# changelog

author: Marek Kasik <mkasik@redhat.com> 2.28.1-2
changelog:
  - Don't crash when the history file is empty (#552076)
  - Fix mixed use of spaces and tabs in spec file
  - Set %defattr for devel subpackage
  - Add ChangeLog to docs of devel subpackage
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> 2.28.1-8
changelog:
  - Backport RDP support
  - Backport scaling of RDP sessions
  - Backport Minimize button
  - Backport storing of credential to keyring
  - Backport translations for new strings
  - Resolves: #1215093


author: Marek Kasik <mkasik@redhat.com> 2.28.1-10
changelog:
  - Don't capture key events of other tabs
  - Allow different logins to the same host
  - Ignore active-plugins GConf key
  - Related: #1215093


author: Bob Relyea <rrelyea@redhat.com> - 3.14.3-21
changelog:
  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-23
changelog:
  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q


author: Ray Strode <rstrode@redhat.com> 2.28.2-11
changelog:
  - Add a sanity check to prevent the "p" key and related
    from ever getting grabbed on accident.
    Related: #595763


author: Jakub Dorňák <jdornak@redhat.com> - 5.1.73-1
changelog:
  - Update to MySQL 5.1.73, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-73.html
    (CVE-2014-0412, CVE-2014-0437, CVE-2013-5908, CVE-2014-0393,
    CVE-2014-0386, CVE-2014-0401, CVE-2014-0402)
    Resolves: #1055880


author: Honza Horak <hhorak@redhat.com> 5.1.73-2
changelog:
  - Make mysqld init script more robust and ignore existing but
    non-being-used unix socket file
    Resolves: #1058719


author: Jens Petersen <petersen@redhat.com> - 0.17-9
changelog:
  - add buildjava switch to allow turning off the java bits completely
  - add buildcheck to allow turning off make check
  - drop cvs requires for autopoint (Karl Lattimer, #469555)
  - add upstream gettext-xgettext-python-unicode-surrogate-473946.patch by
    Bruno Haible to fix xgettext handling of utf16 surrogates in python (#473946)


author: Jens Petersen <petersen@redhat.com> - 0.17-15
changelog:
  - bring back autopoint requires cvs (#517361)
  - requires info rather than /sbin/install-info
  - drop install_info and remove_install_info macros


author: Jens Petersen <petersen@redhat.com> - 0.17-16
changelog:
  - fix FTBFS by removing openmp.m4 which conflicts with recent autoconf (#539211)
  - cleanup gettext-0.17-rpathFix.patch
    - separate gl_AC_TYPE_LONG_LONG replacement to another patch
    - use trailing ':' for tests LD_LIBRARY_PATH
  - run autogen.sh with --quick and --skip-gnulib


author: Daiki Ueno <dueno@redhat.com> - 0.17-18
changelog:
  - drop BR: java-1.6.0-openjdk-devel, because:
    - it was only needed for javadoc, but the regeneration of javadoc
      files is not necessary
    - the s390/s390x buildroots are lacking the package for el6


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-13.P1
changelog:
  - Add LICENSE file to dhclient subpackage (#613683)
  - Add DHCRELAYARGS variable to /etc/sysconfig/dhcrelay (#625846)
  - dhclient logs its pid to make troubleshooting systems
    with multiple dhclients running easier (#627257)
  - Fix parsing of date (#631071)
  - dhclient-script: when updating 'search' statement in resolv.conf,
    add domain part of hostname if it's not already there (#637763)
  - Fix for CVE-2010-3611 (#651914)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-19.P1.1
changelog:
  - A pair of defects cause the server to halt upon processing certain packets
    (CVE-2011-2748, CVE-2011-2749, #729883)


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-25
changelog:
  - rgmanager: Fix bash syntax error in clunfslock
    rgmanager: clunfslock: copy state info if it exists
    Resolves: rhbz#1278943


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-29
changelog:
  - rgmanager: Forget that we were transition master if quorum is dissolved
    rgmanager: Re-init the vf key callbacks after losing and recovering quorum
    Resolves: rhbz#1084053
  - rgmanager: Exit more gracefully if cman stops first when cpg locks are used
    Resolves: rhbz#1342825


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-5
changelog:
  - Correctly mark the LDAP default password value as encrypted (CVE-2011-0002)
    Resolves: #668021
  - Default LDAP cn to username if gecos is empty
    Resolves: #670151
  - Preserve setuid and setgid bits when copying files from /etc/skel
    Resolves: #724987
  - Fix segfault when reading database files with certain sizes
    Resolves: #788521


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-7
changelog:
  - Don’t use 512-bit RSA private keys in tests
    Related: #1235518
  - Fix testsuite failures if more than one architecture is building concurrently
    Related: #1235518


author: Than Ngo <than@redhat.com> 6:4.3.4-6
changelog:
  - Resolves: bz#587895, ark does not seem to have icon on menu
  - Resolves: bz#595784, disable JS / Java / plugins in khtml file preview


author: Michal Ruprich <mruprich@redhat.com> - 0.17-64.1
changelog:
  - Resolves: #1450821 - rlogin fails to connect rsh-server after updating util-linux-ng from version 2.17.2-12.18.el6 to 2.17.2-12.24.el6


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.1.git20100510
changelog:
  - core: fix handling of IPv6 RA flags when router goes away (rh #588560)
  - bluetooth: fix crash configuring DUN connections from the wizard (rh #590666)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.2.git20100519
changelog:
  - core: use GIO in local mode only (rh #588745)
  - core: updated translations (rh #589230)
  - core: be more lenient in IPv6 RDNSS server expiry (rh #590202)
  - core: fix headers to be C++ compatible (rh #592783)
  - core: rebuild to fix D-Bus property access (for dbus-glib CVE-2010-1172)
  - applet: updated translations (rh #589230)
  - applet: lock connections with well-known SSIDs to their specific AP


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.3
changelog:
  - core: fix nm-online crash (rh #593677)
  - core: fix failed suspend disables network (rh #589108)
  - core: print out missing firmware errors (rh #594578)
  - applet: fix device descriptions for some mobile broadband devices
  - keyfile: bluetooth fixes
  - applet: updated translations (rh #589230)


author: Prarit Bhargava <prarit@redhat.com> 1.0.0
changelog:
  - initial import of aer-inject
  - 0.1 from http://www.kernel.org/pub/linux/utils/pci/aer-inject/
  - http://git.kernel.org/?p=utils/pci/aer-inject/aer-inject.git;a=summary
  - initial import of mce-inject
  - 22b6fd9d6c53de44e612f31b78b964c3a10a24a1 from
    http://git.kernel.org/?p=utils/cpu/mce/mce-inject.git;a=summary


author: Ray Strode <rstrode@redhat.com> 2.28.0-21
changelog:
  - Add a close button in the session selector save dialog, to
    provide a way to close the dialog without saving.
    Resolves: #786573


author: Pavel Šimerda <psimerda@redhat.com> - 1.0.1-3
changelog:
  - Resolves: #738244 - provide libnetfilter_queue package for RHEL 6.6
  - use a modified EPEL6 spec file


author: Adam Tkac <atkac redhat com> 0.4b41-13
changelog:
  - display dump level correctly in all cases (#493635)
  - -A option is not valid when -P is specified, correct manual page (#490627)
  - fix typos in manual pages (#489853)


author: Adam Tkac <atkac redhat com> 0.4-0.1.b42
changelog:
  - update to 0.4b42
  - patches merged
    - dump-selinux.patch
    - dump-dmfix.patch
    - dump-immutable.patch
    - dump-0.4b41-libtinfo.patch
    - dump-rh356121.patch
    - dump-rh493635.patch
    - dump-rh490627.patch
    - dump-rh489853.patch
  - fix NVR to conform to Fedora policies


author: Adam Tkac <atkac redhat com> 0.4-0.5.b42
changelog:
  - dump: write EA metadata to tape correctly (#599680)
  - restore: add a workaround to read incorrectly written EA metadata (#599680)


author: Adam Tkac <atkac redhat com> 0.4-0.6.b42
changelog:
  - call clone(2) syscall with correct args on s390
  - `dump -w` didn't recognize ext4 filesystems as supported (#658890)
  - fix incorrect hole handling (#691434)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-1
changelog:
  - 'pki-common'
  -     Bugzilla Bug #674894 - ipactl restart : an annoy output line
  -     Bugzilla Bug #675179 - ipactl restart : an annoy output line


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-2
changelog:
  - 'pki-common'
  -     Bugzilla Bug #676051 - IPA installation failing - Fails to create CA
        instance
  -     Bugzilla Bug #676182 - IPA installation failing - Fails to create CA
        instance


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-3
changelog:
  - Resolves #676873 - Rebase pki-core again to pick the latest features and fixes
  -     Resolves #676048 - Installation within IPA hangs, r1846
  -     Resolves #679173 - uninitialized variable warnings from Perl, r1860
  -     Resolves #679174 - netstat loop fixes needed, r1862
  -     Resolves #679580 - Velocity fails to load all dependent classes, r1864


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-8
changelog:
  - Resolves 645097 
  - Resolves #683172 - pkisilent needs to provide option to set
    nsDS5ReplicaTransportInfo to TLS in replication agreements
    when creating a clone, r1886


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-10
changelog:
  - Resolves #688251 - Dogtag installation under IPA takes too much
    time - SELinux policy compilation, r1908


author: Anton Arapov <anton@redhat.com> - 1:2.11-7
changelog:
  - Add "PXE" to HP OEM Type 209 record output
  - Properly print the hexadecimal value of invalid string characters


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Karsten Hopp <karsten@redhat.com> 0.6.0-2
changelog:
  - add endian info for s390, s390x
  - kipiplugin_acquireimages.so is not available as kdegraphics is compiled
    without sane support on s390x


author: Karsten Hopp <karsten@redhat.com> 7.2.411-1.1
changelog:
  - augroup "fedora" in /etc/vimrc renamed to "redhat"
  - Resolves: #578785
  - fix vim.csh  'tcsh -e' scripts
  - Resolves: #578795


author: Karsten Hopp <karsten@redhat.com> 7.2.411-1.7
changelog:
  - fix syntax highlighting of httpd config files (663753)
  - fix vimexplorer directory listings, i.e. vim .. (652610)
  - don't print an additional 'e' in zh_CN.gbk vimexplorer (594997)
  - fix macro usage in specfile template (634902)


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.8-41
changelog:
  - Limit corefile dump to the value set as MaxCrashReportsSize
  - Correct Required-Start
  - Avoid infinite crash loops
  - Resolves: #1333068, #1324586, #1346198


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-80
changelog:
  - Release 1.2.11.15-80
  - Resolves: #1316869 - ns-slapd general protection ip:7f570c56afd5 sp:7f56dc7edce0 error:0 in libc-2.12.so (DS 48944)


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-59.2
changelog:
  - fenced: keep manual ACk fifo open for longer and also make fenced_external()
    write to it.
    Resolves: rhbz#1079991


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1.70-8
changelog:
  - Reformat spec with tabs.
  - By report of Thomas Sondergaard (BZ#511162) Add -DXP_UNIX=1 -DJS_THREADSAFE=1 flags and nspr requires into libjs.pc


author: Ionuț C. Arțăriși <mapleoin@fedoraproject.org> - 1.6.1-1
changelog:
  - new upstream release 1.6.1
  - patched SConstruct to allow setting cppflags
  - stopped using sed and chmod macros


author: Ionuț C. Arțăriși <mapleoin@fedoraproject.org> - 1.6.2-1
changelog:
  - new upstream release 1.6.2
  - send mongod the USR1 signal when doing logrotate
  - use config options when starting the daemon from the initfile
  - removed dbpath patch: rely on config
  - added pid directory to config file and created the dir in the spec
  - made the init script use options from the config file
  - changed logpath in mongodb.conf


author: Ionuț C. Arțăriși <mapleoin@fedoraproject.org> - 1.6.3-1
changelog:
  - removed js Requires
  - new upstream release
  - added more excludearches: sparc s390, s390x and bugzilla pointer


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-28
changelog:
  - fixed recompilation of the package on machine without IPv6 (#657835)
  - fixed SMUX getting stuck on big-endian platforms (#665053)
  - fixed OID comparsion in snmpwalk, now the output does not include
    objects outside requested subtree (#636890)
  - fixed IPv4 address creation in ipAddressTable (#616764)
  - added IPv6 address creation to ipAddressTable (#616336)
  - fixed value of ipAddressPrefixAutonomousFlag OID (#625262)
  - fixed ipv6IfTable - new interfaces were not added there (#627564)
  - extended BRIDGE-MIB implementation to cover RFC 4363 (#630157)


author: Xavier Bachelot <xavier@bachelot.org> - 0.2.903-11
changelog:
  - Update to latest snapshot (svn 751) :
    - Add support for VX800 integrated TMDS encoder.
    - Make sure Chrome9 chipsets use software rasterizer for 3D.
    - Various small fixes.
  - Add patch for VX855 support.
  - Add patch to fix cursor on secondary display.
  - Add patch to disable TMDS by default.


author: Xavier Bachelot <xavier@bachelot.org> - 0.2.903-12
changelog:
  - Update to latest snapshot (svn 758) :
    - Basic VX855 support.
    - Fix pci space corruption on P4M900 (RHBZ#506622).
    - Fix null pointer dereference in viaExaCheckComposite (RHBZ#449034).
  - Add patch to allow 1200x900 panel (X0-1.5).
  - Add patch to remove loader symbol lists, needed for xserver 1.7 (RHBZ#510206).
  - Add experimental patch for better VT1625 support.
  - Drop upstreamed patches.


author: Andreas Schneider <asn@redhat.com> - 4.0.0-67.rc4
changelog:
  - resolves: #1290708 - CVE-2015-7540
  - related: #1290708 - CVE-2015-5299
  - related: #1290708 - CVE-2015-5296
  - related: #1290708 - CVE-2015-5252
  - related: #1290708 - CVE-2015-5330


author: Dan Walsh <dwalsh@redhat.com> - 2.0.83-19.22
changelog:
  - Make sure installing po files use -p
  - Fix unchecked return codes
  Resolves: #684015
  - Fix semanage is sending the wrong kind of audit events 
  - Fix Polyinstantiated namespace mount leaking to excluded users 
  Related: #786664 
  - Fix selinux-policy update shows error parsing file obj_perm_s... 
  Related: #786191


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.25
changelog:
  - Make restorecon to return proper exit codes on failure
  Resolves:#824779
  - Fix generated role_types for *.te
  Resolves:#843727


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.27
changelog:
  - Fix restorecond usage
  - Add missing te_stream_rules and if_stream_rules templates
  Resolves:#816460
  - Print a message if no default labels are assigned
  Resolves:#851479


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.28
changelog:
  - Allow to define sock file in /etc directory 
  Resolves:#816460
  - Make output of audit2allow when AVC can be allowed by boolean more readable


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-5
changelog:
  - Added support for environmental variable GREP_LEGACY_R to enhance
    backward compatibility of -r switch behavior
    Resolves: rhbz#1367309


author: Tom Lane <tgl@redhat.com> 5.1.61-1.el6_2.1
changelog:
  - Update to 5.1.61, for assorted upstream bugfixes including
    numerous CVEs announced in January 2012
  Resolves: #787191


author: Petr Machata <pmachata@redhat.com> - 1.41.0-26
changelog:
  - Change Requires: and other package references to use %{?_isa}, so
    that dependencies are arch-aware.


author: Petr Machata <pmachata@redhat.com> - 1.41.0-27
changelog:
  - Fix the way MPI_VERSION is compared with (>=2 rather than ==2) so
    that an arg-less boost::mpi::environment ctor is exposed for MPI
    libraries with MPI_VERSION of 3.
    (boost-1.41.0-mpi-NOARG_INIT.patch)
  - Fix boost::interprocess::move (boost-1.41.0-interprocess-move.patch)
  - Fix copy construction of boost::weak_ptr
    (boost-1.41.0-weak_ptr-copy.patch)
  - Undo the change of non-Requires: package references to not use
    %{?_isa} again.


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.10-49
changelog:
  - correct the DST correction when using UTC time specification (#1320322)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages (#1226958)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-30
changelog:
  - mod_dav: add security fix for CVE-2013-6438 (#1078174)
  - mod_log_config: add security fix for CVE-2014-0098 (#1078174)


author: Dave Anderson <anderson@redhat.com> - 7.1.0-4.el6
changelog:
  - Fixes for the handling of truncated/incomplete flat-format vmcores, which
    may cause the session to hang during initialization.
    Resolves: rhbz#1231976
  - Fix for the "timer" command, which may fail with the error message
    "timer: cannot allocate any more memory!" when run on a kernel with
    an extremely large number of cpus.
    Resolves: rhbz#1238403


author: Dave Anderson <anderson@redhat.com> - 7.1.0-5.el6
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1283000


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-6
changelog:
  - Fix all.sh test for which application was last build by updating nss-versus-softoken-test.path
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Kai Engert <kaie@redhat.com> - 3.15.1-7
changelog:
  - Additional syntax fixes in nss-versus-softoken-test.patch
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-8
changelog:
  - Don't require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Harald Hoyer <harald@redhat.com> 147-2.36
changelog:
  - handle Vodafone K3565-Z 3G modem
  Resolves: rhbz#632646
  - update path_id to upstream version, which can handle SAS devices that 
    have no enclosure and handles iSCSI devices.
  Resolves: rhbz#698540 rhbz#714951
  - use IFINDEX for temporary network interface renaming
  Resolves: rhbz#701265
  - udev now changes the IO scheduler for all disks except sata disks to the 
    "deadline" scheduler.
  Resolves: rhbz#711254


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-26
changelog:
  - Match exact Oracle SID to avoid waiting for 90 seconds and killing other databases if their names include the name of the database you're trying to stop
  - Use DAD to check for address collision instead of ping for IPv6 in rgmanager
  - MySQL wait up to "startup_wait" seconds for mysqld to create PID
  - Handle failure state during stop in orainstance.sh
  - Add Oracle resource agents for Pacemaker

    Resolves: rhbz#1200639
    Resolves: rhbz#1191247
    Resolves: rhbz#1207285
    Resolves: rhbz#1234777
    Resolves: rhbz#1070479


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-27
changelog:
  - SAP HANA add Multiple Components One System (MCOS) support
  - sap_redhat_cluster_connector add support for "-" in hostnames

    Resolves: rhbz#1200903
    Resolves: rhbz#1269897


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-28
changelog:
  - Use IPv6 DAD for collision detection in IPaddr2
  - Add RAID segment type support for HA LVM
  - Fix Tomcat SELinux failed in enforcing mode
  - Add migrate_options parameter to VirtualDomain
  - Remove not-working tmpfs "support" from fs.sh
  - Fix tmpfile leak in mysql resource agent

    Resolves: rhbz#1276698
    Resolves: rhbz#1266173
    Resolves: rhbz#1280319
    Resolves: rhbz#1286650
    Resolves: rhbz#1024505
    Resolves: rhbz#1292054


author: Jan Pokorny <jpokorny@redhat.com> - 3.9.5-31
changelog:
  - Fix up for wrongly generated RNG schema for cluster configuration
    wrt. "action" tag

    Related: rhbz#1272587


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-32
changelog:
  - Add portblock resource agent for Pacemaker
  - Add Oracle Data Guard resource agent for rgmanager

    Resolves: rhbz#1302545
    Resolves: rhbz#1086838


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-4
changelog:
  - fix crash when the --listed-incremental option is used and archive includes
    root directory (#653433)
  - fix for long name corruption when --posix and --sparse options are used,
    testcase included (#656834)
  - using --remove-files caused data lost when symlinks were contained.  Testcase
    is included (#698212)
  - endless loop fix, problem occurred when the `-k' option was used and extracted
    archive contained symlink that already existed in file system (#726723).
  - improve sparse file support performance for entirely sparse files (#760665).
  - use gnulib's fnmatch rather then glibc's (in RHEL-6) (#768724)
  - the --remove-files option did not remove archived files in combination with
    append option (-r) (#782628).


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-33
changelog:
  - Release 1.2.11.15-33
  - Resolves: Bug 1094412 - fix memleak introduced by "Simple paged results should support async search (957864)" (DS 47623)
  - Resolves: Bug 1094413 - rhds91 389-ds-base-1.2.11.15-31.el6_5 crash on paged searches followed by simple srch (DS 47707)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-34
changelog:
  - Release 1.2.11.15-34
  - Resolves: #1123861
    EMBARGOED CVE-2014-3562 unauthenticated information disclosure [rhel-6.5.z] (DS 616, BZ 1123477)


author: Karel Klic <kklic@redhat.com> - 1.3.12-15
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
  - Added fix for CVE-2009-2624: Missing input sanitation by decompressing
    dynamic Huffman code blocks
    Resolves: rhbz#555090


author: Karel Klic <kklic@redhat.com> - 1.3.12-16
changelog:
  - Improved the patch fixing CVE-2009-2624: get "Bad table" output
    instead of "Unknown error" in gzip-1.3.12/unlzh.c:make_table()
    Related: rhbz#555090


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Upgrade to latest from NSA
    * Check last offset in the module package against the file size.
    Reported by Manoj Srivastava for bug filed by Max Kellermann.


author: Petr Pisar <ppisar@redhat.com> - 0.57-17
changelog:
  - Link to the ca-certificates ca-bundle.crt instead of shipping our own,
    outdated copy (bug #1059992)


author: Robert Scheck <robert@fedoraproject.org> 38-1
changelog:
  - Upgrade to 38 and updated arc4random.c file
  - Used -combine (-fwhole-program) rather the old -j switch


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.17
changelog:
  - 634021 Fix in .14 added regression during iscsi startup that prevented
  sessions from getting created.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.18
changelog:
  - fix iscsiadm exit code when iscsid is not running and the
  discovery command is run.
  - 689359 Fix uIP when using DCB for FCoE
  - 691902 Fix iscsiadm SendTargets offload support when the PDU's data len
  is 8K.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.20
changelog:
  - 696267 Create a offloaded session if the iscsi_host MAC and ibft
  MAC match. This enables support for Broadcoms hba boot mode.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.21
changelog:
  - 593269 iscsi was built against libcrypto, but was not using the code
  so this disabled the building of that code [patch from .14 got dropped
  due to mismerge].


author: Rafael Schloming <rafaels@redhat.com> - 0.1.897961-1
changelog:
  - Added groups to subpackages.
  - Replaced python_sitelib with python_sitearch, use %global instead of %define, and killed unused ruby_sitelib.


author: Dave Jones <davej@redhat.com>
changelog:
  - Shorten sleep time during init.
    This really needs to be replaced with proper udev hooks, but this is
    a quick interim fix.


author: Jarod Wilson <jarod@redhat.com> 2.6-3
changelog:
  - Add hopefully-about-to-be-merged-upstream hugeadm enhancements
  - Add huge pages setup helper script, using new hugeadm enhancements


author: Doug Ledford <dledford@redhat.com> - 2.0.34-1
changelog:
  - Update to latest upstream version
  - Rebuild against new libibverbs (FDR link speed capable and IBoE enabled)
  - Related: bz750609


author: Dave Young <dyoung@redhat.com> - 2.0.0-249
changelog:
  - improve warning message for remain size checking, resolve bug 857282
  - propagate_ssh_key remove selinux flips for ssh key generation, resolve bug 816467
  - random feeding fix, resolve bug 825640
  - do not print error when there's no vendor-model-type, resolve bug 801344, bug 628610


author: Dave Young <dyoung@redhat.com> - 2.0.0-250
changelog:
  - mkdumprd: Support line mode terminals for s390x, resolve bug 818645
  - Fix kdump documentation about vmcore-dmesg handling, resolve bug 850623


author: Dave Young <dyoung@redhat.com> - 2.0.0-252
changelog:
  - remove hardcode for including ata_generic driver, resolve bug 820474
  - mkdumprd: Fix /dev/mapper/* links not being created by default, resolve bug 874832
  - vmcore-dmesg: Determine correct machine pointer size, resolve bug 871292


author: Dave Young <dyoung@redhat.com> - 2.0.0-254
changelog:
  - blacklist IB module mlx4_core.ko, resolve bug 876891
  - create bonding device dynamiclly, resolve bug 859824


author: Dave Young <dyoung@redhat.com> - 2.0.0-255
changelog:
  - make the SCSI dump target work with Linux on System z, resolve bug 870957
  - extract Linux on System z device init into separate functions, resolve bug 870957
  - remove hwclock calls for Linux on System z, resolve bug 821376


author: Nikola Forró <nforro@redhat.com> - 1.3-16
changelog:
  - Revert previous changes in patch for CVE-2016-5159
  - Fix double free in patch for CVE-2016-5139
  - Fix memory leaks and invalid read in cio_bytein
    Related: #1419775


author: Mark Reynolds <mreynolds@redhat,com> - 1.2.11.15-91
changelog:
  - Release 1.2.11.15-91
  - Resolves: bug 1437776 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-95
changelog:
  - Release 1.2.11.15-95
  - Resolves: Bug 1562152 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch
  - Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)
  - Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-97
changelog:
  - Bump version to 1.2.11.15-97
  - Resolves: Bug 1563539 - acl_copyEval_context double free (fix spec file patch)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Bump to 2.6.0 and u80b32.
  - Drop upstreamed patches and separate AArch64 HotSpot.
  - Add dependencies on pcsc-lite-devel (PR2496) and lksctp-tools-devel (PR2446)
  - Only run -Xshare:dump on JIT archs other than power64 as port lacks support
  - Update remove-intree-libraries script to cover LCMS and PCSC headers and SunEC.
  - Resolves: rhbz#1235156


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.409.el6
changelog:
  - kvm-exec-Simplify-allocation-of-guest-RAM.patch [bz#867921]
  - kvm-exec-Don-t-abort-when-we-can-t-allocate-guest-memory.patch [bz#867921]
  - kvm-block-better-error-message-for-read-only-format-name.patch [bz#999788]
  - kvm-vmdk-Add-migration-blocker.patch [bz#999358]
  - kvm-scsi-Fix-scsi_bus_legacy_add_drive-scsi-generic-with.patch [bz#1013478]
  - kvm-Add-support-for-JSON-pretty-printing.patch [bz#1010610]
  - kvm-qemu-img-add-dirty-flag-status.patch [bz#1010610]
  - kvm-qemu-img-make-info-backing-file-output-correct-and-e2.patch [bz#1010610]
  - kvm-qapi-Add-SnapshotInfo-and-ImageInfo.patch [bz#1010610]
  - kvm-qemu-img-Add-json-output-option-to-the-info-command.patch [bz#1010610]
  - kvm-qemu-img-Add-backing-chain-option-to-info-command.patch [bz#1010610]
  - kvm-block-get_block_status-set-pnum-0-on-error.patch [bz#1010610]
  - kvm-block-get_block_status-avoid-segfault-if-there-is-no.patch [bz#1010610]
  - Resolves: bz#1010610
    (Backport  option "--output=json|human" to qemu-img info command)
  - Resolves: bz#1013478
    (-device usb-storage,serial=... crashes with SCSI generic drive)
  - Resolves: bz#867921
    ([RFE] Nicer error report when qemu-kvm can't allocate guest RAM)
  - Resolves: bz#999358
    (do live migration with used VMDK format disk should fail with a friendly message prompt)
  - Resolves: bz#999788
    (qemu should give a more friendly prompt when didn't specify read-only for VMDK format disk)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.410.el6
changelog:
  - kvm-chardev-fix-pty_chr_timer.patch [bz#995341]
  - Resolves: bz#995341
    (hot-unplug chardev with pty backend caused qemu Segmentation fault)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.411.el6
changelog:
  - kvm-block-don-t-lose-data-from-last-incomplete-sector.patch [bz#1009370]
  - kvm-vmdk-fix-cluster-size-check-for-flat-extents.patch [bz#1009370]
  - Resolves: bz#1009370
    (qemu-img refuses to open the vmdk format image its created)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.412.el6
changelog:
  - kvm-char-move-backends-io-watch-tag-to-CharDriverState.patch [bz#985205]
  - kvm-char-use-common-function-to-disable-callbacks-on-cha.patch [bz#985205]
  - kvm-char-remove-watch-callback-on-chardev-detach-from-fr.patch [bz#985205]
  - kvm-os-posix-block-SIGUSR2-in-os_setup_early_signal_hand.patch [bz#996814]
  - Resolves: bz#985205
    (QEMU core dumped when do hot-unplug virtio serial port during transfer file between host to guest with virtio serial through TCP socket)
  - Resolves: bz#996814
    (boot image with gluster native mode cant work with attach another device from local file system)


author: Tomas Heinrich <theinric@redhat.com> - 0.11-9
changelog:
  - initial import
    - disable building of a debuginfo package - works around rhbz 903009
    - add a workaround for disabling rpath
    - disable paralel build
    - disable 'check' section for now
    resolves: #966964


author: Peter Jones <pjones@redhat.com> - 4.02-9
changelog:
  - Avoid a workaround that causes machines to stall in PXE boots that
    use the local disk.
    ResolveS:rhbz#980671


author: Angus Salkeld <asalkeld@redhat.com> - 0.5.1-1
changelog:
  - Rebased to 0.5.1 which includes:
  - LOOP: make the return more consistent in qb_loop_timer_expire_time_get()
  - LOG: add string.h to qblog.h
  - Add a qb_strerror_r wrapper.
  - don't let an invalid time stamp provoke a NULL dereference
  - LOG: move priority check up to prevent unnecessary format.
  - rename README to README.markdown


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.504.el6
changelog:
  - kvm-vns-tls-don-t-use-depricated-gnutls-functions.patch [bz#1428750]
  - kvm-vnc-apply-display-size-limits.patch [bz#1430616 bz#1430617]
  - kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1443448 bz#1443450]
  - kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1443448 bz#1443450 bz#1447542 bz#1447545]
  - kvm-cirrus-avoid-write-only-variables.patch [bz#1444378 bz#1444380]
  - kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1444378 bz#1444380]
  - kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1444378 bz#1444380]
  - kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1444378 bz#1444380]
  - kvm-cirrus-fix-PUTPIXEL-macro.patch [bz#1444378 bz#1444380]
  - Resolves: bz#1428750
    (Fails to build in brew)
  - Resolves: bz#1430616
    (CVE-2017-2633 qemu-kvm: Qemu: VNC: memory corruption due to unchecked resolution limit [rhel-6.10])
  - Resolves: bz#1430617
    (CVE-2017-2633 qemu-kvm-rhev: Qemu: VNC: memory corruption due to unchecked resolution limit [rhel-6.10])
  - Resolves: bz#1443448
    (CVE-2017-7718 qemu-kvm: Qemu: display: cirrus: OOB read access issue [rhel-6.10])
  - Resolves: bz#1443450
    (CVE-2017-7718 qemu-kvm-rhev: Qemu: display: cirrus: OOB read access issue [rhel-6.10])
  - Resolves: bz#1444378
    (CVE-2017-7980 qemu-kvm: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.10])
  - Resolves: bz#1444380
    (CVE-2017-7980 qemu-kvm-rhev: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.10])
  - Resolves: bz#1447542
    (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.10])
  - Resolves: bz#1447545
    (CVE-2016-9603 qemu-kvm-rhev: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.10])


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.505.el6
changelog:
  - kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [bz#1525939 bz#1528024]
  - kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [bz#1525939 bz#1528024]
  - kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [bz#1525939 bz#1528024]
  - kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501298]
  - kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1486641]
  - kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534692]
  - Resolves: bz#1486641
    (CVE-2017-13672 qemu-kvm-rhev: Qemu: vga: OOB read access during display update [rhel-6.10])
  - Resolves: bz#1501298
    (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-6.10])
  - Resolves: bz#1525939
    (CVE-2017-5715 qemu-kvm: hw: cpu: speculative execution branch target injection [rhel-6.10])
  - Resolves: bz#1528024
    (CVE-2017-5715 qemu-kvm-rhev: hw: cpu: speculative execution branch target injection [rhel-6.10])
  - Resolves: bz#1534692
    (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-6.10])
  - Resolves: bz#1549152
    (qemu-kvm-rhev: remove unused patch file [rhel-6.10])


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.506.el6
changelog:
  - kvm-vga-add-share_surface-flag.patch [bz#1553674]
  - kvm-vga-add-sanity-checks.patch [bz#1553674]
  - Resolves: bz#1553674
    (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-6])


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.506.el6_10.1
changelog:
  - qemu-kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574074]
  - qemu-kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1574074]
  - qemu-kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1574074]
  - Resolves: bz#1574074
    (CVE-2018-3639 qemu-kvm: hw: cpu: speculative store bypass [rhel-6.10.z])


author: Harald Hoyer <harald@redhat.com> 147-2.58
changelog:
  - do not print error, if /sys/class/firmware/timeout does
    not exist (yet)
  Resolves: rhbz#1140336
  - always call modprobe, even when a driver is bound to the device
  Resolves: rhbz#1084513
  - fixed for every modprobe locked worker, increase max_childs
    use ncnt instead of zcnt
  Resolves: rhbz#1164960
  - print warning in start_udev, if udevlog is used
  Resolves: rhbz#876535


author: Harald Hoyer <harald@redhat.com> 147-2.60
changelog:
  - ata_id - fixup all 8 not only 6 bytes of the fw_rev string
  Resolves: rhbz#794561
  - udev: properly handle symlink removal by 'change' event
  Resolves: rhbz#1018171


author: <dwalsh@redhat.com> - 3.0.40-1
changelog:
  - Apply Miroslav patch that rewrites sealert option handling with using optparse. Fixing conflicting options problems.
  - Fix requires to include pygtk2-libglade


