  - Add 0244-RHBZ-1254692-kpartx-sync.patch
    * kpartx runs in sync mode by default
  - Add 0245-RHBZ-1273829-autodetect-readonly-devs.patch
    * auto-reload devices as RO when a path turns RO
  - Add 0246-RHBZ-1145442-raw-output-and-wildcards.patch
    * and raw output and more wildcards
  - Modify device-mapper Requires
    * Require version with deferred remove support
  - Resolves: bz #818404, #1033789, #1081395, #1145442, #1153704, #1187278
  - Resolves: bz #1201444, #1208521, #1214127, #1215903, #1238507, #1248177
  - Resolves: bz #1254692, #1273829


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.89
changelog:
  - Add 0247-RHBZ-1283181-fix-remove-crash.patch
    * Check is sysdev is NULL before dereferencing
  - Resolves: bz #1283181


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.90
changelog:
  - Add 0248-RHBZ-1289353-alua-pref-arg.patch
    * add exclusive_pref_bit argument to the alua prioritizer
  - Resolves: bz #1289353


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.92
changelog:
  - Modify 0246-RHBZ-1145442-raw-output-and-wildcards.patch
    * fix PAD and PRINT macros
  - Resolves: bz #1145442


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.93
changelog:
  - Add 0250-RHBZ-1316165-fix-i686-size-bug.patch
    * make multipathd use uint64_t for tracking the interactive command
      fingerprint.
  - Resolves: bz #1316165


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.2-1
changelog:
  - Add get_priority_{min,max} methods
  - Add constants for SCHED_{BATCH,FIFO,OTHER,RR}
  - Implement get_priority method
  - Add pchrt utility for testing the bindings, chrt clone
  - Add ptaskset utility for testing the bindings, taskset clone


author: Thomas Woerner <twoerner@redhat.com> - 2.0.9-3
changelog:
  - fixed init script to be lsb conform
    Resolves: rhbz#536828
  - fixed download link according to package review
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> - 2.0.9-5
changelog:
  - added -fno-strict-aliasing to the compiler flags (rhbz#596158)
  - cleaned up description (rhbz#596158)
  - fixed install of /etc/ethertypes in running system (rhbz#596778)


author: Steve Grubb <sgrubb@redhat.com> 0.3.13-1
changelog:
  - New upstream bug fix release
  resolves: #633584 - Pick up latest TrouSerS package
  resolves: #1074634 - Buffer overflow detected in TrouSerS daemon


author: Jaroslav Reznik <jreznik@redhat.com> - 4.6.2-8
changelog:
  - WebKit security update:
    CVE-2010-0046, CVE-2010-0049, CVE-2010-0050, CVE-2010-0051,
    CVE-2010-0052, CVE-2010-0054


author: Than Ngo <than@redhat.com> - 4.6.2-9
changelog:
  - Resolves: bz#575248, rebase to 4.6.2
  - fix build issue in webkit on s390x
  - fix a crash when reparenting an item in QGraphicsView, QTBUG-6932


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-642.14.1.el6]
changelog:
  - [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
  - [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
  - [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
  - [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
  - [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
  - [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
  - [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
  - [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
  - [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
  - [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
  - [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]


author: Chris Feist <cfeist@redhat.com> - 0.16.2-56
changelog:
  - Fixed traceback when using ccs --stopall
  - Fixed return codes from ccs_sync
  - Fixed listing altmulticast with ccs --lsmisc
  - Ricci & ccs_sync should no longer crash when trying to update a cluster.conf 
    file that is too large 
  - Resolves: rhbz#811702 rhbz#841288 rhbz#839039 rhbz#815752 rhbz#818335


author: Chris Feist <cfeist@redhat.com> - 0.16.2-57
changelog:
  - Updated --addresource to properly add resources when rm section is missing
  - Fixed redirect which wouldn't allow creation of keys in a read-only folder
  - Resolves: rhbz#867019 rhbz#866894