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-12
changelog:
  - Resolves: Bug 910994 - PamConfig schema not updated during upgrade
  - Resolves: Bug 910995 - Valgrind reports memleak in modify_update_last_modified_attr
  - Resolves: Bug 910996 - DS returns error 20 when replacing values of a multi-valued attribute  (only when replication is enabled)
  - Resolves: Bug 911467 - DNA: use event queue for config update only at the start up
  - Resolves: Bug 911468 - Error messages encountered when using POSIX winsync
  - Resolves: Bug 911469 - dse.ldif is 0 length after server kill or machine kill
  - Resolves: Bug 911474 - Invalid chaining config triggers a disk full error and shutdown
  - Resolves: Bug 914305 - ns-slapd segfaults while trying to delete a tombstone entry
  - Resolves: Bug 913228 - unauthenticated denial of service vulnerability in handling of LDAPv3 control data


author: Christophe Fergeau <cfergeau@redhat.com> - 2.7-13
changelog:
  - Fix SendCtrlAltDelete property name so that enabling/disabling
    Ctrl+Alt+Del from the rhev/ovirt portal actually works
    Related: rhbz#752090


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.30.rc1.3
changelog:
  - DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1220366)


author: Phil Sutter - 2.6.32-46
changelog:
  - Resolves: #974693 - lnstat manpage insufficient
  - Resolves: #1042799 - Inconsistent detailed link information between "ip link" and "ip monitor link"
  - Resolves: #684691 - can't change the remote/local address of tunnel interface to "any" in ipip mode
  - Resolves: #1094676 - iproute2 route table querying broken for table numbers >= 2147483648
  - Resolves: #1261115 - tc does not allow to attach pfifo_fast qdisc
  - Resolves: #1229355 - ss -an shows only tcp sockets
  - Resolves: #1199867 - iproute could not show correct hoplimit info with value -1


author: Phil Sutter - 2.6.32-47
changelog:
  - Resolves: #1277102 - ip neighbour segfaults if bad mac address is used
  - Resolves: #1243413 - ip rule help output contains action reject, but this action does not work
  - Resolves: #1268058 - backport additional tcp_info dump support in ss tool
  - Resolves: #1045032 - iproute2: "ip -o link" doesn't show devices entries in a single line when reporting SR-IOV devs.
  - Resolves: #1093726 - manpage for tc needs info on filters
  - Resolves: #1265240 - ss returns zero (ok) when invalid option is added


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-66
changelog:
  - Release 1.2.11.15-66
  - Resolves: #1270002 - cleanallruv should completely clean changelog (DS 48208)
  - Resolves: #1267405 - many attrlist_replace errors in connection with cleanallruv (DS 48283)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-67
changelog:
  - Release 1.2.11.15-67
  - Resolves: #1234431 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245)
  - Resolves: #1236148 - Slow replication when deleting large  quantities of multi-valued attributes (DS 48195)
  - Resolves: #1236156 - Avoid using regex in ACL if possible (DS 48175)
  - Resolves: #1236656 - Dynamic nsMatchingRule changes had no effect on the attrinfo thus following reindexing, as well. (DS 48212)
  - Resolves: #1240451 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192)
  - Resolves: #1244970 - Crash during retro changelog trimming (DS 48206)
  - Resolves: #1245237 - winsync lastlogon attribute not syncing between DS and AD. (DS 48232)
  - Resolves: #1246165 - verify_db.pl doesn't verify DB specified by -a option (DS 48215)
  - Resolves: #1247812 - logconv autobind handling regression caused by 47446 (DS 48231)
  - Resolves: #1253406 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: #1255290 - db2index creates index entry from deleted records (DS 48252)
  - Resolves: #1259959 - perl module conditional test is not conditional when checking SELinux policies (DS 48305)
  - Resolves: #1260622 - ns-slapd - LOGINFO:Unable to remove file (DS 48304)
  - Resolves: #1265851 - Double free while adding entries (1.2.11 only) (DS 48287)
  - Resolves: #1273552 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-68
changelog:
  - Release 1.2.11.15-68
  - Resolves: #1278585 - deadlock in mep delete post op (DS 47976) 
  - Resolves: #1247792 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-69
changelog:
  - Release 1.2.11.15-69
  - Resolves: #1247792 - SimplePagedResults -- abandon could happen between the abandon check and sending results -- Fixing a regression introduced in 1.2.11.15-68 (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-70
changelog:
  - Release 1.2.11.15-70
  - Resolves: #1259959 - perl module conditional test is not conditional when checking SELinux policies - fixing a regression (DS 48305)
  - Resolves: #1282457 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-71
changelog:
  - Release 1.2.11.15-71
  - Resolves: #1284791 - 389-ds-base: ldclt -e randomauthid Segmentation fault. (DS 48289)
  - Resolves: #1290243 - SimplePagedResults -- in the search error case, simple paged results slot was not released (DS 48375)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-72
changelog:
  - Release 1.2.11.15-72
  - Resolves: #1292649 - allow users to specify to relax the FQDN constraint (DS 48332)
  - Resolves: #1294770 - Supplier can skip a failing update, although it should retry (DS 47788)
  - Resolves: #1296694 - ns-slapd crash in ipa context - c_mutex lock memory corruption and self locks (DS 48406, DS 48338 reverted)
  - Resolves: #1297385 - Interpret IPV6 addresses for ACIs, replication, and chaining (DS 196)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-73
changelog:
  - Release 1.2.11.15-73
  - Resolves: #1294770 - Supplier can skip a failing update, although it should retry (DS 47788)
  - Resolves: #1298496 - slapd process crashes on entry modification (DS 47964)
  - Resolves: #1307152 - keep alive entries can break replication (DS 48445)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-74
changelog:
  - Release 1.2.11.15-74
  - Resolves: #1313258 - change severity of some messages related to "keep alive" entries (DS 48420)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-75
changelog:
  - Release 1.2.11.15-75
  - Resolves: #1335108 - Paged results search returns the blank list of entries (DS 48808)
  - Resolves: #1342614 - password history is not updated when an admin resets the password (DS 48813)
  - Resolves: #1342382 - Running db2index with no options breaks replication (DS 48854)


author: Ade Lee <alee@redhat.com> 9.0.3-21
changelog:
  - Resolves #771790 - sslget does not work after FEDORA-2011-17400 update,
    breaking FreeIPA install (fixed in Git repo)


author: Ade Lee <alee@redhat.com> 9.0.3-23
changelog:
  - Resolves #769388 - pki-silent does not properly escape command-line arguments
    (fixed in Git repo)


author: Ade Lee <alee@redhat.com> 9.0.3-26
changelog:
  - Resolves #844459 - Increase audit cert renewal range to 2 years (mharmsen)
  - Resolves #841663 - serial number incorrectly cast from BigInt to integer in
    installation wizard (mharmsen)
  - Resolves #858864 - create/ identify a mechanism for clients to determine that
    the pki subsystem is up (alee)


author: Ade Lee <alee@redhat.com> 9.0.3-27
changelog:
  - Resolves #867640 - ipa-replica-install Configuration of CA failed
    by REVERTING #819111 - Non-existent container breaks replication


author: Akemi Yagi <toracat@centos.org> [2.6.32-504.8.1.el6.centos.plus]
changelog:
  - Roll in CentOS Branding
  - Added new config files for i686 and x86_64 with extra features turned on
    including some network adapters, some ATM, all serial ATA, Adaptec I2O,
    ARPD, BusLogic, IPX, Appletalk, ReiserFS, JFS, TOMOYO
  - Added centos-linux-2.6-bonding-fix-802.3ad.patch.
  - Added a fix to compile the jfs module [bug#5453]
  - Added a fix for race in TOMOYO [bug#5378]
  - Added a fix for usermodehelper [bug#5588]
  - Added a patch that allows non-LogiTech remote to work [bug#5780]
  - Added sysfs-fix-printk-warnings-bug6157.patch [bug#6157]
  - Added fs-tmpfs-add-xattrs-support.patch [bug#4586.18700]
  - Added fix-fadvise-for-tmpfs.patch [bug#6938]
  - DEBUG_KMEMLEAK enabled in config [bug#7055]
  - Added support for Kontron  [bug#7270]
  - Added a patch to fix [bug#7051]
  - Added a patch to fix [bug#7538]
  - Added a patch to fix [bug#7882]
  - Disable BRIDGE_IGMP_SNOOPING [bug#7796]
  - Added a patch to fix xen >32 vCPUs issue [bug#8016]
  - Enable IRDA (regression) [bug#8070]


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-19.1
changelog:
  - Proper region tag validation on package/header read (CVE-2012-0060)
  - Double-check region size against header size (CVE-2012-0061)
  - Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.77.1-1
changelog:
  - split -bin and -common packages, the former becoming the only arch-specific
  - also move python-specific (entry points, main files) back from -cli package
  - move nano fallback editor dependency to -cli package [PGissue#1]
  - bump upstream package, see https://pagure.io/clufter/releases


author: Peter Hatina <phatina@redhat.com> 1.8.8-6
changelog:
  - security patches
  - Resolves: CVE-2013-4927
              CVE-2013-4931
              CVE-2013-4932
              CVE-2013-4933
              CVE-2013-4934
              CVE-2013-4935
              CVE-2013-3557


author: Petr Sabata <psabata@redhat.com> - 2.6.32-13
changelog:
  - Do not segfault when creating veth with peer option without any name provided
  - link_veth_segv.patch
  - Resolves: rhbz#636943


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.13
changelog:
  - qemu: allow restore with non-migratable XML input (rhbz#1155563)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1155563)
  - Make ABI stability issue easier to debug (rhbz#1155563)


author: Baoquan He <bhe@redhat.com> -2.0.0-258.1
changelog:
  - kexec-tools: Map network devices based on MAC address
  - kexec-tools: Allow mkdumprd modules blacklist to be overwritten by extra_modules


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-18
changelog:
  - Don't leave symlinks in /tmp after adding a printer (bug #556548).
  - Fixed probe-printer-typo.patch (bug #579864).
  - Fixed stack overflow in pycups (bug #584991).
  - Moved COPYING file from main package to libs subpackage (bug #613708).
  - Fixed gtk_label_autowrap.py by updating it to latest version (bug #633595).
  - Set D-Bus timeout when calling asynchronously (bug #634252).
  - More translatable strings marked as such (bug #634436).
  - Backport translations from upstream (bug #634436).
  - Don't rename when names differ only in size of characters (bug #636523).
  - Stub out getJockeyDriver_thread() (bug #639624).
  - Applet could cause high cupsd CPU usage (bug #645426).
  - Don't crash when DISPLAY is unset (bug #676339, bug #676343).
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (bug #708519).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-23
changelog:
  - Use thread-local storage for password callback function (bug #744519).
  - Don't handle tooltips during mainloop recursion (bug #739745).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-24
changelog:
  - Fixed pycups documentation (bug #854937).
  - Prevent pycups segmentation fault when handling UTF-8 input (bug #1063224).


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-17
changelog:
  - avoid CURLE_OUT_OF_MEMORY given a file name without any slash (#623663)
  - proxy tunnel support for LDAP requests (#655134)
  - proxy with kerberos authentication for https (#625685)
  - improve handling of FTP server session timeout (#651592)


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-39.1
changelog:
  - The scheduler might leave old job data files in the spool directory
    (STR #3795, STR #3880, bug #736304).


author: John Dennis <jdennis@redhat.com> - 0.7-1
changelog:
  - add support for symmetric encryption/decryption
    more support for digests (hashes)

    The following classes were added:
    PK11SymKey PK11Context

    The following methods and functions were added:
    get_best_wrap_mechanism          get_best_key_length
    key_gen                          derive
    get_key_length                   digest_key
    clone_context                    digest_begin
    digest_op                        cipher_op
    finalize                         digest_final
    read_hex                         hash_buf
    sec_oid_tag_str                  sec_oid_tag_name
    sec_oid_tag_from_name            key_mechanism_type_name
    key_mechanism_type_from_name     pk11_attribute_type_name
    pk11_attribute_type_from_name    get_best_slot
    get_internal_key_slot            create_context_by_sym_key
    import_sym_key                   create_digest_context
    param_from_iv                    param_from_algid
    generate_new_param               algtag_to_mechanism
    mechanism_to_algtag

    The following files were added:
    cipher_test.py digest_test.py


author: John Dennis <jdennis@redhat.com> - 0.8-1
changelog:
  - The following methods, properties  and functions were added:
    SecItem.type SecItem.len, SecItem.data
    PK11SymKey.key_data, PK11SymKey.key_length, PK11SymKey.slot
    create_context_by_sym_key
    param_from_iv
    generate_new_param
    get_iv_length
    get_block_size
    get_pad_mechanism
  - SecItem's now support indexing and slicing on their data
  - Clean up parsing and parameter validation of variable arg functions


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16
changelog:
  - July 2015 security update to u51b16.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60.
  - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea.
  - Re-generate EC disablement patch following CPU DH changes.
  - Resolves: rhbz#1235160


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6
changelog:
  - Fix `gdb/findvar.c:417: internal-error: read_var_value: Assertion `frame'
    failed.' (Tom Tromey, RH BZ 947564).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6_5.1
changelog:
  - Fix 'gdb crashes while thread apply all bt is run on the core file'
    (Jan Kratochvil, RH BZ 1108490).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6_5.2
changelog:
  - Improve fix to ''gdb crashes while thread apply all bt is run on the core
    file' (Jan Kratochvil, Tom Tromey, Paul Pluzhnikov, RH BZ 1108490).


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-10
changelog:
  - add a patch to fix a segfault in the regex module
    resolves: #1109155
  - explicitly disable systemd service file generation
  - turn on verbose make output


author: Honza Horak <hhorak@redhat.com> - 2.19-19
changelog:
  - Added passwd.adjunct support in yppasswdd to recognize 
    password format correctly when changing password using yppasswd
    Resolves: #699667
  - Fix strcat on uninitialized memory in yppasswdd
    Resolves: #699675


author: Honza Horak <hhorak@redhat.com> - 2.19-20
changelog:
  - changed shadow patch to allow different number of columns 
    in passwd.adjunct file than in shadow file
    Resolves: #699667


author: Joe Orton <jorton@redhat.com> - 2.2.15-1
changelog:
  - update to 2.2.15 (#570465, #570442)
  - fix version string (#572140)
  - mod_ssl: use ASN1_STRING_print() in SSLRequire's OID() (#552942)
  - prevent use of rsync during "make install" (#557049)
  - load mod_version by default in httpd.conf


author: Joe Orton <jorton@redhat.com> - 2.2.15-2
changelog:
  - init script fixes for LSB compliance (#546252)
   * exit code 2 for an unknown script argument
   * exit code 6 for a reload if config-test fails
   * exit code 7 for a reload on a stopped service
   * fixed help output to cover all options
  - mod_dav: handle PUT failure more cleanly (#572911)


author: Joe Orton <jorton@redhat.com> - 2.2.15-3
changelog:
  - add "Satisfy All" for .htaccess in httpd.conf (#594981)
  - adjust user/group creation in %pre (#594395)
  - mod_ssl: tweak OID() evaluation of unknown exts (#594980)


author: Felipe Borges <feborges@redhat.com> - 0.2.4-2
changelog:
  - Allocate at least 1 page if there are no Pages: or Page: comments in the PS file
  - Resolves: #667717


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-17
changelog:
  - Resolves: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-18
changelog:
  - Related: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-19
changelog:
  - Resolved: #1334490 - CVE-2016-4554 CVE-2016-4556 squid: various flaws
  - Related: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-24
changelog:
  - Resolves: #1235114 - Squid crashes with 'assertion failed: disk.cc:377:
    "fd >= 0"' after reloading the configuration.


author: Ben Skeggs <bskeggs@redhat.com> 0.0.15-19.20091105gite1c2efd
changelog:
  - Sync up fixes from current F12 package
  - nouveau-kms-noaccel-fixes.patch: fix crash on fb resize when using
    shadowfb (rh#538238)
  - nouveau-nv04_nodcb.patch: assume nv04 doesn't have a DCB table (rh#555202)
  - nouveau-randr-fixes.patch: fix fb resize/rotate on <nv50 (rh#532978)
  - nouveau-libdrm-compat.patch: fix build against libdrm 2.4.17


author: Ian Kent <kpnt@redhat.com> - 1:5.0.5-18
changelog:
  - bz563769 - [RFE] autofs needs to wait for a network up event before starting
    - dont connect at ldap lookup module init.
    - fix reconnect get base dn.
  - bz563772 - automount cannot use rpc ping to select from list of replicated servers
    - fix random selection option.
  - bz563773 - [RHEL 5] RHEL5.4 TIMEOUT=0 automount constantly unmount fileystems
    - fix disable timeout.
  - bz563777 - Incorrect strdup() return value check in lib/defaults.c:get_env_string()
    - fix strdup() return value check.
  - Resolves: rhbz#563769 rhbz#563772 rhbz#563773 rhbz#563777


author: Ian Kent <kpnt@redhat.com> - 1:5.0.5-19
changelog:
  - bz563769 - [RFE] autofs needs to wait for a network up event before starting
    - fix get query dn failure
  - bz574309 - autofs cannot mount the folder name including "&"
    - fix ampersand escape in auto.smb.
  - bz465463 - CRM 1203376 autofs/automount to mount nfs4 or nfs3 for mixed servers
    - make nfs4 default for RedHat replicated selection configuration.
  - Resolves: rhbz#574309 rhbz#465463
  - Related: rhbz#563769


author: Ian Kent <kpnt@redhat.com> - 1:5.0.5-21
changelog:
  -bz578677 - random server selection is not random if any host is on a different network
   - fix random selection for host on different network
  - Resolves: rhbz#578677


author: Ian Kent <ikent@redhat.com> - 5.0.5-23.el6_0.1
changelog:
  - bz689754 - automount hangs on startup when started with an already
    mounted cifs share
    - fix remount locking
  - Resolves: rhbz#689754


author: Ray Strode <rstrode@redhat.com> 0.8.3-27.1
changelog:
  - use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
    to work around a kernel bug leading to blocked boot.
    Resolves: #1125325


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-0.3
changelog:
  - Rebase RHEL 6.7.z to NSS-util 3.21 in preparation for Firefox 45
  - Resolves: Bug 1299874
  - Update upstream patch for CVE-2016-1950


author: Richard Hughes <rhughes@redhat.com> - 0.6.21-5
changelog:
  - Update to version 0.6.21 fixing many bugs and CVEs
  - Remove upstreamed patches
  - Resolves: #839915


author: Matthew Barnes <mbarnes@redhat.com> - 2.20.1-2
changelog:
  - Rebase to 2.20.0 based on the Fedora 13 package.
  - Removed patches (merged into 2.20.0 tarball):
    0001-Avoid-spurious-notifications-from-GtkEntry.patch
    0001-Prevent-the-destruction-of-the-menu-label-on-page-re.patch
    0002-Yet-another-fix-for-shape-handling.patch
    allow-set-hint.patch
    filesystemref.patch
    gtk2-preview.patch
    gtk2-rotate-layout.patch
    o-minus.patch
    strftime-format.patch
  - Removed translation patches that no longer apply:
    gtk2-translations.patch
    gtk2-translations-gu.patch
  - Fixed conflicts in patches:
    gtk2-filechooser-empty-location.patch
    gtk2-filechooser-size-column-hiding-additional.patch
    gtk2-landscape-pdf-print.patch
    icon-padding.patch
    tooltip-positioning.patch
  Resolves: #883022


author: Milan Crha <mcrha@redhat.com> - 2.20.1-3
changelog:
  - Add patch for RH bug #970594 (a11y combo names not shown without string column in model)
  Resolves: #970594


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-36
changelog:
  - SAPDatabase: fix process count for SUSER
  - oracle: use monprofile parameter
  - send_arp: fix buffer overflow on infiniband devices
  - mysql: use replication_port variable
  - oracle: inform user that monprofile monuser must start with C##
    for container databases

    Resolves: rhbz#1260710
    Resolves: rhbz#1358892
    Resolves: rhbz#1351717
    Resolves: rhbz#1337146
    Resolves: rhbz#1374655


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-37
changelog:
  - lvm.sh: fix status clustered to check specific volume
  - netfs.sh: move defaults to metadata
  - nfsserver: use rpcpipefs_dir variable

    Resolves: rhbz#1320520
    Resolves: rhbz#1286291
    Resolves: rhbz#1382036


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-40
changelog:
  - SAPHana/SAPHanaTopology: update to version 0.152.17
  - Add netstat dependency

    Resolves: rhbz#1381891
    Resolves: rhbz#1395594


author: Justin Ross <jross@redhat.com> - 0.14-1
changelog:
  - Rebase to 0.14
  - rhbz#743657 - The pure-python QMF console unnecessarily retains
    references to query results
  - rhbz#699499 - [RFE] qmfv2 must provide mainloop integration
  - rhbz#681680 - QMF agents wake up several times a second
  - rhbz#663461 - Enable new architectures
  - Remove python-qpid-qmf and ruby-qpid-qmf from ppc and s390 architectures


author: Steven Dake <sdake@redhat.com> 1.2.3-27
changelog:
  - Resolves: rhbz#680258
  - Resolves: rhbz#675099
  - Fix problem where corosync can't be built on an older
    installation. (rhbz#680258)
  - merge upstream commit 5ee4fe19db4b1e9c3984a9bf1645b8cf6d711f3d
  - Avoid abort if existing ring id file does not contain
    atleast 8 bytes.  (rhbz#675099)
  - merge upstream commit bb35b86fef4f256a21993f73b71fd512d4763e2f


author: Steven Dake <sdake@redhat.com> 1.2.3-28
changelog:
  - Resolves: rhbz#677975
  - Fix problem where objdb handle destroy is not called in
    clear_object.  (rhbz#677975)
  - merge upstream commit ea18c71936edf8cdc647245374f3a7932ac7e686
  - Fix problem where all items are not iterated in
    object_reload_notification.  (rhbz#677975)
  - merge upstream commit 7f2e1da84d5883176f0f95936b8a4bf21de12a0a


author: Steven Dake <sdake@redhat.com> 1.2.3-29
changelog:
  - Resolves: rhbz#675783
  - Fix problem that leads to abort when token lost in
    recovery sate.  (rhbz#675783)
  - merge upstream commit 6aa47fde953bf2179f5bd2dd07815fc7d80f47bb


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.231-1
changelog:
  - Add support for lvm thin provisioning via ks custom storage. (dlehman)
    Resolves: rhbz#1083459
  - Make sure new freebl libs are part of initrd. (sbueno+anaconda)
    Resolves: rhbz#1183134
  - Prevent anaconda from crashing due to repeated calls to rpmReadConfigFiles.
    (sbueno)
    Resolves: rhbz#1021534


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.232-1
changelog:
  - Remove even more drivers for ppc64 32M limit (bcl)
    Resolves: rhbz#1198173
  - Fix detection of unformatted and LDL DASDs. (sbueno+anaconda)
    Resolves: rhbz#1144979
  - On interactive kickstart installs, still get the password from the ks file.
    (clumens)
    Resolves: rhbz#995531
  - Enable sharing of the VNC server. (sbueno+anaconda)
    Resolves: rhbz#1168024
  - RHEL6 Basic Video Driver Install to Windows2012 VM Fails (rmarshall)
    Resolves: rhbz#1083586
  - dracut needs iscsi_firmware cmdline arg (bcl)
    Resolves: rhbz#1185792
  - Exclude prelink package in FIPS mode (bcl)
    Resolves: rhbz#697938
  - Handle NoneType Exception after deleting PPC partitions (rmarshall)
    Resolves: rhbz#1021445
  - Bring support for nicdelay back using NM's GATEWAY_PING_TIMEOUT (rvykydal)
    Resolves: rhbz#979163


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.233-1
changelog:
  - Keep track of whether users should be prompted to format CDL dasds.
    (sbueno+anaconda)
    Resolves: rhbz#1164240
    Related: rhbz#1164240


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.234-1
changelog:
  - Fix lvm detection broken with introduction of thinp support. (dlehman)
    Resolves: rhbz#1200832
    Related: rhbz#1083459
  - RHEL 6.6 Upgrade Fails from AttributeError on Multipath (rmarshall)
    Resolves: rhbz#1129499
  - Drop hy.po Armenian translation (bcl)
    Resolves: rhbz#1205286
    Related: rhbz#1205286
  - Update translation documentation for Zanata (bcl)
    Resolves: rhbz#1205286
    Related: rhbz#1205286
  - Switch translation support to fedora.zanata.org (bcl)
    Resolves: rhbz#1205286


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.235-1
changelog:
  - Don't remove pps_core from ppc64.img (sbueno+anaconda)
    Resolves: rhbz#1213417
  - Check for FBA DASDs so we don't try to format them with dasdfmt.
    (sbueno+anaconda)
    Resolves: rhbz#1144979
  - Include hyperv modules in mk-images (sbueno+anaconda)
    Resolves: rhbz#1132770


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.236-1
changelog:
  - Include lvm thinp utilities. (dlehman)
    Resolves: rhbz#1212735
  - TypeError: argument must be string (jkonecny)
    Resolves: rhbz#1209414


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.237-1
changelog:
  - Fix scanning of non-leaf lvs. (dlehman)
    Resolves: rhbz#1213748
  - Fix KeyError in devicetree. (sbueno+anaconda)
    Resolves: rhbz#1225469
  - Fix partition alignment problems. (sbueno+anaconda)
    Resolves: rhbz#1209424


author: Brian C. Lane <bcl@redhat.com> - 13.21.239-1
changelog:
  - Align end sector in the appropriate direction for resize. (bcl)
    Resolves: rhbz#1236506
  - Filter out free regions too small for alignment of partitions (bcl)
    Resolves: rhbz#1236506


author: Ville Skyttä <ville.skytta at iki.fi> - 1.6.0-3
changelog:
  - Patch to make upstream build system honor our CFLAGS and friends.
  - Don't bother building throwaway static libs.
  - Disable autotools dependency tracking for cleaner build logs and possible
    slight build speedup.
  - Convert docs to UTF-8.
  - Update URLs.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.0-2
changelog:
  - Add a patch to allow usage of IPv6 nameservers
    (upstream revisions 1199,1201,1202)
  - Resolves: rhbz#560116


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.0-6
changelog:
  - Only fall back to AF_INET searches when looking for AF_UNSPEC
    addresses (#730695)
  - Do not leak memory in ares_parse_a_reply when parsing an invalid
    record (#730693)
  - Add a missing break (#713133) - reported and patched by Michal Luscon
  - Fix a SIGBUS when resolving SRV queries on architectures that do
    not support unaligned memory access (#695426)
  - Amend the ares_gethostbyname manpage so that it lists ARES_ENODATA as
    an allowed return code (#640944)


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
    pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-5
changelog:
  - provide omsnmp module in rsyslog-snmp subpackage
    Resolves: #618488
  - modify logrotate configuration to omit boot.log
    Resolves: #683537
  - use correct lock file name
    Resolves: #698705
  - provide ommail module
    Resolves: #702314


author: Ondrej Vasik <ovasik@redhat.com> - 0.2.7-3
changelog:
  - change project URL to current one (#1022502)
  - ensure num_threads <= IPMICONSOLE_THREAD_COUNT_MAX (#1022496)


author: Roman Rakus <rrakus@redhat.com> - 3.10.12-1.1
changelog:
  - Fixed an issue causing SEGV on some hardware when dmi_processor_id()
    is called
    Resolves: #726614


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.4.2-19.1
changelog:
  - allow removal of expiration or last password change dates
    by using -1 as chage date argument again (#1183638)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-34
changelog:
  - Add dist tag, fix buildroot, defattr, obsoletes, provides and summary,
    comment patches and sources


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-110
changelog:
  - set CPAN installation path into "site"
  - 'make local' now pass because of Patch0, which removes incorectly set
   dependencies
  - Related: rhbz#594768


author: Peter Jones <pjones@redhat.com> - 4.04-2
changelog:
  - Make the subpackages noarch, not i686, so rel-eng doesn't have to fight
    it to get working dependency resolution.
    Related: rhbz#980671


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - Rebase on top of new upstream bug fix only release:
    * drop all bug fix patches.
    * Addresses the follwing issues from 3.0.12 release:
    Resolves: rhbz#588890, rhbz#588925, rhbz#589131, rhbz#588010
    * Rebase:
    Resolves: rhbz#582350
  - Stop build on ppc and ppc64.
    Resolves: rhbz#591000


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-13
changelog:
  - do not fail with POSIX 2008 glibc futimens()
  - temporarily disable fix for #531441, causing stack smashing
    with newer glibc


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-15
changelog:
  - CVE-2010-0624 tar, cpio: Heap-based buffer overflow
    by expanding a specially-crafted archive (#571842)
  - realloc within check_exclusion_tags() caused invalid write
    (#571523)
  - not closing file descriptors for excluded files/dirs with
    exlude-tag... options could cause descriptor exhaustion
    (#571523)
  - support for "lustre.*" extended attributes (#572442)
  - allow build without SELinux support


author: Neil Horman <nhorman@redhat.com> 1.2-1.1
changelog:
  - Fixed wildcatpass error message (bz 1056310)
  - Fixed rapl register reads (bz 1080631
  - Enalbed haswell power states (bz 1008033)


author: Doug Ledford <dledford@redhat.com> - 1.0.2-1
changelog:
  - Update to latest upstream version
  - Drop 6 patches rolled into latest upstream version
  - Drop ifnarch ia64 around valgrind usage as we don't build for ia64
  - Fix broken libmlx4-modprobe.conf file
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.0.2-5
changelog:
  - Fix modprobe file so it can't render a machine unbootable if run against
    an older kernel.
  - Resolves: bz805129


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - repack policies adapted to new counts and paths
  - note that also c-j-c is needed to make this apply in next update
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
  - Drop upstreamed patches of:
     patch561 8075484-pr3473-rh1490713.patch
     patch532 8162384-pr3122-rh1358661.patch
     patch547 8173941-pr3326.patch
     patch554 8175887-pr3415.patch
     patch550 8180048-pr3411-rh1449870.patch
  - adapted pr3286-no_fp_contract.patch, CFLAGS_linux_ppc64 no longer have -ffp-contract=off so was dropped from hunk
  - Resolves: rhbz#1528233


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-16
changelog:
  - Allow CVS server to use any Kerberos key with cvs service name
    (Resolves: #671460)
  - Set PAM_TTY and PAM_RHOST on PAM authentication (Resolves: #684789)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.16.2-1
changelog:
  - Update to 2.16.2
  - Mark /etc/crond.d/mrtg file as "noreplace" to keep current setup
    during mrtg update
    Related: #391261
  - Fix mrtg complains of undefined subroutine AF_UNSPEC
    Resolves: #451783


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.16.2-7
changelog:
  - Fix kMG option with more number of values causes segmentation fault
    Resolves: #707188
  - Fix cfgmaker doesn't use ifHighSpeed on IBM FibreChannel switches
    Resolves: #836197


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-4
changelog:
  - Create a haldaemon group in the spec file as shadow-utils has been updated
    and no longer automatically creates a private group for UIDs < 200.
  - Resolves: #594305


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-9
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters.
  - Resolves: #576048


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-10
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters. This fixes the patch from -9.
  - Resolves: #576048


author: Jan Synáček <jsynacek@redhat.com> - 0.17-52
changelog:
  - Increase ftp client command line limit (#871060)
  - Plug memleaks in append, put and send commands (#871072)
  - Fix buffer overflow when processing macro (update linelen patch) (#871547)
  - Correctly set the release number


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.43-2
changelog:
  - New upstream release, contains fixes for CVE-2008-1447/CERT VU#800113
  - Dropped patch for newer glibc (merged upstream)


author: Petr Lautrbach <plautrba@redhat.com> 2.0.43-5.1
changelog:
  - Detect already enabled/disabled modules in semanage_direct_{enable,disable} functions
  Resolves: rhbz#872700
  - Fix sources to pass all tests
  Rsolves: rhbz#591451


author: Eric Munson <ebmunson@us.ibm.com> - 1.6.7-1
changelog:
  - Update to latest lsvpd release
  - Add librtas support to build on POWERPC
  - Add patch to lookup *.ids file location at runtime


author: Peter Hutterer <peter.hutterer@redhat.com> 0.9.0-1.2
changelog:
  - Multiple patches to address button mapping issues (#624560, z-stream #642915).
  - update the screen number when updating
  - requires updated xorg-x11-drv-wacom for the matching fixes to xsetwacom
    and the driver.


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.2
changelog:
  - backported GSSAPI delegation from upstream version 1.27.04 with strong attention
    to libxmlrpc++ client ABI backward compatibility (#719945)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.3
changelog:
  - Fix memory leak in libxmlrpc_client.so (#741641)
  - Remove autoconf variables from pkgconfig files that are not used (#653702)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1209.1840
changelog:
  - fixed various RpmDiff warning messages about missing sub-packages requires
  - added Requires libcurl to the client/apps packages (.so libraries needed)
  - specified BuildRequires curl-devel version for CURLOPT_GSSAPI_DELEGATION option
  - fix & increase release number (svnrev should be after N-V-R)


author: Deepak Bhole <dbhole@redhat.com> - 1.0.1-1
changelog:
  - Bumped to 1.0.1
  - Removed icedtea-web-pkg-access.patch (now upstream)
  - Resolves CVE-2011-0706 and CVE-2010-4450


author: Deepak Bhole <dbhole@redhat.com> - 1.0.1-3
changelog:
  - Resolves rhbz#645781 (desktop sharing now works)
  - Updated the classloader sharing patch to fix loader sharing rules
  - Added version and release string in plugin display


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-9.el6
changelog:
  - Reorder nwfilter match extensions relative to state match (rhbz#678139)
  - Avoid overwriting error message in qemu driver (rhbz#678870)
  - Allow removing hash entries in virHashForEach (rhbz#681459)
  - Avoid double close on qemu domain restore (rhbz#672725)
  - Fix DomainObj refcounting/hashtable races in qemu driver (rhbz#670848)
  - Fix several memory leaks (rhbz#682249)


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.39.1.9.8
changelog:
  - Resolves: rhbz#709375
  - Bumped to IcedTea6 1.9.8
  - Copy fontconfig files to match names for current and next release
  - RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
    disabled get still selected for read ops (win)
  - RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
  - RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
    FileDialog.show()
  - RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
    code
  - RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
    bindings
  - RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
  - RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
  - RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
    with scale close to zero
  - RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
  - RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
    size variables


author: Kamil Dudka <kdudka@redhat.com> - 3.2.8-45.el6_9.2
changelog:
  - fix integer overflows leading to heap overflow in file2strvec()
  - Resolves: CVE-2018-1124 CVE-2018-1126


author: Kamil Dudka <kdudka@redhat.com> - 3.2.8-45.el6_9.3
changelog:
  - drop leftover assignment in fix for CVE-2018-1124 causing a severe regression
  - Resolves: CVE-2018-1124


author: Michal Sekletar <msekleta@redhat.com> - 147-2.63.1
changelog:
  - also limit the additional modprobe locked workers (#1281469)
  - 80-drivers.rules: only make an exception for ipmi for modprobe with DRIVER set (#1281467)


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-1
changelog:
  - Rebase to upstream e174ec84857e087210b9dacee3318f8203176129 (1.1.15)

    Resolves: rhbz#1253325
    Resolves: rhbz#1312040
    Resolves: rhbz#1322595
    Resolves: rhbz#1326350
    Resolves: rhbz#1356727


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-2
changelog:
  - Include upstream fixes to init scripts
   - ClusterMon resource should verify pid is crm_mon's
   - Fix CVE-2016-7035

    Resolves: rhbz#1322595
    Resolves: rhbz#1360234
    Resolves: rhbz#1374775


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-3
changelog:
  - Show correct help and error messages in attrd_updater
   - Preserve rolling upgrades involving Pacemaker Remote nodes
   - Update status of clufter in README_RGManager_porting

    Resolves: rhbz#1388558
    Resolves: rhbz#1389028


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-4
changelog:
  - crm_report should avoid grep on binary logs
   - document that clufter is now supported

    Resolves: rhbz#1405205


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-1
changelog:
  - Rebase to upstream bfe4e8042065eb61506cd3ff10fc5f02dd2f3bb7 (1.1.18 plus patches)
   - Resolves: rhbz#1388102
   - Resolves: rhbz#1427643
   - Resolves: rhbz#1500510
   - Resolves: rhbz#1513199


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-19
changelog:
  - resource-agents: Add multi-instance Oracle database agents
    (add_multi_instance_oracle_database_agents.patch)
    Resolves: rhbz#629275
  - resource-agents: Stop using '-' as 1st char of log messages
    (stop_using_as_1st_char_of_log_messages.patch)
    Resolves: rhbz#633856
  - resource-agents: Use literal quotes for tr calls
    (use_literal_quotes_for_tr_calls.patch)
    Resolves: rhbz#639252
  - resource-agents: Fix migrateuriopt setting
    (fix_migrateuriopt_setting.patch)
    Resolves: rhbz#660337
  - resource-agents: Support convalesce w/ central_processing
    (support_convalesce_w_central_processing.patch)
    rgmanager: Add failure tolerances to resources.rng
    (add_failure_tolerances_to_resources_rng.patch)
    Resolves: rhbz#674710


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-20
changelog:
  - resource-agents: fs-lib: fix do_monitor device mapping
    (fs_lib_fix_do_monitor_device_mapping.patch)
    Resolves: rhbz#669832


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-21
changelog:
  - Mirror dev failure in HA LVM can cause service failur
    (fix_bug_683213_mirror_dev_failure_in_ha_lvm_can_cause_service_failure.patch)
    Resolves: rhbz#683213


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-1
changelog:
  - Rebase package on top of new upstream:
    resource-agents: Improve LD_LIBRARY_PATH handling by SAP*
    resource-agents: Add resource type to logging
    oracledb.sh resource script should attempt a clean shutdown first
    resource-agent does not remove nfs service temp dirs when using nfslock=1
    Listen line in generated httpd.conf incorrect
    Include rhev-check upstream
  - spec file update:
    * drop all patches
    * resync with upstream spec file. See top section for local deltas
    Resolves: rhbz#707127, rhbz#705763, rhbz#667217
  - Move rgmanager S/Lang from resource-agents to rgmanager:
    * Add versioned Conflicts on rgmanager to avoid file conflicts
    Resolves: rhbz#693518


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-1
changelog:
  - Rebase package on top of new upstream
    * ship xsl and rng files required to build relaxng schema
    * drop local copy of sfex_init.8
    * drop bz711852-Fix-ASEHAagent-to-allow-for-multiple-ASEHA-agents-on.patch
      included upstream
  - spec file update:
    add %post to generate new relaxng schema
    Resolves: rhbz#707127


author: Than Ngo <than@redhat.com> - 3.10-4
changelog:
  - add feature, save and restore all information about default routes bz#191242
  - add startup script for pppoe-server bz#507123


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.7.0.el6_3
changelog:
  - Removed patch1000 sec-2013-02-01-8005615.patch
  - Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
  - Removed patch1010 sec-2013-02-01-7201064.patch
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.3.7
  - Added java -Xshare:dump to post (see 513605) fo jitarchs
  - Resolves: rhbz#911529


author: Kevin Fenzi <kevin@tummy.com> - 20090224-2
changelog:
  - Apply patch for python modules loading (fixes #489109)
  - use install -p to fix multiarch issue (fixes #480685)


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-158
changelog:
  - resolves: #984808 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.146-1
changelog:
  - Rebased to latest upstream packages
  - Rubygems built with RELRO
  - Resolves: rhbz#1260021 rhbz#1242158


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.148-1
changelog:
  - Rebased to latest upstream packages
  - Fixed crashes on one-node clusters
  - Resolves: rhbz#1260021 rhbz#1283627


author: Ivan Devat <idevat@redhat.com> - 0.9.148-2
changelog:
  - Moved DISABLED_GUI option to /etc/sysconfig/pcsd
  - Added backend support for new cluster properties form in web UI
  - Fixed multilib .pyc/.pyo issue
  - Resolves: rhbz#1297782 rhbz#1298163


author: Petr Holasek <pholasek@redhat.com> - 2.0.7-4
changelog:
  - Symbol numa_num_possible_cpus exported (bz804827)
  - miscalculating of numa_num_configured_cpus was fixed (bz804480)


author: Anton Arapov <anton@redhat.com> - 2.0.7-7
changelog:
  - numastat.c: fix bug preventing correct static huge page quantities
  - numastat.c: update version number
  - numastat.8: remove redundant "interleave hit" description
  - numastat.8: remove extraneous leading spaces and blank lines
  - numastat.8: enhance explanation of correct placement for "-s" option
  - Resolves: rhbz#987507


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.10
changelog:
  - Updates required, unique, and primary fields in bind-mount.sh
    metadata

    Resolves: rhbz#1115498


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.145-1
changelog:
  - Rebased to latest upstream packages
  - Added a warning to "pcs cluster setup" when a node is already in a cluster
  - Fixes in help text and man page
  - Rubygems built with RELRO
  - Added option to put a node into maintenance mode
  - Ungrouping the last resource from a cloned group no longer produces an invalid CIB
  - Removing a resource from a group no longer removes constraints referencing that group
  - Fixed session and cookies processing
  - Fixed command injection vulnerability
  - Added support for exporting cluster configuration to a list of pcs commands using clufter
  - Added automatic removal of old config file backups
  - Fixed removing a fence device from fence levels on deleting the device
  - Resolves: rhbz#1260021 rhbz#1190732 rhbz#1203802 rhbz#1230368 rhbz#1242158 rhbz#1243744 rhbz#1245721 rhbz#1247883 rhbz#1247979 rhbz#1253288 rhbz#1253292 rhbz#1264795 rhbz#1273391 rhbz#1275254


author: Tomas Hozza <thozza@redhat.com> - 0-0.8
changelog:
  - Bumping release to 0.8 to avoid update path from RHEL5
  - changing the way how Netlink source address is validated (#872593)
  - fix for long names from readdir (#872566)
  - applied reasonable Debian/Ubuntu patches (#872584)


author: Tomas Hozza <thozza@redhat.com> - 0-0.9
changelog:
  - Fix a typo in hv_set_ifconfig.sh script
  - Fix creation process of ifcfg-* files when doing IP injection
  - Use CLOEXEC when opening pool files to prevent FD leaking
  - Changes in SPEC file:
   - remove/create %{_sharedstatedir}/hyperv if removing/installing package
   - install scripts without ".sh" extension


author: Tomas Hozza <thozza@redhat.com> - 0-0.10
changelog:
  - Fix segfault when cgred is running (#920032)
  - Fix errors found by static analysis of code (#965944)
  - Start hypervkvpd only if Hyper-V drivers are loaded (#962565)


author: Tomas Hozza <thozza@redhat.com> - 0-0.11
changelog:
  - Fix initscript test if Hyper-V drivers are loaded (#978300)
  - Build the daemon with full RELRO and PIE (#977861)


author: Jan Kaluza <jkaluza@redhat.com> 5.04-16
changelog:
  - fix #873997 - improve Minix detection pattern to fix false positives
  - fix #884396 - improve PBM pattern to fix misdetection with x86 boot sector
  - fix #980941 - improve Bio-Rad pattern to fix false positives
  - fix #849621 - tweak strength of XML, Latex and Python patterns to execute
    them in the proper order
  - fix #1067771 - detect qcow version 3 images
  - fix #1064463 - treat RRDTool files as binary files


author: Jan Kaluza <jkaluza@redhat.com> 5.04-17
changelog:
  - fix CVE-2014-3479 (cdf_check_stream_offset boundary check)
  - fix CVE-2014-3480 (cdf_count_chain insufficient boundary check)
  - fix CVE-2014-0237 (cdf_unpack_summary_info() excessive looping DoS)
  - fix CVE-2014-0238 (CDF property info parsing nelements infinite loop)
  - fix CVE-2014-2270 (out-of-bounds access in search rules with offsets)
  - fix CVE-2014-1943 (unrestricted recursion in handling of indirect type rules)
  - fix CVE-2012-1571 (out of bounds read in CDF parser)


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282143


author: Watson Sato <wsato@redhat.com> - 1.2.11-1
changelog:
  - Upgrade to the latest upstream release
  - NIST certified OpenSCAP (#1364207)
  - Huge speed-up of generating HTML reports and guides
  - Support remote datastream components
  - Support tailoring of external datastreams
  - New option generating OVAL results without system characteristics
  - Support for extracting Ansible playbooks
  - Enabled fetching remote resources in OVAL module
  - Support --benchmark-id when running `oscap xccdf generate guide`
  - Enabled offline scanning in many probes
  - Added and updated various CPEs
  - Fixed manual page for oscap-ssh (#1299969)


author: Martin Preisler <mpreisle@redhat.com> - 1.2.12-1
changelog:
  - Upgrade to the latest upstream release
  - improved HTML report by referencing links
  - fixed validity errors in ARF files
  - fixed CVE parsing
  - fixed injecting xccdf:check-content-ref references in ARF results
  - fixed oscap-docker incompliance reporting (#1387248)
  - fixed oscap-docker man page (#1387166)


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.8-1
changelog:
  - Update to 0.2.8 release (rhbz #717887)
  - Fixes missing VIR_DOMAIN_XML_SECURE binding (rhbz #705792)


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.47-13.1
changelog:
  - setroubleshootd is set to be run as setroubleshoot user instead of root user
  Resolves: rhbz#1349435


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-2.b11
changelog:
  - Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546)
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-2.b11
changelog:
  - Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-0.b03
changelog:
  - Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
  - Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b04
changelog:
  - Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04
changelog:
  - Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13
changelog:
  - Update to aarch64-jdk8u181-b13.
  - Remove 8187577/PR3578 now applied upstream.
  - Resolves: rhbz#1594249


author: Russell Bryant <rbryant@redhat.com> 0.4.3-1
changelog:
  - Rebase to upstream release 0.4.3
  - Resolves: rhbz#733384, rhbz#733393, rhbz#733451, rhbz#731858
  - Resolves: rhbz#733150, rhbz#714249


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-3
changelog:
  - Init lvmetad lazily to avoid early socket access on config overrides.
  - Hardcode use_lvmetad=0 if cluster locking used and issue a warning msg.
  - Avoid reading mirrors with failed devices in its mirrored log.
  - Avoid reading from mirrors that have failed devices if they block I/O.
  - Change lvs heading Copy% to Cpy%Sync and print RAID4/5/6 sync% there too.
  - Fix dm_task_set_cookie to properly process udev flags if udev_sync disabled.
  - Add Requires: device-mapper-persistent-data for thin provisioning support.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-4
changelog:
  - Add DM_DISABLE_UDEV environment variable to manage dev nodes by libdm only.
  - Recognize DM_DISABLE_UDEV environment variable for a complete fallback.
  - Do not verify udev operations if --noudevsync command option is used.
  - Automatically deactivate failed preloaded dm tree node.
  - Fix lvm2app to return all property sizes in bytes.
  - Add lvm.conf option global/thin_disabled_features.
  - Add lvconvert support to swap thin pool metadata volume.
  - Implement internal function detach_pool_metadata_lv().
  - Fix lvm2app and return lvseg discards property as string.
  - Allow forced vgcfgrestore of lvm2 metadata with thin volumes.
  - Add lvm.conf thin pool defs thin_pool_{chunk_size|discards|zero}.
  - Support discards for non-power-of-2 thin pool chunks.
  - Support allocation of pool metadata with lvconvert command.
  - Move common functionality for thin lvcreate and lvconvert to toollib.
  - Use lv_is_active() instead of lv_info() call.
  - Disallow pvmove on RAID LVs until they are addressed properly
  - Automatically restore MISSING PVs with no MDAs.
  - Do not allow --splitmirrors on RAID10 logical volumes.
  - When no '-i' argument is given for RAID10, default to 2 stripes.
  - Mirrored log is now fixed before its mirror when double-fault occurs.
  - Exit pvscan --cache immediately if cluster locking used or lvmetad not used.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-5
changelog:
  - Avoid a global lock in pvs when lvmetad is in use.
  - Fix crash in pvscan --cache -aay triggered by non-mda PV.
  - Fix memleak in device_is_usable mirror testing function.
  - Do not ignore -f in lvconvert --repair -y -f for mirror and raid volumes.
  - Fix regression that caused inability to create a snapshot of an inactive LV.
  - Remove warning about unsupported discards for non-power-of-2 thin pool chunks.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-6
changelog:
  - Limit RAID device replacement to repair only if LV is not in-sync.
  - Disallow RAID device replacement or repair on inactive LVs.
  - Fix possible race while removing metadata from lvmetad.
  - Fix possible deadlock when querying and updating lvmetad at the same time.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-7
changelog:
  - Synchronize with udev in pvscan --cache and fix dangling udev_sync cookies.
  - Fix autoactivation to not autoactivate VG/LV on each change of the PVs used.
  - Fix lvmetad updates for lvm1 format and fix reported internal errors.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-9.el6_4.1
changelog:
  - Fix alignment of PV data area if detected alignment less than 1 MB (2.02.74).
  - Give precedence to EMC power2 devices with duplicate PVIDs


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.2-1
changelog:
  - Suppress unsupported functionality
  - Related: rhbz#553386 - logd initscript FedoraGuidelines compliance
  - Update to latest upstream release: aa1f9dee2793
    + Medium: LRM: lrmd: log outcome of monitor once an hour
    + Medium: LRM: lrmd: remove operation history on client unregister and flushing all operations (LF 2161)
    + Medium: LRM: lrmd: restore reset scheduler for children (bnc#551971, lf#2296)
    + Medium: LRM: raexec: close the logd fd too when executing agents (LF 2267)
    + Medium: Tools: hb_report: add -V (version) option and add support for corosync


author: Andrew Beekhof <andrew@beekhof.net> 1.0.5-1
changelog:
  - Do not build on ppc and ppc64.
    Resolves: rhbz#590981
  - Rebase on new upstream version: 1448deafdf79
    Resolves: rhbz#590662
    + High: LRM: lrmd: don't add the cancel option in flush to the running operations (bnc#578644)
    + High: LRM: lrmd: don't flush operations which don't belong to the requesting client (lf#2161)
    + High: LRM: lrmd: on shutdown exit once all operations finished (lf#2340)


author: Andrew Beekhof <andrew@beekhof.net> 1.0.5-2
changelog:
  - Fix provides/requires for sub packages to avoid version issues
  - Add missing man page
    Resolves: rhbz#594116


author: David Vossel <dvossel@redhat.com> 1.0.5-4
changelog:
  - Fixes issue with cancelled reoccurring operations never being removed from lrmd.
    Resolves: rhbz#786746


author: Hans de Goede <hdegoede@redhat.com> 0.0.12-3.el6
changelog:
  - Fix crash and vga font corruption when switching vc
    Resolves: rhbz#626508
  - Add support for many more resolutions and enable resolutions > 1024x768
    without requiring an xorg.conf
    Resolves: rhbz#623652


author: David Sommerseth <davids@redhat.com> - 1.28-9
changelog:
  - Added packaging of COPYING (#974147)
  - Removed packaging of INSTALL (info not needed for binary installs)


author: David Sommerseth <davids@redhat.com> - 1.28-11
changelog:
  - Avoid deletion of /dev/null (#1245302)
  - Fix sg_persist returns "Host_status=0x11 is invalid", backport of DID_TRANSPORT_*/DID_TARGET_/DID_NEXUS_FAILURE flags (#886611)


author: Tom Lane <tgl@redhat.com> 0.8.2-1
changelog:
  - Update to version 0.8.2.
  - Update License tag to match code.
  - Remove static library and .la file, per packaging guidelines.


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-9
changelog:
  - util: Improve error reporting from absolutePathFromBaseFile helper (rhbz#874860)
  - storage: Fix broken backing chain (rhbz#874860)
  - nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#874050)
  - nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#874050)
  - nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#874050)
  - virsh: save: Report an error if XML file can't be read (rhbz#876868)
  - virsh: Fix uninitialized variable in cmdSnapshotEdit (rhbz#877303)
  - qemu: Allow larger discrepency between memory & currentMemory in domain xml (rhbz#873134)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-10
changelog:
  - Add note about numeric domain names to manpage (rhbz#824253)
  - Use virNetServerRun instead of custom main loop (rhbz#867246)
  - qemu: Fix RBD attach regression (rhbz#878862)
  - qemu: Stop recursive detection of image chains when an image is missing (rhbz#878862)
  - Fix exiting of libvirt_lxc program on container quit (rhbz#879360)
  - snapshot: qemu: Add support for external inactive snapshots (rhbz#876816)
  - conf: Fix private symbols exported by files in conf (rhbz#876816)
  - snapshot: qemu: Fix detection of external snapshots when deleting (rhbz#876816)
  - snapshot: Require user to supply external memory file name (rhbz#876816)
  - snapshot: Add two more filter sets to API (rhbz#876817)
  - snapshot: Add virsh back-compat support for new filters (rhbz#876817)
  - snapshot: Implement new filter sets (rhbz#876817)
  - snapshot: Expose location through virsh snapshot-info (rhbz#876817)
  - sanlock: Retry after EINPROGRESS (rhbz#820173)
  - storage: Fix logical volume cloning (rhbz#879780)
  - cpu: Add Intel Haswell cpu model (fix previous downstream definition) (rhbz#879282)
  - virsh: Report error when taking a snapshot with empty --memspec argument (rhbz#879130)
  - lxc: Don't crash if no security driver is specified in libvirt_lxc (rhbz#880064)
  - lxc: Avoid segfault of libvirt_lxc helper on early cleanup paths (rhbz#880064)


author: Roland McGrath <roland@redhat.com> - 0.146-1
changelog:
  - Update to 0.146
    - libdwfl: New function dwfl_core_file_report.
    - libelf: Fix handling of phdrs in truncated file. (#577310)
    - libdwfl: Fix infinite loop handling clobbered link_map. (#576379)
  - Package translations.


author: Roland McGrath <roland@redhat.com> - 0.148-1
changelog:
  - Update to 0.148
    - libdw: Accept DWARF 4 format: new functions dwarf_next_unit,
             dwarf_offdie_types.
             New functions dwarf_lineisa, dwarf_linediscriminator,
             dwarf_lineop_index.
    - libdwfl: Fixes in core-file handling, support cores from PIEs. (#588818)
               When working from build IDs, don't open a named file
               that mismatches.
    - readelf: Handle DWARF 4 formats.


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-31
changelog:
  - modcluster: overload stop_service so that it can fulfill its nominal promise
    Resolves: rhbz#1114622


author: Pavel Šimerda <psimerda@redhat.com> - 7:3.1.10-35
changelog:
  - Resolves: #1114714: When squid returns an ACL tag utilizing an external ACL,
    sometimes the incorrect tag is used for redirection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-23
changelog:
  - Resolves: rhbz#805924 - SSSD should attempt to get the RootDSE after binding
  - Resolves: rhbz#814237 - sdap_check_aliases must not error when detects the
                            same user
  - Resolves: rhbz#812281 - autofs client: map name length used as key length
  - Related:  rhbz#784870 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Related:  rhbz#814269 - sssd-1.5.1-66.el6_2.3.x86_64 freezes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-24
changelog:
  - Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS
                            top level directory is chowned by a SSSD user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-25
changelog:
  - Resolves: rhbz#816616 - group members are now lowercased in case insensitive
                            domains


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-26
changelog:
  - Resolves: rhbz#818642 - Auth fails for user with non-default attribute names
  - Resolves: rhbz#819063 - sssd fails to provide partial data till paged search
                            returns "Size Limit Exceeded"
  - Resolves: rhbz#820585 - Group enumeration fails in proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-27
changelog:
  - Resolves: rhbz#820759 - AVC denial seen on sssd upgrade during ipa-client
                            upgrade
  - Resolves: rhbz#821044 - sss_groupadd no longer detects duplicate GID numbers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-28
changelog:
  - Resolves: rhbz#822236 - SSSD netgroups do not honor
                            entry_cache_nowait_percentage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-29
changelog:
  - Resolves: rhbz#824062 - sssd_be crashed with SIGSEGV in
                            _tevent_schedule_immediate()


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-30
changelog:
  - Resolves: rhbz#824616 - sssd_nss crashes when configured with
                            use_fully_qualified_names = true


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-31
changelog:
  - Resolves: rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-32
changelog:
  - Fix protocol break for services map
  - Related:  rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.2
changelog:
  - Z-Stream fix
  - Fix problem with mdadm segfaulting if trying to write superblock
    onto a defective drive resulting in a write error.
  - Resolves bz1001493


author: Radek Vykydal <rvykydal@redhat.com> - 13.21.255-1
changelog:
  - Keep symlinks to thin_* tools in /sbin (mkolman)
    Resolves: rhbz#1350296
  - network: fix static ipv6 config with static gateway (rvykydal)
    Resolves: rhbz#1177984
  - Run efibootmgr for only one device in multipath (jkonecny)
    Resolves: rhbz#1346725
  - Adjust the fraction of the progress bar (vponcova)
    Resolves: rhbz#1324706
  - network: take into account NICs activated in linuxrc.s390 (rvykydal)
    Resolves: rhbz#1329171
    Related: rhbz#1329171
  - network: don't crash on network devices configured in linuxrc.s390 (rvykydal)
    Resolves: rhbz#1329171


author: Radek Vykydal <rvykydal@redhat.com> - 13.21.259-1
changelog:
  - network: don't reactivate devices from linuxrc.s390 for early networking
    (rvykydal)
    Resolves: rhbz#1329171
  - Create lvm.conf with thin_* path overrides (mkolman)
    Resolves: rhbz#1350296


author: Radek Vykydal <rvykydal@redhat.com> - 13.21.261-1
changelog:
  - Remove 3com and bnx2 firmware to meet ppc64 image limit (rvykydal)
    Related: rhbz#1405089
    Resolves: rhbz#1405089


author: Radek Vykydal <rvykydal@redhat.com> - 13.21.263-1
changelog:
  - network: don't reactivate devices from linuxrc.s390 in loader only for IPv6
    (rvykydal)
    Resolves: rhbz#1421039


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-21
changelog:
  - backport fix for occasional failures in multiprocessing's Process.start()
  Resolves: rhbz#685234
  - port multiprocessing to use the "poll" syscall, rather than "select"
  Resolves: rhbz#713082
  - backport fix allowing getpass.getpass() to be interrupted with Ctrl-C
  or Ctrl-Z
  Resolves: rhbz#689794
  - backport memory leak fixes for the readline module
  Resolves: rhbz#699740


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-22
changelog:
  - backport fix for failures seen with subprocess module when supplying stdin
  to short-lived subprocesses
  Resolves: rhbz#667431


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-23
changelog:
  - update gdb debug hooks, showing when a thread is waiting on the GIL, calls
  to C functions and methods, and garbage collections.  Also, better handle the
  case when "f" is optimized out within PyEval_EvalFrameEx, to at least give
  file and function name, even if the line number and locals won't be available
  Resolves: rhbz#711818


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-24
changelog:
  - update uid/gid handling to avoid int overflows seen with uid/gid
  values >= 2^31 on 32-bit architectures
  Resolves: rhbz#697470


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-27
changelog:
  - update "py-bt" in gdb debug hooks to avoiding printing stray <function>
  frames on non-C functions
  Related: rhbz#711818


author: Jerome Glisse <jglisse@redhat.com> 0.5.0-2.20130401git81aadb8
changelog:
  - Silence rpmlint warning about ldconfig
  - Only install libglamor.so in devel package.
  - Adding COPYING and README as doc


author: Jerome Glisse <jglisse@redhat.com> 0.5.0-3.20130401git81aadb8
changelog:
  - Remove comment rather than investigating Xorg mess as running ldconfig can't be harmfull.
  - Fix devel package dependency.


author: Christina Fu <cfu@redhat.com> - 4.2.6-35
changelog:
  - Bugzilla Bug #1190302 - Incorrect OIDs for SHA2 algorithms
    (cfu for jnimeh@gmail.com)
  - Bugzilla Bug #1190303 - Key strength validation is not performed for RC4
    algorithm (nkinder)
  - Bugzilla Bug #1167470 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS (cfu)


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-24
changelog:
  - fence-virt: Add list-status command to man page and metadata
    Resolves: rhbz#908455
  - Remove delay from the status, monitor and list
    Resolves: rhbz#1204873


author: Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
changelog:
  - update to 0.18
    - add a deref_rf function
    - schema-compat: don't respond to search requests for which there's no backend
    - schema-compat: add the ability to do standalone compat containers


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
changelog:
  - update to 0.21
    - schema-compat: don't look at standalone compat containers for a search,
      since we'll already have looked at the group container


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
changelog:
  - make sure we always pull in nss-devel and nspr-devel, and the right
    ldap toolkit for the Fedora or RHEL version


author: Remi Collet <rcollet@redhat.com> - 5.3.3-27.2
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-7
changelog:
  - Backported patch from Rob Crittenden
  - Clean up semaphore in nss_pcache on shutdown (#1364561)
  - Update clean semaphore patch to not close pipe twice and to
    shutdown NSS database (#1364561)
  - Update clean semaphore patch to not free the pinList twice.
    (#1364561)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-9
changelog:
  - Backported patch from Rob Crittenden
  - Bugzilla Bug #1390359 - foward port NSS OCSP cache settings (rcritten)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-13
changelog:
  - NSS: fix setting olcTLSProtocolMin (#1249092)
  - fix slapd crash in do_search (sc_writewait) (#1340861)
  - NSS: fix parsing code (#1372349)
    + refactor ciphers-related patches
    + fix cipherstring parsing
  - NSS: fix cipher suites' definitions (#1372357)
    + fix some ciphers' flags
    + add new ciphers to match the current NSS
    + add PSK and CHACHA20POLY1305 cipher strings


author: Matus Honek <mhonek@redhat.com> - 2.4.40-14
changelog:
  - NSS: use a hex number for some ciphersuite definitions (#1372357)
  - NSS: fix OpenLDAP crash in NSS shutdown handling (#1373222)
  - fix: rpm -V openldap-servers complains after a clean install (#1263220)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-15
changelog:
  - ITS#8337 fix missing olcDbChecksum config attr (#1397961)
  - ITS#8003 fix off-by-one in LDIF length (#1397949)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b13
changelog:
  - Fix signedness build failure in shenandoahHeapRegion.cpp (upstream patch from mvala)
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Drop Shenandoah signedness fix as it appears in the new upstream tarball.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b10.
  - Drop 8146115/PR3508/RH1463098 applied upstream.
  - Resolves: rhbz#1633817


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-27
changelog:
  - Adjust texttops output to be in natural orientation (STR #3563).
    This fixes page-label orientation when texttops is used in the
    filter chain (bug #593368).