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-1
changelog:
  - Upgrade to the latest upstream release v2.2.6
    Resolves: Bug#921563  raddebug not working correctly
    Resolves: Bug#921567  raddebug -t 0 exists immediately
    Resolves: Bug#1060319 MSCHAP Authentication is not working using automatic
                          windows user credentials
    Resolves: Bug#1078736 Rebase FreeRADIUS to 2.2.4
    Resolves: Bug#1135439 Default message digest defaults to sha1
    Resolves: Bug#1142669 EAP-TLS and OCSP validation causing segmentation
                          fault
    Resolves: Bug#1173388 dictionary.mikrotik missing Attributes
  - Remove radutmp rotation
    Resolves: Bug#904578  radutmp should not rotate
  - Check for start_servers not exceeding max_servers
    Resolves: Bug#1146828 radiusd silently fails when start_servers is higher
                          than max_servers


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-4
changelog:
  - Move OpenSSL init out of version check
    Resolves: Bug#1189394 radiusd segfaults after update
  - Comment-out ippool-dhcp.conf inclusion
    Resolves: Bug#1189386 radiusd fails to start after 'clean' installation


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-5
changelog:
  - Fix EAP client authentication with TLS 1.2
    Resolves: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-6
changelog:
  - Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
    Related: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-7
changelog:
  - Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                          rad_coalesce()
  - Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                          due to improper output buffer size check in make_secret()
  - Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv() 
  - Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                          fr_dhcp_decode()
  - Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                          fr_dhcp_decode_options()
  - Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                          fr_dhcp_decode() when decoding option 63


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.31.rc1
changelog:
  - Fix RRL slip behavior when set to 1 (#1112356)
  - Fix issue causing bind to hang after reload if using DYNDB (#1142152)


author: Pavel Šimerda <psimerda@redhat.com> - 32:9.8.2-0.37.rc1
changelog:
  - Resolves: 1215687 - DNS resolution failure in high load environment with
    SERVFAIL and "out of memory/success" in the log


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4.2
changelog:
  - BuildRequire the infinipath-psm package to pull in support
    for it on x86_64.
    Related: rhbz570274


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4.3
changelog:
  - Split the psm support packages into their own rpms to close
    Resolves: rhbz616575 openmpi does not work with non-infinipath hardware


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Upgrade to new upstream version
    This disables openib-ibcm, which is broken in 1.5.3
    This brings in esmtp and valgrind memchecker support from Fedora
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> - 1.5.3-1
changelog:
  - Conditionalize the psm and psm-devel subpackages, to keep rpmbuild
    from trying to build them on ppc
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> - 1.5.3-2
changelog:
  - Fix the rpm macros for the -psm subpackage, so we can build
    a -psm varient of mpitests
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.5.4-1
changelog:
  - Clean up provides and requires to close
    Resolves: rhbz768457
  - Remove and obsolete the -psm variants that have been folded into the main
    packages.
    Resolves: rhbz758618
  - New upstream version
    Resolves: rhbz768109
    Related: rhbz739138


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26
changelog:
  - fixed headless (policytool moved to normal)
   - jre/bin/policytool added to not headless exclude list
  - updated aarch694 source
  - ppc64le synced from fedora
  - Resolves: rhbz#1081073


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17
changelog:
  - added patch12,removeSunEcProvider-RH1154143
  - xdump excluded from ppc64le (rh1156151)
  - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com)
  - Resolves: RHBZ#1154948


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17
changelog:
  - updated aarch64 sources
  - epoch synced to 1
  - all ppcs excluded from classes dump(1156151)
  - Resolves: rhbz#1173706


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13
changelog:
  - updated to security u45
  - minor sync with 6.7
   - generate_source_tarball.sh
   - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch
   - reworked (synced) zero patches (removed 103,11 added 204, 400-403)
   - added upstreamed patch 501 and 505
   - included removeSunEcProvider-RH1154143.patch
  - returned java (jre only) provides
  - repacked policies (source20)
  - removed duplicated NVR provides
  - added automated test for priority (length7)
  - Resolves: RHBZ#1209074