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-29.el6_2.1
changelog:
  - distutils.config: create ~/.pypirc securely
  Resolves: CVE-2011-4944
  - fix endless loop in SimpleXMLRPCServer upon malformed POST request
  Resolves: CVE-2012-0845
  - send encoding in SimpleHTTPServer.list_directory to protect IE7 against
  potential XSS attacks
  Resolves: CVE-2011-4940
  - oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
  variable, to provide an opt-in way to protect against denial of service
  attacks due to hash collisions within the dict and set types
  Resolves: CVE-2012-1150


author: David Vossel <dvossel@redhat.com> - 1.1.7-3
changelog:
  - Add libqb-devel as a dependancy of pacemaker-libs-devel
  - Medium: PE: Report resources as active in correct data about resource location
    Resolves:  rhbz#799070
  - Low: Tools: Bug rhbz#801351 - Fix crm_report help text
    Resolves: rhbz#801351


author: David Vossel <dvossel@redhat.com> - 1.1.7-5
changelog:
  - Use default value for HB_DAEMON_DIR define when clusterglue does not provide one. 
    Resolves: rhbz#808557


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-1
changelog:
  - Rebuild for upstream 1.1.8 release
  - Resolves: rhbz#816875 

  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details

    + New IPC implementation from libqb
    + New logging implementation from libqb
    + Quieter - info, debug and trace logs are no longer sent to syslog
    + Dropped dependancy on cluster-glue
    + Config and core directories no longer located in heartbeat directories
    + Support for managing systemd services
    + Rewritten local resource management daemon
    + Version bumps for every shared library due to API cleanups
    + Removes crm shell, install/use pcs shell and GUI instead


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-2
changelog:
  - Fix internal package dependancies
  - Resolves: rhbz#816875

  - Update to upstream 0b45588
    + Correctly disable syslog output when requested 
    + Warn about node names containing a capital letter 
    + Do not start fencing until entire device topology is found or query results timeout.
    + Allow nodes to use a name other than uname()


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852020


author: Daniel Veillard <veillard@redhat.com> - 0.5.4-1
changelog:
  - update to new version to fix problems in libvirt-cim rebase
  - Resolves: rhbz#633332
  - fix a packaging naming problem on previous build
  - Resolves: rhbz#604551


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-48
changelog:
  - core: backport NoDecode option of AllowEncodedSlashes (#1002658)
  - mod_authz_host: disallow the '#' character in allow, deny (#1179911)
  - mod_ssl: fix memory leak on httpd reloads (#1236515)
  - mod_proxy: fix regression caused inherited workers to use a different
    scoreboard slot then the original one (#1252574)
  - mod_rewrite: allow running external mapping program as non-root (#1035230)
  - mod_reqtimeout: fix a timed out connection going into the keep-alive state
    after a timeout when discarding a request body (#1213967)
  - core: fix possible crash in SIGINT handling (#1233109)
  - mod_ssl: extend SSLSessionCacheTimeout to sessions resumed by TLS (#1190509)
  - initscript: do not print error when stopping stopped httpd (#1189941)
  - mod_ssl: fail for colons in credentials with FakeBasicAuth (#1027442)
  - mod_proxy: add "proxy-flushall" env variable which reduces the impact
    of caching 16K of the request body. (#952395)
  - mod_ssl: Do not send SSL warning when SNI hostname is not found as per
    RFC 6066 (#1289096)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-53
changelog:
  - core: fix possible long graceful restart caused by race condition between
    httpd children processes (#1301758)


author: Bob Relyea <rrelyea@redhat.com> - 1.1.0-38
changelog:
  - rename the cache changes done in -36 so that they have issues with old
    cache values
  - fix cac 1 alt tokens that store certs beyond the top three slots
  - fix hand when using hp keyboard


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.10.0-1
changelog:
  - packaging enhacements (structure, redundancy, ownership, scriptlets, symlink)
  - version bump so as not to collide with python-clufter co-packaged with pcs


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.10.1-2
changelog:
  - packaging fixes (clufter-cli requires python-setuptools, adjust for
    older schema of Bash completions)


author: Jens Petersen <petersen@redhat.com> - 1.2.7-2
changelog:
  - add new gnome-icon-theme style icons by Lapo Calamandrei and Jakub Steiner
    (mizmo, #587712)
  - add scriptlets for icon cache


author: Akira TAGOH <tagoh@redhat.com> - 1.3.1-1
changelog:
  - New upstream release.
    - Fallback to the themed icon if no icons are installed
      on the specified path. (#604482)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-11
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#911147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-13
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950343)
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917910)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917910, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-14
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15.1
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1081611)


author: Karel Klic <kklic@redhat.com> - 6.0-1
changelog:
  - Rebase to upstream 6.0
    Resolves: #594860
  - Fixed a buffer overflow (rhbz#532380, unzip-6.0-attribs-overflow.patch)
  - Generate debuginfos (rhbz#540220, unzip-6.0-nostrip.patch)
  - New upstream version
  - Compiled using `make generic_gcc` (includes asm)
  - Removed unzip542-rpmoptflags.patch, because RPM_OPT_FLAGS 
    are provided using command line
  - Removed unzip-5.51-link-segv.patch, because the link file 
    is not reopened in the current version
  - Removed unzip-5.51-link-segv2.patch, the bug was already fixed 
    in open_outfile in 5.52
  - Removed unzip-5.52-toctou.patch (CAN-2005-2475), the vulnerability 
    is fixed in the current version
  - Removed unzip-5.52-near-4GB.patch, unzip-5.52-near-4GB2.patch, 
    unzip-5.52-4GB3.patch, and unzip-5.52-4GB_types.patch, because 
    the current version supports large files
  - Removed unzip-5.52-long-filename.patch, the current version
    fixes the vulnerability by checking the length of command line 
    arguments in unzip.c
  - Removed unzip-5.52-makefile.patch, because we no longer create
    the link manually
  - Removed unzip-5.52-open.patch, the current version uses umask.
  - Removed unzip-5.52-cve-2008-0888.patch, the current version
    fixes this vulnerability
  - Ported unzip-5.52-249057.patch to current version (unzip-6.0-close)


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-2
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196132 #1196120 #1196124 #1196128


author: Richard Hughes <rhughes@redhat.com> - 2.28.2-1
changelog:
  - Update to 2.28.2
  - Remove the original package from the dep-confirmation screen
  - Ignore generic errors such as 'Failed' and do not show UI in this case
  - Use the desktop icon when we unselect the installed application in gpk-application. Fixes fd#25098


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-0.1.20091211git
changelog:
  - New snapshot from the gnome-2-28 branch
  - Don't show the selected packages as deps of the to be updated packages.
    Note, this only affects PackageKit >= 0.5.5. Fixes rh#546247
  - Check the GpkDbusTask object only replies once to each session request


author: Honggang Li <honli@redhat.com> - 1.0.3-2
changelog:
  - Adjust startup/shutdown priority to start srpd before netfs service
  - connect remote srp targets before start srpd
  - clean up status actions
  - Resolves: bz1233016


author: Daniel Borkmann - 1.0.10-6
changelog:
  - Move spec system to apply patches via git-am(1), which makes it more
    convienient for future backports
  - Backport SCTP_GET_ASSOC_STATS support (#908390) and import its dependencies
  - Fix bugs (#855379), (#953383), (#912557) and import its dependencies


author: Jiri Skala <jskala@redhat.com> - 0.99.12-3
changelog:
  - fixed #516005 - Errors installing quagga-0.99.11-2.fc11.i586 with --excludedocs
  - fixed #522787 - quagga: build future versions without PAM


author: Milan Crha <mcrha@redhat.com> - 0.32.2-10
changelog:
  - Add patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #906341 (Cannot create book/calendar)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-11
changelog:
  - Update patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #1017108 (Shorten delay of calendar open)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-13
changelog:
  - Add patch for RH bug #1026797 (Coverity scan issue - uninitialized variable)
  - Add patch for RH bug #1141662 (Crash when receiving message without body)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-3
changelog:
  - Fall back to AF_INET when ares_gethostbyname() is called with AF_UNSPEC
  - Only set search domains from /etc/resolv.conf if there isn't a value
    already present in the channel (David Drisdale)
  - Related: rhbz#1077544 - Rebase c-ares to version 1.10


author: John Ferlan <jferlan@redhat.com> - 0.6.1.10.el6
changelog:
  - VSSD: Add properties for arch and machine (rhbz#1046280)
  - libxkutil: Improve domain.os_info cleanup
  - Coverity: Resolve RESOURCE_LEAK - parse_os()


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-23
changelog:
  - fixed segfault when parsing snmpd.conf with disman entries (#607080)
  - fixed value of IP-MIB::ipv6InterfaceForwarding (#607074)
  - fixed output of snmptranslate tool when displaying ranges of UNSIGNED
    type (#606874)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-27.1
changelog:
  - fixed truncation of sysObjectID (#641113)
  - fixed assertions in calculating of statistics in IF-MIB (#621664)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-26.el6_4
changelog:
  - Significant decrease in migration performance. (#908308)
  - ipa-client-install failed to fall over to replica with master down (#909161)
  - During Migration - If Schema is unavailable migration fails (#908400)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-26.el6_4.2
changelog:
  - Missing LDAP schema attributeType and objectClass after upgrade (#916535)
  - ipa-adtrust-install and ipa-replica-conncheck may not parse krb5.conf
    correctly and crash (#917065)


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-75.1
changelog:
  - ricci: fix modules cannot return values due to bug in Module::empty_response
           (introduced with rhbz#1044122 fix)
  - Resolves: rhbz#1199561 (Z-stream of 1187745)


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-4
changelog:
  - make it possible to recognize an autofs filesystem by find
  - add a new find's option -xautofs to not descend directories on autofs
    filesystems


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-8
changelog:
  - fix quotation punctuation in find(1) man page (#659730)
  - fix file descriptor leak with --execdir option (#1223557)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.58.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 8 -  removingOfAarch64.patch.patch - fixed upstream
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.60.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.62.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973129


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.63.1.11.13
changelog:
  - removed upstreamed  patch100  8000791-regression-fix.patch
  - bumped release
  - updated to icedtea-1.11.13
  - Resolves: rhbz#992909


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - removed useless runtests parts
  - included also java.security.old files
  - Resolves: rhbz#1017618


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.68.1.11.14
changelog:
  - updated to icedtea6-1.11.14.tar.gz
  - added and applied 1.11.14-fixes.patch, patch10 to fix build issues
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - Resolves: rhbz#1017618


author: Karel Zak <kzak@redhat.com> 4.82-1
changelog:
  - upgrade to 4.82 (see the 00DIST file for list of changes)
  - backport an upstream patch from 4.83A-linux
  - remove lsof_4.81-man.patch (fixed upstream)


author: Peter Schiffer <pschiffe@redhat.com> 4.82-2
changelog:
  - resolves: #671480
    [RFE] Add ability to exclude a file descriptors corresponding to a particular file system


author: Peter Schiffer <pschiffe@redhat.com> 4.82-4
changelog:
  - resolves: #795799
    lsof fails to suppress warning messages if -b -w option is used
    and some nfs volume mounted


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-19.1
changelog:
  - revert to polling for unknown filesystems, update
    known fs for tail and stat based on coreutils-8.21 (#924711)


author: Jasper St. Pierre <jasper@redhat.com> - 2.26.0-6.1
changelog:
  - Fix build by linking in -lm
  - io: Implement strict network policy (CVE-2013-1881)
    Resolves: #1049155


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.1.16-26
changelog:
  - 1333633 - [ALL_LANG][RHEL6.8 RC][system-config-printer] - Translation incomplete
  - 784817 - Segfault when moving / removing printer from class


author: Tomas Sykora <tosykora@redhat.com> - 0.14-9
changelog:
  - RHEL-6.9 erratum
     - Fix aide logs with remote rsyslog causing unexpected results
     Resolves: rhbz#1305046


author: Dave Allan <dallan@redhat.com> - 0.8.1-21
changelog:
  - Fix multiple PCI device assignment bugs
  - Resolves: rhbz#617116
  - Fix the ACS checking in the PCI code
  - Resolves: rhbz#615218
  - Disable boot=on when not using KVM
  - Resolves: rhbz#594068
  - Don't leak delay string when freeing virInterfaceBridgeDefs
  - Resolves: rhbz#620837


author: Dave Allan <dallan@redhat.com> - 0.8.1-22
changelog:
  - Mitigate asynchronous device_del
  - Resolves: rhbz#609437
  - Fix PCI address allocation
  - Resolves: rhbz#618484
  - Make nodeinfo skip offline CPUs
  - Resolves: rhbz#622515


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.71-5.b17
changelog:
  - returned jre_versionless_lnk/bin instead of jrebindir and
  -   and    sdk_versionless_lnk/bin isntead of sdkbindir
  - Resolves: rhbz#1295752


author: Jindrich Novy <jnovy@redhat.com> 2007-48
changelog:
  - add missing defattr to filelists
  - do not own /var/lib/texmf/web2c/, it is owned by texlive-texmf
  - use official tarball for dvipsk-jpatch


author: Jindrich Novy <jnovy@redhat.com> 2007-57
changelog:
  - fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
    CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773183)


author: Matthias Saou <http://freshrpms.net/> 1.25-1
changelog:
  - Prepare update to 1.25 for when devel will update to kernel 2.6.28.
  - Build require libnl-devel and popt-devel (+ patch to fix popt detection).


author: Deepak Bhole <dbhole@redhat.com> - 1.0-5
changelog:
  - Minor comment/group/etc. updates from omajid@redhat.com
  - Added base package requirement for javadoc subpackage


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-19
changelog:
  - fixed exit code of snmp utilities when wrong argument to '-A' option
    is specified (#574061)
  - fixed BER parsing of incoming packets - siletnly discard the invalid ones
    according to RFC (#568651)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-21
changelog:
  - fixed hrFSTable and hrStorageTable to provide persistent table indexes
    according to RFS 2790 (#595325)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-22
changelog:
  - fixed value of ipIfStatsTable.Ip6ReasmReqds (#597265)
  - added missing include files from util_funcs directory (#604636)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-27.1
changelog:
  - fixed truncation of sysObjectID (#652223)
  - fixed assertions in calculating of statistics in IF-MIB (#652551)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-18
changelog:
  - add IPv6 support to comsat notification (#198403)
  - package man page for mailstat
  - change mail spool directory to /var/spool/mail


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-24
changelog:
  - rename getline to avoid conflict with glibc (#505977)
  - add -Wno-comments to CFLAGS
  - remove package name from summary


author: Michal Schmidt <mschmidt@redhat.com> 1.4.3-2
changelog:
  - Split into subpackages per OpenMPI version (compat-openmpi14,
    compat-openmpi15)
  - Add compat-openmpi18.
  - Resolves: rhbz1158864, rhbz1142157


author: Michal Schmidt <mschmidt@redhat.com> 1.4.3-5
changelog:
  - Rename compat-openmpiXY to openmpi-X.Y. Package names, directories,
    modulefiles.
  - Ship multiple openmpi versions:
    - openmpi-1.4   (compat with RHEL 6.0, 6.1)
    - openmpi-1.5.3 (compat with RHEL 6.2)
    - openmpi-1.5.4 (compat with RHEL 6.3, 6.4, 6.5)
    - openmpi-1.8   (compat with RHEL 6.6, 6.7)
  - Avoid breakage in transition from the compat-openmpi package from RHEL 6.7
    (was versioned as 1.4.3, but was in fact a chimera of 1.4.3 and 1.5.3,
     where really only 1.5.3 had any chance of working) by keeping the
    "compat-openmpi", "compat-openmpi-$arch" directory and module names
    for openmpi-1.5.3.
  - openmpi-1.8 keeps the module and directory unversioned names "openmpi",
    "openmpi-$arch" it had in RHEL 6.7.
  - Related: rhbz1158864


author: Jack Magne <jmagne@redhat.com> 9.0.3-42
changelog:
  - Resolves #1221900 - pki-core: cross-site scripting flaw in the dogtag administration page (port 9180, port 9444) [rhel-6.7]


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-43
changelog:
  - Resolves #1225589 - unable to create rhel 7.1 replica from rhel 6 replica CA because subsystem user does not exist


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-44
changelog:
  - Resolves #1256039 - Fixed missing subsystem user on external CA case.
  - Removed unused backup files (.p*) generated by the patches.


author: Ade Lee <alee@redhat.com> 9.0.3-48
changelog:
  - Resolves #1306989 - Crash seen with pki-common pkg during IPA server install
  - Resolves #1290535 - Check for incompatible Java at startup
  - Resolves #1313207 - ca.subsystem.certreq missing from CS.cfg


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.406.el6
changelog:
  - Reverted spurious fix for BZ 981623 [bz#1010930]
  - Resolves: bz#1010930
    (Qemu-kvm-rhev build verifytest failed (rpm -V))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.407.el6
changelog:
  - kvm-usb-host-remove-message.patch [bz#1003771]
  - Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-qemu-kvm-fix-reset-value-of-MSR_PAT.patch [bz#976706]
  - Resolves: bz#1003771
    (warning msg not correct after hotplug invalid usb-host to guest)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)
  - Resolves: bz#976706
    ([HP BCS 6.5 Bug]Guest OS cannot boot after first reboot when enabling SR-IOV feature)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.408.el6
changelog:
  - Fix Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-block-Introduce-bs-zero_beyond_eof.patch [bz#1007224]
  - Resolves: bz#1007224
    (Introduce bs->zero_beyond_eof)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)


author: Bill Nottingham <notting@redhat.com> - 9.03.9-1
changelog:
  - check NM_CONTROLLED before deciding to use NM for a connection. (#600454)
  - always reboot on autorelabel. (#599879)
  - correct the fix for not clearing  environment with runuser. (#564105)
  - properly handle permission denied on pid file (#595597)


author: Bill Nottingham <notting@redhat.com> - 9.03.10-1
changelog:
  - ifup-eth: check for dhclient configuration in /etc/dhcp as well (#607766)
  - network-functions: handle quoted SUBCHANNELS (#607481)
  - netfs: allow for encrypted network block devices (#605600)


author: Bill Nottingham <notting@redhat.com> - 9.03.13-1
changelog:
  - rename_device - handle quoted 'DEVICE' (#614943, <harald@redhat.com>)
  - rename_device - fix handling of s390 subchannels (#614739, <harald@redhat.com>)


author: Lyude Paul <cpaul@redhat.com> 7.6.1-2
changelog:
  - Fix annoying trailing whitespace after %description
  - Update firmware license
  - Added missing firmware file TAHITI_vce.bin (#1310823)


author: Lyude Paul <lyude@redhat.com> 7.6.1-4
changelog:
  - Add missing firmware file OLAND_pfp.bin (#1361525)
  - While we're at it since this is the last time we'll have a chance to do this,
    also go through and add missing firmware files for all of the generations
    that should have been included when this tarball was made so we don't have
    to deal with problems like this in the future. This includes RS780, RV610,
    RV620, RV630, RV635, RV670, RV710, RV730, and RV770


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.44
changelog:
  - Add 0116-RH-manpage-update.patch
    * update the manpages with new features
  - Add 0117-RHBZ-697386-logger-shutdown-crash.patch
    * The main multipathd thread was racing with the logger, now it
      waits for the logger thread to shutdown first.
  - Resolves: bz #697386


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.45
changelog:
  - Add 0118-RHBZ-738298-revert-631009.patch
    * reverts most of 0101-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
      but still allows the -u option, for compatibility
  - Resolves: bz #738298


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.46
changelog:
  - Remove 0107-RHBZ-725541-01-async-tur-checker.patch
    * This patch caused a regression where, multpathd could corrupt is memory
      when a path was deleted (bz747604)
  - Refresh 0110-RHBZ-725541-04-serialize-startup.patch
  -Resolves: bz #747604


author: Ray Strode <rstrode@redhat.com> - 2.30.2-16
changelog:
  - Add patch from Noriki Mizumoto <noriko@redhat.com> to
    increase translation coverage
    Resolves: #819798


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27.2
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-27
changelog:
  - 1170750 apply "Set non negotiated params early" from upstream
    to fix SendTargets discovery over iSER with some targets


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-12
changelog:
  - Update sources for latest tarballs, some changes got lost before the commit
  - require gettext-devel for AM_ICONV (now required by xwininfo)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.9
changelog:
  - qemu: Start nested job in qemuDomainCheckEjectableMedia (rhbz#826639)
  - Avoid closing uninitialized fd (rhbz#827047)
  - Avoid fd leak (rhbz#827047)
  - command: Avoid double close bugs (rhbz#827047)
  - fdstream: Avoid double close bug (rhbz#827047)
  - command: Check for fork error before closing fd (rhbz#827047)
  - qemu: Avoid closing fd more than once (rhbz#827047)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-54.1
changelog:
  - Resolves: #1374729 - ProxyRemote with HTTPS backend sends requests
    with absoluteURI instead of abs_path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-54.2
changelog:
  - Resolves: #1391517 - when ProxyErrorOverride is On, modcluster
    return 503 status code on subsequent requests


author: Michal Hlavinka <mhlavink@redhat.com> - 3.1.10-4
changelog:
  - close directory after processing pci.ids.d directory (#684000)
  - sysfs: do not warn on incomplete slot addresses (#1032827)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.59-1
changelog:
  - init.d/network: start vpninterfaces
  - ARPUPDATE option introduced
  - init.d/functions: sourcing for ksh fixed


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3:4-7
changelog:
  - Resolves: bz#1305833 - System wide plasma-desktop-appletsrc settings not reflected in user profile


author: John W. Linville <linville@redhat.com> 1.1.1_2009.11.25-2
changelog:
  - Change RPM_OPT_FLAGS to optflags
  - Leave man page compression to rpmbuild
  - Correct date in previous changelog entry


author: John W. Linville <linville@redhat.com> 1.1.1_2009.11.25-3
changelog:
  - Correct license tag from BSD to ISC
  - Comment purpose of regulatory-rules-setregdomain.patch
  - Add copyright and license statement to setregdomain
  - Add comment for why /lib is hardcoded in files section
  - Reformat Dec 21 2009 changelog entry so rpmlint stops complaining


author: John W. Linville <linville@redhat.com> 1.1.3_2013.11.27-1
changelog:
  - Update for crda version 1.1.3
  - Update wireless-regdb to version 2013.11.27 
  - Correct version in previous changelog entry


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-23
changelog:
  - resolves: #1088998
    count with xz compressed files as well in sa2 script
  - resolves: #1012575
    fix file mode of sysstat cron file


author: Adam Jackson <ajax@redhat.com> 7.7-1
changelog:
  - rgb 1.0.5
  - xsessreg 1.0.8
  - xgamma 1.0.5
  - xhost 1.0.5
  - xmodmap 1.0.7
  - xsetroot 1.1.1
  - xstdcmap 1.0.3


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-17
changelog:
  - Apply patch to restorecond from Chris Adams, which will cause restorecond 
  - to watch first user that logs in.


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.4
changelog:
  - fix to sandbox 
    - Fix seunshare to use more secure handling of /tmp
      - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
     - Change to allow sandbox to run on nfs homedirs, add start python script
     - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
     - Move seunshare to sandbox package
     - Fix sandbox to show correct types in  usage statement


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.14-1.1
changelog:
  - git branch RHEL-6_2-Z tag 389-ds-base-1.2.9.14-1.1
  - Bug 758682 - crash when simple paged fails to send entry to client
  - Bug 758683 - rhds81 modrn operation and 100% cpu use in replication
  - Bug 758688 - Fix Coverity (11104) Resource leak: ids_sasl_user_to_entry (slapd/saslbind.c)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.14-1.2
changelog:
  - Bug 771632 - Incorrect entryUSN index under high load in replicated environment
  - Bug 771631 - Add slapi_rwlock API and use POSIX rwlocks
  - WARNING - patches 0030 and 0031 remove and add back the file configure
  - this is necessary because the merge commit to "rebase" RHEL-6 to 1.2.9.6
  - seriously messed up configure - so in order to add the patch for 743979
  - which also touched configure, the file had to be removed and added back
  - also note that the commit for the RHEL-6 branch to remove configure does
  - not work - the way patch works, it has to match every line exactly in
  - order to remove the file, and because the merge commit messed things
  - up, it doesn't work
  - So, DO NOT TOUCH 0030-remove-configure-to-get-rid-of-merge-conflict.patch
  - BECAUSE IT IS HAND CRAFTED and not generated by git format-patch
  - if you must regenerate this file,
  - git format-patch ...args... to generate a file in patch format
  - remove all of the patch matches (all the lines beginning with -)
  - get the 1.2.9.6 version of configure from the source tarball
  - wc -l configure to get the number of lines in the file
  - sed 's/^/-/' configure >> thefile.patch
  - edit thefile.patch to have the right number of lines and have the
  - patch commands in the correct place
  - PROFIT!!!


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.8-1
changelog:
  - enable slang utf8 mode (#425992)
  - support --disable-nls option (patch by Natanael Copa)
  - redraw screen when using entry in euc encodings


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:4.0.0-1.20090818git832d2c
changelog:
  - update to post 4.0.0 git snapshot 20090818git832d2c
  - print retrans and reachable times in ICMPv6 as milliseconds (#474264)


author: Peter Lemenkov <lemenkov@gmail.com> - 0.31.1-23
changelog:
  - Removed static libraries from -devel
  - Changed %makeinstall to "make install DESTDIR=blablabla"
  - Fixed rhbz# 477980


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-95
changelog:
  - adjust the key echange DH groups and ssh-keygen according to SP800-131A (#993580)
  - log failed integrity test if /etc/system-fips exists (#1020803)
  - backport ECDSA and ECDH support (#1028335)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-96
changelog:
  - prevent a server from skipping SSHFP lookup (#1081338) CVE-2014-2653
  - ignore environment variables with embedded '=' or '\0' characters CVE-2014-2532
  - backport ControlPersist option (#953088)
  - log when a client requests an interactive session and only sftp is allowed (#997377)
  - don't try to load RSA1 host key in FIPS mode (#1009959)
  - restore Linux oom_adj setting when handling SIGHUP to maintain behaviour over restart
    (#1010429)
  - ssh-keygen -V - relative-specified certificate expiry time should be relative to current time
    (#1022459)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-97
changelog:
  - x11 forwarding - be less restrictive when can't bind to one of available addresses
    (#1027197)
  - better fork error detection in audit patch (#1028643)
  - fix openssh-5.3p1-x11.patch for non-linux platforms (#1100913)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-98
changelog:
  - add possibility to autocreate only RSA key into initscript (#1111568)
  - fix several issues reported by coverity


author: Stepan Kasal <skasal@redhat.com> - 0.47-5
changelog:
  - require perl(:MODULE_COMPAT_5.10.x) because the package requires libperl.so
  - the same for inkscape-view


author: Michal Schmidt <mschmidt@redhat.com> - 3.0-2.0.16.gb2f2e82
changelog:
  - Respect distro CFLAGS, restore fortification.
  - debuginfo package had executable source files.
  - Related: bz1127235, bz1129312


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-8.el6
changelog:
  - Fix ambiguous error msg in automount indirect map creation (#790131)
  - Invalid error message attempting to delete config attributes (#791373)
  - Enforce single-value attributes (#794746)
  - config-mod allowed to add additional certificate subjects bases (#794750)
  - Embedded carriage returns in a CSV not handled (#797569)
  - WebUI displays "Insufficient access: invalid credentials" when a password
    doesn't meet policy requirements (#802786)
  - Tech Preview: SELinux User Mapping (#803821)
  - Tech Preview: Add support for central management of the SSH keys (#803822)
  - Password Policy Failure Interval Reset is not working. (#804096)
  - Set SELinux booleans properly (#806330)
  - DNS records in LDAP are publicly accessible (#807361)
  - Upgrading replication agreements without nsDS5ReplicatedAttributeList fails
    (#808201)
  - IPA Upgrade Web UI failure with internal server error (#809262)
  - Do not create private groups for migrated users (#809560)


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-9.el6
changelog:
  - Fix password policy history enforcement (#810900)
  - Privilege page should not have choice to list permissions by "indirect
    membership" (#810350)
  - ipa-server-install fails when domain name is not resolvable (#809190)
  - Identity->DNS->Settings:Forward policy: change check box to radio buttons
    (#808620)
  - When adding permissions for a type, attributes that are not allowed are
    listed (#807755)
  - user-mod --rename is successful for more than max login characters
    (#807417)
  - Can't specify netgroup host, user category to all in Web UI (#807366)
  - Permission names cannot contains '<' or '>' (#807304)
  - ipa-server-install --uninstall errors out when trying to start dirsrv.
    (#801376)
  - Should not be allowed to run host-disable on an IPA Server or
    service-disable on an IPA Server service  (#800119)
  - permission with filter or subtree does not allow attr to be specified
    (#783536)
  - Netgroups compat plugin not reporting users correctly (#767372)
  - certmonger renews server certificates ok but those services need a restart
    (related #766167)
  - Set minimum vresion of certmonger to 0.56 (related #766167)
  - Set minimum version of slapi-nis to 0.40 (#767372)
  - Unable to disable or enable hbacrule with --setattr (#810948)
  - When adding a user with --noprivate option gidNumber should be required
    (#805546)
  - Fix error when no value is given in --revocation-reason optional argument
    with "ipa cert-revoke" (#808099)
  - Set minimum version of bind-dyndb-ldap to 1.1.0-0.5.b1 (related #805814)


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-10.el6
changelog:
  - Don't interactively prompt for dnsrecord options provided on the
    command-line options (#790295)
  - Validate external hosts added to netgroups (#797256)
  - Handle invalid RDN for container in migration (#804807)
  - Unable to use permission-mod to rename permission object (#805478)
  - Migration: don't append basedn to container if it is included (#807371)
  - Raise correct exception when LDAP limits are exceeded (#808042)
  - Notify user that password needs to be reset in forms-based login (#811296)
  - DNS Resource records: add & delete A & AAAA record does not work in root
    (#811744)
  - user-mod --rename with an empty string fails (#811748)
  - DNS CNAME record: delete sometimes does not work (#811758)
  - Delegation UI does not allow to specify permission (#812110)
  - IPA uninstall after upgrade returns some sysrestore.state errors (#812391)
  - Improve migration plugin error when 2 groups have identical GID (#813389)


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-11.el6
changelog:
  - Make new DNS permission mixed-case (#807361)
  - hbactest returns failure when hostgroups are chained (#801769)
  - Man Page : Document client IP addressing / FQDN requirements (#768257)
  - Login failed attempts counter or locked out status are not displayed (#759501)
  - Wrong title and icon in login and logout pages (#814752)


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-12.el6
changelog:
  - Remove patch 0042 and add revert patch for handling which attributes are
    allowed in a permission. (#783502)
  - ipa-client-install sets "KerberosAuthenticate yes" in sshd.conf, breaking
    SSSD auth (#817030)
  - pwpolicy_find does not sort by priority in UI (#815799)
  - Improve zonemgr validation (#745705)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-2
changelog:
  - usermod: make password unlocking compatible with passwd (#951743)
  - usermod: disallow ':' in raw password setting


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-5
changelog:
  - Allow overriding values in macro scl_package (#957185)
  - Delete redundant argument from check_asprintf (#957183)
  - Enable all collections given as arguments, not just the first one (#949995)
  - Prevent collections to be enabled multiple times (#955669)


author: Karsten Hopp <karsten@redhat.com> 1.7-29
changelog:
  - remove trailing dot from summary
  - replace tabs with spaces
  - replace PreReq with Requires(post)/Requires(preun)
  - include license file in %doc
  - add smp flags
  - use make install DESTDIR=


author: Harshavardhana <harsha@gluster.com> - 2.0
changelog:
  - Galore of updates including new packages added common,
    client,server splitting the original package. rpmbuild
    fully restructured to adhere to Fedora rpm standards.
    Older changelog removed as there were warnings when
    tried with 'rpmlint'.


author: Ivana Varekova <varekova@redhat.com> - 6.3.2-56
changelog:
  - fix the psacct to deal with all acct types and
    if it is possible and wanted then add the possibility
    to display the pid and ppid number


author: Psychotic Build System <builder@psychotic.ninja> - 1.0.0-1
changelog:
  - Forked from the Psychotic Ninja 'stikkit-1.0.6-7' package and rebased to 1.0.0
  - Renamed stikkit->cpaste; stikkit.1->cpaste.1; README.Psychotic->README.CentOS
  - Updated README.CentOS
  - Updated stikkit.1
  - Path references changed from /stikkit/ to /cpaste/


author: Pablo Greco <pablo@fliagreco.com.ar> - 1.0.0-2
changelog:
  - Backport patch from stikkit to support private pastes
  - Backport patch from stikkit to change useragent
  - Use last invalid arg as filename, no need to use -i to paste a file


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-32
changelog:
  - gfs2_edit enhancements:
    * gfs2_edit: handle corrupt file systems better
      (gfs2_edit_handle_corrupt_filesystems_better.patch)
    * gfs2_edit: print large block numbers better
      (gfs2_edit_print_large_block_numbers_better.patch)
    * gfs2_edit: has problems printing gfs1 journals
      (gfs2_edit_has_problems_printing_gfs1_journals.patch)
    * gfs2_edit: add -d option for printing journal details
      (gfs2_edit_add_d_option_for_printing_journal_details.patch)
    * gfs2_edit: Fix error message on blockalloc when outside bitmap
      (gfs2_edit_fix_error_message_blockalloc_when_outside_bitmap.patch)
    * gfs2_edit: fix careless compiler warning
      (gfs2_edit_fix_careless_compiler_warning.patch)
    * gfs2_edit: Fix bitmap editing function
      (gfs2_edit_fix_bitmap_editing_function.patch)
    * gfs2_edit: fix segfault in set_bitmap when block is in rgrp
      (gfs2_edit_fix_segfault_in_set_bitmap_when_block_is_rgrp.patch)
    Resolves: rhbz#674843
  - fenced: emit dbus signals to be handled by foghorn package for SNMP traps
    (fenced_send_dbus_signals_when_node_is_fenced.patch)
    (fenced_update_fenced_man_page_with_q_option.patch)
    (build_allow_dbus_notification_code_to_be_disabled.patch)
    Resolves: rhbz#592964
  - config: Update relax ng schema 
    (config_update_schema_2.patch)
  - doc: Update cluster_conf.html to match schema
    (doc_update_cluster_conf_html.patch)
    Resolves: rhbz#618705


author: Jeff Garzik <jgarzik@redhat.com> - 2-13
changelog:
  - Resolves: bz#751374
  - Add post/preun calls to chkconfig, during rpm install/removal
  - Remove unused rotate, resume steps from init script


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.3
changelog:
  - Z-Stream fix
  - Fix problem with mdadm segfaulting if trying to write superblock
    onto a defective drive resulting in a write error.
  - Resolves bz1009243


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-66.el6
changelog:
  - Fix 'Add $_signo convenience variable'.  It is worth mentioning that the
    variable was finally named $_exitsignal instead of $_signo (RH BZ 971849).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-68.el6
changelog:
  - Fix 'gdb gives highly misleading error when debuginfo pkg is present,
    but not corresponding binary pkg' (Jan Kratochvil, backported from Fedora,
    RH BZ 981154).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-70.el6
changelog:
  - Fix 'gdb deadlock due to gdb calling calloc() in signal handler.'
    (Jan Kratochvil, RH BZ 913146).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-71.el6
changelog:
  - Improve fix for 'gdb deadlock due to gdb calling calloc() in signal
    handler.', because it was failing on i686.  (Pedro Alves, RH BZ 913146).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-72.el6
changelog:
  - Fix '[RHEL6] Can't access TLS variables in statically linked binaries'
    (Jan Kratochvil, RH BZ 1080656).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-73.el6
changelog:
  - Fix 'gdb crashes while thread apply all bt is run on the core file'
    (Jan Kratochvil, RH BZ 1104587).


author: Doug Ledford <dledford@redhat.com> - 1.0.6-2
changelog:
  - Add the modprobe.d/mlx4.conf for user set module options that we
    don't replace on upgrade
  - Rename the dracut module to just mlx4 instead of -libmlx4 (dracut
    takes a dash between the number and the name literally)
  - Add obsoletes tag to make us replace libmlx4-rocee
  - Related: bz1059094


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Actually use the right %source macro when installing the new
    mlx4.conf file this time
  - Related: bz1059094


author: Doug Ledford <dledford@redhat.com> - 1.0.6-7
changelog:
  - Add compiler warnings patch
  - Rebuild against latest libibverbs and valgrind-devel
  - Move module init code to rdma package and require rdma package
  - Resolves: bz1142161, bz1163527


author: John W. Linville <linville@redhat.com> 1.1.0_2009.11.25-3
changelog:
  - Add man page for setregdomain (from Andrew Hecox <ahecox@redhat.com>)
  - Change $RPM_BUILD_ROOT to buildroot


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.2-1
changelog:
  - updated to release 1.0.2
  - changed License to BSD
  - dropped the patch as it has been applied upstream


author: Milan Broz <mbroz@redhat.com> - 1.1.0-0.6
changelog:
  - Update to cryptsetup 1.1.0-rc4
  - Fix gcrypt initialisation.
  - Fix backward compatibility for hash algorithm (uppercase).


author: Stef Walter <stefw@redhat.com> - 0.18.0-1
changelog:
  - Update to new upstream stable release
  - Various logging tweaks (#928914, #928750)
  - Make the 'p11-kit extract-trust' explicitly reject
    additional arguments


author: Stef Walter <stefw@redhat.com> - 0.18.3-1
changelog:
  - Update to new upstream stable release
  - Fix intermittent firefox cert validation issues (#960230)
  - Include the manual pages in the package


author: Stef Walter <stefw@redhat.com> - 0.18.3-2
changelog:
  - Don't install libnssckbi.so alternatives in the package.
    On RHEL 6 this is done by the update-ca-trust script.


author: Stef Walter <stefw@redhat.com> - 0.18.4-1
changelog:
  - Remove alternative on package removal
  - Update to 0.18.4 with minor p11-kit command fixes
  - Fix arguments to extract-trust p11-kit command


author: Stef Walter <stefw@redhat.com> - 0.18.4-2
changelog:
  - Fix inconsistency issues when multilib packages are installed
  - Add 'p11-kit redhat-setup-trust status' command


author: Stef Walter <stefw@redhat.com> - 0.18.5-1
changelog:
  - Update to new upstream point release
  - Use freebl for hash algorithms (#983384)
  - Don't load configs in home dir when setuid or setgid (#985816)
  - Use $TMPDIR instead of $TEMP while testing (#985017)
  - Use $XDG_DATA_HOME for user pkcs11 module configuration
  - Open files and fds with O_CLOEXEC (#984986)
  - Abort initialization if critical module fails to load (#985023)
  - Don't use thread-unsafe: strerror, getpwuid (#985481)
  - Fix p11_kit_space_strlen() result when empty string (#985416)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.2.19-3
changelog:
  - Fix duplicate documentation (#1001250)
  - Turn on verbose build output via V=1 make
  - Use %?_isa in explicit package deps
  - Fix base package Group tag to "System Environment/Libraries"
  - Remove %defattr


author: Simo Sorce <simo@redhat.com> - 1.2.20-1
changelog:
  - New upstrema version with memleaks, crl checks and other fixes
  - enable make check during build
  - drop ecdsa patch as it has been included upstream


author: Marek Kasik <mkasik@redhat.com> 2.3.11-7
changelog:
  - Add freetype-2.3.11-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651762


author: Marek Kasik <mkasik@redhat.com> - 2.3.11-15.el6_6.1
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197737


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.40.1.9.10
changelog:
  - Resolves: rhbz#744788
  - Bumped to IcedTea6 1.9.8
  -removed font copying
   Security fixes
    - S7000600, CVE-2011-3547: InputStream skip() information leak
    - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
    - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
    - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
    - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
    - S7055902, CVE-2011-3521: IIOP deserialization code execution
    - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
    - S7064341, CVE-2011-3389: JSSE
    - S7070134, CVE-2011-3558: Hotspot unspecified issue
    - S7077466, CVE-2011-3556: RMI DGC server remote code execution
    - S7083012, CVE-2011-3557: RMI registry privileged code execution
    - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
   NetX
    - PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest


author: Daniel P. Berrange <berrange@redhat.com> - 0.0.3-5.fc12
changelog:
  - Fix auth against libvirt (rhbz #499594)
  - Fix confusion of VNC credentials (rhbz #499595)
  - Correct keyboard grab handling (rhbz #499362)


author: Elio Maldonado <emaldona@redhat.com> - 2.4.1-14
changelog:
  - keyutil: Fixed bug where key pem file was not written (#473860)
  - keyutil: Fixed reverse logic that prevented output of the pem encoded key


author: Elio Maldonado <emaldona@redhat.com> - 2.4.1-18
changelog:
  - certwatch: Fixed cert expiry time calculations (#473860)
  - keyutil: Fixed segfault on certificate generation and missing of key/cert pem files (#479886)


author: Joe Orton <jorton@redhat.com> - 2.4.1-24.3
changelog:
  - fix segfaults in keyutil (#870182)
  - keyutil: use SHA256 by default, SHA384 or 512 for larger keys (#1146247)
  - genkey: update SHA choice, default key sizes (#1146247)
  - genkey: only fail in --nss mode if mod_nss is missing. (#845940)
  - update reqs/BRs for new-enough nss-util (#1146247)
  - certwatch: fix failure for certfiles containing private keys (#893308)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.101-2.6.6.0
changelog:
  - Bump to 2.6.6 and u101b00.
  - Drop a leading zero from the priority as the update version is now three digits
  - Resolves: rhbz#1325425


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-22.el6_5.1
changelog:
  - resolves: #1127069
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-5
changelog:
  - do not change permissions with pam_console_apply
  - drop obsolete pam_tally module and the faillog file (#461258)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.8-1
changelog:
  - add pam_systemd to the PAM configuration (#612712)
  - fix force smarcard setting read when Kerberos enabled (#620475)
  - fix duplication of dialogs when the revert is cancelled (#621632)
  - add --enable/disableforcelegacy option (#605857)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.9-1
changelog:
  - removed support for setting up pam_smb_auth authentication - long
    ago deprecated
  - added code for better synchronization of files with duplicate
    settings such as login.defs, libuser.conf and system-auth-ac (#565521)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-1
changelog:
  - Don't try to issue discards to a missing PV to avoid segfault.
  - Fix vgchange -aay not to activate non-matching LVs that follow a matching LV.
  - Fix lvchange --resync for RAID LVs which had no effect.
  - Add RAID10 support (--type raid10).
  - Introduce blkdeactivate script to deactivate block devs with dependencies.
  - Apply 'dmsetup mangle' for dm UUIDs besides dm names.
  - Use -q as short form of --quiet.
  - Suppress non-essential stdout with -qq.
  - Add log/silent to lvm.conf equivalent to -qq.
  - Add (p)artial attribute to lvs.
  - Implement devices/global_filter to hide devices from lvmetad.
  - Add lvmdump -l, to collect a state dump from lvmetad.
  - Add --discards to lvconvert.
  - Add --poolmetadata to lvconvert and support thin meta/data dev stacking.
  - Support creation of read-only thin volumes (lvcreate -p r).
  - Support changes of permissions for thin snapshot volumes.
  - Make lvremove ask before discarding data areas.
  - Prohibit not yet supported change of thin-pool to read-only.
  - Using autoextend percent 0 for thin pool fails 'lvextend --use-policies'.
  - Make vgscan --cache an alias for pvscan --cache.
  - Clear lvmetad metadata/PV cache before a rescan.
  - Fix a segmentation fault upon receiving a corrupt lvmetad response.
  - Give inconsistent metadata warnings in pvscan --cache.
  - Avoid overlapping locks that could cause a deadlock in lvmetad.
  - Fix memory leaks in libdaemon and lvmetad.
  - Optimize libdaemon logging for a fast no-output path.
  - Only create lvmetad pidfile when running as a daemon (no -f).
  - Warn if lvmetad is running but disabled.
  - Warn about running lvmetad with use_lvmetad = 0 in example.conf.
  - Update lvmetad help output (flags and their meaning).
  - Make pvscan --cache read metadata from LVM1 PVs.
  - Make libdaemon buffer handling asymptotically more efficient.
  - Make --sysinit suppress lvmetad connection failure warnings.
  - Prohibit usage of lvcreate --thinpool with --mirrors.
  - Fix lvm2api origin reporting for thin snapshot volume.
  - Add implementation of lvm2api function lvm_percent_to_float.
  - Allow non power of 2 thin chunk sizes if thin pool driver supports that.
  - Allow limited metadata changes when PVs are missing via [vg|lv]change.
  - Do not start dmeventd for lvchange --resync when monitoring is off.
  - Remove pvscan --cache from lvm2-lvmetad init script.
  - Report invalid percentage for property snap_percent of non-snaphot LVs.
  - Disallow conversion of thin LVs to mirrors.
  - Fix lvm2api data_percent reporting for thin volumes.
  - Do not allow RAID LVs in a clustered volume group.
  - Enhance insert_layer_for_lv() with recursive rename for _tdata LVs.
  - Skip building dm tree for thin pool when called with origin_only flag.
  - Ensure descriptors 0,1,2 are always available, using /dev/null if necessary.
  - Use /proc/self/fd when available for closing opened descriptors efficiently.
  - Fix inability to create, extend or convert to a large (> 1TiB) RAID LV.
  - Update lvmetad communications to cope with clients using different filters.
  - Clear LV_NOSYNCED flag when a RAID1 LV is converted to a linear LV.
  - Disallow RAID1 upconvert if the LV was created with --nosync.
  - Disallow addition of RAID images until the array is in-sync.
  - Fix RAID LV creation with '--test' so valid commands do not fail.
  - Add lvm_lv_rename() to lvm2api.
  - Fix setvbuf code by closing and reopening stream before changing buffer.
  - Disable private buffering when using liblvm.
  - When private stdin/stdout buffering is not used always use silent mode.
  - Fix 32-bit device size arithmetic needing 64-bit casting throughout tree.
  - Fix dereference of NULL in lvmetad error path logging.
  - Fix buffer memory leak in lvmetad logging.
  - Change lvmetad logging syntax from -ddd to -l {all|wire|debug}.
  - Add new libdaemon logging infrastructure.
  - Support unmount of thin volumes from pool above thin pool threshold.
  - Update man page to reflect that dm UUIDs are being mangled as well.
  - Add 'mangled_uuid' and 'unmangled_uuid' fields to dmsetup info -c -o.
  - Mangle device UUID on dm_task_set_uuid/newuuid call if necessary.
  - Add dm_task_get_uuid_mangled/unmangled to libdevmapper.
  - Always reset delay_resume_if_new flag when stacking thin pool over anything.
  - Don't create value for dm_config_node and require dm_config_create_value call.
  - Check for existing new_name for dmsetup rename.
  - Fix memory leak in dmsetup _get_split_name() error path.
  - Add Requires: bash >= 4.0 for blkdeactivate script.


author: Daniel Veillard <veillard@redhat.com> 1.1.25-1
changelog:
  - release of 1.1.25
  - Add API versioning  for libxslt shared library
  - xsl:sort lang support using the locale
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> 1.1.26-2.el6_3.1
changelog:
  - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
  - Fix direct pattern matching bug
  - Fix popping of vars in xsltCompilerNodePop
  - Fix bug 602515
  - Fix generate-id() to not expose object addresses (CVE-2011-1202)
  - Fix some case of pattern parsing errors (CVE-2011-3970)
  - Fix a bug in selecting XSLT elements (CVE-2012-2825)
  - Fix portability to upcoming libxml2-2.9.0
  - Fix default template processing on namespace nodes (CVE-2012-2871)
  - Cleanup of the pattern compilation code (CVE-2012-2870)
  - Hardening of code checking node types in various entry point (CVE-2012-2870)
  - Hardening of code checking node types in EXSLT (CVE-2012-2870)
  - Fix system-property with unknown namespace
  - Xsltproc should return an error code if xinclude fails
  - Fix a dictionary string usage
  - Avoid a heap use after free error


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.1.5-1
changelog:
  - Rebase package on top of new upstream
    * ship xsl and rng files required to build relaxng schema
  - spec file update:
    add %post to generate new relaxng schema
    Resolves: rhbz#707123
  - Add Requires: pyOpenSSL for fence_ilo
    Resolves: rhbz#718207
  - Fix fence_drac5 list operation with Dell DRAC CMC
    (imported directly from new upstream)
    Resolves: rhbz#718196
  - fence_bladecenter --missing_as_off reboot action fails on missing blade
    (imported directly from new upstream)
    Resolves: rhbz#708052


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.13-1
changelog:
  - updated translations rhbz#619340
  - removed dependency on libzip
  - added libxml-2.0 into configure (npajkovs@redhat.com)
  - fixed typo in man page rhbz#610748 (jmoskovc@redhat.com)
  - RHTSupport: GUI's SSLVerify checkbox had one missing bit of code (vda.linux@googlemail.com)
  - Resolves: rhbz#619340


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.13-2
changelog:
  - increased timeout in gui to prevent timeouts when uploading large files
  - added update messages during upload
  - Resolves: #625012


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.14-1
changelog:
  - updated po files (jmoskovc@redhat.com)
  - GUI: make how to mandatory (jmoskovc@redhat.com)
  - silent rules (npajkovs@redhat.com)
  - fixed segv in abrt-hook-ccpp rhbz#652338 (jmoskovc@redhat.com)
  - rhbz 623142 (npajkovs@redhat.com)
  - GUI: make the "install debuginfo" hint selectable rhbz#644343 (jmoskovc@redhat.com)
  - GUI: wrap howto and comments rhbz#625237 (jmoskovc@redhat.com)
  - GUI: show horizontal scrollbar when needed (jmoskovc@redhat.com)
  - GUI: wrap lines in the backtrace window rhbz#625232 (jmoskovc@redhat.com)
  - GUI: changed '*' to '•' rhbz#625236 (jmoskovc@redhat.com)
  - rm abrt_test.py (jmoskovc@redhat.com)
  - added utf-8 coding tag into .py files (jmoskovc@redhat.com)
  - GUI: show the scrollbar in summary only when needed (jmoskovc@redhat.com)
  - GUI: added accelerator key "Delete" to the delete button rrakus@redhat.com (jmoskovc@redhat.com)
  - backtrace rating check in abrt-cli (mtoman@redhat.com)
  - Localization of [y/n] response in abrt-cli (kklic@redhat.com)
  - abrt-cli --info: Make coredump and rating fields optional (kklic@redhat.com)
  - GUI: increase dbus timeout in Report() call (vda.linux@googlemail.com)
  - GUI: make the bt viewer not-editable rhbz#621871 (jmoskovc@redhat.com)
  - increased version to 1.1.14 (jmoskovc@redhat.com)
  - new bt parser (kklic) (jmoskovc@redhat.com)
  - disable polkit (jmoskovc@redhat.com)
  - add example of tainted kernel module (npajkovs@redhat.com)


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.15-1
changelog:
  - removed unused files (jmoskovc@redhat.com)
  - update po files (jmoskovc@redhat.com)
  - removed some unused files (jmoskovc@redhat.com)
  - pass old pattern to ccpp hook and use it (dvlasenk@redhat.com)
  - GUI: added warning when gnome-keyring can't be accessed rhbz#576866 (jmoskovc@redhat.com)
  - 666893 - Unable to make sense of XML-RPC response from server (npajkovs@redhat.com)
  - PyHook: ignore SystemExit exception rhbz#636913 (jmoskovc@redhat.com)
  - 665405 - ABRT's usage of sos does not grab /var/log/messages (npajkovs@redhat.com)
  - add a note in report if kernel is tainted (npajkovs@redhat.com)
  - KerneloopsScanner.cpp: make a room for NULL byte (npajkovs@redhat.com)
  - fix multicharacter warring (npajkovs@redhat.com)
  - open help page instead of about rhbz#666267
  - Resolves: #665405, #576866, #649309, #623142, #614486, #650975, #666267


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.16-1
changelog:
  - added list of attachments to comment rhbz#668875
  - stop consuming non-standard header rhbz#670492
  - Resolves: #670492, #668875


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.16-3
changelog:
  - improved support for GSS customer portal
    - fixed the hash generating: use component name instead of package NVR
    - added a user-agent header to rhtsupport requests for easier hash algorithm
      matching
  - Resolves: #694410


author: Steve Dickson <steved@redhat.com> 1.2.3-17
changelog:
  - Used correct locking file in nfs.init script (bz 772543)
  - Create a locking file for rpc.rquotad (bz 766472)
  - Normalized umount paths (bz 758000)
  - Fixed parsing error in nfsmount.conf code (bz 754666)


author: Steve Dickson <steved@redhat.com> 1.2.3-18
changelog:
  - Fixed nfs initscript to handle reloads correctly (bz 784022)
  - Add support for umlauts in group names in idmapper (bz 772619)
  - Stoppped racing exportfs in clusters (bz 800335)


author: Steve Dickson <steved@redhat.com> 1.2.3-19
changelog:
  - Fixed decode group names with spaces in idmapd (bz 787970)
  - Remove two unused gss commands (bz 738932)


author: Steve Dickson <steved@redhat.com> 1.2.3-22
changelog:
  - NFS initscript needs to do a rpcidmapd condrestart not a condstart (bz 809201)
  - Allow v2|v3 background mounts to retry when server is down (bz 740472) 
  - Fix the umounting of symbolic links (bz 801085)


author: Steve Dickson <steved@redhat.com> 1.2.3-26
changelog:
  - Fixed typo in the checking of nfsnobody (bz 816149)
  - Fixed the exporting of subdirectories (bz 816162)


author: Tomas Bzatek <tbzatek@redhat.com> - 0.17-4
changelog:
  - Require gnome-terminal to have at least one terminal installed (#716398)
  - Update japanese translation (#630236)
  - Fix terminal invocation parameters (#640496)


author: Marek Grac <mgrac@redhat.com> - 3.2.5-17.1
changelog:
  - fence_vmware_soap: Improve speed of fencing and do not fail on 
  	machines without UUID
  - Resolves: rhbz#872620


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-58
changelog:
  - Resolves: rhbz#1534618 - ABRT crash - /usr/libexec/sssd/sssd_nss
                             [rhel-6.9.z]


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-17.el6_3.1
changelog:
  - Fix changelog issue. The dist tag was in each entry and changing the
    build release changed history. (#878219)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-25
changelog:
  - Resolves: rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Pavel Hrdina <phrdina@redhat.com> - 0.9.0-32
changelog:
  - console: add support to forget password (rhbz#1301841)
  - create: report an error if storage doesn't exist for import installation (rhbz#1305209)
  - uihelpers: fix detection of networks (rhbz#1333290)


author: Benjmain Marzinski <bmarzins@redhat.com> -0.4.9.46.el6_2.1
changelog:
  - Add 0119-RHBZ-802433-tighten_vendor_product_regex.patch
    * Some of the vendor and product regexes were matching incorrect devices
      because they were too broad.
  Resolves: bz #802433


author: Petr Sabata <psabata@redhat.com> - 1.0.17-2
changelog:
  - Changing fcoemon.c includes temporarily to address open-lldp header changes
  - Related: rhbz#672453


author: Harald Hoyer <harald@redhat.com> 147-2.47
changelog:
  - add OPTIONS="log_priority=<loglevel>" for debugging purposes
  Resolves: rhbz#947067
  - limit default udevd maximum childs
  Resolves: rhbz#833172 rhbz#885978
  - add scm path_id support
  Resolves: rhbz#888647
  - header fix for C++
  Resolves: rhbz#909792
  - scsi_id: retry on EBUSY
  Resolves: rhbz#920961


author: David Vossel <dvossel@redhat.com> - 3.9.2-31
changelog:
  - Fixes lvm agent unncessarily removing PVs/LVs when some
    PVs in VG fail.

    Resolves: rhbz#884326


author: Josef Ridky <jridky@redhat.com> - 1:5.5-57.el6_8.1
changelog:
  - Resolves: #1363606 - An SNMPv3 request with a small max message size can lead to SNMPv1/2c bulk requests timing out


author: Karel Klic <kklic@redhat.com> - 2.19-14
changelog:
  - Removed Prereq use in the spec file
  - Removed usage of RPM_SOURCE_DIR from the spec file
  - Removed --enable-yppasswd from configure, as this option
    is ignored


author: Karel Klic <kklic@redhat.com> - 2.19-15
changelog:
  - Added patch for rpc.ypxfrd to create a pid file
  - Rewrote initscripts to become closer to Packaging:SysVInitScript
    Fedora guildeline
  - Fixed initscript for ypserv (bug 523438)
  - Fixed initscript for yppasswdd (bug 523394)
  - Fixed initscript for ypxfrd (bug 523397)


author: Dominik Mierzejewski <rpm@greysector.net> 4.1.4-0.1.svn1183
changelog:
  - updated to SVN r1183
  - simplified multilib patch
  - fixed endianness issues (rhbz#442508)
  - added some docs


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.15-1
changelog:
  - update to 2.8.15
  - update cracklib-words to the current version (2008-05-07)
  - fixup URLs for various dictionary sources that we use
  - fix freeing-an-uninitialized-pointer in the python module (SF#2907102)
  - add a disttag


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-42.el6_1
changelog:
  - turn off crypto, hash, queue, and replication support, which aren't used,
    reduces the package size, and sidesteps needing to patch anything for #347741
  - create and populate new db files, moving them in place afterward so that we
    never have a partially-built db file "live" (patch from Kelsey Cummings,
    CentOS #1987)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.3.pre1.1
changelog:
  - import patch to handle initgroups directly rather than forcing libc to
    use the enumeration interfaces, which could result in two threads calling
    initgroups() at the same time to both get a subset of the right answers
    (#718203)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.6
changelog:
  - Resolves: #950874: Simple access control always denies uppercased users
                       in case insensitive domain


author: Robert Kuska <rkuska@redhat.com> - 2.6.6-59
changelog:
  - Let ConfigParse handle options without values
  - Add check phase to specfile, fix and skip relevant failing tests
  Resolves: rhbz#1031709


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-63
changelog:
  - Since -libs now provide python-ordered dict, added ordereddict
    dist-info to site-packages
  Resolves: rhbz#1199997


author: Tomas Orsava <torsava@redhat.com> - 2.6.6-65
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346354


author: Andrew Beekhof <andrew@beekhof.net> - 0.4.0-0.28.0b41287.git
changelog:
  - Refresh from upstream
  - Local broker is now optional
  - Functional Host, Network and Services (including support for OCF Resources) agents
    Related: rhbz#658828


author: Andrew Beekhof <andrew@beekhof.net> - 0.4.0-0.29.0b41287.git
changelog:
  - Update to upstream version 2798d52.git
    + Support password authentication to qpid
    + Prevent errors when matahari is started at boot
    Related: rhbz#658828


author: Andrew Beekhof <abeekhof@redhat.com> - 0.4.0-1
changelog:
  - Split the packaging up, one subpackage per agent 
  - Remove dependancy on qpid-cpp-server-devel
  - Convert agents to the QMFv2 API
  - Rebuild for updated qpid-cpp
    Related: rhbz#658828


author: Andrew Beekhof <abeekhof@redhat.com> - 0.4.0-2
changelog:
  - Add explicit versioned dependancies between relevant sub-packages
  - Avoid the -libs package depending on QMF libraries
  - Fix post and postun scripts for matahari-service
  - Resolves: rhbz#688164 rhbz#692400 rhbz#688197 
  - Resolves: rhbz#674185 rhbz#690587


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-1
changelog:
  - rebase to the latest upstream
  - partly fixed probles with suided cores
  - fixed confusing message about "moved copy"
  - properly enable daemons on update from previous version
  - added default config file for mailx
  - cli doesn't depend on python plugin
  - properly init i18n all plugins
  - added missing man page to abrt-cli
  - added warning when user tries to report already reported problem again
  - added vmcores plugin
  - Resolves: #759375, #783450, #773242, #771597, #770357, #751068, #749100, #747624, #727494


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-2
changelog:
  - updated translation
  - added man page for a-a-analyze-vmcore
  - minor fixes in kernel oops parser
  - Related: #759375


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-5
changelog:
  - removed the "report problem with ABRT btn" rhbz#809587
  - fixed double free
  - fixed ccpp-install man page
  - Resolves: #809587, #796216, #799027


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.0-4
changelog:
  - remove references to git builds and git matching sources aux files.
  - disable autoreconf, we're building from a tarball.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.0-5
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Remove spaces/tabs mixup to silence rpmlint.


author: Adam Jackson <ajax@redhat.com> 1.2.1-1
changelog:
  - rebase to 1.2.1
  - synaptics-1.2.1-timer-fix.patch: Don't clobber the timer immediately after
    creating it. (#573669)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.1-2
changelog:
  - synaptics-1.2.1-clickfinger-defaults: disable clickfingers if middle or
    right button was detected (#588612)


author: Colin Walters <walters@verbum.org> - 0.84-2
changelog:
  - Add patch to avoid assertions when setting a GError that
    includes a '-' in the enumeration value.  Should fix #528897


author: Matthias Clasen <mclasen@redhat.com> - 1.1.10-4
changelog:
  - Make default cursor theme inherit dmz-aa instead of Bluecurve
  - Also require the cursor theme package


author: Deepak Bhole <dbhole@redhat.com> 1.6.0.0-1.18.b16
changelog:
  - Build only on x86 and x86_64
  - Added STRIP_KEEP_SYMTAB=libjvm* to install section, fix bz530402
  - Added java-1.6.0-openjdk-jar-misc.patch
  - Added java-1.6.0-openjdk-linux-separate-debuginfo.patch to separate debuginfo
  - Added patch for March 2010 security issues (java-1.6.0-openjdk-securitypatches-20100323.patch)


author: Martin Matejovic <mmatejov@redhat.com> - 1.6.0.0-1.19.b17
changelog:
  - Added icedtea6-1.7.3
  - Added openjdk b17
  - Enabled NPPlugin
  - Removed Files:
      java-1.6.0-openjdk-icedtea-gcc-stack-markings.patch
      java-1.6.0-openjdk-jar-misc.patch
      java-1.6.0-openjdk-linux-separate-debuginfo.patch
      java-1.6.0-openjdk-memory-barriers.patch
      java-1.6.0-openjdk-rhino-rewrite.patch
      java-1.6.0-openjdk-s390-optimizer-failure.patch
      java-1.6.0-openjdk-s390-serializer.patch
      java-1.6.0-openjdk-systemtap-fixes-jni-jstack.patch
      java-1.6.0-openjdk-x11.patch
  - Resolves: rhbz#593135
  - Resolves: rhbz#572675


author: Martin Matejovic <mmatejov@redhat.com> - 1.6.0.0-1.20.b17
changelog:
  - Fixed brew build for i686
  - Removed Files:
      java-1.6.0-openjdk-securitypatches-20091103.patch
      java-1.6.0-openjdk-securitypatches-20100323.patch
      java-1.6.0-openjdk-sparc-fixes.patch
      java-1.6.0-openjdk-sparc-hotspot.patch


author: Jiri Vanek <jvanek@redhat.com> - 1.6.0.0-1.33.b17
changelog:
  - bumped release number, it was accidentaly reduced, and now lower version then last one was released.
  - Resolves: rhbz#676295


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 0.5.2-11
changelog:
  - Add BR: lynx which provides "text-www-browser" virtual Provides
    to avoid BR dependency loop between gtk2-devel and w3m (shorter name wins
    the game with yum)
    Proposed by drago01 <drago01@gmail.com> rh#455734


author: Milind Changire <mchangir@redhat.com> - 3.12.2-9
changelog:
  - fixes bugs bz#1546717 bz#1557551 bz#1558948 bz#1561999 bz#1563804 
    bz#1565015 bz#1565119 bz#1565399 bz#1565577 bz#1567100 bz#1567899 bz#1568374 
    bz#1568969 bz#1569490 bz#1570514 bz#1570541 bz#1570582 bz#1571645 bz#1572087 
    bz#1572585 bz#1575895


author: Milind Changire <mchangir@redhat.com> - 3.12.2-10
changelog:
  - fixes bugs bz#1488120 bz#1565577 bz#1568297 bz#1570586 bz#1572043 
    bz#1572075 bz#1575840 bz#1575877


author: Milind Changire <mchangir@redhat.com> - 3.12.2-13
changelog:
  - fixes bugs bz#1493085 bz#1518710 bz#1554255 bz#1558948 bz#1558989 
    bz#1559452 bz#1567001 bz#1569312 bz#1569951 bz#1575539 bz#1575557 bz#1577051 
    bz#1580120 bz#1581184 bz#1581553 bz#1581647 bz#1582119 bz#1582129 bz#1582417 
    bz#1583047 bz#1588408 bz#1592666 bz#1594658


author: Milind Changire <mchangir@redhat.com> - 3.12.2-14
changelog:
  - fixes bugs bz#1547903 bz#1566336 bz#1568896 bz#1578716 bz#1581047 
    bz#1581231 bz#1582066 bz#1593865 bz#1597506 bz#1597511 bz#1597654 bz#1597768 
    bz#1598105 bz#1598356 bz#1599037 bz#1599823 bz#1600057 bz#1601314


author: Milind Changire <mchangir@redhat.com> - 3.12.2-16
changelog:
  - fixes bugs bz#1569657 bz#1608352 bz#1609163 bz#1609724 bz#1610825 
    bz#1611151 bz#1612098 bz#1615338 bz#1615440


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-8
changelog:
  - Several patches related to bug #624560
    - xsetwacom: remove core keyword parsing, has no effect
    - fix button map handling in xsetwacom
    - add more keywords and special characters
    - twinview and calibration fixes


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115874


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.7.rc2
changelog:
  - 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2
  - Bug 689908 - (cov#10610) Fix Coverity NULL pointer dereferences
  - Bug 689895 - ns-newpwpolicy.pl needs to use the new DN format
  - Bug 689889 - RFE: allow fine grained password policy duration attributes
  -              in days, hours, minutes, as well
  - Bug 688730 - Exported tombstone cannot be imported correctly
  - Bug 684349 - slapd crashing when traffic replayed
  - Bug 682897 - Allow maxlogsize to be set if logmaxdiskspace is -1
  - introduce the concept of the srcprerel - with rc2, we did not rebase
  - the source, we are still using the .rc1 source tarball, so we use
  - srcprerel of .rc1 but package pre-release is .rc2


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.9.rc4
changelog:
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted
  - bump version to 1.2.8.rc4 - bump ds console version to 1.2.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-1
changelog:
  - 389-ds-base-1.2.8.0
  - Bug 693523 - Unable to change schema online
  - Bug 693520 - matching rules do not inherit from superior attribute type
  - Bug 693522 - nsMatchingRule does not work with multiple values
  - Bug 693519 - cannot use localized matching rules
  - Bug 693516 - Segfault on index update during full replication push on 1.2.7.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-2
changelog:
  - added srcver because the version from the source is now
  - different than the source in the package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1
changelog:
  - 389-ds-base-1.2.8.2
  - Bug 696407 - If an entry with a mixed case RDN is turned to be
  -    a tombstone, it fails to assemble DN from entryrdn


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1.1
changelog:
  - note: following the z-stream N-V-R convention - this is a z-stream
  - package for rhel-6.1.z - the .1 at the end means this is the first
  - z-stream release for the 389-ds-base-1.2.8.2 package in RHEL 6.1
  - this package is really 389-ds-base-1.2.8.3
  - Resolves: Bug 701560 - memory leak: entryusn value is leaked when an entry is deleted
  - Resolves: Bug 701556 - windows sync can lose old multi-valued attribute values when a new value is added
  - Resolves: Bug 701558 - ldclt core dumps
  - Resolves: Bug 701559 - Linked attributes callbacks access free'd pointers after close
  - Resolves: Bug 701554 - userpasswd not replicating


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1.3
changelog:
  - Resolves: Bug 705837 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory
  - Add ExclusiveArch for x86 and x86_64 only


author: Roland Dreier <rdreier@cisco.com> - 1.0.6-2
changelog:
  - Spec file cleanups from Fedora review: add BuildRequires for
    libibverbs, and move the static library to -static.


author: Robert Scheck <robert@fedoraproject.org> 0.9.3-1
changelog:
  - Upgrade to 0.9.3 (#466825, thanks to Hans de Goede)
  - Enabled libv4l support for the new gspca kernel driver


author: Kamil Dudka <kdudka@redhat.com> - 0.9.5-5
changelog:
  - fix provides for libunicap, libunicapgtk and libucil (#612693)
  - fix SIGSEGV in ucil_alsa_fill_audio_buffer (#635644)
  - check return value of theora_encode_init() (#635645)
  - avoid a multilib conflict on unicap-devel (#658059)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-6
changelog:
  - backport fix to not ignore modifications that affect whether or not an
    entry shows up in a compat map (#1056648)
  - backport fix to avoid potential crashes on domain or map removal (#1043639)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-17
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171209)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-18
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173567)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173567)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-19
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183672)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183680)


author: Josef Ridky <jridky@redhat.com> - 1.900.1-20
changelog:
  - Multiple security fixes (fixed by thoger):
    CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
    CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
    CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
    CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
    CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
    CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
  - Fix implicit declaration warning caused by security fixes above


author: Jarod Wilson <jarod@redhat.com> 0.2.2-2
changelog:
  - The console option in conman.conf is case-insensitive, so relax
    defined consoles check in initscript (Mark McLoughlin, #465777)


author: Tom Lane <tgl@redhat.com> 8.4.7-1.el6_0.1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672634


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1-3.20071028
changelog:
  - update to 1.1-20071028
  - fix multilib conflicts (#341001)
  - use shared library, drop static
  - merge review fixes (#225693)


author: Christophe Fergeau <cfergeau@redhat.com> - 0.6-1
changelog:
  - Initial EPEL release based on the rawhide .spec cleaned up from the parts
    that are not useful for EPEL (because the needed dependencies are not available)


author: Christophe Fergeau <cfergeau@redhat.com> - 0.6-1
changelog:
  - Added spice-gtk-0.6-add-generated-files.patch to be able to build without
    perl-Text-CSV
  - Initial import of spice-gtk in RHEL CVS based on the EPEL .spec
  - Related: rhbz#708417


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.7-19
changelog:
  - xserver-1.7.7-release-xtest-on-phys-buttons.patch: release XTEST buttons
    on physical button releases (#607150)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1.4.16-1
changelog:
  - Update to 1.4.16 (for Soprano 2, also lots of bugfixes).
  - Specify LGPL version in License tag.
  - Update URLs.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.18-5.1
changelog:
  - Fixed XML entity expansion that could lead to information disclosure (CVE-2012-0037)
    Resolves: rhbz#804496


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-7
changelog:
  - Remove ocaml-find-{requires,provides}.sh from this package.  These are
    now in upstream RPM 4.8 (RHBZ#545116).
  - define -> global in a few places.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.2-5
changelog:
  - Enable execshield stack protection on ppc/ppc64 (572826)
    related: rhbz#1343082
  - Fix strict-aliasing warnings in build (990540).


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-20
changelog:
  - qemu: Don't force port=0 for SPICE (rhbz#975751)
  - qemu: Refactor graphics code to not hardcode a single display (rhbz#975751)
  - qemu: Graphics support for simultaneous one of each sdl, vnc, spice (rhbz#975751)
  - qemu: Don't miss errors when changing graphics passwords (rhbz#975751)
  - qemu: Allow seamless migration for domains with multiple graphics (rhbz#975751)
  - qemu_migration: Move waiting for SPICE migration (rhbz#920205)
  - util: Refactor iptables command construction into multiple steps (rhbz#851455)
  - net: Support set public ip range for forward mode nat (rhbz#851455)
  - net: Add support for specifying port range for forward mode nat (rhbz#851455)
  - qemu_migrate: Dispose listen address if set from config (rhbz#971485)
  - qemu: Remove maximum cpu limit when setting processor count using the API (rhbz#855296)
  - qemu_agent: Introduce helpers for agent based CPU hot(un)plug (rhbz#924400)
  - virsh-domain: Refactor cmdVcpucount and fix output on inactive domains (rhbz#924400)
  - API: Introduce VIR_DOMAIN_VCPU_AGENT, for agent based CPU hot(un)plug (rhbz#924400)
  - qemu: Implement request of vCPU state using the guest agent (rhbz#924400)
  - qemu: Implement support for VIR_DOMAIN_VCPU_AGENT in qemuDomainSetVcpusFlags (rhbz#924400)
  - qemuDomainGetVcpusFlags: Initialize ncpuinfo (rhbz#924400)
  - Fix commit 29c1e913e459058c12d02b3f4b767b3dd428a498 (rhbz#924400)
  - qemu: Make qemuMigrationIsAllowed more reusable (rhbz#972675)
  - qemu: Cancel migration if guest encoutners I/O error while migrating (rhbz#972675)
  - qemu: Forbid migration of machines with I/O errors (rhbz#972675)
  - migration: Make erroring out on I/O error controllable by flag (rhbz#972675)
  - migration: Don't propagate VIR_MIGRATE_ABORT_ON_ERROR (rhbz#972675)
  - Paused domain should remain paused after migration (rhbz#972675)
  - qemu: New vnc display sharing policy caps flag (rhbz#803602)
  - conf: Add 'sharePolicy' attribute to graphics element for vnc (rhbz#803602)
  - qemu: Add ', share=<policy>' to qemu commandline (rhbz#803602)
  - virsh: Distinguish errors between missing argument and wrong option (rhbz#924596)
  - virsh: Fix incorrect argument errors for long options (rhbz#924596)
  - virsh: Resolve Coverity 'MISSING_BREAK' (rhbz#924596)
  - virnetdev: Need to initialize 'pciConfigAddr' (rhbz#980339)
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#977961)
  - sec_manager: Refuse to start domain with unsupported seclabel (rhbz#947387)
  - usb: Don't spoil decimal addresses (rhbz#981503)
  - storage: Return -1 when fs pool can't be mounted (rhbz#983539)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-21
changelog:
  - conf: Avoid NULL deref for pmsuspended domain state (rhbz#822306)
  - libvirt: Define domain crash event types (rhbz#822306)
  - qemu: Refactor processWatchdogEvent (rhbz#822306)
  - qemu: Expose qemuProcessShutdownOrReboot() (rhbz#822306)
  - qemu: Implement 'oncrash' events when guest panicked (rhbz#822306)
  - qemu: Implement 'oncrash' coredump events when guest panicked (rhbz#822306)
  - conf: Fix a memory leak when parsing nat port XML nodes (rhbz#851455)
  - security_manager: Fix comparison (rhbz#984793)
  - qemu: Prevent crash of libvirtd without guest agent configuration (rhbz#984821)
  - qemu: Fix double free of returned JSON array in qemuAgentGetVCPUs() (rhbz#984821)
  - qemu_agent: Add support for appending arrays to commands (rhbz#924400)
  - Add support for locking domain's memory pages (rhbz#947118)
  - qemu: Implement support for locking domain's memory pages (rhbz#947118)
  - qemu: Check for -realtime mlock=on|off support (rhbz#947118)
  - qemu: Move memory limit computation to a reusable function (rhbz#947118)
  - util: New virCommandSetMax(MemLock|Processes|Files) (rhbz#947118)
  - qemu: Set RLIMIT_MEMLOCK when memoryBacking/locked is used (rhbz#947118)
  - Add Gluster protocol as supported network disk backend (rhbz#849796)
  - qemu: Add support for gluster protocol based network storage backend. (rhbz#849796)
  - tests: Add tests for gluster protocol based network disks support (rhbz#849796)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-8
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 113)
  - CVE-2010-2089: further checks within the audioop module (patch 114)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 115)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-9
changelog:
  - cherrypick upstream fix for fatal error creating threads when memory is
  low (patch 116)
  Resolves: rhbz#598564


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-10
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 117)
  Resolves: rhbz#583931


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-11
changelog:
  - Stop python bailing out with an assertion failure when UnicodeDecodeErrors
  occur on very large buffers (patch 118, upstream issue 9058)
  Resolves: rhbz#540518


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-1
changelog:
  - 2.6.5
  - remove upstream patch 53
  - fixup selinux patch to apply cleanly against 2.6.5 (patch 110)
  Resolves: rhbz#611607
  - remove commented-out, out-of-date patches


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-2
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib
  Resolves: rhbz#563986
  - don't build the _md5 and _sha* modules: rely on _hashlib in hashlib


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-3.el6_0.1
changelog:
  - backport subprocess fixes to use the "poll" system call, rather than "select"
  Resolves: rhbz#668975


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-3.el6_0.2
changelog:
  - allow the "no_proxy" environment variable to override "ftp_proxy" in
  urllib2 (patch 128)
  Resolves: rhbz#671343


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-5
changelog:
  - Move removal of directories to the end of the %prep section
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-6
changelog:
  - Update pem sources to the same ones used on rhel-7
  - Remove no longer needed patches on account of this update
  - Resolves: Bug 1002205


author: Dan Horák <dhorak@redhat.com> 2.3.3-2.1
changelog:
  - properly check CKA_MODULUS_BITS to establish key length for ica token (#743556)
  - Resolves: #743556


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-11
changelog:
  - 1054587 iscsiuio update
  - 1053374 upstream backports to support new driver features
  - 1052361 IPC sockaddr compat to communicate with older iscsid on upgrade
  - 1076344 fix handling of multiple oustanding async events


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-7
changelog:
  - [abrt] abrt-addon-ccpp-2.0.7-4.fc17: abrt-action-analyze-core:106:extract_info_from_core:IndexError: list index out of range rhbz#804309
  - abrt-addon-python: The process might hang forever if no one collects the dump it sends rhbz#808562
  - Reporting may fail with: "abrt-bodhi: command not found" rhbz#810309
  - too strict check for tainted kernel rhbz#814594
  - "abrt-ccpp status" returned no status messages rhbz#820475
  - abrt missing dependency: libreport-plugin-bugzilla rhbz#828673
  - abrt-addon-python: The process might hang forever if no one collects the dump it sends rhbz#837333
  - don't remove new problems from abrt-upload directory rhbz#839285
  - Resolves: #839285, #828673, #810309, #820475, #828673, #808562, #837333, #804309, #814594, #814594


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-8
changelog:
  - hopefully fixed ugly applet icon rhbz#797078
  - abrt-install-ccpp-hook: fix the check for %e presense rhbz#851097
  - abrt-harvest-vmcore: add CopyVMcore config option to copy vmcores. Closes rhbz#847227
  - fixed problems discovered by brewtap rhbz#812284
  - don't try to run dbus-send if it's not installed rhbz#811901
  - Resolves: #797078, #851097, #847227, #812284, #811901


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.36
changelog:
  - 740054 sync iscsiuio to 0.7.2.1
  - 790609 Add ping and host chap support to iscsiadm
  - 636013 scalability testing.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.37
changelog:
  - 805467 Have iscsistart/iscsiadm bring up offload net interface.
  - 796574 Fix port handling when hostnames are used for portals.
  - 739843 Fix default iface setup handling.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.40
changelog:
  - 738192 Fix regression added when handling 738192 where unknown params
    messages got logged by mistake.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.9
changelog:
  - Resolves: #996020 - sssd fails instead of skipping when a sudo ldap
                        filter returns entries with multiple CNs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.10
changelog:
  - Resolves: #1003567 - large number of sudo rules results in error -
                         Unable to create response: Invalid argument


author: Jan Synáček <jsynacek@redhat.com> - 2:2.3.14-40
changelog:
  - Fix: xinetd attempts to bind to IPv6 sockets even on systems with IPv6 disabled (#1285091)
  - Fix: modify the xinetd man page to make it more clear on what happens to services on xinetd reload (#1119317)


author: Tom Lane <tgl@redhat.com> 5.1.69-1
changelog:
  - Update to 5.1.69, for assorted upstream bugfixes including
    CVEs announced in April 2013
  Resolves: #953084


author: Peng Huang <shawn.p.huang@gmail.com> - 1.3.0-1
changelog:
  - Update to 1.3.0.
  - Update iok patch.
  - Fix bug 577148 - IOK screen appears with all keyboard layouts on ibus language panel


author: Daiki Ueno <dueno@redhat.com> - 1.3.0-2
changelog:
  - Add ibus-m17n-641243-indic-ranks.patch.
  - Fix bug 641243 - Ibus does not load all the keymaps for a language
    that is used for logging in
  - Add ibus-m17n-652201-altgr.patch.
  - Fix bug 652201 - [Indic] Rupee Symbol (U+20B9) Need to include in
    Indic Keyboard


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-1
changelog:
  - Update to 0.5.2 release
  - Fix connect to password protected SPICE displays over SSH (rhbz #749759)
  - Add SPICE smartcard support (rhbz #789090)
  - Honour hot key configuration from SPICE controller (rhbz #795437)
  - Refresh translations (rhbz #797015)
  - Fix crash reconnecting to SPICE after guest restart (rhbz #797082)
  - Add support for foreign menus with SPICE (rhbz #799038)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.5.2-3
changelog:
  - Add --full-screen=auto-conf to remote-viewer (rhbz #803297)
  - Correctly handle switch-host Spice migration (rhbz #802574)
  - Fix USB auto-share doesn't work in full-screen (rhbz #803834)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-4
changelog:
  - Fix close of VNC displays (rhbz #802673)
  - Add usbredirect properties (rhbz #807298)
  - Add properties to disable desktop effects (rhbz #808986)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-5
changelog:
  - Raise priority of spice-xpi-client alternative to 25 (rhbz #813303)
  - Add missing docs for --attach parameter (rhbz #811191)
  - Fix typos in docs for --full-screen parameter (rhbz #811131)
  - Fix usbredirect property usage (rhbz #807298)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-6
changelog:
  - Fix scaling of windows on i386 arch (rhbz #810544)
  - Support raw IPv6 addresses in URIs (rhbz #813375)
  - Set remote-viewer application name (rhbz #814043)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-7
changelog:
  - Change to Ok to Close in USB redirection (rhbz #816280)
  - Fix close of windows on guest shutdown (rhbz #816550)


author: Miroslav Lichvar <mlichvar@redhat.com> 14:2.1a15-14
changelog:
  - update ethercodes.dat
  - mark ethercodes.dat as noreplace
  - include Debian arp2ethers and massagevendor man pages (#578201)
  - don't include massagevendor-old script anymore


author: Benjmain Marzinski <bmarzins@redhat.com> -0.4.9.56.el6_3.1
changelog:
  - Add 0145-RHBZ-831045-realloc-vector.patch
    * fix deleting items from vector, and handle error cases
  - Resolves: bz #837594


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Bump to 2.6.0 and u80b32.
  - Drop upstreamed patches and separate AArch64 HotSpot.
  - Add dependencies on pcsc-lite-devel (PR2496) and lksctp-tools-devel (PR2446)
  - Only run -Xshare:dump on JIT archs other than power64 as port lacks support
  - Update remove-intree-libraries script to cover LCMS and PCSC headers.
  - Resolves: rhbz#1235157


author: Joe Orton <jorton@redhat.com> - 2.2.14-4
changelog:
  - mod_ssl: add further mitigation for CVE-2009-3555
  - drop proxy_ajp.conf
  - update httpd.conf: decrease Timeout to 1m, update LoadModule
    directives, bump worker to 4 proc/300clients
  - fix hard-coded default pidfile to match default config (#547629)
  - drop legacy X-Pad header from short responses (#526110)
  - disable keepalive for Expect: 100-continue and error response (#533407)
  - mod_ext_filter: fix spurious error log output (#479463)
  - mod_rewrite: don't serialize logfile access (#493023)
  - fix spurious error messages on graceful restart (#233955)
  - mod_ssl: fix potential hang in renegotiation (#510515)
  - mod_proxy_connect: support use SSL client connection (#523594)


author: Joe Orton <jorton@redhat.com> - 2.2.14-5
changelog:
  - mod_ssl: fix CVE-2009-3555 backport (#563119)
  - mod_authnz_ldap: fix for dynamic group support
  - mod_ssl: add SSLInsecureRenegotiation directive (#561435)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-40
changelog:
  - Resolves #1171848 - IPA - port 9443 (pki-core) is vulnerable to SSLv3 POODLE
    (based upon upstream changes provided by cfu and alee)


author: Albert Uchytil <auchytil@redhat.com> 20120827-14
changelog:
  - updated man pages
  - changed debuginfo package handling (#1071834)
  - added capability of dynamically registering and deregistering collections (#1099394)


author: Jan Zeleny <jzeleny@redhat.com> - 21020927-21
changelog:
  - fix an obscure segfault when listing collections on i386
  - fix registration to work with slash-ended paths


author: Lubos Kardos <lkardos@redhat.com - 20120927- 23
changelog:
  - Add execution of register and deregister scripts during registration
    and deregistration if they exist.
  - Add printing file names in error messages.
  - Add capability to make collection nfs mountable using macro nfsmountable.
  - Add owning and creating of state and conf files if nfsmountable is defined
  - drop recursive ownership of /usr/lib within SCL root


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-3
changelog:
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Resolves: rhbz#1163993
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Resolves: rhbz#1163993


author: Jan Kaluza <jkaluza@redhat.com> 5.04-22
changelog:
  - fix #1169509 - add support for Java 1.7 and 1.8
  - fix #1243650 - comment out too-sensitive Pascal magic
  - fix #1080453 - remove .orig files from magic directory
  - fix #1161058 - add support for EPUB
  - fix #1162149 - remove parts of patches patching .orig files
  - fix #1154802 - fix detection of zip files containing file named "mime"
  - fix #1246073 - fix detection UTF8 and UTF16 encoded XML files
  - fix #1263987 - add new "execfn" to coredump output to show the real name of
    executable which generated the coredump
  - fix #809898 - add support for detection of Python 3.2-3.5 byte-compiled files
  - fix #966953 - backport support for MSOOXML


author: Jan Kaluza <jkaluza@redhat.com> 5.04-27
changelog:
  - fix CVE-2014-3587 (incomplete fix for CVE-2012-1571)
  - fix CVE-2014-3710 (out-of-bounds read in elf note headers)
  - fix CVE-2014-8116 (multiple DoS issues (resource consumption))
  - fix CVE-2014-8117 (denial of service issue (resource consumption))
  - fix CVE-2014-9620 (limit the number of ELF notes processed)
  - fix CVE-2014-9653 (malformed elf file causes access to uninitialized memory)


author: David Cantrell <dcantrell@redhat.com> - 13.21.109-1
changelog:
  - timeout= in yaboot.conf is in tenths of seconds (dcantrell)
    Resolves: rhbz#692409
  - Install dracut-fips package when fips=1 is specified (dcantrell)
    Resolves: rhbz#692350
  - Don't write HWADDR into ifcfg files (rvykydal)
    Resolves: rhbz#690589
  - Stop user if we have no /boot and / is an LV (dcantrell)
    Related: rhbz#618376
  - Prevent singlePV lv requests from being > the size of any pv (dcantrell)
    Related: rhbz#618376
  - Implement a general version of InstallInterfaceBase.methodstrRepoWindow().
    (akozumpl)
    Related: rhbz#688757


author: Martin Sivak <msivak@redhat.com> - 13.21.110-1
changelog:
  - Use correct interface to obtain HwAddress property (rvykydal)
    Resolves: rhbz#693614
  - Ignore --device=ibft in stage 2 kickstart handling (rvykydal)
    Related: rhbz#638131
    Resolves: rhbz#638131
  - loader.c: remove stage2param, unused. (akozumpl)
    Related: rhbz#688757
  - nfs/kickstart: do not throw away the --opts part (akozumpl)
    Related: rhbz#688757


author: David Cantrell <dcantrell@redhat.com> - 13.21.111-1
changelog:
  - Add libraries needed for fips mode to initrd on s390 (mgracik)
    Resolves: rhbz#692825
  - Prevent debug and kdump kernels from becoming the default (dcantrell)
    Resolves: rhbz#693702
  - Use znet_cio_free to clear network devices from cio_ignore. (dcantrell)
    Related: rhbz#633469


author: Martin Sivak <msivak@redhat.com> - 13.21.112-1
changelog:
  - Add more files needed by sshd in fips mode (mgracik)
    Resolves: rhbz#692825
  - Fix traceback of network --device=<MAC> (rvykydal)
    Resolves: rhbz#694768
  - Remove maximum limit on EFI partition (bcl)
    Resolves: rhbz#684860


author: Martin Sivak <msivak@redhat.com> - 13.21.113-1
changelog:
  - If there are no RAID arrays, do not write an mdadm.conf (clumens).
    Resolves: rhbz#696907
  - fipscheck has to be in /usr/bin (mgracik)
    Resolves: rhbz#692825
  - Revert "Don't write HWADDR into ifcfg files (rvykydal)"
    Related: rhbz#690589
  - Revert "Fix traceback of network --device=<MAC> (rvykydal)"
    Related: rhbz#694768


author: Martin Sivak <msivak@redhat.com> - 13.21.114-1
changelog:
  - Fix SIGSEGV for netwowrk --device=<MAC> which is not found (rvykydal)
    Resolves: rhbz#697432
  - Set mainWindow size request to current res reported by xrandr (dcantrell)
    Resolves: rhbz#694760


author: Karsten Hopp <karsten@redhat.com> 1.12-1
changelog:
  - update to wget-1.12
  - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate
    with NUL in name


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.415.el6_5.11
changelog:
  - kvm-block-Fix-bdrv_is_allocated-for-short-backing-files.patch [bz#1109715]
  - Resolves: bz#1109715
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.415.el6_5.12
changelog:
  - kvm-qcow-Return-real-error-code-in-qcow_open.txt [bz#1097225]
  - kvm-qcow1-Make-padding-in-the-header-explicit.txt [bz#1097225]
  - kvm-qcow1-Check-maximum-cluster-size.txt [bz#1097225]
  - kvm-qcow1-Validate-L2-table-size-CVE-2014-0222.txt [bz#1097225]
  - kvm-qcow1-Validate-image-size-CVE-2014-0223.txt [bz#1097234]
  - kvm-qcow1-Stricter-backing-file-length-check.txt [bz#1097234]
  - Resolves: bz#1097225
    (CVE-2014-0222 qemu-kvm: Qemu: qcow1: validate L2 table size to avoid integer overflows [rhel-6.5.z])
  - Resolves: bz#1097234
    (CVE-2014-0223 qemu-kvm: Qemu: qcow1: validate image size to avoid out-of-bounds memory access [rhel-6.5.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.415.el6_5.13
changelog:
  - kvm-block-Create-proper-size-file-for-disk-mirror.patch [bz#1109715]
  - kvm-block-Fix-bdrv_is_allocated-return-value.patch [bz#1109715]
  - kvm-scsi-bus-prepare-scsi_req_new-for-introduction-of-pars.patch [bz#1125131]
  - kvm-scsi-bus-introduce-parse_cdb-in-SCSIDeviceClass-and-SC.patch [bz#1125131]
  - kvm-scsi-block-extract-scsi_block_is_passthrough.patch [bz#1125131]
  - kvm-scsi-block-scsi-generic-implement-parse_cdb.patch [bz#1125131]
  - kvm-virtio-scsi-implement-parse_cdb.patch [bz#1125131]
  - kvm-virtio-scsi-Fix-reset-callback-for-virtio-scsi.patch [bz#1123271]
  - kvm-virtio-scsi-add-ioeventfd-support.patch [bz#1123271]
  - Resolves: bz#1109715
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)
  - Resolves: bz#1123271
    (Enable ioenventfd for virtio-scsi-pci)
  - Resolves: bz#1125131
    ([FJ6.5 Bug] SCSI command issued from KVM guest doesn't reach target device)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.415.el6_5.14
changelog:
  - The commit for zrelease .13 was incomplete; the changes to qemu-kvm.spec
    did not include the "%patchNNNN -p1" lines for patches 4647 through 4655;
    so although the patch files themselves were committed, the srpm build
    did not pick them up. In addition, the commit log did not describe the
    patches.

    This commit corrects these problems and bumps the zrelease to .14.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-3
changelog:
  - Backport (slightly modified) configurable SSL version feature from upstream,
    update man page accordingly
    Resolves: #1239117


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-13
changelog:
  - Allow other values for "yes" in fs-lib when unmounting
    file systems
    (fs-lib_allow_other_values_for_yes.patch)
    Resolves: rhbz#614421


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-14
changelog:
  - resource-agents: Drop tomcat-5 from build
    (drop_tomcat_5_from_build.patch)
    Resolves: rhbz#593721


author: Marek Grac <mgrac@redhat.com> - 3.0.12-15
changelog:
  - postgresql RA does not work correctly with netmask
    (psql_does_not_work_correctly_with_netmask.patch)
    Resolves: rhbz#614457


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-16
changelog:
  - resource-agents: fix utility to obtain data from ccs_tool
    (fix_utility_to_obtain_data_from_ccs_tool.patch)
    Resolves: rhbz#631943


author: Marek Grac <mgrac@redhat.com> - 3.0.12-17
changelog:
  - fix resource agent for named
    (resource-agents-fix-resource-agent-for-named.patch)
    Resolves: rhbz#648897


author: Marek Grac <mgrac@redhat.com> - 3.0.12-18
changelog:
  - Disable updates to static routes by RHCS IP tooling
    (resource-agents-Add-option-disable_rdisc-to-ip.sh.patch)
    Resolves: rhbz#621538


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-39
changelog:
  - Resolves #1144608 - pki-core failed to build with cmake-2.8.12.2-4.el6
  - Resolves #1037248 - pki-core FTBFS if "-Werror=format-security" flag is used
  - Resolves #1243 - Outdated selinux-policy dependency in Dogtag 9


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-4.2
changelog:
  - fix CVE-2012-1573 - security issue in packet parsing (#805432)
  - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.299-7.1
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Resolves: rhbz#709963


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-25
changelog:
  - ksu: if the -e flag isn't used, use the target user's shell when checking
    for authorization via the target user's .k5users file (#1026721)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-26
changelog:
  - pull in backport of patch to not subsequently always require that responses
    come from master KDCs if we get one from a master somewhere along the way
    while chasing referrals (RT#7650, #1113652)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-27
changelog:
  - pull in backported fix for denial of service by injection of malformed
    GSSAPI tokens (CVE-2014-4341, CVE-2014-4342, #1121510)
  - incorporate backported patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800, more of


author: Tom Lane <tgl@redhat.com> 2.2.14-1
changelog:
  - Update to unixODBC 2.2.14.  Note this involves an ABI break and a consequent
    soname version bump, because upstream fixed some mistakes in the widths of
    some API datatypes for 64-bit platforms.  Also, the formerly embedded
    mysql, postgresql, and text drivers have been removed.  (For mysql and
    postgresql, use the separate mysql-connector-odbc and postgresql-odbc
    packages, which are far more up to date.  The text driver is not currently
    shipped by upstream at all, but might get revived as a separate SRPM later.)
  - Stop shipping .a library files, per distro policy.
  - Fixes for libtool 2.2.


author: Michal Ruprich - 14:4.0.0-10.20090921gitdf3cb4.2
changelog:
  - Resolves: #1339662 -  Race condition between SIGALARM handler function verbose_stats_dump() and main()->pcap_close()


author: Michal Ruprich - 14:4.0.0-11.20090921gitdf3cb4.2
changelog:
  - Related: #1339662 - Race condition between SIGALARM handler function verbose_stats_dump() and main()->pcap_close()
                      - Previous patch changed to upstream fix


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-24
changelog:
  - select() function and it's supporting macros replaced by poll() and it's supporting macros
  - added patch of configure.in for clean compilation


author: Justin Ross <jross@redhat.com> - 0.10-8
changelog:
  - Related rhbz#743512 - mrg_2.0.x patch was updated to include:
    - BZ 690107: Too many 'task overran' warnings in qpid broker logs
    - BZ 728586: Broker memory bloat due to leak of messages.
    - BZ 730017: Cluster authentication ignores cluster-* settings
    - BZ 732063: creating invalid federation link causes file descriptor
      leak
    - BZ 733543: Client freezes up when sending a large message
    - BZ 734608: qpidd core dump when accessed from a 1.2 client
    - BZ 736160: Qpidd possible memory leaks


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-52
changelog:
  - Resolves #1403943 - Replica install fails with failed to configure ca on
    "White spaces are required between publicId and systemId"


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-53
changelog:
  - Resolves #1403943 - Replica install fails with failed to configure ca on
    "White spaces are required between publicId and systemId"
    (contains the additional changes required to work with the latest HTTPD)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-1.el6
changelog:
  - Update to upstream 2.1.3 release (#736170)
  - Additional branding (#742264)
  - Disable automember cli (#746717)
  - ipa-client-install sometimes fails to start sssd properly (#736954)
  - ipa-client-install adds duplicate information to krb5.conf (#714597)
  - ipa-client-install should configure hostname (#714919)
  - inconsistency in enabling "delete" buttons (#730751)
  - hbactest does not resolve canonical names during simulation (#740850)
  - Default DNS Administration Role - Permissions missing (#742327)
  - named fails to start after installing ipa server when short (#742875)
  - Duplicate hostgroup and netgroup should not be allowed (#743253)
  - named fails to start (#743680)
  - Global password policy should not be able to be deleted (#744074)
  - Client install fails when anonymous bind is disabled (#744101)
  - Internal Server Error adding invalid reverse DNS zone (#744234)
  - ipa hbactest does not evaluate indirect members from groups. (#744410)
  - Leaks KDC password and master password via command line arguments (#744422)
  - Traceback when upgrading from ipa-server-2.1.1-1 (#744798)
  - IPA User's Primary GID is not being set to their UPG's GID (#745552)
  - --forwarder option of ipa-dns-install allows invalid IP addr (#745698)
  - UI does not grant access based on roles (#745957)
  - Unable to add external user for RunAs User for Sudo (#746056)
  - Typo in error message while adding invalid ptr record. (#746199)
  - Don't use python 2.7-only syntax (#746229)
  - Error when using ipa-client-install with --no-sssd option (#746276)
  - Installation fails if sssd.conf exists and is already config (#746298)
  - External hosts are not removed properly from sudorule (#709665)
  - Competely remove entitlement support (#739060)
  - Add winsync section to ipa-replica-manage man page (#744306)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-2.el6
changelog:
  - ipa-client-install hangs if the discovered server is unresponsive (#745392)
  - Fix minor problems in help system (#747028)
  - Remove help fix from Disable automember patch (#746717)
  - Update minimum version of sssd to 1.5.1-60 to pick up SELinux fix (#746265)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-3.el6
changelog:
  - hbactest fails while you have svcgroup in hbacrule (#746227)
  - Add Kerberos domain mapping for system hostname (#747443)
  - Format certificates as PEM in browser (#701325)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-8.el6
changelog:
  - Updated patch for CVE-2011-3636 to include CR in the HTTP headers.
    xmlrpc-c in RHEL-6 doesn't suppose the dont_advertise option so that is
    not set any more. Another fake header, X-Original-User_Agent, is added
    so there is no more trailing junk after the Referer header.  (#749870)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-9.el6
changelog:
  - Add current password prompt when changing own password in web UI (#751179)
  - Remove extraneous trailing ' from netgroup patch (#749352)


author: Daniel Veillard <veillard@redhat.com> - 2.7.3-1
changelog:
  - new release 2.7.3
  - limit default max size of text nodes
  - special parser mode for PHP
  - bug fixes and more compiler checks


author: Peter Hutterer <peter.hutterer@redhat.com> 1.10.2-0.7
changelog:
  - Fix xserver-1.10-2-xfree86-duplicate-xorg.conf-device-information-befor.patch,
    type_name must be copied and assigned to implicit devices.


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.1
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
    descriptions and OXT extension files
  - CVE-2010-3451 Array index error by insecure parsing of broken rtf
    tables
  - CVE-2010-3452 Integer signedness error (crash) by processing certain
    RTF tags
  - CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
    with WW8 list styles with specially-crafted count of list levels
  - CVE-2010-3454 Array index error by scanning document typography
    information of certain *.doc files
  - CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.2
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-4253 heap based buffer overflow in PPT import


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.3
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-4643 heap based buffer overflow when parsing TGA files


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.6
changelog:
  - Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
    overflows in JPEG, PNG and BMP reader implementations


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.7
changelog:
  - Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
    processing invalid Escher graphics records length in the Powerpoint
    documents


author: Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
changelog:
  - carry our own yp.x, so that we don't get bitten if libc doesn't include
    yp client routines
  - we need rpcgen at build-time now


author: Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
changelog:
  - speed up building compat entries which reference thousands of other entries
    (more of #694623)
  - 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
    to be, too


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-24
changelog:
  - incorporate Martin Osvald's patch to properly update the KDC's count of
    how many child processes it has when one of them exits (#752405)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-25
changelog:
  - pull patch from upstream to properly clean up gssapi contexts when called
    to export a lucid context, so that we don't subsequently leak the replay
    cache descriptors (#761006)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.3
changelog:
  - Revise PR2323 to use header defines to mark whether GLib types have been defined or not
  - Resolves: rhbz#1190835


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.3
changelog:
  - Revise PR2323 to account for different glibconfig.h define used on RHEL 6
  - Resolves: rhbz#1190835


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.3
changelog:
  - Use installed directory in check section and remove duplicate tests in build
  - Resolves: rhbz#1190835


author: Jay Fenlason <fenlason@redhat.com> 3.2-7
changelog:
  - include BuildRequires: hwloc-devel from RHEL-7.0
  - Add win_free patch to close
    Resolves: rhbz734023


author: Andreas Schneider <asn@redhat.com> - 3.6.23-24
changelog:
  - resolves: #1271763 - Fix segfault in NTLMv2_generate_names_blob()
  - resolves: #1261265 - Add '--no-dns-updates' option for 'net ads join'


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.0-4
changelog:
  - Remove ucm and topology files from the /usr/share/alsa tree
  - Coverity fixes
  - Resolves: rhbz#838948


author: Jay Fenlason <fenlason@redhat.com> 3.2-10
changelog:
  - Add BuildRequires for libibmad-devel
  - Build against mpich, now that we have a mpi-3 version of it.
  - rebuild against new mvapich2
    R e s o l v e s: rhbz1011910, rhbz1011915


author: Jay Fenlason <fenlason@redhat.com> 3.2.4-1
changelog:
  - Backport from RHEL-7.0
  - Edit old changelog entries so commit can work.
  - Update to latest imb and osu versions, no longer using openfabrics.org
    tarball.
    Resolves: rhbz1093468


author: Zane Bitter <zbitter@redhat.com> 0.6.0-5
changelog:
  - Fix buffer overflow in broker wrapper
    Related: rhbz#795430
  - Move shadow-utils dependency to correct subpackage


author: Jeff Peeler <jpeeler@redhat.com> 0.6.0-6
changelog:
  - Fix man pages not being installed properly.
  - Fix permission on lockfile preventing broker daemon startup.
  - Resolves: rhbz#803718, rhbz#803590


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2.1
changelog:
  - ftpd: add candidate patch to detect setegid/setregid/setresgid and check
    for errors when calling them (MITKRB5-SA-2011-005, CVE-2011-1526, #713341)


author: Rich Megginson <rmeggins@redhat.com> - 1.5.2-6.2
changelog:
  - fixes for RHEL-6 pkgwrangler review
  - Makefile.PL.rpm is not an upstream source
  - Source URL was pointing to the wrong location
  - change Release so dist tag is last


author: Rich Megginson <rmeggins@redhat.com> - 1.5.3-1
changelog:
  - new version 1.5.3 with openldap support
  - Resolves: bug 610902 - Modify perl-Mozilla-LDAP to use open ldap library


author: Dave Anderson <anderson@redhat.com> - 5.0.0-17.el6
changelog:
  - Fix for x86 "bt" command when a crash is generated by a kernel module's
    init_module() function.
    Resolves: rhbz#596904
  - Correct the error message for "dev -p" command.
    Resolves: rhbz#598716
  - Fix to recognize new block and kvmclock devices in the qemu KVM dumpfile.
    Resolves: rhbz#597187


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-3
changelog:
  - added patch1 b25-appContextFix.patch to make it run with future openjdk
  - rmeoved posttrans
  - Resolves: rhbz#975426


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-4
changelog:
  - improved patch1 b25-appContextFix.patch to make it run with future openjdk better
  - Resolves: rhbz#975426


author: Michal Sekletar <msekleta@redhat.com> - 0.4.1-4
changelog:
  - identify X session launched on currently used VT as active (#1058647)
  - upstart-0.6.0 and higher doesn't use /etc/event.d anymore, move ck-log-system-restart and friends to /etc/init (#681696)
  - fix CVE-2010-4664 (#585952)
  - added logrotate config file (#634935)
  - bump maximum device name length. Fix issue with certain devices where device name is longer than 16 characters (#1070249)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.11
changelog:
  - Resolves: #1022708 - RHEL6 sssd upgrade restorecon workaround for
                         /var/lib/sss/mc context


author: Petr Spacek <pspacek@redhat.com> - 2.3-7
changelog:
  - fix crash caused by race condition during resolver cache flushing (#1126841)
  - fix ticket expiration check (#1142176)
  - fix idnsAllowTransfer and idnsAllowQuery attributes documentation (#1183805)


author: Paul Lindner <lindner@inuus.com> - 1.4.3-1
changelog:
  - Add explicit require on memcached for memcached-devel (resolves 537046)
  - enable-threads option no longer needed
  - Update web site address


author: Paul Lindner <lindner@inuus.com> - 0:1.4.4-1
changelog:
  - Upgraded to upstream memcached-1.4.4 (http://code.google.com/p/memcached/wiki/ReleaseNotes144)
  - Add explicit Epoch to fix issue with broken devel dependencies (resolves 542001)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-3.el6_8.1
changelog:
  - fix vulnerabilities allowing remote code execution (CVE-2016-8704,
    CVE-2016-8705, CVE-2016-8706)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-1
changelog:
  - Update to latest upstream release with initial support for thinly-provisioned
    devices and scalable snapshots, improved support for RAID personalities,
    initial support for LVM metadata caching daemon and various other fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-2
changelog:
  - Fix a regression in handling of lvchange/lvcreate --major/--minor (2.02.95).
  - Fix name conflicts that prevent down-converting RAID1 when specifying a device.
  - Improve thin_check option passing and use configured path.
  - Add --with-thin-check configure option for path to thin_check.
  - Restart dmeventd on device-mapper-event package upgrade.
  - Do not run a new dmeventd instance on restart if there's no existing one.
  - Detect lvm binary path in lvmetad udev rules.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-3
changelog:
  - Restart clvmd daemon on lvm2-cluster package upgrade.
  - Keep exclusive activation in pvmove if LV is already active.
  - Disallow pvmove for exclusive LV if some affected LVs are not exclusively activated.
  - Remove unused and wrongly set cluster VG flag from clvmd lock query command.
  - Fix pvmove for exclusively activated LV pvmove in clustered VG (2.02.86).
  - Detect VG name being part of the LV name in lvconvert --splitmirrors -n.
  - Add 'vgscan --cache' functionality for consistency with 'pvscan --cache'.
  - Use 'pvscan --cache' instead of vgscan in lvmetad init script.
  - Exit immediately if LISTEN_PID env var incorrect during systemd handover.
  - Update and fix monitoring of thin pool devices.
  - Fix initializiation of thin monitoring (2.02.92).
  - Remove watch udev rule from 13-dm-disk.rules.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-4
changelog:
  - Fix lvresize of thin pool for striped devices.
  - Round upwards when specifying number of extents for lvresize.
  - Round downwards strip alignment for lvcreate with %FREE.
  - Fix problems when specifying PVs during RAID down-converts.
  - Fix ability to handle failures in mirrored log (2.02.89).
  - Change message severity to log_very_verbose for missing dev info in udev db.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-5
changelog:
  - Add lvmetad man page.
  - Fix RAID device replacement code so that it works under snapshot.
  - Fix inability to split RAID1 image while specifying a particular PV.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-6
changelog:
  - Allow subset of failed devices to be replaced in RAID LVs.
  - Prevent resume from creating error devices that already exist from suspend.
  - Fix lvconvert error message for non-mergeable volumes.
  - Fix volume group unlocking in vgreduce error path.
  - Update and correct lvs man page with supported column names.
  - Rename (Blk)DevNames/DevNos dmsetup header to (Blk)DevNamesUsed/DevNosUsed.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-7
changelog:
  - Disallow snapshots of mirror segment type.
  - Fix bug in cmirror that caused incorrect status info to print on some nodes.
  - Disallow changing cluster attribute of VG while RAID LVs are active.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-8
changelog:
  - Fix up-convert when mirror activation is controled by volume_list and tags.
  - Add a note for global/mirror_segtype_default setting that RAID1 is not cluster-aware.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-9
changelog:
  - Re-enable partial activation of non-thin LVs until it can be fixed (2.02.90).
  - Reinstate snapshots of mirror segment type.
    Warn of deadlock risk when using snapshots of mirror segment type.
  - Set delay_resume_if_new on deptree snapshot origin.
  - Add Conflicts: vdsm < 4.9-113.0 (new 'target' and 'zero' LV attr breaks vdsm).


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-13
changelog:
  - Initialize DBus errors correctly to resolve crashes when the probers are run
    directly.
  - Resolves: #755209


author: Doug Ledford <dledford@redhat.com> - 3.2.2-1.el6_1.1
changelog:
  - Update to latest upstream release (many bugfixes related to the new
    automatic rebuild support: bz723135, bz723137, bz723139, bz723140,
    bz723141, bz723142)
  - Correct typo in /etc/sysconfig/raid-check file
  - Fix a bug related to readding devices into an array
  - Resolves: bz723135, bz723137, bz723139, bz723140, bz723141, bz723142


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-6
changelog:
  - Add missing documentation for resource agents
    (add_missing_resource_docs.patch)
  - Clean up recursion in scheman output and documentation
    (clean_up_recursion_and_documentation.patch)
    Resolves: rhbz#606470


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-7
changelog:
  - Make vm.sh honor start and stop timeouts
    (Make_vm.sh_use_stop_start_timeouts.patch)
    Resolves: rhbz#606754


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-8
changelog:
  - Make fs-lib resolve links before checking for block devices
    (fix_incorrect_link_resolution_in_fs_lib.patch)
    Resolves: rhbz#609579


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-9
changelog:
  - Add NFSv4 server support
    (add_nfsv4_support.patch)
    (install_nfsv4_agent.patch)
    Resolves: rhbz#595547
  - Fix migration mapping behavior
    (fix_migration_mapping_behavior.patch)
    Resolves: rhbz#596918


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-10
changelog:
  - Fix changelog for 3.0.12-9 date
  - Add RHEVM status program
    (add_rhevm_status_program.patch)
    Resolves: rhbz#609497


author: Marek Grac <mgrac@redhat.com> - 3.0.12-12
changelog:
  - postgres RA will fail to stop gracefully if there 
    is active client connected
    (sigquit_if_sigterm_was_not_fast_enough.patch)
    Resolves: rhbz#612165
  - new RA for tomcat6
    (resource_agent_tomcat-6.patch)
    (tomcat-6_change_build_system.patch)
    Resolves: rhbz#593721


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-15.el6_0.1
changelog:
  - resource-agents: fix utility to obtain data from ccs_tool
    (fix_utility_to_obtain_data_from_ccs_tool.patch)
    Resolves: rhbz#640190


author: Hans de Goede <hdegoede@redhat.com> - 0.11-2
changelog:
  - Fix a crash triggered when trying to view a usbredir enabled vm from
    virt-manager
    Related: rhbz#758100


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.11-3
changelog:
  - Fix cursor is displayed on each guest screen when mouse is in server mode
    Resolves: rhbz#804308
  - Fix --spice-color-depth=16 does not seem to work.
    Resolves: rhbz#802898
  - Fix cannot leave full-screen when mouse is grabbed in server mode mouse
    Resolves: rhbz#804307


author: Jiri Skala <jskala@redhat.com> - 0.99.12-1
changelog:
  - update to latest upstream version
  - fix #499960 - BGPd in Quagga prior to 0.99.12 has a serious assert problem crashing with ASN4's


author: Ray Strode <rstrode@redhat.com> 0.5.8-10
changelog:
  - Authorize operation in remote VNC sessions after administrator
    authentication.
    Resolves: #528511


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-52
changelog:
  - deprecate and disable verification of insecure hash algorithms
  - disallow DH keys with less than 1024 bits in TLS client
  - remove support for weak and export ciphersuites
  - use correct digest when exporting keying material in TLS1.2 (#1376741)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - treat the ability to access keys in an NSS database without using a PIN,
    when we've been told we need one, as an error (#692766)
  - when handling "getcert resubmit" requests, if we don't have a key yet,
    make sure we go all the way back to generating one (#694184)
  - getcert: try to clean up tests for NSS and PEM file locations (#699059)
  - don't try to set reconnect-on-exit policy unless we managed to connect
    to the bus (#712500)
  - handle cases where we specify a token but the storage token isn't
    known (#699552)
  - getcert: recognize -i and storage options to narrow down which requests
    the user wants to know about (#698772)
  - output hints when the daemon has startup problems, too (#712075)
  - add flags to specify whether we're bus-activated or not, so that we can
    exit if we have nothing to do after handling a request received over
    the bus if some specified amount of time has passed
  - explicitly disallow non-root access in the D-Bus configuration (#712072)
  - migrate to systemd on releases newer than Fedora 15 or RHEL 6 (#718172)
  - fix a couple of incorrect calls to talloc_asprintf() (#721392)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if xmlrpc-c's struct xmlrpc_curl_xportparms has a gss_delegate field, set
    it to TRUE when we're doing Negotiate auth (#727864, #727863, #727866)


author: Soren Sandmann <ssp@redhat.com> 1.7.1-1
changelog:
  - Rebase to 1.7.1 (#852890, #902912, #914279)
  - Add patches from 
      http://sourceforge.net/p/rdesktop/patches/214/
    to rework redirect PDU handling (#701246)


author: Ian Kent <ikent@redhat.cem> - 5.0.5-89
changelog:
  - bz1067774 - autofs-5.0.5-88.el6 breaks maps that have a -v in the options
    - fix options compare.
  - Resolves: rhbz#1067774


author: Ian Kent <ikent@redhat.cem> - 5.0.5-89.el6_5.1
changelog:
  - bz1067774 - autofs-5.0.5-88.el6 breaks maps that have a -v in the options
    - fix fix options compare.
  - Related: rhbz#1067774


author: Ian Kent <ikent@redhat.cem> - 5.0.5-89.el6_5.2
changelog:
  - bz1089889 - autofs can ghost non-existent map entries given the right timing
    - fix use cache entry after free in lookup_prune_one_cache().
    - check for non existent negative entries in lookup_ghost().
  - Resolves: rhbz#1089889


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.0
changelog:
  - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
  - Separate SystemTap option from bootstrap options.
  - Use configure macro and disable long-running JTreg & SystemTap tests from make check
  - Remove redundant patch-ecj target invocation for bootstrap build.
  - Add check section to run the new tests introduced in 1.13.12.
  - Fix context for rpath patch following PR3140.
  - Add RHEL version of b40 tarball.
  - Require mailcap at build time as well, so configure finds /etc/mime.types (PR2800)
  - Remove unneeded dependency on jakarta-commons-logging, as VisualVM is no longer included.
  - Resolves: rhbz#1350044


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-26.1
changelog:
  - rgmanager: Reload the resource tree after quorum is regained
    if central processing is enabled.
    Resolves: rhbz#1335412


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-26.2
changelog:
  - rgmanager: Forget that we were transition master if quorum is dissolved
    rgmanager: Re-init the vf key callbacks after losing and recovering quorum
    Resolves: rhbz#bz1335412
  - rgmanager: Check for NULL when attempting to access the member list
    Resolves: rhbz#bz1343345


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-26.3
changelog:
  - rgmanager: Exit more gracefully if cman stops first when cpg locks are used
    Resolves: rhbz#1344640


author: John Dennis <jdennis@redhat.com> - 1.0.90-2
changelog:
  - Resolves: bug 642414
    Update to latest upstream release (includes the following)
    - return the contents of the AP_REP message from rd_rep()
    - improved memory handling
    - removed use of KRB_PRIVATE
    - better docstrings


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-22.2
changelog:
  - Resolves: rhbz#1342058 - In IPA-AD trust environment access is granted
                             to AD user even if the user is disabled on AD.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-22.6
changelog:
  - Explicitly Require the matching version of ding-libs
  - Related: rhbz#1379580 - SSSD fails to process GPO from Active Directory.


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Resolves: rhbz#833480 - Update nss-util on RHEL 6.x to NSS 3.13.5 for Mozilla 10.0.6
  - Add -L${libdir}/nss3 to Libs: line in nspr.pc.in


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#927171 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.10-1
changelog:
  - pull up changes to fine-tune the logic for selecting which key in a keytab
    to use when validating credentials


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.82-1
changelog:
  - Allow exclusive activation of snapshots in a cluster.
  - Add addnodeonresume and addnodeoncreate switch to dmsetup.
  - Add dm_tak_secure_data fn to libdevmapper to wipe all ioctl buffers in kernel.
  - Increase hash table size to 1024 LV names and 64 PV uuids.
  - Fix node and symlink operations in /dev for recent udev_sync optimalisation.
  - Remove unneeded checks for open_count in lv_info().
  - Synchronize with udev before checking open_count in lv_info().
  - Remove fs_unlock() from lv_resume path.
  - Allow CLVMD_CMD_SYNC_NAMES to be propagated around the cluster if requested.
  - Avoid rebuilding of uuid validation table.
  - Improve lvcreate "insufficient extents" errors to "insufficient free space".
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-1
changelog:
  - Fix CRC32 calculation on big endian CPU (2.02.75).
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-3
changelog:
  - Mitigate annoying error warning from device is usable check if run as non-root.
  - Fallback to control node creation only if node doesn't exist yet.
  - Avoid possible endless loop in _free_vginfo when 4 or more VGs have same name.
  - Fix to make resuming exclusive cluster mirror use local target type.
  - Lower secure data flag warning to verbose level if unsupported by kernel.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7.1
changelog:
  - Fix problem where mdadm would crash if trying to create an IMSM array with
    missing drives.
  - Resolves bz1077131


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.6-1
changelog:
  - Update tarball to upstream version: a02c0f1
    See included ChangeLog file or, for full details:
      https://github.com/ClusterLabs/pacemaker/compare/a12de08...a02c0f1
  - Do not build in support for snmp, esmtp by default
  - Create a package for cluster unaware libraries to minimze our footprint 
    on non-cluster nodes
  - Better subpackage descriptions
  - Resolves: rhbz#743175


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Update to aarch64-jdk8u151-b12.
  - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028).
  - Update RH1191652 (root) to accomodate 8151841 (GCC 6 support).
  - Update RH1163501 to accomodate 8181048 (crypto refactoring)
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Fix premature shutdown of NSS in SunEC provider.
  - Move -ffp-no-contract fix to local fixes section.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
  - Resolves: rhbz#1499207


author: Peter Hutterer <peter.hutterer@redhat.com> 7.7-3
changelog:
  - luit 1.1.1
  - oclock 1.0.3
  - xclock 1.0.6
  - xbiff 1.0.3
  - xpr 1.0.4
  - xcursorgen 1.0.5
  - xclipboard 1.1.2
  - xfontsel 1.0.4
  - xfd 1.1.1
  - xlogo 1.0.4
  - xvidtune 1.0.3


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-28.el6
changelog:
  - ipa-adtrust-install and ipa-replica-conncheck may not parse krb5.conf
    correctly and crash (#916209)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-29.el6
changelog:
  - ipa-client-install fails to autodiscover on LDAP servers with disabled
    anonymous access (#922843)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-30.el6
changelog:
  - LDAP upload CA cert sometimes double-encodes the value (#948928)
  - wrong trust argument assigned to renewed certs in ipa cert automatic
    renew (#952241)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-31.el6
changelog:
  - Require 389-ds-base >= 1.2.11.15-14 to pick up fix for CVE-2013-1897
    (#928162)
  - Password policy lockout plugin does not work as expected (#907881
  - Remove deprecated support of the HBAC source host (#924542)
  - ipa-client-install may not obtain CA certificate (#924004)
  - Allow client to re-enroll without first unenrolling (#924009)
  - Enrolling a host into may take two attempts (#950014)
  - Add userClass attribute for host objects (#955698)
  - Inconsistent replies from FreeIPA to Netlogon ping queries (#967870)
  - Performance improvement for IPA CLI and UI user and group related
    plugins (#970541)
  - Do not create /var/lib/ipa/pki-ca/publish, retain reference as
    ghost (#975431)
  - Add support for AD 2012 trusted domains (#980409)
  - XML-RPC server may return a wrong Content-Type (#976716)
  - Add missing openssh-clients Requires to ipa-server package (#983463)
  - Add an option to edit "Gecos" field from Web UI (#986211)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-42
changelog:
  - resolves: #1391256 - Performance issues with vfs_dirsort and extended
                         attributes


author: Andreas Schneider <asn@redhat.com> - 3.6.24-44
changelog:
  - resolves: #1451105 - Fix trusted domain handling in winbind
  - resolves: #1431000 - Fix crash while trying to authenticate with a disabled
                         account
  - resolves: #1467395 - Add 'winbind request timeout' option


author: Petr Hracek <phracek@redhat.com> - 3.9.4-10
changelog:
  - This resolves several CVEs
  - CVE-2014-8127, CVE-2014-8129, CVE-2014-8130
  - CVE-2014-9330, CVE-2014-9655, CVE-2015-8781
  - CVE-2015-8784, CVE-2015-1547, CVE-2015-8683
  - CVE-2015-8665, CVE-2015-7554, CVE-2015-8668
  - Resolves: #1299919


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-21.el6.8.1
changelog:
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)


author: Parag <paragn@fedoraproject.org> 1.0.6-4
changelog:
  - Merge-review cleanups #226064
  - Updated summary, added Requires: pkgconfig
  - removed zero length file AUTHORS


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.7-1
changelog:
  - Update tarball to upstream version: 148fccf
    See included ChangeLog file or, for full details:
      https://github.com/ClusterLabs/pacemaker/compare/148fccf...a12de08
  - Add libqb-devel as a build dependancy
  - Resolves: rhbz#782255 rhbz#754216 rhbz#729035 
  - Related:  rhbz#790627


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.7-2
changelog:
  - Update patch level to upstream version: c26e624
  - Resolves: rhbz#720214 rhbz#720218 rhbz#754216 rhbz#789397
    For full details, see:
      https://github.com/ClusterLabs/pacemaker/compare/c26e624...148fccf


author: Jirka Hladky <jhladky@redhat.com> - 20160814-1
changelog:
  - Update to new upstream version 20160814
  - It includes new tool cpuinfo2cpuid which enables to process /proc/cpuinfo
  - Rebuilt for RHEL6 (rhbz#1316998)


author: Jakub Jelinek <jakub@redhat.com> 4.4.4-11
changelog:
  - update from gcc-4_4-branch
    - PRs target/44597, target/44705
  - VTA backports
    - PR c++/44808
    - avoid outputting invalid registers in debug info (#610455)
  - -Wunused-but-set-* vector assignment fix (PR c++/44780)
  - fix PowerPC address reloading for inline-asms (#608768, PR target/44707)
  - fix predictive commoning (#609488, PR tree-optimization/40421)
  - fix SRA not to do useless sign-extensions that confuses ivopts (#610785)
  - fix IPP handling in libgcj (#578382)


author: Jakub Jelinek <jakub@redhat.com> 4.4.4-12
changelog:
  - update from gcc-4_4-branch
    - PRs fortran/44582, fortran/44773, fortran/44847, pch/14940, target/33743
  - fix inline-asm check for auto-inc-dec operands (PR testsuite/44701)
  - use DW_OP_const[48]u instead of DW_OP_addr for DW_OP_GNU_push_tls_address
    operand


author: Jakub Jelinek <jakub@redhat.com> 4.4.4-13
changelog:
  - update from gcc-4_4-branch
    - PRs fortran/45019, target/42869, target/44942, testsuite/38946
  - VTA backports
    - PRs debug/45015, bootstrap/45028
    - var-tracking improvements (#616050, PR debug/45003, PR debug/45006)
  - fix fortran SELECT CASE handling with CHARACTER type (PR fortran/40206)
  - small OpenMP debug info improvements (#533181)


author: Jan Safranek <jsafrane@redhat.com> - 2.0.16-7
changelog:
  - fix package License: field, there *are* sources with BSD header
  - distribute README files and COPYING in package


author: Jan Safranek <jsafrane@redhat.com> - 2.0.16-10
changelog:
  - removed OpenIPMI-gui subpackage, because TCL is compile without
    multithreading support and the gui relies on it (#588332)


author: William Cohen <wcohen@redhat.com> - 0.9.9-12
changelog:
  - Add support for Intel Xeon D. rhbz1231399
  - Add support for Intel Skylake Mobile/Desktop processors. rhbz1254764
  - Fix coverity warnings. rhbz1206242


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-7
changelog:
  - Don't dim the screen by default on battery power -- it was never a
    good default, and we're doing this a different way in GNOME 3.
  - Resolves: #912270


author: Dan Horák <dhorak@redhat.com> - 2.14.1-3.1
changelog:
  - Fix support for Power Supply Serial/Part Numbers (#915336),
    patch by Michele Baldessari <michele@redhat.com>
  - Resolves: #915336


author: Dan Horák <dhorak@redhat.com> - 2.14.1-3.2
changelog:
  - add mssing sensor RDRs for the fan resource (#969003)
  - fix openhpi connection failures with redundant OAs (#969004)
  - fix segfaults when retrieving thermal info (#969005)
  - add missing thermal sensors (#969006)
  - Resolves: #969003, #969004, #969003, #969006


author: Kamil Dudka <kdudka@redhat.com> - 4.3.11-7
changelog:
  - fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
  - fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
  - fix buffer overrun in xsymlinks (CVE-2017-18206)
  - fix buffer overflow when scanning very long path for symlinks (CVE-2014-10072)


author: Daiki Ueno <dueno@redhat.com> - 3.21.3-1
changelog:
  - Rebase to nss-3.21.3
  - Remove patch for CVE-2016-1950, which is included in the release
  - Related: Bug 1347908


author: James Slagle <jslagle@redhat.com> 3.2-3.sslpatch
changelog:
  - Don't use epoch after all, use a custom release (jslagle@redhat.com)
  - Reset release to 3 and use epoch to distinguish our mod_wsgi package
    (jslagle@redhat.com)


author: Petr Machata <pmachata@redhat.com> - 2.0-2.20070927
changelog:
  - Review fixes
    - GCC 4.3 patchset
    - Add BR util-linux net-tools
    - Add full URL to Source0
    - Build in debug mode to work around problems with GCC 4.3


author: Petr Machata <pmachata@redhat.com> - 2.2-2.20090809
changelog:
  - Replace mfence instruction with xchg to make it run on ia32-class
    machines without SSE2.
  - Resolves: #600654


author: Albert Uchytil <auchytil@redhat.com> 20120827-14
changelog:
  - updated man pages
  - changed debuginfo package handling (#1113685)
  - capability to dynamically register and deregister collections (#1113686)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.3
changelog:
  - Add backports of PR2233, PR2161, PR1661 (GConf changeset) and PR2320 from IcedTea 2.6.x
  - No longer set SYSTEM_GIO to false as we can link against it now GSettings is not required
  - Add test case to ensure file type detection works
  - Correct bug ID in comment associated with PStack patch
  - Resolves: rhbz#1190835


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.3
changelog:
  - Add build dependency on GConf2-devel for native proxy support.
  - Remove outdated dependencies on mercurial, redhat-lsb and libxslt from IcedTea builds.
  - Remove python dependency introduced for rpath rewrite script, which has now been removed.
  - Resolves: rhbz#1190835


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.3
changelog:
  - Add build dependency on redhat-lsb-core to provide lsb_release for jdk_generic_profile.sh
  - Resolves: rhbz#1190835


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.3
changelog:
  - Apply PR2323 to fix building of networking support with system GConf on and system GIO off
  - Resolves: rhbz#1190835


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.2.8-2
changelog:
  - Replaced summary information
  - Updated BuildRequires and Requires information
  - Replaced "{_mandir}/man1/bakefil*.gz" to "{_mandir}/man1/bakefil*"
  - Correct URL and source URL
  - Replaced "%{_libdir}/*" to "%{_libdir}/bakefile*"
  - Removed useless line: "%doc"


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.2.8-3
changelog:
  - Fixed Source url
  - Updated BuildRequires and Requires info
  - Empy python module packaged independently
  - Removed files of uuid and subprocess python modules
  - Removed .la files


author: Petr Sabata <psabata@redhat.com> - 2.6.32-8
changelog:
  - Add support for setting and showing SR-IOV virtual function link params
  - Patch from Petr Lautrbach
  - Resolves: rhbz#606680


author: Ian Kent <ikent@redhat.com> - 5.0.5-133
changelog:
  - bz1496901 - Autofs processes hung while waiting for the release of an
    entry master_lock that is held by another thread waiting on a bind mount
    - only take master map mutex for master map update.
  - Resolves: rhbz#1496901


author: Ian Kent <ikent@redhat.com> - 5.0.5-134
changelog:
  - bz1496901 - Autofs processes hung while waiting for the release of an
    entry master_lock that is held by another thread waiting on a bind mount
    - fix incorrect patch specification in spec file.
  - Related: rhbz#1496901


author: Ian Kent <ikent@redhat.com> - 5.0.5-135
changelog:
  - bz1463004 - Server availability probe broke tunneling nfs via localhost
    - remove some redundant rpc library code.
    - add port parameter to rpc_ping().
    - dont probe NFSv2 by default.
    - add version parameter to rpc_ping().
  - Resolves: rhbz#1463004


author: Ian Kent <ikent@redhat.com> - 5.0.5-136
changelog:
  - bz1495442 - automount crashes due to segfault
    - fix create_client() RPC client handling
  - Resolves: rhbz#1495442


author: Ian Kent <ikent@redhat.com> - 5.0.5-137
changelog:
  - bz1463004 - Server availability probe broke tunneling nfs via localhost
    - update "add version parameter to rpc_ping()" patch to current updtream
      version which fixes 2 covarity warnings.
  - Resolves: rhbz#1463004


author: Ian Kent <ikent@redhat.com> - 5.0.5-138
changelog:
  - bz1559295 - autofs: can't mount nfs vers=2
    - fix NFS version mask usage.
  - Resolves: rhbz#1559295


author: Ian Kent <ikent@redhat.com> - 5.0.5-139
changelog:
  - bz1495442 - automount crashes due to segfault
    - fix fd leak in rpc_do_create_client().
  - Related: rhbz#1495442


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.2.el6
changelog:
  - Unapplied but kept (for 2.3revert) patch110,  java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - Added and applied patch113: java-1.7.0-openjdk-aes-update_reset.patch
  - Added and applied patch114: java-1.7.0-openjdk-nss-tck.patch
  - Added and applied patch115: java-1.7.0-openjdk-nss-split_results.patch
  - NSS enabled by default - enable_nss set to 1
  - rewritten patch109 - java-1.7.0-openjdk-nss-config-1.patch
  - rewritten patch111 - java-1.7.0-openjdk-nss-config-2.patch
  - Resolves: rhbz#831734


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre2.3.el6
changelog:
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.4.0.pre2, updated?
  - Added java -Xshare:dump to post (see 513605) fo jitarchs
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre3.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre3, updated!
  - Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre4.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre4, 
  - Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911530


author: Tim Waugh <twaugh@redhat.com> 2.6-1
changelog:
  - 2.6.  No longer need stderr, suffix, stripcr, parse, allow-spaces,
    ifdef, program_name, or posix-backup patches.


author: Tim Waugh <twaugh@redhat.com> 2.6-2
changelog:
  - Applied upstream patch to prevent incorrect filename being chosen
    when adding a new file (bug #550319).


author: Jakub Filak <jfilak@redhat.com> - 2.0.8-29
changelog:
  - run sosreport with boot plugin instead of bootloader
  - fix minor bugs 'abrt-cli status' and 'abrt-action-notify'
  - Resolves: #1208154
  - Related: #1150197


author: Jakub Filak <jfilak@redhat.com> - 2.0.8-31
changelog:
  - ccpp: do not log to syslog while dumping syslog
  - daemon: harden against race conditions in DELETE
  - upload: validate and sanitize uploaded dump directories
  - a-a-i-d-t-a-cache: sanitize umask and arguments
  - ccpp: avoid overriding system files by coredump
  - make the dump directories owned by root by default
  - ccpp: emulate selinux for creation of compat cores
  - ccpp: do not override existing files by compat cores
  - ccpp: fix symlink race conditions
  - do not read data from root directories
  - ask for root's password in abrt-cli and abrt-gui
  - Resolves: #1199261, #1211967


author: Chris Feist <cfeist@redhat.com> - 0.16.2-75.2
changelog:
  - ricci: disable SSLv2/SSLv3 by default, added '-x' option to enable SSLv2/3
  - Resolves: rhbz#1222411


author: Jan Zeleny <jzeleny@redhat.com> - 2.2-3
changelog:
  - minor changes in spec file - filenames change, removal of
    duplicate patch files (included in build source tarball)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-96
changelog:
  - netplug moved to separate package
  - #319981 and #322901 - minor man pages changes
  - applied changes from berlios cvs, which fix: Berlios #16232, Gentoo #283759 and polish Makefile and slattach


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-97
changelog:
  - Make "hostname -s" display host name cut at the first dot (no
    matter if the host name resolves or not) (bug #531702)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-99
changelog:
  - return defining of BuildRoot even it's no longer necessary
    (https://fedoraproject.org/wiki/Packaging:Guidelines#BuildRoot_tag)
    to silent rpmlint false warning


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-12
changelog:
  - Fixed localized state reasons (bug #587719).
  - Always use close_fds=True in subprocess.Popen calls (bug #590065).
  - cups-pk-helper support: FileGet requires a file it can write to (bug #592343).
  - Initialise auto_make to the empty string (bug #592346).


author: Pavel Šimerda <psimerda@redhat.com> - 7:3.1.10-22
changelog:
  - Resolves: #1066368 - memory utilization of Squid becomes very large
  - Resolves: #1011952 - cachemgr.cgi doesn't work by default
  - Resolves: #876980 - Init script: missing condrestart in Usage
  - Resolves: #1058207 - Child process of squid exited abnormally and generated core files
  - Resolves: #998809 - assert(!fd_table[fd].closing()) failed in comm_write()


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-31
changelog:
  - mod_proxy: fix bybusyness algorithm to balance the load after failed worker
    has recovered (#972949)
  - mod_proxy: ignore EINTR when polling in proxy_connect (#976644)
  - mod_proxy_http: log "reading response" error to proper log file (#1012766)
  - mod_ssl: add ECDH support (#1035818)
  - mod_ssl: improve DH temp key handling (#1071883)
  - mod_ssl: enable support at run-time for TLSv1.x with newer OpenSSL (#1034984)
  - mod_ssl: fix crash when loaded for first time during the reload (#876626)
  - mod_ssl: make lazy CRL caching configurable (#1037832)
  - apachectl status: return exit code 3 when httpd is not running (#1077336)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-35
changelog:
  - mod_proxy_http: cleanup bucket brigade even on error (#991556)
  - add missing Reason-Phrase in HTTP response headers (#1032733)
  - mod_ldap: fix crash in uldap_cache_getattrvals (#1048757)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-36
changelog:
  - mod_ssl: Add a wildcard common name match (#1035666)
  - mod_cache: avoid thundering herd (#1094990)
  - mod_cgi: return error code 408 on timeout (#979129)


author: Than Ngo <than@redhat.com> - 4.6.2-9
changelog:
  - Resolves: bz#757411, add missing qnetwork-deleteResource
  - Resolves: bz#821061, add missing qmenubar-cornerWidget


author: Jeff Law <law@redhat.com> - 4.5.19-1.11.el6_3.1
changelog:
  - Use PTRACE_SETOPTIONS to set behaviour of ptrace at fork/vfork/clone
    syscalls rather than buggy magic breakpoint methods (#849052).


author: Samantha N. Bueno <sbueno@redhat.com> 3.3.15-1
changelog:
  - rebase to 3.3.15 version
  - drop obsolete ncurses, pfkeys, resize, and script patches
  - modify a few other patches to apply cleanly to new version
  - Resolves: rhbz#1171849
  - add patch to fix some typos in man pages
  - change location of manpages to section 5
  - Resolves: rhbz#893912


author: Carl Byington <carl@five-ten-sg.com> - 0.6.37-1
changelog:
  - add pst_attach_to_mem() back into the shared library interface.
  - fix memory leak caught by valgrind.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.38-1
changelog:
  - add python interface to the shared library.
  - bump soname to version 4 for many changes to the interface.
  - better decoding of recurrence data in appointments.
  - remove readpstlog since debug log files are now plain text.
  - add readpst -j option for parallel jobs for each folder.
  - make nested mime multipart/alternative to hold the text/html parts.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.41-1
changelog:
  - fix ax_python detection - should not use locate command
  - checking for fedora versions is not needed


author: Carl Byington <carl@five-ten-sg.com> - 0.6.43-1
changelog:
  - decode more of the pst format, some minor bug fixes
  - add support for code pages 1200 and 1201.
  - add readpst -t option to select output item types, which can
    now be used to process folders containing mixed item types.
  - fix segfault with embedded appointments
  - add readpst -u option for Thunderbird mode .size and .type files
  - better detection of embedded rfc822 message attachments


author: Carl Byington <carl@five-ten-sg.com> - 0.6.44-1
changelog:
  - patch from Lee Ayres to add file name extensions in separate mode.
  - allow mixed items types in a folder in separate mode.


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.4-51
changelog:
  - check malloc success (#473488)
  - fix few compiler warnings, free malloc memory before exit
  - new URL


author: Peter Hutterer <peter.hutterer@redhat.com> 12.6.3-3
changelog:
  - Revert last commit, this is against Fedora policy.
    https://fedoraproject.org/wiki/Packaging:Guidelines#Configuration_files


author: Ian Kent <ikent@redhat.com> - 5.0.5-55.el6_3
changelog:
  - bz870929 - automount segfaults during the boot-up sequence
    - fix mountd vers retry.
    - fix initialization in rpc create_client().
    - fix libtirpc name clash.
    - fix get_nfs_info() can incorrectly fail.
  - Resolves: rhbz#870929


author: Petr Šabata <contyk@redhat.com> - 1.84-23
changelog:
  - Remove offensive language from some of the scripts (#1064755)
  - Accept HTTP/1.1 proxy responses (#1000773)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-65
changelog:
  - Release 1.2.11.15-65
  - Resolves: #1259383 - Fractional replication evaluates several times the same CSN (DS 48266)


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-10.el6_6
changelog:
  - add a patch to fix a segfault in the regex module
    resolves: #1172165
  - explicitly disable systemd service file generation
  - turn on verbose make output


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.0.9-1
changelog:
  - Bump to newer release
  - Removed mkdosfs-ygg from Obsoletes/Provides tag as it looks really deprecated
  - Drop bounds patch - fixed upstream


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.0.9-4
changelog:
  - Fixed dosfsck and dosfslabel on s390x (s390x-unalign patch)
    Resolves: rhbz#624596
  - Fixed buffer overflow in alloc_rootdir_entry (fix-alloc-rootdir-entry patch)
    Resolves: rhbz#677789
  - Fixed dosfslabel on FAT32 (dosfslabel-fat32 patch)
    Resolves: rhbz#688128
  - Fixed device partitions detection (dev-detect-fix patch)
    Resolves: rhbz#709266


author: Ales Kozumplik <akozumpl@redhat.com> 6.2.0.872.12
changelog:
  - 442980 partial offload boot: Remove the OFFLOAD_BOOT_SUPPORTED ifdef. This
    effectively makes OFFLOAD_BOOT_SUPPORTED always enabled.


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.14
changelog:
  - 593269 iscsi was built against libcrypto, but was not using the code
  so this disabled the building of that code.
  - 599539 document brcm_iscsiuio options in man page.
  - 599542 document iscsiadm host mode hostno argument.
  - 631821 iscsi discovery was not incrementing ITT when multiple text
  commands were sent. This prevented discovery from finding all targets.
  - 634021 iscsi init script did not shutdown all sessions during system
  shutdown/reboot causing the host to hang.
  - 658428 iscsi init script should not shutdown sessions when root is
  using them and should not fail startup on all iscsiadm login failures.
  - 635899 sync brcm_iscsiuio to 0.6.2.13 to add support for IPv6, VLAN,
  57711E, and 57712 hardware.
  - 640115 fix hang caused due to race in ISCSI_ERR_INVALID_HOST handling.
  - 640340 fix iscsiadm exit codes.
  - 624437 support hostnames in node mode.


author: Ales Kozumplik <akozumpl@redhat.com> 6.2.0.872.16
changelog:
  - 529443 fwparam_sysfs: fix pathname manipulation error in
    fwparam_sysfs_boot_info.
  - 529443 Make libiscsi nodes remember the interface they connect through.


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.el6.2
changelog:
  - Added nss support (see 831733)
    -added  enable_nss variable, set to true - 1 as default
    -added and applied if enable_nss true patch108 java-1.7.0-openjdk-aes-buffering.patch
    -added and applied if enable_nss true patch109 java-1.7.0-openjdk-nss-config-1.patch
    -added and applied if enable_nss true patch111 java-1.7.0-openjdk-nss-config-2.patch
    -added and applied if enable_nss true patch110 java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - openjdk-nss-config-2.patch, is dynamically modified after build time and is
    changing build dependence (nss last) to runtime depndecne (nss first)
  - release tag moved before dist (see 875245)
  - Resolves: rhbz#871771


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.1.el6
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed tmp-patches source tarball
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Disabled nss - enable_nss set to 0
  - Resolves: rhbz#895034


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.1-2
changelog:
  - Fix mounted filesystem is shown as disabled when fstab entry uses link, UUID or LABEL
    Resolves: #921482


author: Hans de Goede <j.w.r.degoede@hhs.nl> 2.02-5
changelog:
  - Fix configure failure with -Werror-implicit-function-declaration in CFLAGS
  - Add a minilzo subpackage which contains a shared version of minilzo, to be
    used by all applications which ship with their own copy of it (bz 439979)


author: Jozef Mlich <jmlich@redhat.com> - 436-12
changelog:
  - Fixing regressions found by QA
  - displaying of man page using troff (718498) - beware: man page file
    type is detected using file
  - tcsh printenv problem, was caused by incorrect return value for output
    which will be not preprocessed by lesspipe (186931)
    Resolves: #615303


author: Ted Ross <tross@redhat.com> - 0.12-2
changelog:
  - Related:rhbz#663461 - Enable new architectures
  - Remove python-qpid-qmf and ruby-qpid-qmf from ppc and s390 architectures


author: Ted Ross <tross@redhat.com> - 0.12-4
changelog:
  - Related:rhbz#681680 - QMF agents wake up several times a second
  - Related:rhbz#699499 - [RFE] qmfv2 must provide mainloop integration


author: Andreas Schneider <asn@redhat.com> - 3.6.23-26
changelog:
  - resolves: #1322686 - Fix CVE-2015-5370
  - resolves: #1322686 - Fix CVE-2016-2110
  - resolves: #1322686 - Fix CVE-2016-2111
  - resolves: #1322686 - Fix CVE-2016-2112
  - resolves: #1322686 - Fix CVE-2016-2115
  - resolves: #1322686 - Fix CVE-2016-2118 (Known as Badlock)


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-9
changelog:
  - Fixed pycups to be more cautious when removing
    the Connection object from the list (bug #571451).
  - No longer requires usermode (bug #572138).
  - Fixed jobviewer traceback when closing
    not yes shown notification (bug #572142).
  - Treat hpcups-requiring-plugin as 3rd party proprietary (bug #572143).


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-10
changelog:
  - Import modules we catch exceptions from (bug #574131).
  - Fixed reconnection error handling in IPPAuthOperation class (bug #575798).
  - Initialize downloadable_drivers when OpenPrinting query fails (bug #575916).
  - Fixed race condition in asyncipp (bug #576934).
  - Fixed possible traceback in the SMB handling part of probe_printer.py (bug #579864).


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-80
changelog:
  - cman_tool: prevent segv in cman_tool nodes -F addr crash of qdisk is present
    Resolves: rhbz#1384968


author: Steve Dickson <steved@redhat.com> 1.2.3-45
changelog:
  - Smothed out upgrads from rhel6 to rhel7 (bz 1086625)
  - rpc.statd: Bind downcall socket to loopback address (bz 1018358)
  - nfsiostat: periodically flush stdout (bz 1007195)
  - Fixed a buffer overflow in exportfs (bz 1008381)


author: Steve Dickson <steved@redhat.com> 1.2.3-47
changelog:
  - Stop Treat IP addresses a FQDN rather than SUBNETs. (bz 1098592)
  - Removed the local_lock not supported line in man page (bz 1017477)


author: Steve Dickson <steved@redhat.com> 1.2.3-50
changelog:
  - gssd: Drop full domain when constructing the Ad hostname (bz 1067423)
  - Explained nfsiostat output in man page (bz 869684)
  - mountd.man: Added missing arguments in man page (bz 1003555)


author: Steve Dickson <steved@redhat.com> 1.2.3-53
changelog:
  - gssd: Error out when rpc_pipefs directory is empty (bz 1116698)
  - exportfs: Removed a warning from exportfs.c (bz 1133562)
  - nfsiostat: Corrected the cache hits (bz 1066314)
  - mountd: optimize libblkid usage (bz 1113204)


author: Doug Ledford <dledford@redhat.com> - 1.1.2-2
changelog:
  - Obsolete the old -devel package (which really was just a static
    lib, no real devel environment, hence the name change to -static)
  - Resolves: bz432769


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-48
changelog:
  - Fixed race condition in rpm file deployment when updating an existing file
    (#1264052)
  - Fixed problems with perl.req script (#1268021)
  - Document option "--obsoletes" (#1203714)
  - Remove _isa from all BuildRequires (#1287557)
  - Turn removal failure debug messages into warning messages (#1142386)
  - Move bdb warnings from stdin to stdout (#1296212)
  - Improved error message (#1250006)


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-58
changelog:
  - Applied patch to fix 'Bad request' errors as a result of adding in
    httpSetTimeout (STR #4440, also part of svn revision 9967).


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-15
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Support TLS_FALLBACK_SCSV in tstclnt and ssltap


author: Deepak Bhole <dbhole@redhat.com> - 1.0-3
changelog:
  - Bump to 1.0 proper
  - Install to jre dir only
  - Restrict access to net.sourceforge.jnlp.*
  - Resolves bugs 674519, 674517, 674524, 671470


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.4.a3
changelog:
  - do not create /var/run/dirsrv - setup will create it instead
  - remove the fedora-ds initscript upgrade stuff - we do not support that anymore
  - convert the remaining lua stuff to plain old shell script


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.5.a3
changelog:
  - Bug 676598 - 389-ds-base multilib: file conflicts
  - split off libs into a separate -libs package
  - remove old crufty fedora-ds stuff


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.6.rc1
changelog:
  - 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1
  - Resolves: Bug 680575 - Rebase 389-ds-base to pick the latest features and fixes 
  - Resolves: Bug 681720 - setup-ds-admin.pl - improve hostname validation
  - Resolves: Bug 681611 - RFE: allow fine grained password policy duration attributes in 
  -     days, hours, minutes, as well
  - Resolves: Bug 681550 - setup-ds-admin.pl --debug does not log to file
  - Resolves: Bug 681379 - ns-slapd segfaults if I have more than 100 DBs
  - Resolves: Bug 680290 - setup-ds.pl should set SuiteSpotGroup automatically
  - Resolves: Bug 681351 - crash in ldap-agent when using OpenLDAP
  - Resolves: Bug 681332 - modifying attr value crashes the server, which is supposed to
  -     be indexed as substring type, but has octetstring syntax
  - Resolves: Bug 680305 - ds-logpipe.py script is failing to validate "-s" and
  -     "--serverpid" options with "-t".


author: Jan Grulich <jgrulich@redhat.com> 1.1.0-20
changelog:
  - Rebuild against fixed xorg-x11-server to avoid automatical disconnects
    when initiazed from xinetd
    Resolves: bz#1390458


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740735


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-8
changelog:
  - Fix changing disk bus from virtio->ide (bz 769192, bz 741937)
  - Fix serial console stalls when showing lots of text (bz 747490)
  - Fix connection drop if VM gets an error while shutting down (bz
    742055)
  - Make 'browse local' chooser allow entering a new path (bz 734529)
  - Escape XML chars in vm description tooltip (bz 741158)
  - Fix keyboard shortcuts when spice isn't focused (bz 733210)
  - Hide unsupported serial types (bz 740775)
  - Warn about unapplied changes in customize dialog (bz 736270)
  - Hide unsupported storage formats (bz 735766)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-5
changelog:
  - added patch that fixes insufficient environment sanitization issue (#598154)
    Resolves: rhbz#598383


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-6
changelog:
  - rgmanager: Resolve rare deadlock
    Resolves: rhbz#635152
  - rgmanager: Fix clusvcadm message when run with -F
    Resolves: rhbz#727326
  - rgmanager: Add extra service status call
    rgmanager: Avoid duplicate restart of service
    rgmanager: Fix call to service_status()
    rgmanager: Fix tiny memory leak in sl_service_status
    rgmanager: Fix dependency issue related to ordering
    Resolves: rhbz#743218
  - rgmanager: Fix dependency restart bug in CP mode
    Resolves: rhbz#744824
  - rgmanager: Add -F to clusvcadm man page
    Resolves: rhbz#745226


author: John Kacur <jkacur@redhat.com>
changelog:
  - disabled #patch01
  - Updated the trace-cmd source
  - Changed version to 0.7.0
  - Added bogus patch to satisfy rpm requirements
  - Related:bz519630


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.
  - Resolves: rhbz#726476


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-8
changelog:
  - Print the error message only after cleaning up curses.
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.
  - Resolves: rhbz#633698


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-120
changelog:
  - Resolves: #983028 - passwd returns "Authentication token manipulation
                        error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-121
changelog:
  - Print password complexity hint when password change fails with
    constraint violation
  - Related: #983028 - passwd returns "Authentication token manipulation
                       error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-122
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-123
changelog:
  - Silence restorecon on clean install
  - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for
                        /var/lib/sss/mc context


author: Adam Tkac <atkac redhat com> - 1:0.17-38.fc7
changelog:
  - added -c option which disables reverse dns checking (#223448)
  - added smp_mflags to make
  - start using dist macro


author: Dave Young <dyoung@redhat.com> - 2.0.0-236
changelog:
  - Warn when dumping to encrypted devices, resolve bug 743551
  - Correct the meaning of BOOTPROTO=none, resolve bug 805803


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-19.2
changelog:
  - fix parsing of field regression in sort command
    (introduced between RHEL5 and RHEL6 upstream) (#963327)


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-4
changelog:
  - resolves: #1051656 - Fix gecos field copy debug warning.
  - resolves: #1061301 - Add glusterfs vfs module.
  - resolves: #1087472 - Fix libsmbclient crash when HOME variable isn't set.
  - resolves: #1099443 - 'net ads testjoin' fails with IPv6.
  - resolves: #1100670 - Fix 'force user' with 'security = ads'.
  - resolves: #1096522 - Fix enabling SMB2 causes file operations to fail.


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-22
changelog:
  - wait for su child to prevent errorneous execution of some
    commands (#749679)
  - correct return values after signal termination (#889531)
    and propagation of child core dump info (#747592)
  - dd now accepts 'status=none' to suppress all
    informational output(#965654)
  - cut --output-delimiter option was ignored for multibyte
    locales (#867984)
  - remove redundant setpwent() and setgrent () syscalls
    from stat -U/-G to improve NIS performance (#911206)
  - date: deal correctly with invalid input with special
    characters (#960160)
  - dd: provide support for the conv=sparse (#908980)
  - su/runuser: clarify which envvars are preserved/initialized
    in -p/-m and -l help/man documentation (#967623)
  - du: properly detect bindmounts (#836557)
  - df: fix alignment of columns (#842040)
  - id,groups: fix correct group printing (#816708)
  - mv : replace empty directories in cross file
    system move (#980061)


author: Harald Hoyer <harald@redhat.com> 0.3.6-3
changelog:
  - turn off biosdevname by default
    can be turned on by: udevadm control --property=UDEV_BIOSDEVNAME=1
    and retriggering the network devices
  Resolves: rhbz#653901


author: Harald Hoyer <harald@redhat.com> 0.3.6-4
changelog:
  - use the new IMPORT{cmdline} feature to get the biosdevname
    kernel command line parameter
  Resolves: rhbz#653901


author: Ding-Yi Chen <dchen at redhat.com> - 1.2.99.20100216-1
changelog:
  - Fixed when typing English immediately after incomplete Chinese character.
  - Add zh_TW summary.
  - Revised description and write its zh_TW translation.


author: Ding-Yi Chen <dchen at redhat.com> - 1.2.99.20100317-1
changelog:
  - Fix google 796: English input for dvorak
  - Fix google 797: Zhuyin input for dvorak
  - Fix google 807: ibus-chewing shows the over-the-spot panel
    even when not necessary


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.4.20100605-1
changelog:
  - Fix Issue 942: Fix unsunk references in ibus-chewing
    Applied the patch provided by zork@chromium.org.
  - Rename CVS_DIST_TAGS to FEDORA_DIST_TAGS, and move its
    definition to cmake_modules/
  - Gob2 generated file is now removed, because
    Bug 519108 is fixed from Fedora 11.


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.4.20100608-1
changelog:
  - ibus-chewing can now use mouse to click on mouse. Thus
    Fix Issue 951: Chewing does not support selection of candidates via mouseclick
    Thanks zork@chromium.org for the patch.


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.5.20100706-1
changelog:
  - Fixed google issue 965:
    Candidate missing if both "Plain Zhuyin" and "Space As selection" are enabled.
  - Revised Basic.macro
  - Resolved: #608991


author: Rob Crittenden <rcritten@redhat.com> 4.2.6-1
changelog:
  - Resolves: bug 455305 - <cfu@redhat.com>
    CA ECC Signing Key Failure
  - Resolves: bug 502111 - <cfu@redhat.com>
    Need JSS interface for NSS's PK11_GenerateKeyPairWithOpFlags() function
  - Resolves: bug 503809 - <mharmsen@redhat.com>
    Update JSS version to 4.2.6
  - Resolves: bug 503817 - <mharmsen@redhat.com>
    Create JSS Javadocs as their own RPM


author: Rob Crittenden <rcritten@redhat.com> 4.2.6-4
changelog:
  - Resolves: bug 224688 - <cfu@redhat.com>
    Support ECC POP on the server
  - Resolves: bug 469456 - <jmagne@redhat.com>
    Server Sockets are hard coded to IPV4
  - Resolves: bug 509183 - <mharmsen@redhat.com>
    Set NSS dependency >= 3.12.3.99


author: Miloslav Trmač <mitr@redhat.com> - 0.3.1-4
changelog:
  - Clarify documentation about which block device to use as an argument
    Resolves: #636541
  - Report readable error messages instead of random characters in some cases
    Resolves: #638732
  - Make passphrase prompts interruptable, report incorrect passphrases
    Resolves: #641111
  - Ask for passphrases only after checking for easily detectable problems
    Resolves: #643897


author: Ted Ross<tross@redhat.com> - 0.12-3
changelog:
  - Related: rhbz#681680 - QMF agents wake up several times a second
  - Related: rhbz#699499 - [RFE] qmfv2 must provide mainloop integration


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.8-5
changelog:
  - update config.{guess,sub} when building tcpslice
  - remove -D_GNU_SOURCE from CFLAGS
  - disable libsmi check in configure


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 2.9-19
changelog:
  - Update to 2.9.
  - Removed fakechroot-2.8-initsocketlen.patch (upstream now).
  - Removed int->ssize_t readlink type change (upstream testing for type
    now).
  - Removed permission fix for scripts/ldd.fake scripts/restoremode.sh
    scripts/savemode.sh (fixed upstream).


author: Richard W.M. Jones <rjones@redhat.com> - 2.9-24.5.el6.1
changelog:
  - Properly fix multilib issue in shell script /usr/bin/fakechroot
    and remove ExclusiveArch.
    resolves: rhbz#730647


author: Frank Ch. Eigler <fche@redhat.com> - 1.7-5.1
changelog:
  - Backported fix for bz828103
  - Added backported form of upstream git#9ebdd422 patch for ppc64
    crash buildability.


author: Nils Philippsen <nils@redhat.com> - 1.0.21-1
changelog:
  - version 1.0.21
  - remove obsolete rpath, hal, genesys-gl841-registers patches
  - update pkgconfig, udev, man-utf8->man-encoding, epson-expression800,
    docs-utf8 patches
  - remove hal conditional
  - package man pages


author: Nils Philippsen <nils@redhat.com> - 1.0.21-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because SANE-enabled software is likely to deal with data coming
    from untrusted sources (client <-> saned via network)


author: Nils Philippsen <nils@redhat.com> - 1.0.21-4
changelog:
  - update udev rules for Fujitsu fi-6110 device (#987890)
  - fix bogus changelog dates
  - fix source URLs


author: Martin Stransky <stransky@redhat.com> - 17.0.9-2
changelog:
  - Added patch for rhbz#983488 - Resizing window changes window
    size to 0 with third party window manager.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-155
changelog:
  - Check for system libtevent and require version 0.9.18.
  - Use tevent epoll backend in winbind.
  - resolves: #951175


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-156
changelog:
  - Fix PIDL parsing with newer versions of gcc.
  - Fix dereferencing a unique pointer in the WKSSVC server.
  - resolves: #980382


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-20
changelog:
  - -D is for --define, not --predefine (#785236)
  - Add runtime detection for /usr move (#761000)
  - Fix brace matching on multiline constructs in perl.req (#752119)
  - Make pretrans scriptlet failure fail the package installation (#736960)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-25
changelog:
  - Fix Lua script current directory behavior (#746190)
  - Copy rpmpkgs "log" into place instead of moving (#746637)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.1
changelog:
  - Fix test for PV with unknown VG in process_each_pv to ignore ignored mdas.
  - Fix _alloc_parallel_area to avoid picking already-full areas for raid devices.
  - Fix extending RAID 4/5/6 logical volumes.
  - Never issue discards when LV extents are being reconfigured, not deleted.
  - Allow release_lv_segment_area to fail as functions it calls can fail.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.2
changelog:
  - Make lvremove ask before discarding data areas.
  - Don't try to issue discards to a missing PV to avoid segfault.


author: Hans de Goede <hdegoede@redhat.com> 3.2.5-16
changelog:
  - Fix Text size field inserts characters on left instead of right (#490257)
  - Fix xfig-Xaw3d does not display messages in message panel (#490259)


author: Hans de Goede <hdegoede@redhat.com> 3.2.5-17
changelog:
  - Add various patches from Debian (doc updates, new figures in the lib,
    better fix for modepanel resizing)
  - Do not crash when inserting a character from the charmap into a text string


author: Hans de Goede <hdegoede@redhat.com> 3.2.5-18.a
changelog:
  - Rebase to new upstream 3.2.5a release, this was made available to me by
    the Debian maintainer who is in contact with upstream, which appearantly
    is still somewhat alive (but not alive enough to put the tarbal on the
    homepage ??)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.86-1
changelog:
  - Fix read-only identical table reload supression.
  - Suppress low-level locking errors and warnings while using --sysinit.
  - Remove --force option from lvrename manpage.
  - Change DEFAULT_UDEV_SYNC to 1 so udev_sync is used even without any config.
  - Compare also file size to detect changed config file.
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-2
changelog:
  - Terminate pv_attr field correctly (2.02.86).
  - Fix resource leak when strdup fails in _get_device_status() (2.02.85).
  - Fix unsafe table load when splitting off smaller mirror from a larger one.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-3
changelog:
  - Fix overly strict extent-count divisibility requirements for striped mirrors.
  - Fix rounding direction in lvresize when reducing volume size.
  - Fix possible overflow of size if %FREE or %VG is used.
  - Fix vgchange activation of snapshot with virtual origin.
  - Activate virtual snapshot origin exclusively (only on local node in cluster).
  - Fix lv_mirror_count to handle mirrored stripes properly.
  - Fix failure to down-convert a mirror to linear due to udev "dev open" conflict.
  - Fix mirrored log creation when PE size is small - force log_size >= region_size.
  - Fix log size calculation when only a log is being added to a mirror.
  - Work around resume_lv causing error LV scanning during splitmirror operation.
  - Begin using 64-bit status field flags.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-4
changelog:
  - Fix splitmirror in cluster having different DM/LVM views of storage.
  - Fix improper udev settings during suspend/resume for mirror sub-LVs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-6
changelog:
  - Fix lv_info open_count test for disabled verify_udev_operations (2.02.86).
  - Log dev name now returned to kernel for registering during cmirror CTR.


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6
changelog:
  - Add freetype-2.3.11-CVE-2010-2805.patch
      (Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2806.patch
      (Protect against negative string_size. Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2808.patch
      (Check the total length of collected POST segments.)
  - Add freetype-2.3.11-CVE-2010-3311.patch
      (Don't seek behind end of stream.)
  - Resolves: #638839


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-4
changelog:
  - fix init script to check for root privileges (#883438)
  - fix race condition when enabling new connections (#902432)
  - fix crash when printing key in verbose mode (#1153902)


author: Roman Rakus <rrakus@redhat.com> - 1.1.9-6
changelog:
  - rename functions as they conflict with glibc
  - Don't push cdda2mp3 because we don't have any mp3 coder
    Resolves: #505918


author: Kamil Dudka <kdudka@redhat.com> 2.4.44-5
changelog:
  - encode NULs properly with getfattr --encoding=text (#651119)
  - return non-zero exit code on failure of getfattr (#665050)
  - document supported encodings of values (#674870)
  - update project URL in package specification (#702639)


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.221-1
changelog:
  - Add BuildRequires: gdk-pixbuf2-devel (sbueno+anaconda)
    Resolves: rhbz#1109298
  - If kernel-kdump is installed, don't set it as the default kernel.
    (sbueno+anaconda)
    Resolves: rhbz#734121
  - Close yum objects before running post scripts (bcl)
    Resolves: rhbz#1110148
  - Catch custom partitioning problems on UEFI (bcl)
    Resolves: rhbz#991620
  - Mark dracut-network for installation on mpath. (sbueno+anaconda)
    Resolves: rhbz#1007463
  - Write --percent to kickstart output even if --grow was used (mkolman)
    Resolves: rhbz#1046320


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.222-1
changelog:
  - Rm device from lvm reject filter if in action list. (sbueno+anaconda)
    Resolves: rhbz#885755
  - The boot menu entry should contain the RHEL major release number (mkolman)
    Resolves: rhbz#1001960


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.223-1
changelog:
  - Change pixbuf loaders path. (sbueno+anaconda)
    Resolves: rhbz#1110834
  - Remove unnecessary drivers to contain the size of ppc64.img.
    (sbueno+anaconda)
    Resolves: rhbz#1112405


author: Brian C. Lane <bcl@redhat.com> - 13.21.225-1
changelog:
  - Allow missing swap devices to be skipped during upgrade (dshea)
    Resolves: rhbz#1044716
  - Don't force installation of authconfig, chkconfig, or system-config-firewall.
    (clumens)
    Resolves: rhbz#1123481
  - Provide ways in kickstart to skip kernel and bootloader. (clumens)
    Related: rhbz#1123481
  - Implement %packages --instLangs. (clumens)
    Related: rhbz#1123481
  - Allow skipping installation of the core group, if asked for in kickstart.
    (clumens)
    Related: rhbz#1123481
  - Fix ks fetching on nfs via vlan (sbueno+anaconda)
    Resolves: rhbz#1067857
  - Fix traceback when rpm scriptlets fail during pkg install. (sbueno+anaconda)
    Resolves: rhbz#1122532


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.226-1
changelog:
  - Let tmp use more than 250M when there is more RAM (bcl)
    Resolves: rhbz#1123791
  - Move totalMemory into its own file (bcl)
    Related: rhbz#1123791
    Resolves: rhbz#1123791


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.229-1
changelog:
  - Revert "Use edd fcoe boot option instead of enumerating all ifaces"
    (rvykydal)
    Resolves: rhbz#1103920


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.40-7
changelog:
  - Add '!!' in front of encrypted password in NIS maps 
    if account in question is locked (#1298478)


author: Benjamin Otte <otte@redhat.com> - 2.6.5-2
changelog:
  - Remove make scripts, they are unneeded (use pkg-config) and break multilib
  - Add fix for strict aliasing problems
  - Fix multilib issues in generated headers
  Resolves: #rhbz605100


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-26.el6_4.3
changelog:
  - client installation fails with anonymous binds set to rootdse (#952741)
  - LDAP upload CA cert sometimes double-encodes the value (#964128)
  - wrong trust argument assigned to renewed certs in ipa cert automatic
    renew (#964130)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-47.4
changelog:
  - core: fix possible long graceful restart caused by race condition between
    httpd children processes (#1304712)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with newer tarball, including 6763122 fix for TCK regression.
  - Use release + 1 to avoid having a lower version than the 6.7 version.
  - Resolves: rhbz#1271928


author: Karel Zak <kzak@redhat.com> 4.80-1
changelog:
  - upgrade to 4.80
    - lsof_4.78C-inode.patch - merged upstream
    - lsof_4.78C-selinux.patch - merged upstream
    - lsof_4.78C-threads.patch - rebased


author: Ian Main <imain@redhat.com> - 0.2.21-1
changelog:
  - Misunderstanding of the 'index' keyword was making all objects have the same 
    id. Resolves: #596682


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.7.1.el6]
changelog:
  - [s390] cio: update chpid descriptor after resource accessibility event (Hendrik Brueckner) [1574471]
  - [s390] af_iucv: enable control sends in case of SEND_SHUTDOWN (Hendrik Brueckner) [1559048]
  - [s390] qeth: repair SBAL elements calculation (Hendrik Brueckner) [1559021]
  - [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
  - [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
  - [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]
  - [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
  - [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.8.1.el6]
changelog:
  - [block] fix warning on lockdep_assert_held(q->queue_lock) (Ming Lei) [1624747]
  - [kvm] vmx: fix vmwrite to invalid VMCS (Radim Krcmar) [1602011]


author: Ian Kent <ikent@redhat.com> - 5.0.5-140
changelog:
  - bz1627004 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  -Resolves: rhbz#1627004


author: Martin Osvald <mosvald@redhat.com> - 8.70-24.el6_10.2
changelog:
  - It was found that the fix for CVE-2018-16509 was not complete, the missing
    pieces added into ghostscript-CVE-2018-16509.patch


